Edit tour

Windows Analysis Report
https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v

Overview

General Information

Sample URL:	https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v
Analysis ID:	1477015
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML body contains low number of good links

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2208,i,6947341399331639761,9694673760673214665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4120 --field-trial-handle=2208,i,6947341399331639761,9694673760673214665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://mimecast.com

LLM: Score: 7 brands: Mimecast, Freeman Health System Reasons: The URL 'https://mimecast.com' is legitimate and belongs to Mimecast, a well-known cybersecurity company. However, the webpage displayed in the image shows branding for 'Freeman Health System,' which is unrelated to Mimecast. This discrepancy is a significant red flag. The presence of a prominent login form asking for an email address without additional context or security measures (such as a CAPTCHA) is another suspicious element. The text 'Powered by Mimecast' and the version number 'v1.11.0' are attempts to lend legitimacy to the page, which is a common social engineering technique. Additionally, the link 'Login Issues?' and other links at the bottom could potentially lead to malicious sites. Therefore, based on these observations, it is highly likely that this is a phishing site. DOM: 0.0.pages.csv

Source: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg#/login?message=eNpNjm1LwzAURv9Lvrq4JH1JO0SsQyiTDTsZKAxCm96t2dqmNGmdiP_dVFGEy_1yn3ue84EMyKEHVaIFenlS5H6d8mP22LXJ1X5-KdRmXMld9rDqq-yiX02aqk7xLdg0s_u5f_KWVeOxt-3m5Ceku6AZasCY_Ai11uehs_oMLVq0Q13PkG3sRpfgigiJXDKXVo0_zcvdcxKGiRcw4TM-TRhQMRgLfUOpcHlxEwRFSDmJMIk8in3KOI5ZIfGBF0BDkEWRx7cO2xqwJRwmbhDHMzRCb5R2FvRbYa2Hdqr8hU8ivax-TY5CYnDNhApKIzGWbmNP_BNkhPmET_fozxA7QxyQgEWMh7HvmNDkqnY8M3Sd7u1dBXltKzDv7qMx11I36PMLTsl2Cw

HTTP Parser: Number of links: 0

Source: https://www.mimecast.com/customers/support/contact-support/

HTTP Parser: Base64 decoded: {"typ":"JWT","alg":"HS256"}

Source: https://9488543.fls.doubleclick.net/activityi;dc_pre=COnXz8D3s4cDFaZCHgIdDnoO7w;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=326790021.1721420608;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F?	HTTP Parser: No favicon
Source: https://s.company-target.com/s/sync?exc=lr	HTTP Parser: No favicon

Source: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg#/login?message=eNpNjm1LwzAURv9Lvrq4JH1JO0SsQyiTDTsZKAxCm96t2dqmNGmdiP_dVFGEy_1yn3ue84EMyKEHVaIFenlS5H6d8mP22LXJ1X5-KdRmXMld9rDqq-yiX02aqk7xLdg0s_u5f_KWVeOxt-3m5Ceku6AZasCY_Ai11uehs_oMLVq0Q13PkG3sRpfgigiJXDKXVo0_zcvdcxKGiRcw4TM-TRhQMRgLfUOpcHlxEwRFSDmJMIk8in3KOI5ZIfGBF0BDkEWRx7cO2xqwJRwmbhDHMzRCb5R2FvRbYa2Hdqr8hU8ivax-TY5CYnDNhApKIzGWbmNP_BNkhPmET_fozxA7QxyQgEWMh7HvmNDkqnY8M3Sd7u1dBXltKzDv7qMx11I36PMLTsl2Cw	HTTP Parser: No <meta name="author".. found
Source: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg#/login?message=eNpNjm1LwzAURv9Lvrq4JH1JO0SsQyiTDTsZKAxCm96t2dqmNGmdiP_dVFGEy_1yn3ue84EMyKEHVaIFenlS5H6d8mP22LXJ1X5-KdRmXMld9rDqq-yiX02aqk7xLdg0s_u5f_KWVeOxt-3m5Ceku6AZasCY_Ai11uehs_oMLVq0Q13PkG3sRpfgigiJXDKXVo0_zcvdcxKGiRcw4TM-TRhQMRgLfUOpcHlxEwRFSDmJMIk8in3KOI5ZIfGBF0BDkEWRx7cO2xqwJRwmbhDHMzRCb5R2FvRbYa2Hdqr8hU8ivax-TY5CYnDNhApKIzGWbmNP_BNkhPmET_fozxA7QxyQgEWMh7HvmNDkqnY8M3Sd7u1dBXltKzDv7qMx11I36PMLTsl2Cw	HTTP Parser: No <meta name="author".. found
Source: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg#/login?message=eNpNjm1LwzAURv9Lvrq4JH1JO0SsQyiTDTsZKAxCm96t2dqmNGmdiP_dVFGEy_1yn3ue84EMyKEHVaIFenlS5H6d8mP22LXJ1X5-KdRmXMld9rDqq-yiX02aqk7xLdg0s_u5f_KWVeOxt-3m5Ceku6AZasCY_Ai11uehs_oMLVq0Q13PkG3sRpfgigiJXDKXVo0_zcvdcxKGiRcw4TM-TRhQMRgLfUOpcHlxEwRFSDmJMIk8in3KOI5ZIfGBF0BDkEWRx7cO2xqwJRwmbhDHMzRCb5R2FvRbYa2Hdqr8hU8ivax-TY5CYnDNhApKIzGWbmNP_BNkhPmET_fozxA7QxyQgEWMh7HvmNDkqnY8M3Sd7u1dBXltKzDv7qMx11I36PMLTsl2Cw	HTTP Parser: No <meta name="author".. found

Source: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg#/login?message=eNpNjm1LwzAURv9Lvrq4JH1JO0SsQyiTDTsZKAxCm96t2dqmNGmdiP_dVFGEy_1yn3ue84EMyKEHVaIFenlS5H6d8mP22LXJ1X5-KdRmXMld9rDqq-yiX02aqk7xLdg0s_u5f_KWVeOxt-3m5Ceku6AZasCY_Ai11uehs_oMLVq0Q13PkG3sRpfgigiJXDKXVo0_zcvdcxKGiRcw4TM-TRhQMRgLfUOpcHlxEwRFSDmJMIk8in3KOI5ZIfGBF0BDkEWRx7cO2xqwJRwmbhDHMzRCb5R2FvRbYa2Hdqr8hU8ivax-TY5CYnDNhApKIzGWbmNP_BNkhPmET_fozxA7QxyQgEWMh7HvmNDkqnY8M3Sd7u1dBXltKzDv7qMx11I36PMLTsl2Cw	HTTP Parser: No <meta name="copyright".. found
Source: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg#/login?message=eNpNjm1LwzAURv9Lvrq4JH1JO0SsQyiTDTsZKAxCm96t2dqmNGmdiP_dVFGEy_1yn3ue84EMyKEHVaIFenlS5H6d8mP22LXJ1X5-KdRmXMld9rDqq-yiX02aqk7xLdg0s_u5f_KWVeOxt-3m5Ceku6AZasCY_Ai11uehs_oMLVq0Q13PkG3sRpfgigiJXDKXVo0_zcvdcxKGiRcw4TM-TRhQMRgLfUOpcHlxEwRFSDmJMIk8in3KOI5ZIfGBF0BDkEWRx7cO2xqwJRwmbhDHMzRCb5R2FvRbYa2Hdqr8hU8ivax-TY5CYnDNhApKIzGWbmNP_BNkhPmET_fozxA7QxyQgEWMh7HvmNDkqnY8M3Sd7u1dBXltKzDv7qMx11I36PMLTsl2Cw	HTTP Parser: No <meta name="copyright".. found
Source: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg#/login?message=eNpNjm1LwzAURv9Lvrq4JH1JO0SsQyiTDTsZKAxCm96t2dqmNGmdiP_dVFGEy_1yn3ue84EMyKEHVaIFenlS5H6d8mP22LXJ1X5-KdRmXMld9rDqq-yiX02aqk7xLdg0s_u5f_KWVeOxt-3m5Ceku6AZasCY_Ai11uehs_oMLVq0Q13PkG3sRpfgigiJXDKXVo0_zcvdcxKGiRcw4TM-TRhQMRgLfUOpcHlxEwRFSDmJMIk8in3KOI5ZIfGBF0BDkEWRx7cO2xqwJRwmbhDHMzRCb5R2FvRbYa2Hdqr8hU8ivax-TY5CYnDNhApKIzGWbmNP_BNkhPmET_fozxA7QxyQgEWMh7HvmNDkqnY8M3Sd7u1dBXltKzDv7qMx11I36PMLTsl2Cw	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49821 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.75:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50213 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50213 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50224 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49821 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.72

Source: global traffic	HTTP traffic detected: GET /s/wFHoCqxrAnt7V914iZaD1v HTTP/1.1Host: protect-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/assets/entypo/font/entypo.css HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/assets/font-awesome/css/font-awesome.css HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/assets/mimecast-icons/css/mimecast-icons.css HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/login/cache.11b6bb90c259f8ed592f58f8b212170a.login-lib.js HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/login/cache.f692ac8003e8f0614f6bb1499f05c016.login.js HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/galindo.js HTTP/1.1Host: static.srcspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://freemanhealthsystem.login-us.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /agent/static/0600cd7b-e6b2-4ba9-4249-ab1342c3631b/pendo.js HTTP/1.1Host: cdn.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://freemanhealthsystem.login-us.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/login/assets/languages/en.json?ver=1.11.0 HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/login/app-version.jsp HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/rest/branding/get-branding-item/WKQ6McxzG4swkfOqOLSMVAeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoiU3RVdUV0cFQxUnozejI5ZiJ9.B0qOyoKogie6_0tKl7zF_Z-NM7pDP9kk.8GVGyjDi5jRGxfMq.wgH3wbn82zS0_OqwoiHBEpXp47uoxJqBWet8dPnSNx6WYGdy7BXDp6AOqGUx7UW57lzqt_N3LW74GfO3g2mRKp5b0zuRFFYUcVFgp2iH6su1lLYqeSgg3rhz_uzPlY7Wu3cWuNbYIcbs6wyVFpT9lUj7cr9wa0sHlLNBaCEQXu143WKTjmhMA3w9U_Mcg2FvrEuoyiR0ifqNdyLYUAmCMAI05SyKIlQbOYf7lvO6dEKAQircZ0dVmTuIcrG1vD62ZmHn-gE0Fb-lmuMJ3O9rPZxfEAGl9SMcHC62s2t_c5TgcxZZchaIqLCr6rmDXmDfLagDVnsqRdvdHg_tqoqaT8FT_iVlNZB8COtWXeWy3CK9y5s3dPgyXvr3jb1Y4O-uhxIwpqmjP8SXvSDXqvQy0MJdo4BWjsFNaS-2c72Vjqx9x6sdFrauZTvfHYQyeKseJJZ-Joue8pJQOyx3evKrw0Ed2IMVwEFqJNPh9HnFl_KytDO_qe18rcKpks9xGsFhvxu8eYW7r1B-GxITVALVPF0j_cOO_6T7hi9vS8-UROZmaACF52axuXvt5T_hW9_AV2S9E5UnzebhwiQKWzVV2qrAiRUs.L86csBQ1j7KqH7uRUAyd8Q?tkn=freemanhealthsystem HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/login/cache.f692ac8003e8f0614f6bb1499f05c016.login.js HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/login/cache.11b6bb90c259f8ed592f58f8b212170a.login-lib.js HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/galindo.js HTTP/1.1Host: static.srcspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /u/login/app-version.jsp HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/login/assets/languages/en.json?ver=1.11.0 HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/rest/branding/get-branding-item/WKQ6McxzG4swkfOqOLSMVAeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoiU3RVdUV0cFQxUnozejI5ZiJ9.B0qOyoKogie6_0tKl7zF_Z-NM7pDP9kk.8GVGyjDi5jRGxfMq.wgH3wbn82zS0_OqwoiHBEpXp47uoxJqBWet8dPnSNx6WYGdy7BXDp6AOqGUx7UW57lzqt_N3LW74GfO3g2mRKp5b0zuRFFYUcVFgp2iH6su1lLYqeSgg3rhz_uzPlY7Wu3cWuNbYIcbs6wyVFpT9lUj7cr9wa0sHlLNBaCEQXu143WKTjmhMA3w9U_Mcg2FvrEuoyiR0ifqNdyLYUAmCMAI05SyKIlQbOYf7lvO6dEKAQircZ0dVmTuIcrG1vD62ZmHn-gE0Fb-lmuMJ3O9rPZxfEAGl9SMcHC62s2t_c5TgcxZZchaIqLCr6rmDXmDfLagDVnsqRdvdHg_tqoqaT8FT_iVlNZB8COtWXeWy3CK9y5s3dPgyXvr3jb1Y4O-uhxIwpqmjP8SXvSDXqvQy0MJdo4BWjsFNaS-2c72Vjqx9x6sdFrauZTvfHYQyeKseJJZ-Joue8pJQOyx3evKrw0Ed2IMVwEFqJNPh9HnFl_KytDO_qe18rcKpks9xGsFhvxu8eYW7r1B-GxITVALVPF0j_cOO_6T7hi9vS8-UROZmaACF52axuXvt5T_hW9_AV2S9E5UnzebhwiQKWzVV2qrAiRUs.L86csBQ1j7KqH7uRUAyd8Q?tkn=freemanhealthsystem HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /agent/static/0600cd7b-e6b2-4ba9-4249-ab1342c3631b/pendo.js HTTP/1.1Host: cdn.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/rest/branding/get-branding-item/mOr8-D5nYFSsjtIb3j5v5AeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoielJWQXE5ZU5ld01PMmluNiJ9.lH7ehwfuTByHOlxfDxb4qHbYlgn9aW-Y.A_inabXja3k5bJWN.z0agCYdzHeQpqVSo5gev3AmVm5VQ53dSbD5_Bd98CmkUabQCHVywLtL8GCCr353yOQyspk9apmBX8OzqXhJj5i5qGuxZf-VtffU5d7Hxu2_ldU-8rF64Iu1M1y7sRaLAdTJGMTHKigKqhVssyqLiOShRUHpqt1l5cYdGzF9g6L8GpB3ZUZACXljZVyNUVElalv50_fFo5Y9Lqcg2iUo9VcizSiXE0mECYT6SwDob3TynM2Gi-kwI3Tdn9dZ_U9b6S2uvG5p7X4DzuqznYkeIpu5-Rr3GF988kjudVzc6l8QJVpMiYFeQmD_W8aPDNs-7KpDd4CBJUfZAhrhQ8WZHJNklxQusMFKqsqQsXyQ15mrc85LzM1pLZnkckhJtcrn2Cy4DZLz_1ro_67LfJj06Jn0HsdqLzI-8oe2fKakV-jlu0vXlNkwP7WUs2i2dWIuYhOoAXKSv_WjIB-G7PJzz8MG2bgQfDFN7y2Eolsq14nG7lZbcWOn8D0iH7mx2Z0UqHi-B41SQKG4N813wrxdnmWwiDRty6voa3fcoLmBilNH0yLzOD8OtBAfb6fAFx_epFsK1M8DJS2JVrXOQse4dAHvO1lbm3XJ0lbhK5t0.pa5yWBMuXeDlK8FRZtLAAA?tkn=freemanhealthsystem HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?v=2.239.0_prod&ct=1721420554468&jzb=eJztU1uPokgY_S9ssk-tcr3YSWeCgqJcVKRV3GxICcWlobhVgeBk_vvg9O5mn-ZtHzaZt_rO932nTqXO-eMrRYYKUq8UggRQL9StKe8YNj5J0YgyEsvwLC0IPC_QL1SX4pSUjZ-G44K_12x157v-8IiqpG5M4nojQdvkYzMhpMKvs1nUQIhAkUCQkwQPmEA0zcs4LSYtnqLxjgBgMg1KNGtnP_DZl5iANwyDtoG_k6x446ajiCiba3wh5sOHeIPWWWAWBASiXnqafSD60H1IEht7Wl0Dxe8LcW8mgVgyitA7cu95Z04zHkkrbD8UOd_L0mOQ9GE-dwHfWsxJsUN-oty2rDAxW3jUAnuR2V5xE1vtNLihg6cmA-AqEND1tPP8SbuLSlk9xb99Cv6CIMYghm_QruwPxJj3h_LudHOza2p-qzPbHX3EhyF1VRdfDaVforlI2LBG9hqF6d4PT6u1NvjMUHAtlHnNGgxNP4HNChb5UdDFUEZ7ljUvW-YiTIzQQRcrD-eNWteTIb3QLKgzqTfDmMZ-K0S-cT7BXU8mHBKWMGtF5Qrw0vOVlGFamGC_tMxTTR8Ybp-tOexUUZzG6faiGpdTSfuPoAuD3linTnDnXWviOsnBcmIzet9VgZ732t1ZHVW0tTaZnBacsdsI1020XqzohZppZ6eXgh3b1_etc0e3RNWth7O8CQ676pybB1g9rBs5eZfTDvQT1xOWXqHaiVIZm8f6fEP23l_YWbJHmutH5aNXpEM_HGLtbCWS3iFbzerCky3uGEotEy4uOTEeaifVVs8wG07cW6aLc3Z5H11YNWWFqdevf1v2efyZa3NQxO34i-MELPz3I_XthQJBULYFGVfHogINLIjybygE5DnPzGe0NGNplh95OtjgtCxGmJ2y3HxK-6OS8Mn2SeCC22aUUbR5_kKRz4LSjes5ipJlFcNG1gI08kQNQPBHc5FuVmHADk7uIbsLh2dGBwLHx8156dvLP_nNSxD-NL_sr_z-yu__Lr9PW_9lZl6WpKnwn0RJ5uhvf34Hu5pZ7g HTTP/1.1Host: app.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://freemanhealthsystem.login-us.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?id=7&jzb=eJx9ktmOq0YQht-FSLk62Cxm8UijI2ywsVmNGWzmBrWhWQYaDN1gIJp3P5xEinKVu6qv_lqk-v-ihgIXpOlOCfVGRa5mq07kR9OcPvO2M4kfUj-ovquWYk7IE7-t12kHIQJ1DkFFcjxhAtGqarKipnu8QgWCMcBkFTdo3a__5uufGQHvGMZ9B_8kZf3Or1iJS8uttqnFavoSH9C6CeyOgFjUm1CzL0Sfhi9J4rJQa1ugRGMtumYeiw2rCKMnj2F44zVjznvh_KXIlStL8yTp03brg01vsYFiJxtaeZw5gTZ7eNVie1faYf0Qey2Y_MTDK5MF8BAL6DNwwojunbSR1SD745-DfyKIMcjgO7Sf9hdizdesfHjD1hy6dnPW2bPDXPFlKnzVx5-GMu7RViRc0iL7iJLCjZLgcNSmiJ1qvofyRrMmQ9MDcDrAuroKupjIyOU4835m7wJtJB66W1Wy7dS2pafiznCgLaXRTDIGR72QRsYtgM5IaB4Je1j2ovIJ8D6MlIJle5jjqLHMoGUuLO-WRx57zzQrsuJ8V4170DDRHA9JPBrHwotfG9-ifS-_WF5mph_OM9arUXt5h6uKztaplIuaN5yT8HlKj7sDs1NL7eaNUuxwY_s6ey_0yFXdmr39Q_C4w-A9QsDpSdvJ-YdcDGCk_VDYh7Vq58rTOM3H2wPZbrSzy9xFmh-lzTwq0mWcLpl2s3JJH5Ctlm0dyhZ_TaSeTXb3ihizOkitNbLsiRddy_Rxxe1fiwsRJCABBFBv_5r2d1j8j3ErUGf98shFAevo40p9_6BAHDd9TZbWJXmCDtZE-S9aVvzWs9s1I605htsscwbY4aKpF8ytOH67YqJn1yTU9_cvaOQXEA&v=2.239.0_prod&ct=1721420554471 HTTP/1.1Host: app.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://freemanhealthsystem.login-us.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1721420554473&v=2.239.0_prod HTTP/1.1Host: app.pendo.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://freemanhealthsystem.login-us.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1721420554473&v=2.239.0_prod HTTP/1.1Host: app.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/ptm.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?v=2.239.0_prod&ct=1721420554468&jzb=eJztU1uPokgY_S9ssk-tcr3YSWeCgqJcVKRV3GxICcWlobhVgeBk_vvg9O5mn-ZtHzaZt_rO932nTqXO-eMrRYYKUq8UggRQL9StKe8YNj5J0YgyEsvwLC0IPC_QL1SX4pSUjZ-G44K_12x157v-8IiqpG5M4nojQdvkYzMhpMKvs1nUQIhAkUCQkwQPmEA0zcs4LSYtnqLxjgBgMg1KNGtnP_DZl5iANwyDtoG_k6x446ajiCiba3wh5sOHeIPWWWAWBASiXnqafSD60H1IEht7Wl0Dxe8LcW8mgVgyitA7cu95Z04zHkkrbD8UOd_L0mOQ9GE-dwHfWsxJsUN-oty2rDAxW3jUAnuR2V5xE1vtNLihg6cmA-AqEND1tPP8SbuLSlk9xb99Cv6CIMYghm_QruwPxJj3h_LudHOza2p-qzPbHX3EhyF1VRdfDaVforlI2LBG9hqF6d4PT6u1NvjMUHAtlHnNGgxNP4HNChb5UdDFUEZ7ljUvW-YiTIzQQRcrD-eNWteTIb3QLKgzqTfDmMZ-K0S-cT7BXU8mHBKWMGtF5Qrw0vOVlGFamGC_tMxTTR8Ybp-tOexUUZzG6faiGpdTSfuPoAuD3linTnDnXWviOsnBcmIzet9VgZ732t1ZHVW0tTaZnBacsdsI1020XqzohZppZ6eXgh3b1_etc0e3RNWth7O8CQ676pybB1g9rBs5eZfTDvQT1xOWXqHaiVIZm8f6fEP23l_YWbJHmutH5aNXpEM_HGLtbCWS3iFbzerCky3uGEotEy4uOTEeaifVVs8wG07cW6aLc3Z5H11YNWWFqdevf1v2efyZa3NQxO34i-MELPz3I_XthQJBULYFGVfHogINLIjybygE5DnPzGe0NGNplh95OtjgtCxGmJ2y3HxK-6OS8Mn2SeCC22aUUbR5_kKRz4LSjes5ipJlFcNG1gI08kQNQPBHc5FuVmHADk7uIbsLh2dGBwLHx8156dvLP_nNSxD-NL_sr_z-yu__Lr9PW_9lZl6WpKnwn0RJ5uhvf34Hu5pZ7g HTTP/1.1Host: app.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/guide.js/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?id=7&jzb=eJx9ktmOq0YQht-FSLk62Cxm8UijI2ywsVmNGWzmBrWhWQYaDN1gIJp3P5xEinKVu6qv_lqk-v-ihgIXpOlOCfVGRa5mq07kR9OcPvO2M4kfUj-ovquWYk7IE7-t12kHIQJ1DkFFcjxhAtGqarKipnu8QgWCMcBkFTdo3a__5uufGQHvGMZ9B_8kZf3Or1iJS8uttqnFavoSH9C6CeyOgFjUm1CzL0Sfhi9J4rJQa1ugRGMtumYeiw2rCKMnj2F44zVjznvh_KXIlStL8yTp03brg01vsYFiJxtaeZw5gTZ7eNVie1faYf0Qey2Y_MTDK5MF8BAL6DNwwojunbSR1SD745-DfyKIMcjgO7Sf9hdizdesfHjD1hy6dnPW2bPDXPFlKnzVx5-GMu7RViRc0iL7iJLCjZLgcNSmiJ1qvofyRrMmQ9MDcDrAuroKupjIyOU4835m7wJtJB66W1Wy7dS2pafiznCgLaXRTDIGR72QRsYtgM5IaB4Je1j2ovIJ8D6MlIJle5jjqLHMoGUuLO-WRx57zzQrsuJ8V4170DDRHA9JPBrHwotfG9-ifS-_WF5mph_OM9arUXt5h6uKztaplIuaN5yT8HlKj7sDs1NL7eaNUuxwY_s6ey_0yFXdmr39Q_C4w-A9QsDpSdvJ-YdcDGCk_VDYh7Vq58rTOM3H2wPZbrSzy9xFmh-lzTwq0mWcLpl2s3JJH5Ctlm0dyhZ_TaSeTXb3ihizOkitNbLsiRddy_Rxxe1fiwsRJCABBFBv_5r2d1j8j3ErUGf98shFAevo40p9_6BAHDd9TZbWJXmCDtZE-S9aVvzWs9s1I605htsscwbY4aKpF8ytOH67YqJn1yTU9_cvaOQXEA&v=2.239.0_prod&ct=1721420554471 HTTP/1.1Host: app.pendo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u/rest/branding/get-branding-item/mOr8-D5nYFSsjtIb3j5v5AeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoielJWQXE5ZU5ld01PMmluNiJ9.lH7ehwfuTByHOlxfDxb4qHbYlgn9aW-Y.A_inabXja3k5bJWN.z0agCYdzHeQpqVSo5gev3AmVm5VQ53dSbD5_Bd98CmkUabQCHVywLtL8GCCr353yOQyspk9apmBX8OzqXhJj5i5qGuxZf-VtffU5d7Hxu2_ldU-8rF64Iu1M1y7sRaLAdTJGMTHKigKqhVssyqLiOShRUHpqt1l5cYdGzF9g6L8GpB3ZUZACXljZVyNUVElalv50_fFo5Y9Lqcg2iUo9VcizSiXE0mECYT6SwDob3TynM2Gi-kwI3Tdn9dZ_U9b6S2uvG5p7X4DzuqznYkeIpu5-Rr3GF988kjudVzc6l8QJVpMiYFeQmD_W8aPDNs-7KpDd4CBJUfZAhrhQ8WZHJNklxQusMFKqsqQsXyQ15mrc85LzM1pLZnkckhJtcrn2Cy4DZLz_1ro_67LfJj06Jn0HsdqLzI-8oe2fKakV-jlu0vXlNkwP7WUs2i2dWIuYhOoAXKSv_WjIB-G7PJzz8MG2bgQfDFN7y2Eolsq14nG7lZbcWOn8D0iH7mx2Z0UqHi-B41SQKG4N813wrxdnmWwiDRty6voa3fcoLmBilNH0yLzOD8OtBAfb6fAFx_epFsK1M8DJS2JVrXOQse4dAHvO1lbm3XJ0lbhK5t0.pa5yWBMuXeDlK8FRZtLAAA?tkn=freemanhealthsystem HTTP/1.1Host: freemanhealthsystem.login-us.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/aac7c7d3363d4892b9f909aa59250d04?v=52228a06 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/4ef1a859ca4b4ddc94fb3037e36456aa?v=d619a895 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/site.7acaecb637d2a1f6764a.css HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp
Source: global traffic	HTTP traffic detected: GET /layouts/system/VisitorIdentification.js HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp
Source: global traffic	HTTP traffic detected: GET /api/public/content/b6c2916537114887a5ba7800de8d6ede?v=78059a5e HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/aac7c7d3363d4892b9f909aa59250d04?v=52228a06 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/71680926188a4357b6b246fb0177c4b4?v=9a69a64d HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/4ef1a859ca4b4ddc94fb3037e36456aa?v=d619a895 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /layouts/system/VisitorIdentification.js HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/40074a2fd2f848cb91f70e474add3d9a?v=ff1a19a9 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/a63e63b6df7443898bc7a682d78133c3?v=2e7b068c HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /layouts/system/VisitorIdentificationCSS.aspx?tstamp=1721420566186 HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /dist/fonts/open-sans-v18-latin-600.woff2 HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mimecast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /dist/fonts/fa-solid-900.woff2 HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mimecast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /dist/fonts/open-sans-v18-latin-regular.woff2 HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mimecast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/b6c2916537114887a5ba7800de8d6ede?v=78059a5e HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/71680926188a4357b6b246fb0177c4b4?v=9a69a64d HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/fonts/open-sans-v18-latin-700.woff2 HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mimecast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/a63e63b6df7443898bc7a682d78133c3?v=2e7b068c HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/e04557dae5fe925694a0.svg HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/40074a2fd2f848cb91f70e474add3d9a?v=ff1a19a9 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/runtime.ae7f2517edfa26fd2d54.js HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /dist/sharedVendor.48f94c21b16af0164137.js HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/671e06972e724c10abdefd7d9b4967f2?v=a7fbf3d3&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/b0d281d8bb0e4b8a89ee75e7f1de6bbb?v=a9fa1595&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/2acde0709cdf4ae2ada632bc3bb69977?v=360b4f6e&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/9bd89e511d2b44ccaeb12199e8897000?v=411770ce&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/dd00d4036b494fd987dfa08614f988f5?v=2254cd74&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/6db1962dd31c45afbc8d5f9a804730c1?v=fab1a644&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/shared.d65d42466ad2647993ec.js HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /dist/site.7bdbe456878bd11113ce.js HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/509ae1a8c65d4c52826a5829290dbd6c?v=d858776e&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/1c9bb09595ba4175b9b901a7fdc0a7bf?v=28be8a73&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/671e06972e724c10abdefd7d9b4967f2?v=a7fbf3d3&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/b0d281d8bb0e4b8a89ee75e7f1de6bbb?v=a9fa1595&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/9bd89e511d2b44ccaeb12199e8897000?v=411770ce&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/2acde0709cdf4ae2ada632bc3bb69977?v=360b4f6e&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/e04557dae5fe925694a0.svg HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/dd00d4036b494fd987dfa08614f988f5?v=2254cd74&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/runtime.ae7f2517edfa26fd2d54.js HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/946d853722194c86bdae8da05e63158a?v=dda04a96 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/6db1962dd31c45afbc8d5f9a804730c1?v=fab1a644&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/sharedVendor.48f94c21b16af0164137.js HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /dist/shared.d65d42466ad2647993ec.js HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/2e6624e57dcf401aba62439ed1bf9f1f?v=4c53bcb4 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/a74558d866934fd38d631466eda4fae9?v=31f14de1 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/3de62109b5794239ac94fc95e68d8718?v=792a3c09 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/d0635f650d1f47db87d21f2928042499?v=ce4369d8 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/509ae1a8c65d4c52826a5829290dbd6c?v=d858776e&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/682272e31e2c49f2824e8f36f05c9aa3?v=2270add9 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/1c9bb09595ba4175b9b901a7fdc0a7bf?v=28be8a73&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/site.7bdbe456878bd11113ce.js HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /dist/2fabfab087ce242c96a0.svg HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/3de62109b5794239ac94fc95e68d8718?v=a79d7c27 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/946d853722194c86bdae8da05e63158a?v=dda04a96 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/d0b858c3a1444fa29fc6e22f39022a86?v=60b50f99 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/2e6624e57dcf401aba62439ed1bf9f1f?v=4c53bcb4 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/a74558d866934fd38d631466eda4fae9?v=31f14de1 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/4766441092f24c1d8d5cb65f084680c0?v=98bbab41 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/ba203cf576844201a13385cc94eaf22d?v=2c1b7329 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/6737d53c3d2a40dd828cc52fd9f972fa?v=df36f5b2 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/d0635f650d1f47db87d21f2928042499?v=ce4369d8 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/088d3c3cdc384092b7542a48ec783d57?v=183f3895 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/42614e9cf56247afa6fa9d9baf3a7d8a?v=4e5ac00d HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/d0b858c3a1444fa29fc6e22f39022a86?v=60b50f99 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/4766441092f24c1d8d5cb65f084680c0?v=98bbab41 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dist/2fabfab087ce242c96a0.svg HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /api/public/content/ee526f84c5ac42b1a8b11c26f7067787?v=aa4c8287&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/a9f12990a7a64a1f9628ab3ca508a6fa?v=49d01bf6&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/05ce22f3f02a4d20874334d3a17ced9b?v=4af23d84&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/c69d271971804a34830bdcb0c1cce78f?v=30a21149&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-vitals/dist/web-vitals.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/ba203cf576844201a13385cc94eaf22d?v=2c1b7329 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/6737d53c3d2a40dd828cc52fd9f972fa?v=df36f5b2 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/088d3c3cdc384092b7542a48ec783d57?v=183f3895 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/42614e9cf56247afa6fa9d9baf3a7d8a?v=4e5ac00d HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/cfbe227215634da29c9efe4570f8f9a1?v=75a0021e&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/ee526f84c5ac42b1a8b11c26f7067787?v=aa4c8287&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-vitals@4.2.2/dist/web-vitals.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/482db570fe8e449fb6b1e2d90dfda927?v=dd6313bd&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/56afca39b49f4d2cbd39cc7efa7fa0f4?v=34b2edca&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/b310bf37eca948cbac2e2b1e79015256?v=aa212b94&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/05ce22f3f02a4d20874334d3a17ced9b?v=4af23d84&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/a9f12990a7a64a1f9628ab3ca508a6fa?v=49d01bf6&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/c69d271971804a34830bdcb0c1cce78f?v=30a21149&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/e1028a80bdb54d0489c0b0775d7a8ebd?v=465a9fc1&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-vitals@4.2.2/dist/web-vitals.iife.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/cfbe227215634da29c9efe4570f8f9a1?v=75a0021e&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/482db570fe8e449fb6b1e2d90dfda927?v=dd6313bd&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/1ffcb3e6423047f494f2570a804948ac?v=b159a002&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/b310bf37eca948cbac2e2b1e79015256?v=aa212b94&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/1850fe2511d74a93bd0d286ea69d6bc8?v=d9cfd148&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/beb87be3865e4deeb2dd8bf265849d5d?v=53ad9bb6&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/56afca39b49f4d2cbd39cc7efa7fa0f4?v=34b2edca&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202405.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/9cfe697b6d3f4044a0dca3699fa70406?v=83c5c7da&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/e1028a80bdb54d0489c0b0775d7a8ebd?v=465a9fc1&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/75013efacc6a4fe5b9de645b642dfa78?v=0e57c20b HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://www.mimecast.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /api/public/content/e662e5cd49944cccb74def0f296c65b0?v=c9b9ee8b&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/1ffcb3e6423047f494f2570a804948ac?v=b159a002&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/9cfe697b6d3f4044a0dca3699fa70406?v=83c5c7da&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202405.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/018fac0d-762b-7e6f-a747-f58a088acc36/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/e662e5cd49944cccb74def0f296c65b0?v=c9b9ee8b&t=w1920hq HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/3de62109b5794239ac94fc95e68d8718?v=792a3c09 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/3de62109b5794239ac94fc95e68d8718?v=a79d7c27 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sc-static/img/favicons/icons_m_192x192.png HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /sc-static/img/favicons/icons_m_192x192.png HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
Source: global traffic	HTTP traffic detected: GET /docs/DOC-1183 HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/article/Secure-Messaging-Troubleshooting-Log-On-Issues-685792640 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/article/email-security-cloud-gateway-troubleshooting-log-on-issues HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/article/email-security-cloud-gateway-secure-messaging-troubleshooting HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/runtimedownload/fonts.css?lastMod=1688233401000&brandSet=774c7290-70ad-435a-896e-5352360ebe8b HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/auraFW/javascript/WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41/aura_prod.js HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-250.8.3-6.4.5-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2= HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /apex/PendoConnectPage HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pu=1&pv=17214066060001102990252&rv=1721312700000 HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22publishedChangelistNum%22%3A%22749%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22SLDS%22%2C%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%222Vbq4FI0PYuVodwHAmCzoA%22%2C%22cuid%22%3A94208334%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22publishedChangelistNum%22%3A%22749%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pu=1&pv=17214066060001102990252&rv=1721312700000 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/auraFW/javascript/WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41/aura_prod.js HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22publishedChangelistNum%22%3A%22749%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://community.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /file-asset/mimecaster_central_logo?v=1 HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-250.8.3-6.4.5-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2= HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/018fac0d-762b-7e6f-a747-f58a088acc36/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://community.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=0&aura.Component.getComponentDef=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202405.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://community.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202405.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://community.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22f4466bda-936e-4ad2-837f-3d4967eb4bfc%22%2C%22routeType%22%3A%22article%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22params%22%3A%7B%22viewid%22%3A%2273baec4e-1ebd-4970-b69d-f23d7befed73%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22urlName%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%2C%22recordId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A749%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-SFDC-Page-Cache: 24a55304e11ab973X-SFDC-Page-Scope-Id: 82652665-cd95-4f87-a3d5-fcccf89bd0b1X-SFDC-Request-Id: 14507000000eb75526User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/018fac0d-762b-7e6f-a747-f58a088acc36/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /file-asset/mimecaster_central_logo?v=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A11+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting; _ga=GA1.2.1288554902.1721420591; _gid=GA1.2.569721609.1721420591
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=2&aura.Component.getComponent=2&ui-comm-runtime-components-aura-components-siteforce-recordservicecomponent.RecordServiceComponent.getArticleVersionId=2&ui-communities-components-aura-components-forceCommunity-navigationMenu.NavigationMenuDataProvider.getNavigationMenu=1&ui-force-components-controllers-hostConfig.HostConfig.getConfigData=1&ui-self-service-components-profileMenu.ProfileMenu.getProfileMenuResponse=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A11+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting; _ga=GA1.2.1288554902.1721420591; _gid=GA1.2.569721609.1721420591
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=1&aura.Component.getComponentDef=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A11+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting; _ga=GA1.2.1288554902.1721420591; _gid=GA1.2.569721609.1721420591
Source: global traffic	HTTP traffic detected: GET /d6f8cbc5.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202405.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202405.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_close.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d6f8cbc5.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22f4466bda-936e-4ad2-837f-3d4967eb4bfc%22%2C%22routeType%22%3A%22article%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22params%22%3A%7B%22viewid%22%3A%2273baec4e-1ebd-4970-b69d-f23d7befed73%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22urlName%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%2C%22recordId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A749%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420593.60.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=2 HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420593.60.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/file-asset/communitybg?v=1 HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420593.60.0.0; _gat_gtag_UA_1898620_6=1
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&page_title=Article%20Detail HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=5&aura.ApexAction.execute=3&ui-self-service-components-controller.ArticleView.addArticleViewCount=1&ui-self-service-components-controller.ArticleView.getArticleHeaderDetail=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=7&ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=6&aura.RecordUi.getObjectInfo=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=2 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=4&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.validateRoute=1&ui-communities-components-aura-components-forceCommunity-controller.QuestionPost.getInitData=1&ui-communities-components-aura-components-forceCommunity-controller.QuestionPost.getTopicFromUrl=1&ui-communities-components-aura-components-forceCommunity-richText.RichText.getParsedRichTextValue=2&ui-communities-components-aura-components-forceCommunity-seoAssistant.SeoAssistant.getRecordAndTranslationData=1&ui-self-service-components-controller.ArticleTopicList.getTopics=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/c/file-asset/communitybg?v=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0
Source: global traffic	HTTP traffic detected: GET /layouts/system/VIChecker.aspx?tstamp=638570173652777381%3E HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0
Source: global traffic	HTTP traffic detected: GET /community/knowledge-base/secure-messaging HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0
Source: global traffic	HTTP traffic detected: GET /s/article/Secure-Messaging-Guides HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=8&aura.Component.getComponent=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False
Source: global traffic	HTTP traffic detected: GET /s/article/email-security-cloud-gateway-secure-messaging-guides HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20
Source: global traffic	HTTP traffic detected: GET /s/article/email-security-cloud-gateway-secure-messaging-overview HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20
Source: global traffic	HTTP traffic detected: GET /servlet/rtaImage?eid=ka0Us0000002yWL&feoid=00N3l00000FQXUa&refid=0EM3l000002SRcr HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshootingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=10&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=9&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20
Source: global traffic	HTTP traffic detected: GET /apex/PendoConnectPage HTTP/1.1Host: community.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-overviewAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20
Source: global traffic	HTTP traffic detected: GET /servlet/rtaImage?eid=ka0Us0000002yWL&feoid=00N3l00000FQXUa&refid=0EM3l000002SRcr HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A12+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-troubleshooting&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1; _ga=GA1.1.1288554902.1721420591; _gat_gtag_UA_1898620_6=1; _ga_2RRJFGC554=GS1.1.1721420593.1.0.1721420594.59.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://community.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://community.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fcommunity.mimecast.com%2Fs%2Farticle%2Femail-security-cloud-gateway-secure-messaging-overview&page_title=Article%20Detail HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=0&ui-comm-runtime-components-aura-components-siteforce-recordservicecomponent.RecordServiceComponent.getArticleVersionId=2&ui-self-service-components-profileMenu.ProfileMenu.getProfileMenuResponse=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420602.51.0.0
Source: global traffic	HTTP traffic detected: GET /Customers/Support/Contact-support/ HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /customers/support/contact-support/ HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=1&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.validateRoute=1&ui-communities-components-aura-components-forceCommunity-controller.QuestionPost.getTopicFromUrl=1&ui-communities-components-aura-components-forceCommunity-seoAssistant.SeoAssistant.getRecordAndTranslationData=1&ui-self-service-components-controller.ArticleTopicList.getTopics=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=2&aura.ApexAction.execute=3&ui-self-service-components-controller.ArticleView.addArticleViewCount=1&ui-self-service-components-controller.ArticleView.getArticleHeaderDetail=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=3&aura.RecordUi.getObjectInfo=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=4&ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /api/public/content/682272e31e2c49f2824e8f36f05c9aa3?v=2270add9 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0Range: bytes=171619-171619If-Range: "0x8DBDBA60BF2FC3E"
Source: global traffic	HTTP traffic detected: GET /layouts/system/VisitorIdentification.js HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/customers/support/contact-support/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /api/public/content/682272e31e2c49f2824e8f36f05c9aa3?v=2270add9 HTTP/1.1Host: assets.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0Range: bytes=171619-181030If-Range: "0x8DBDBA60BF2FC3E"
Source: global traffic	HTTP traffic detected: GET /layouts/system/VisitorIdentification.js HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web-vitals/dist/web-vitals.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/public/content/682272e31e2c49f2824e8f36f05c9aa3?v=2270add9 HTTP/1.1Host: assets.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /layouts/system/VisitorIdentificationCSS.aspx?tstamp=1721420607276 HTTP/1.1Host: www.mimecast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mimecast.com/customers/support/contact-support/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=5&aura.Component.getComponent=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|False; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_2s9dur0o_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /406006.gif?pdata=partner%3Dtap475181%2Cdata%3Dtype%3Asite%24audience%3AMSO_Mimecast_ClientSite_Control HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDA2Nzh9.2NKabo6_Rtun4zVLh_7mjY9vQitxlKkLRQrpE2z-Zc8 HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/t2_2s9dur0o/config HTTP/1.1Host: pixel-config.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1721420609036&id=t2_2s9dur0o&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=3aafe886-aa62-4474-bb22-6200409a67b7&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_e9773deb&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: pixel.byspotify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dmimecast.com%26pId%3d%24UID HTTP/1.1Host: s.ml-attr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=326790021.1721420608;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F? HTTP/1.1Host: 9488543.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=326790021.1721420608;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=3d413657-d7be-4ecc-8076-6252c7d7fa2c&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=6fd3ee62-97f8-494a-8592-6adc3f52b1c7&tw_document_href=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&tw_iframe_status=0&txn_id=o20y8&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=326790021.1721420608;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/857000071?random=1721420610056&cv=11&fst=1721420610056&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fullcircle.js?cid=96fced6a-d5a9-48e2-a85e-b1d292166b0c&domain=mimecast.com HTTP/1.1Host: d2i34c80a0ftze.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11113837502?random=1721420610095&cv=11&fst=1721420610095&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_2s9dur0o_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /406006.gif?pdata=partner%3Dtap475181%2Cdata%3Dtype%3Asite%24audience%3AMSO_Mimecast_ClientSite_Control HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=3zLDcsm77exX14ZVMJZaOAdDbxMrxnDyxQ0chO7aiEc=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: pixel.byspotify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDA2Nzh9.2NKabo6_Rtun4zVLh_7mjY9vQitxlKkLRQrpE2z-Zc8 HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1721420609036&id=t2_2s9dur0o&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=3aafe886-aa62-4474-bb22-6200409a67b7&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_e9773deb&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/t2_2s9dur0o/config HTTP/1.1Host: pixel-config.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/857000071/?random=1721420610056&cv=11&fst=1721420610056&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=3d413657-d7be-4ecc-8076-6252c7d7fa2c&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=6fd3ee62-97f8-494a-8592-6adc3f52b1c7&tw_document_href=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&tw_iframe_status=0&txn_id=o20y8&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=7&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20; _ga=GA1.1.1288554902.1721420591; _gcl_au=1.1.326790021.1721420608; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420608.45.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|True; _rdt_uuid=1721420609033.3aafe886-aa62-4474-bb22-6200409a67b7; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_e24f7e3a-5c9e-4ded-b913-3026146c2cf7=\|\|1721420609293\|\|0\|\|\|\|0\|0\|80.99521; _uetsid=c350e6f0460c11efb355ff5114888a3f; _uetvid=c3513fe0460c11ef87042fb1530aa951
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3dmimecast.com%26pId%3d%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sfsites/aura?r=6&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1 HTTP/1.1Host: community.mimecast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: renderCtx=%7B%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22schema%22%3A%22Published%22%2C%22viewType%22%3A%22Published%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22audienceIds%22%3A%22%22%7D; CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; pctrk=4c9c4063-cff9-441c-8532-ba12eeaf4e20; _ga=GA1.1.1288554902.1721420591; _gcl_au=1.1.326790021.1721420608; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420608.45.0.0; SC_ANALYTICS_GLOBAL_COOKIE=97fa3198544f400f9f024f0655ad8fd8\|True; _rdt_uuid=1721420609033.3aafe886-aa62-4474-bb22-6200409a67b7; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A29+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; mf_e24f7e3a-5c9e-4ded-b913-3026146c2cf7=\|\|1721420609293\|\|0\|\|\|\|0\|0\|80.99521; _uetsid=c350e6f0460c11efb355ff5114888a3f; _uetvid=c3513fe0460c11ef87042fb1530aa951
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11113837502/?random=1721420610095&cv=11&fst=1721420610095&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=3zLDcsm77exX14ZVMJZaOAdDbxMrxnDyxQ0chO7aiEc=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1737318211&external_user_id=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=3d413657-d7be-4ecc-8076-6252c7d7fa2c&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=6fd3ee62-97f8-494a-8592-6adc3f52b1c7&tw_document_href=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&tw_iframe_status=0&txn_id=o20y8&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172142061181385368; guest_id_ads=v1%3A172142061181385368; personalization_id="v1_tKV7Qqzh2RiwJfmg98Y8Zw=="; guest_id=v1%3A172142061181385368
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=COnXz8D3s4cDFaZCHgIdDnoO7w;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=326790021.1721420608;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F? HTTP/1.1Host: 9488543.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /Pixel/Retarget/2911 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=326790021.1721420608;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /Pixel/Retarget/2914 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&page_title=404%20%7C%20Mimecast HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334; tuuid_lu=1721420611\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/857000071/?random=1721420610056&cv=11&fst=1721420610056&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253dmimecast.com%2526pId%253d%2524UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=6e99sbimQh8QEv8tRLKjKJ9xSaxNHRKpLy-MEu2A9xq_GratMOMH6dcqy5ZMR4i2UuWReVr4Gi2BA6f016f11H15j4W8zkOrqODa6vY7xdY.; receive-cookie-deprecation=1; uuid2=1022996381651647135
Source: global traffic	HTTP traffic detected: GET /fullcircle.js?cid=96fced6a-d5a9-48e2-a85e-b1d292166b0c&domain=mimecast.com HTTP/1.1Host: d2i34c80a0ftze.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ingest HTTP/1.1Host: pixels.spotify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=2ilJfPUMh-MkP8EPbywyUf9bO0JRORjaueXwma3WohMt-OwuKZ2dTw==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/857000071/?random=1721420610056&cv=11&fst=1721419200000&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLXAuoaRsrhkL3MwgooHLq76X2mzD6HQ&random=3021817549&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1737318211&external_user_id=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZprLRNHM6a0AACCuACAO0wAA; CMPS=3601; CMPRO=3601
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11113837502/?random=1721420610095&cv=11&fst=1721419200000&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLaOnXukIkK_bzke4FkSLbXEkrm4CRLA&random=2702140911&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11113837502/?random=1721420610095&cv=11&fst=1721420610095&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=3d413657-d7be-4ecc-8076-6252c7d7fa2c&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=6fd3ee62-97f8-494a-8592-6adc3f52b1c7&tw_document_href=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&tw_iframe_status=0&txn_id=o20y8&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=58594fc1-52ac-4f40-a5d9-6055ac680d3d
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=13d2ca693c774b8480469e893a295b16; tv_UIDM=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334
Source: global traffic	HTTP traffic detected: GET /engagement/js?goalId=16174&cb=1721420611964 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnX3nAZ2L-BAgEJyz9d3M4nQ7LJkNwQEJuCPDB14VLmBut5ohUImr27lOVxJQC4TM1
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=0k3db3j&ct=0:1lntxdf&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1737318211&external_user_id=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZprLRNHM6a0AACCuACAO0wAA; CMPS=3601; CMPRO=3601
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=COnXz8D3s4cDFaZCHgIdDnoO7w;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/857000071/?random=1721420610056&cv=11&fst=1721419200000&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLXAuoaRsrhkL3MwgooHLq76X2mzD6HQ&random=3021817549&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?domain=mimecast.com&pId=1022996381651647135 HTTP/1.1Host: attr.ml-api.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11113837502/?random=1721420610095&cv=11&fst=1721419200000&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLaOnXukIkK_bzke4FkSLbXEkrm4CRLA&random=2702140911&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=e24f7e3a-5c9e-4ded-b913-3026146c2cf7&s=277c35734761a356349c294a3264c146&page=07192993a48cd7932958c47f182d291719073020&ret=0&u=e742836dff94c44c30385e2c4da17126&href=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&url=www.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support&ref=&title=404%20%7C%20Mimecast&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=3078&pxr=1&gdpr=0&pst=1721420612451 HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=2ilJfPUMh-MkP8EPbywyUf9bO0JRORjaueXwma3WohMt-OwuKZ2dTw==&api-version=v2 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/js?goalId=16174&cb=1721420611964 HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnX3nAZ2L-BAgEJyz9d3M4nQ7LJkNwQEJuCPDB14VLmBut5ohUImr27lOVxJQC4TM1
Source: global traffic	HTTP traffic detected: GET /engagement/getpixels?gid=16174 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=COnXz8D3s4cDFaZCHgIdDnoO7w;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=6e99sbimQh8QEv8tRLKjKJ9xSaxNHRKpLy-MEu2A9xq_GratMOMH6dcqy5ZMR4i2UuWReVr4Gi2BA6f016f11H15j4W8zkOrqODa6vY7xdY.; receive-cookie-deprecation=1; uuid2=1022996381651647135
Source: global traffic	HTTP traffic detected: GET /init?v=18.07&p=e24f7e3a-5c9e-4ded-b913-3026146c2cf7&s=277c35734761a356349c294a3264c146&page=07192993a48cd7932958c47f182d291719073020&ret=0&u=e742836dff94c44c30385e2c4da17126&href=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&url=www.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support&ref=&title=404%20%7C%20Mimecast&res=1280x1024&tz=300&to=0&dnt=0&ori=&dw=1263&dh=907&time=3078&pxr=1&gdpr=0&pst=1721420612451 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnX3nAZ2L-BAgEJyz9d3M4nQ7LJkNwQEJuCPDB14VLmBut5ohUImr27lOVxJQC4TM1; bt-es-16174=027f7e11-4074-45bd-bd45-4dd83356d6ca
Source: global traffic	HTTP traffic detected: GET /engagement/getpixels?gid=16174 HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnX3nAZ2L-BAgEJyz9d3M4nQ7LJkNwQEJuCPDB14VLmBut5ohUImr27lOVxJQC4TM1; bt-es-16174=027f7e11-4074-45bd-bd45-4dd83356d6ca
Source: global traffic	HTTP traffic detected: GET /?domain=mimecast.com&pId=1022996381651647135 HTTP/1.1Host: attr.ml-api.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=1022996381651647135&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2fb51a27-edda-4f3b-89fa-ef37b539188b; TDCPM=CAESFwoIYXBwbmV4dXMSCwiM-Yi-nNyIPRAFGAUoATILCNrW4crsjpQ9EAVCDyINCAESCQoFdGllcjEQAVoHMGszZGIzamABcghhcHBuZXh1cw..
Source: global traffic	HTTP traffic detected: GET /v1/visitors/create HTTP/1.1Host: st.fullcircleinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/729758044/?random=936124574&cv=9&fst=1721420613184&num=1&npa=1&label=oNKJCMuPktYBENzy_NsC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9488543.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCOnXz8D3s4cDFaZCHgIdDnoO7w%3Bsrc%3D9488543%3Btype%3Daudie0%3Bcat%3Dgl_mi0%3Bord%3D2936519596697%3Bnpa%3D0%3Bauiddc%3D326790021.1721420608%3Bu1%3Dundefined%3Bu2%3Dundefined%3Bu3%3Dundefined%3Bps%3D1%3Bpcor%3D2131391307%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe47h0v9190624996z876373427za201zb76373427%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Btag_exp%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fw&ref=https%3A%2F%2Fwww.mimecast.com%2F&top=https%3A%2F%2Fwww.mimecast.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLLDsQIiAQFAAUonZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJnI0JTu2fmcASITCOblisL3s4cDFehTkQUdVtwLbDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjokaHR0cHM6Ly85NDg4NTQzLmZscy5kb3VibGVjbGljay5uZXQv HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmt2P_gXwL_xxzbrZNjqbltP-LuRsaIz-tGOcUvj1IXrrBl894a0W7ODLXP
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=MmZiNTFhMjctZWRkYS00ZjNiLTg5ZmEtZWYzN2I1MzkxODhi&gdpr=0&gdpr_consent=&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUmt2P_gXwL_xxzbrZNjqbltP-LuRsaIz-tGOcUvj1IXrrBl894a0W7ODLXP
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/729758044/?random=936124574&cv=9&fst=1721420613184&num=1&npa=1&label=oNKJCMuPktYBENzy_NsC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9488543.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCOnXz8D3s4cDFaZCHgIdDnoO7w%3Bsrc%3D9488543%3Btype%3Daudie0%3Bcat%3Dgl_mi0%3Bord%3D2936519596697%3Bnpa%3D0%3Bauiddc%3D326790021.1721420608%3Bu1%3Dundefined%3Bu2%3Dundefined%3Bu3%3Dundefined%3Bps%3D1%3Bpcor%3D2131391307%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe47h0v9190624996z876373427za201zb76373427%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Btag_exp%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fw&ref=https%3A%2F%2Fwww.mimecast.com%2F&top=https%3A%2F%2Fwww.mimecast.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLLDsQIiAQFAAUonZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJnI0JTu2fmcASITCOblisL3s4cDFehTkQUdVtwLbDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjokaHR0cHM6Ly85NDg4NTQzLmZscy5kb3VibGVjbGljay5uZXQv&is_vtc=1&cid=CAQSKQDaQooLPysuvlCGFRltYt9uP19tvUKLRBnPzPZkBqSpdpPOVYDWXbNm&random=2250973169&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b&google_gid=CAESEMbxwWWQFrEeUi7vX5iohbg&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2fb51a27-edda-4f3b-89fa-ef37b539188b; TDCPM=CAESFwoIYXBwbmV4dXMSCwjwj5ex1o6UPRAFEhUKBmdvb2dsZRILCNC3w8n24JE9EAUYBSABKAEyCwja1uHK7I6UPRAFQg8iDQgBEgkKBXRpZXIxEAFaBzBrM2RiM2pgAXIGZ29vZ2xl
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/729758044/?random=936124574&cv=9&fst=1721420613184&num=1&npa=1&label=oNKJCMuPktYBENzy_NsC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9488543.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCOnXz8D3s4cDFaZCHgIdDnoO7w%3Bsrc%3D9488543%3Btype%3Daudie0%3Bcat%3Dgl_mi0%3Bord%3D2936519596697%3Bnpa%3D0%3Bauiddc%3D326790021.1721420608%3Bu1%3Dundefined%3Bu2%3Dundefined%3Bu3%3Dundefined%3Bps%3D1%3Bpcor%3D2131391307%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe47h0v9190624996z876373427za201zb76373427%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Btag_exp%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fw&ref=https%3A%2F%2Fwww.mimecast.com%2F&top=https%3A%2F%2Fwww.mimecast.com%2F&capi=1&hn=www.googleadservices.com&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLLDsQIiAQFAAUonZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CJnI0JTu2fmcASITCOblisL3s4cDFehTkQUdVtwLbDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjokaHR0cHM6Ly85NDg4NTQzLmZscy5kb3VibGVjbGljay5uZXQv&is_vtc=1&cid=CAQSKQDaQooLPysuvlCGFRltYt9uP19tvUKLRBnPzPZkBqSpdpPOVYDWXbNm&random=2250973169&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html?website=e24f7e3a-5c9e-4ded-b913-3026146c2cf7&session=277c35734761a356349c294a3264c146&page=07192993a48cd7932958c47f182d291719073020&gz=1 HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2fb51a27-edda-4f3b-89fa-ef37b539188b; TDCPM=CAESFwoIYXBwbmV4dXMSCwjwj5ex1o6UPRAFEhUKBmdvb2dsZRILCPS6oMHWjpQ9EAUSFgoHcnViaWNvbhILCLTaoMHWjpQ9EAUYBSACKAEyCwja1uHK7I6UPRAFQg8iDQgBEgkKBXRpZXIxEAFaBzBrM2RiM2pgAXIHcnViaWNvbg..
Source: global traffic	HTTP traffic detected: GET /v1/visits/queue HTTP/1.1Host: st.fullcircleinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=2fb51a27-edda-4f3b-89fa-ef37b539188b&expiration=1724012618&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9488543.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZprLRNHM6a0AACCuACAO0wAA; CMPS=3601; CMPRO=3601
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=2fb51a27-edda-4f3b-89fa-ef37b539188b&expiration=1724012618&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZprLRNHM6a0AACCuACAO0wAA; CMPS=3601; CMPRO=3601
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnX3nAZ2L-BAgEJyz9d3M4nQ7LJkNwQEJuCPDB14VLmBut5ohUImr27lOVxJQC4TM1; bt-es-16174=027f7e11-4074-45bd-bd45-4dd83356d6ca
Source: global traffic	HTTP traffic detected: GET /events?w=e24f7e3a-5c9e-4ded-b913-3026146c2cf7&s=277c35734761a356349c294a3264c146&p=07192993a48cd7932958c47f182d291719073020&v=18.07&pst=1721420612451&q=1&li=0&lh=0&ls=0&d=AABrAEEAAQAFAAOLAlkCAoQBtwKKKYKXCnAAAA_-AgKSAcUQNimFfx0AAAAWsw4AAAQMHOECAo4BwRziKYSrF7IAACapEw*.MDojbWFpbiA+IGRpdiA+IGRpdiA+IGRpdiA+IGRpdiA+IGRpdg==. HTTP/1.1Host: o2.mouseflow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: text/plainAccept: /*Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A3%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events?w=e24f7e3a-5c9e-4ded-b913-3026146c2cf7&s=277c35734761a356349c294a3264c146&p=07192993a48cd7932958c47f182d291719073020&v=18.07&pst=1721420612451&q=1&li=0&lh=0&ls=0&d=AABrAEEAAQAFAAOLAlkCAoQBtwKKKYKXCnAAAA_-AgKSAcUQNimFfx0AAAAWsw4AAAQMHOECAo4BwRziKYSrF7IAACapEw*.MDojbWFpbiA+IGRpdiA+IGRpdiA+IGRpdiA+IGRpdiA+IGRpdg==. HTTP/1.1Host: o2.mouseflow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A3%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnX3nAZ2L-BAgEJyz9d3M4nQ7LJkNwQEJuCPDB14VLmBut5ohUImr27lOVxJQC4TM1; bt-es-16174=027f7e11-4074-45bd-bd45-4dd83356d6ca
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A4%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.mimecast.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mimecast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A4%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GLOBALID=2uKlc8-sIBd987FnX3nAZ2L-BAgEJyz9d3M4nQ7LJkNwQEJuCPDB14VLmBut5ohUImr27lOVxJQC4TM1; bt-es-16174=027f7e11-4074-45bd-bd45-4dd83356d6ca
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Customers/Support/Contact-support/ HTTP/1.1Host: www.mimecast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0

Source: chromecache_322.2.dr, chromecache_321.2.dr	String found in binary or memory: "organic"):a.startsWith("www.google.")?(this.UtmSource="google",this.UtmMedium="organic"):a.startsWith("www.facebook.")?(this.UtmSource="facebook",this.UtmMedium="social"):a.startsWith("www.linkedin.")\|\|a.startsWith("www.lnkd.")?(this.UtmSource="linkedin",this.UtmMedium="social"):a.startsWith("www.twitter.")\|\|a.startsWith("t.co")?(this.UtmSource="twitter",this.UtmMedium="social"):R(a)\|\|(this.UtmMedium="referral")}}else this.hasUtmData()\|\|(this.UtmSource="direct")};this.loadFromJSON=function(a){this.VisitDateTime= equals www.facebook.com (Facebook)
Source: chromecache_322.2.dr, chromecache_321.2.dr	String found in binary or memory: "organic"):a.startsWith("www.google.")?(this.UtmSource="google",this.UtmMedium="organic"):a.startsWith("www.facebook.")?(this.UtmSource="facebook",this.UtmMedium="social"):a.startsWith("www.linkedin.")\|\|a.startsWith("www.lnkd.")?(this.UtmSource="linkedin",this.UtmMedium="social"):a.startsWith("www.twitter.")\|\|a.startsWith("t.co")?(this.UtmSource="twitter",this.UtmMedium="social"):R(a)\|\|(this.UtmMedium="referral")}}else this.hasUtmData()\|\|(this.UtmSource="direct")};this.loadFromJSON=function(a){this.VisitDateTime= equals www.linkedin.com (Linkedin)
Source: chromecache_322.2.dr, chromecache_321.2.dr	String found in binary or memory: "organic"):a.startsWith("www.google.")?(this.UtmSource="google",this.UtmMedium="organic"):a.startsWith("www.facebook.")?(this.UtmSource="facebook",this.UtmMedium="social"):a.startsWith("www.linkedin.")\|\|a.startsWith("www.lnkd.")?(this.UtmSource="linkedin",this.UtmMedium="social"):a.startsWith("www.twitter.")\|\|a.startsWith("t.co")?(this.UtmSource="twitter",this.UtmMedium="social"):R(a)\|\|(this.UtmMedium="referral")}}else this.hasUtmData()\|\|(this.UtmSource="direct")};this.loadFromJSON=function(a){this.VisitDateTime= equals www.twitter.com (Twitter)
Source: chromecache_311.2.dr, chromecache_485.2.dr, chromecache_334.2.dr, chromecache_300.2.dr, chromecache_388.2.dr, chromecache_467.2.dr, chromecache_328.2.dr, chromecache_517.2.dr	String found in binary or memory: return b}eC.J="internal.enableAutoEventOnTimer";var lc=ja(["data-gtm-yt-inspected-"]),gC=["www.youtube.com","www.youtube-nocookie.com"],hC,iC=!1; equals www.youtube.com (Youtube)
Source: chromecache_322.2.dr, chromecache_321.2.dr	String found in binary or memory: this.ReferrerPageRaw=255<a.length?a.substring(0,255):a,a=document.createElement("a"),a.href=b,a=a.hostname,f=encodeURIComponent(a),this.ReferrerPage=255<f.length?f.substring(0,255):f,!this.hasUtmData()){b=b.split("?");if(1<b.length)for(f=b[1].split("&"),b=0;b<f.length;b++){var c=f[b].split("=");if("q"==c[0]&&a.startsWith("www.bing.")){this.UtmTerm=c[1];break}}a.startsWith("www.bing.")?(this.UtmSource="bing",this.UtmMedium="organic"):a.startsWith("search.yahoo.")?(this.UtmSource="yahoo",this.UtmMedium= equals www.yahoo.com (Yahoo)
Source: chromecache_388.2.dr	String found in binary or memory: var tB=function(a,b,c,d,e){var f=oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?oz("fsl","nv.ids",[]):oz("fsl","ids",[]);if(!g.length)return!0;var k=tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);P(121);if(m==="https://www.facebook.com/tr/")return P(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ey(k,fy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: protect-us.mimecast.com
Source: global traffic	DNS traffic detected: DNS query: freemanhealthsystem.login-us.mimecast.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static.srcspot.com
Source: global traffic	DNS traffic detected: DNS query: cdn.pendo.io
Source: global traffic	DNS traffic detected: DNS query: app.pendo.io
Source: global traffic	DNS traffic detected: DNS query: www.mimecast.com
Source: global traffic	DNS traffic detected: DNS query: assets.mimecast.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: community.mimecast.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: scout-cdn.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: pixel.byspotify.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bttrack.com
Source: global traffic	DNS traffic detected: DNS query: scout.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: s.ml-attr.com
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: d2i34c80a0ftze.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: 9488543.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: pixels.spotify.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: 336-tau-594.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: st.fullcircleinsights.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: attr.ml-api.io
Source: global traffic	DNS traffic detected: DNS query: o2.mouseflow.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Jul 2024 20:23:26 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-storeSet-Cookie: ARRAffinity=d45f3e41a57738967561c580e540208a1117a87753342792901a31a4fc49e688;Path=/;HttpOnly;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.netSet-Cookie: ARRAffinitySameSite=d45f3e41a57738967561c580e540208a1117a87753342792901a31a4fc49e688;Path=/;HttpOnly;SameSite=None;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.netStrict-Transport-Security: max-age=2592000Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540X-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffReferrer-Policy: strict-origin-when-cross-originPermissions-Policy: geolocation=(self), camera=(), microphone=()x-azure-ref: 20240719T202326Z-15b94bb6ff9mtbrxwx6vp3e5340000000ac000000000usapx-fd-int-roxy-purgeid: 0X-Cache: PRIVATE_NOSTORE
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private,no-cachePragma: no-cacheContent-Type: text/htmlExpires: -1Set-Cookie: GLOBALID=2uKlc8-sIBd984cSkD72DtjK9bdSbfQ5MTo9cUUCHpZtepngO78_6A3NISPsgYRPo1NV0K2vsrMC4Q2; domain=.bttrack.com; expires=Thu, 17-Oct-2024 20:23:17 GMT; path=/; secure; SameSite=NoneX-ServerName: Track004-iadDate: Fri, 19 Jul 2024 20:23:17 GMTConnection: closeContent-Length: 1245Strict-Transport-Security: max-age=31536000;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private,no-cachePragma: no-cacheContent-Type: text/htmlExpires: -1Set-Cookie: GLOBALID=2uKlc8-sIBd987FnX3nAZ2L-BAgEJyz9d3M4nQ7LJkNwQEJuCPDB14VLmBut5ohUImr27lOVxJQC4TM1; domain=.bttrack.com; expires=Thu, 17-Oct-2024 20:23:18 GMT; path=/; secure; SameSite=NoneX-ServerName: Track001-iadDate: Fri, 19 Jul 2024 20:23:17 GMTConnection: closeContent-Length: 1245Strict-Transport-Security: max-age=31536000;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Fri, 19 Jul 2024 20:23:32 GMTserver: envoyContent-Length: 0strict-transport-security: max-age=31536000x-content-type-options: nosniffVia: HTTP/2 edgeproxy, 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Fri, 19 Jul 2024 20:23:36 GMTx-amz-apigw-id: bLSzVEIvvHcEkBQ=x-amzn-RequestId: ffadfafb-f2f1-45ef-845d-235e6c00defex-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 e2753c7f715c6ee0a717e472dee43e08.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LHR61-P3X-Amz-Cf-Id: 0W5KrwOypV75Xt1LMB156SQx1B7sYHKaW2vWVPCrZ8dBSgjPRLYDjA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Fri, 19 Jul 2024 20:23:38 GMTx-amz-apigw-id: bLSzvFrAPHcEa1g=x-amzn-RequestId: 5aecacb5-f29f-4433-9aad-3c822870366cx-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 98080dcdb79f5d17a442cf184e6c523c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: LHR61-P3X-Amz-Cf-Id: ioVcdAFRoOUBMJcShLWlVXW_bWvjBMmtiz2i5_n-o6FLnaaExzkNJw==

Source: chromecache_261.2.dr, chromecache_464.2.dr, chromecache_459.2.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: chromecache_261.2.dr, chromecache_464.2.dr, chromecache_459.2.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: chromecache_261.2.dr, chromecache_464.2.dr, chromecache_459.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: chromecache_261.2.dr, chromecache_464.2.dr, chromecache_459.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: chromecache_261.2.dr, chromecache_464.2.dr	String found in binary or memory: http://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia
Source: chromecache_459.2.dr	String found in binary or memory: http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia
Source: chromecache_232.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_232.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_232.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_232.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_232.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_232.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_261.2.dr, chromecache_464.2.dr, chromecache_459.2.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: chromecache_261.2.dr, chromecache_464.2.dr, chromecache_459.2.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chromecache_309.2.dr	String found in binary or memory: http://optimize.google.com/experiences/
Source: chromecache_261.2.dr, chromecache_464.2.dr, chromecache_459.2.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_7a5c3a0c73117406add19312bc1bc23f/LatestCRL.crl07
Source: chromecache_261.2.dr, chromecache_464.2.dr, chromecache_459.2.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: chromecache_232.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_232.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_232.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_232.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_309.2.dr, chromecache_232.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_388.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_388.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_328.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_347.2.dr, chromecache_345.2.dr	String found in binary or memory: https://agent.pendo.io/licenses
Source: chromecache_347.2.dr, chromecache_345.2.dr	String found in binary or memory: https://api.feedback.us.pendo.io
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://app.dmarcanalyzer.com/register?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l000001JNB
Source: chromecache_385.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: chromecache_514.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Conversion/16174/ebookbehindthescenes?type=img
Source: chromecache_514.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Conversion/16174/ebookglobalthreat?type=img
Source: chromecache_514.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Conversion/16174/formfill?type=img
Source: chromecache_514.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Conversion/16174/getthereport?type=img
Source: chromecache_514.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2911
Source: chromecache_514.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2912
Source: chromecache_514.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2913
Source: chromecache_514.2.dr	String found in binary or memory: https://bttrack.com/Pixel/Retarget/2914
Source: chromecache_330.2.dr	String found in binary or memory: https://bttrack.com/engagement/js?goalId=16174&cb=
Source: chromecache_311.2.dr, chromecache_485.2.dr, chromecache_334.2.dr, chromecache_300.2.dr, chromecache_388.2.dr, chromecache_467.2.dr, chromecache_328.2.dr, chromecache_517.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_514.2.dr	String found in binary or memory: https://cdn.bttrack.com/js/16174/analytics/1.0/analytics.min.js
Source: chromecache_319.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_319.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_319.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_319.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_334.2.dr, chromecache_388.2.dr	String found in binary or memory: https://cdn.mouseflow.com/projects/
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/cybergraph-cybergraph-1-0-configuration-settings
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/cybergraph-cybergraph-2-0-configuration-settings
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/email-security-cloud-gateway-configuring-url-protection
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/email-security-cloud-gateway-continuity-guides
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-getting-start
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/email-security-cloud-gateway-targeted-threat-protection-int
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-configu
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-impersonation-protection-g
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/article/end-user-applications-large-file-send-getting-started
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://community.mimecast.com/s/education-free-courses?utm_medium=pendo&utm_source=adcon&utm_campai
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-api-and-integrations
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-awareness-training
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-brand-exploit-protect
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-case-review-application
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-dmarc-analyzer
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-email-security-cg
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-supervision
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-sync-and-recover
Source: chromecache_354.2.dr, chromecache_511.2.dr	String found in binary or memory: https://community.mimecast.com/s/knowledge-hub-web-security
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://community.mimecast.com/s/mimecast-education?utm_medium=pendo&utm_source=adcon&utm_campaign=7
Source: chromecache_319.2.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_251.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_516.2.dr	String found in binary or memory: https://et.company-target.com
Source: chromecache_347.2.dr, chromecache_345.2.dr	String found in binary or memory: https://feedback.us.pendo.io
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_384.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_334.2.dr, chromecache_388.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_328.2.dr	String found in binary or memory: https://google.com
Source: chromecache_328.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_439.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/729758044/?random
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://info.mimecast.com/AT-IEP-Demo.html?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l00000
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://info.mimecast.com/Continuity-and-Recovery-Demo-.html?utm_medium=pendo&utm_source=adcon&utm_c
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://info.mimecast.com/Safe_Phish_Demo.html?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l0
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://info.mimecast.com/SolutionFrameworkRequest?utm_medium=pendo&utm_source=adcon&utm_campaign=70
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://info.mimecast.com/Web-Security-Service.html?utm_medium=pendo&utm_source=adcon&utm_campaign=7
Source: chromecache_516.2.dr	String found in binary or memory: https://info.mimecast.com/ransomware-demo.html
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://info.mimecast.com/security-awareness-remote-resources.html?utm_medium=pendo&utm_source=adcon
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://login-alpha.mimecast.com/administration/app/#/l/accountassessment
Source: chromecache_328.2.dr, chromecache_517.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_311.2.dr, chromecache_485.2.dr, chromecache_334.2.dr, chromecache_300.2.dr, chromecache_388.2.dr, chromecache_467.2.dr, chromecache_328.2.dr, chromecache_517.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_347.2.dr, chromecache_345.2.dr	String found in binary or memory: https://pendo-io-static.storage.googleapis.com/agent/static/0600cd7b-e6b2-4ba9-4249-ab1342c3631b/pen
Source: chromecache_347.2.dr, chromecache_345.2.dr	String found in binary or memory: https://pendo-static-5707797427912704.storage.googleapis.com
Source: chromecache_358.2.dr	String found in binary or memory: https://play.vidyard.com/LE2oaRu3qApZkgaw4JjwZM.jpg
Source: chromecache_358.2.dr	String found in binary or memory: https://play.vidyard.com/embed/v4.js
Source: chromecache_388.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_322.2.dr, chromecache_321.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_498.2.dr	String found in binary or memory: https://scout.us2.salesloft.com
Source: chromecache_385.2.dr	String found in binary or memory: https://services.google.com/sitestats/
Source: chromecache_388.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_322.2.dr, chromecache_321.2.dr	String found in binary or memory: https://st.fullcircleinsights.com/v1/visitors/create
Source: chromecache_322.2.dr, chromecache_321.2.dr	String found in binary or memory: https://st.fullcircleinsights.com/v1/visits/convert
Source: chromecache_322.2.dr, chromecache_321.2.dr	String found in binary or memory: https://st.fullcircleinsights.com/v1/visits/queue
Source: chromecache_388.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_385.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_311.2.dr, chromecache_485.2.dr, chromecache_334.2.dr, chromecache_300.2.dr, chromecache_388.2.dr, chromecache_467.2.dr, chromecache_328.2.dr, chromecache_517.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_388.2.dr	String found in binary or memory: https://unpkg.com/web-vitals/dist/web-vitals.iife.js
Source: chromecache_266.2.dr	String found in binary or memory: https://www.gettyimages.com/eula?utm_medium=organic&utm_source=google&utm_campaign=iptcurl8BIM
Source: chromecache_311.2.dr, chromecache_333.2.dr, chromecache_300.2.dr, chromecache_517.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_328.2.dr, chromecache_517.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_357.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11113837502/?random
Source: chromecache_359.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/857000071/?random
Source: chromecache_328.2.dr, chromecache_517.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_517.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_485.2.dr, chromecache_388.2.dr, chromecache_467.2.dr, chromecache_328.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_388.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_385.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: chromecache_333.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id
Source: chromecache_333.2.dr	String found in binary or memory: https://www.lightningdesignsystem.com/resources/icons/
Source: chromecache_516.2.dr	String found in binary or memory: https://www.mimecast.com/
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://www.mimecast.com/coronavirus/?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l000001JNBI
Source: chromecache_516.2.dr	String found in binary or memory: https://www.mimecast.com/demo/
Source: chromecache_516.2.dr	String found in binary or memory: https://www.mimecast.com/globalassets/documents/ebook/email-security-in-healthcare-2021.pdf
Source: chromecache_396.2.dr, chromecache_331.2.dr	String found in binary or memory: https://www.mimecast.com/state-of-email-security/download-hub/?utm_medium=pendo&utm_source=adcon&utm
Source: chromecache_425.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/8d515a58/pixel.js
Source: chromecache_388.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_516.2.dr	String found in binary or memory: https://www04.timetrade.com/app/mimecast/workflows/mimecast002/schedule?ch=website-demo&location
Source: chromecache_516.2.dr	String found in binary or memory: https://www04.timetrade.com/app/mimecast/workflows/mimecast002/schedule?ch=website-quote&locatio
Source: chromecache_516.2.dr	String found in binary or memory: https://www04.timetrade.com/app/mimecast/workflows/mimecastuk/schedule?ch=website-demo&locationId=mc
Source: chromecache_516.2.dr	String found in binary or memory: https://www04.timetrade.com/app/mimecast/workflows/mimecastuk/schedule?ch=website-quote&locationId=m

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133

Source: unknown	HTTPS traffic detected: 40.126.32.72:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.75:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50213 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50213 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.5:50224 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@29/483@206/69

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2208,i,6947341399331639761,9694673760673214665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4120 --field-trial-handle=2208,i,6947341399331639761,9694673760673214665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2208,i,6947341399331639761,9694673760673214665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4120 --field-trial-handle=2208,i,6947341399331639761,9694673760673214665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.redditstatic.com/ads/pixel.js	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/zone/	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/min-max/	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/googleData.json	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/define-locale/	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/iab2Data.json	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=MmZiNTFhMjctZWRkYS00ZjNiLTg5ZmEtZWYzN2I1MzkxODhi&gdpr=0&gdpr_consent=&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b	0%	Avira URL Cloud	safe
https://www.mimecast.com/demo/	0%	Avira URL Cloud	safe
https://app.pendo.io/data/guide.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1721420554473&v=2.239.0_prod	0%	Avira URL Cloud	safe
https://bttrack.com/Pixel/Conversion/16174/ebookglobalthreat?type=img	0%	Avira URL Cloud	safe
https://pixel-config.reddit.com/pixels/t2_2s9dur0o/config	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/aac7c7d3363d4892b9f909aa59250d04?v=52228a06	0%	Avira URL Cloud	safe
https://info.mimecast.com/Safe_Phish_Demo.html?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l0	0%	Avira URL Cloud	safe
https://community.mimecast.com/apex/PendoConnectPage	0%	Avira URL Cloud	safe
https://scout.salesloft.com/r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDA2Nzh9.2NKabo6_Rtun4zVLh_7mjY9vQitxlKkLRQrpE2z-Zc8	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-user-list/857000071/?random	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?r=6&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/education-free-courses?utm_medium=pendo&utm_source=adcon&utm_campai	0%	Avira URL Cloud	safe
https://bttrack.com/Pixel/Conversion/16174/getthereport?type=img	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/ba203cf576844201a13385cc94eaf22d?v=2c1b7329	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/088d3c3cdc384092b7542a48ec783d57?v=183f3895	0%	Avira URL Cloud	safe
https://info.mimecast.com/AT-IEP-Demo.html?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l00000	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/482db570fe8e449fb6b1e2d90dfda927?v=dd6313bd&t=w1920hq	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/b0d281d8bb0e4b8a89ee75e7f1de6bbb?v=a9fa1595&t=w1920hq	0%	Avira URL Cloud	safe
https://www04.timetrade.com/app/mimecast/workflows/mimecast002/schedule?ch=website-demo&location	0%	Avira URL Cloud	safe
https://www.mimecast.com/coronavirus/?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l000001JNBI	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-impersonation-protection-g	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?r=0&aura.Component.getComponentDef=1	0%	Avira URL Cloud	safe
https://info.mimecast.com/SolutionFrameworkRequest?utm_medium=pendo&utm_source=adcon&utm_campaign=70	0%	Avira URL Cloud	safe
https://scout.salesloft.com/i	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/4ef1a859ca4b4ddc94fb3037e36456aa?v=d619a895	0%	Avira URL Cloud	safe
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/mimecast-education?utm_medium=pendo&utm_source=adcon&utm_campaign=7	0%	Avira URL Cloud	safe
https://agent.pendo.io/licenses	0%	Avira URL Cloud	safe
https://www.mimecast.com/dist/fonts/open-sans-v18-latin-regular.woff2	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/1c9bb09595ba4175b9b901a7fdc0a7bf?v=28be8a73&t=w1920hq	0%	Avira URL Cloud	safe
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/b6c2916537114887a5ba7800de8d6ede?v=78059a5e	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/article/email-security-cloud-gateway-targeted-threat-protection-int	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/dd00d4036b494fd987dfa08614f988f5?v=2254cd74&t=w1920hq	0%	Avira URL Cloud	safe
https://d2i34c80a0ftze.cloudfront.net/fullcircle.js?cid=96fced6a-d5a9-48e2-a85e-b1d292166b0c&domain=mimecast.com	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22f4466bda-936e-4ad2-837f-3d4967eb4bfc%22%2C%22routeType%22%3A%22article%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22params%22%3A%7B%22viewid%22%3A%2273baec4e-1ebd-4970-b69d-f23d7befed73%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22urlName%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%2C%22recordId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A749%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true	0%	Avira URL Cloud	safe
https://www.mimecast.com/globalassets/documents/ebook/email-security-in-healthcare-2021.pdf	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/beb87be3865e4deeb2dd8bf265849d5d?v=53ad9bb6&t=w1920hq	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/a9f12990a7a64a1f9628ab3ca508a6fa?v=49d01bf6&t=w1920hq	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/knowledge-hub-email-security-cg	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/9bd89e511d2b44ccaeb12199e8897000?v=411770ce&t=w1920hq	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/729758044/?random	0%	Avira URL Cloud	safe
https://tag.demandbase.com/d6f8cbc5.min.js	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?r=5&aura.Component.getComponent=1	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/05ce22f3f02a4d20874334d3a17ced9b?v=4af23d84&t=w1920hq	0%	Avira URL Cloud	safe
https://scout.us2.salesloft.com	0%	Avira URL Cloud	safe
https://st.fullcircleinsights.com/v1/visitors/create	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?r=5&aura.ApexAction.execute=3&ui-self-service-components-controller.ArticleView.addArticleViewCount=1&ui-self-service-components-controller.ArticleView.getArticleHeaderDetail=1	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/article/cybergraph-cybergraph-1-0-configuration-settings	0%	Avira URL Cloud	safe
https://play.vidyard.com/LE2oaRu3qApZkgaw4JjwZM.jpg	0%	Avira URL Cloud	safe
https://www.lightningdesignsystem.com/resources/icons/	0%	Avira URL Cloud	safe
https://app.dmarcanalyzer.com/register?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l000001JNB	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/knowledge-hub-case-review-application	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/9cfe697b6d3f4044a0dca3699fa70406?v=83c5c7da&t=w1920hq	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/4766441092f24c1d8d5cb65f084680c0?v=98bbab41	0%	Avira URL Cloud	safe
https://unpkg.com/web-vitals@4.2.2/dist/web-vitals.iife.js	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?r=0&ui-comm-runtime-components-aura-components-siteforce-recordservicecomponent.RecordServiceComponent.getArticleVersionId=2&ui-self-service-components-profileMenu.ProfileMenu.getProfileMenuResponse=1	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/runtimedownload/fonts.css?lastMod=1688233401000&brandSet=774c7290-70ad-435a-896e-5352360ebe8b	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pu=1&pv=17214066060001102990252&rv=1721312700000	0%	Avira URL Cloud	safe
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A4%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	0%	Avira URL Cloud	safe
https://www.mimecast.com/dist/site.7bdbe456878bd11113ce.js	0%	Avira URL Cloud	safe
https://unpkg.com/web-vitals/dist/web-vitals.iife.js	0%	Avira URL Cloud	safe
https://info.mimecast.com/security-awareness-remote-resources.html?utm_medium=pendo&utm_source=adcon	0%	Avira URL Cloud	safe
https://www.mimecast.com/sc-static/img/favicons/icons_m_192x192.png	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=1022996381651647135&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/article/email-security-cloud-gateway-configuring-url-protection	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?r=7&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1	0%	Avira URL Cloud	safe
https://freemanhealthsystem.login-us.mimecast.com/u/login/cache.f692ac8003e8f0614f6bb1499f05c016.login.js	0%	Avira URL Cloud	safe
https://bttrack.com/Pixel/Conversion/16174/ebookbehindthescenes?type=img	0%	Avira URL Cloud	safe
https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/knowledge-hub-awareness-training	0%	Avira URL Cloud	safe
https://assets.mimecast.com/api/public/content/cfbe227215634da29c9efe4570f8f9a1?v=75a0021e&t=w1920hq	0%	Avira URL Cloud	safe
https://www.mimecast.com/dist/2fabfab087ce242c96a0.svg	0%	Avira URL Cloud	safe
https://freemanhealthsystem.login-us.mimecast.com/u/rest/branding/get-branding-item/mOr8-D5nYFSsjtIb3j5v5AeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoielJWQXE5ZU5ld01PMmluNiJ9.lH7ehwfuTByHOlxfDxb4qHbYlgn9aW-Y.A_inabXja3k5bJWN.z0agCYdzHeQpqVSo5gev3AmVm5VQ53dSbD5_Bd98CmkUabQCHVywLtL8GCCr353yOQyspk9apmBX8OzqXhJj5i5qGuxZf-VtffU5d7Hxu2_ldU-8rF64Iu1M1y7sRaLAdTJGMTHKigKqhVssyqLiOShRUHpqt1l5cYdGzF9g6L8GpB3ZUZACXljZVyNUVElalv50_fFo5Y9Lqcg2iUo9VcizSiXE0mECYT6SwDob3TynM2Gi-kwI3Tdn9dZ_U9b6S2uvG5p7X4DzuqznYkeIpu5-Rr3GF988kjudVzc6l8QJVpMiYFeQmD_W8aPDNs-7KpDd4CBJUfZAhrhQ8WZHJNklxQusMFKqsqQsXyQ15mrc85LzM1pLZnkckhJtcrn2Cy4DZLz_1ro_67LfJj06Jn0HsdqLzI-8oe2fKakV-jlu0vXlNkwP7WUs2i2dWIuYhOoAXKSv_WjIB-G7PJzz8MG2bgQfDFN7y2Eolsq14nG7lZbcWOn8D0iH7mx2Z0UqHi-B41SQKG4N813wrxdnmWwiDRty6voa3fcoLmBilNH0yLzOD8OtBAfb6fAFx_epFsK1M8DJS2JVrXOQse4dAHvO1lbm3XJ0lbhK5t0.pa5yWBMuXeDlK8FRZtLAAA?tkn=freemanhealthsystem	0%	Avira URL Cloud	safe
https://insight.adsrvr.org/track/pxl/?adv=0k3db3j&ct=0:1lntxdf&fmt=3	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?r=4&ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-getting-start	0%	Avira URL Cloud	safe
https://cdn.mouseflow.com/projects/	0%	Avira URL Cloud	safe
https://et.company-target.com	0%	Avira URL Cloud	safe
https://attr.ml-api.io/?domain=mimecast.com&pId=1022996381651647135	0%	Avira URL Cloud	safe
https://community.mimecast.com/s/sfsites/aura?r=1&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.validateRoute=1&ui-communities-components-aura-components-forceCommunity-controller.QuestionPost.getTopicFromUrl=1&ui-communities-components-aura-components-forceCommunity-seoAssistant.SeoAssistant.getRecordAndTranslationData=1&ui-self-service-components-controller.ArticleTopicList.getTopics=1	0%	Avira URL Cloud	safe
https://pixels.spotify.com/v1/ingest	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
protect-us.mimecast.com	207.211.31.113	true	false	unknown
d87k89vas8kdl.cloudfront.net	52.222.169.27	true	false	unknown
dart.l.doubleclick.net	142.250.185.166	true	false	unknown
s.ml-attr.com.pxlsrv.net	68.67.153.60	true	false	unknown
pixel.byspotify.com	34.117.162.98	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	unknown
mct-p-001-delivery.sitecorecontenthub.cloud	104.18.39.66	true	false	unknown
scout.us1.salesloft.com	52.70.247.33	true	false	unknown
adservice.google.com	172.217.16.194	true	false	unknown
platform.twitter.map.fastly.net	146.75.120.157	true	false	unknown
bttrack.com	192.132.33.67	true	false	unknown
st1.edge.sfdc-yzvdd4.edge2.salesforce.com	35.158.127.51	true	false	unknown
stats.g.doubleclick.net	74.125.133.157	true	false	unknown
app.pendo.io	34.107.204.85	true	false	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
insight.adsrvr.org	15.197.193.217	true	false	unknown
tag.demandbase.com	143.204.9.21	true	false	unknown
t.co	93.184.221.165	true	true	unknown
336-tau-594.mktoresp.com	134.213.193.62	true	false	unknown
static.srcspot.com	35.190.8.230	true	false	unknown
cm.g.doubleclick.net	216.58.206.66	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
edge-web.dual-gslb.spotify.com	35.186.224.24	true	false	unknown
tag-logger.demandbase.com	18.239.18.49	true	false	unknown
d2qlomkzr3gd97.cloudfront.net	65.9.66.54	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
s.twitter.com	104.244.42.67	true	false	unknown
ad.doubleclick.net	142.250.181.230	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.65.140	true	false	unknown
di.rlcdn.com	35.244.174.68	true	false	unknown
cdn.pendo.io	34.36.213.229	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
googleads.g.doubleclick.net	142.250.185.66	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	unknown
o2.mouseflow.com	185.17.186.161	true	false	unknown
api.company-target.com	13.32.110.120	true	false	unknown
analytics.google.com	142.250.185.238	true	false	unknown
td.doubleclick.net	172.217.23.98	true	false	unknown
freemanhealthsystem.login-us.mimecast.com	207.211.31.108	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	52.3.44.213	true	false	unknown
unpkg.com	104.17.249.203	true	false	unknown
ib.anycast.adnxs.com	37.252.171.149	true	false	unknown
cdn.cookielaw.org	104.19.177.52	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
d2i34c80a0ftze.cloudfront.net	3.165.206.35	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
scout.salesloft.com	unknown	unknown	false	unknown
scout-cdn.salesloft.com	unknown	unknown	false	unknown
secure.adnxs.com	unknown	unknown	false	unknown
pixels.spotify.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	unknown
s.company-target.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
partners.tremorhub.com	unknown	unknown	false	unknown
st.fullcircleinsights.com	unknown	unknown	false	unknown
attr.ml-api.io	unknown	unknown	false	unknown
www.mimecast.com	unknown	unknown	false	unknown
pixel-config.reddit.com	unknown	unknown	false	unknown
assets.mimecast.com	unknown	unknown	false	unknown
9488543.fls.doubleclick.net	unknown	unknown	false	unknown
cdn.mouseflow.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
community.mimecast.com	unknown	unknown	false	unknown
s.ml-attr.com	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
cdn.bttrack.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://scout.salesloft.com/r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDA2Nzh9.2NKabo6_Rtun4zVLh_7mjY9vQitxlKkLRQrpE2z-Zc8	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=MmZiNTFhMjctZWRkYS00ZjNiLTg5ZmEtZWYzN2I1MzkxODhi&gdpr=0&gdpr_consent=&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b	false	Avira URL Cloud: safe	unknown
https://app.pendo.io/data/guide.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1721420554473&v=2.239.0_prod	false	Avira URL Cloud: safe	unknown
https://pixel-config.reddit.com/pixels/t2_2s9dur0o/config	false	Avira URL Cloud: safe	unknown
https://www.redditstatic.com/ads/pixel.js	false	URL Reputation: safe	unknown
https://assets.mimecast.com/api/public/content/aac7c7d3363d4892b9f909aa59250d04?v=52228a06	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/apex/PendoConnectPage	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/aura?r=6&ui-instrumentation-components-beacon.InstrumentationBeacon.sendData=1	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/b0d281d8bb0e4b8a89ee75e7f1de6bbb?v=a9fa1595&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/088d3c3cdc384092b7542a48ec783d57?v=183f3895	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/482db570fe8e449fb6b1e2d90dfda927?v=dd6313bd&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/ba203cf576844201a13385cc94eaf22d?v=2c1b7329	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/509ae1a8c65d4c52826a5829290dbd6c?v=d858776e&t=w1920hq	false		unknown
https://scout.salesloft.com/i	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-troubleshooting	false		unknown
https://community.mimecast.com/s/sfsites/aura?r=0&aura.Component.getComponentDef=1	false	Avira URL Cloud: safe	unknown
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A1%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/1c9bb09595ba4175b9b901a7fdc0a7bf?v=28be8a73&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://www.mimecast.com/dist/fonts/open-sans-v18-latin-regular.woff2	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/4ef1a859ca4b4ddc94fb3037e36456aa?v=d619a895	false	Avira URL Cloud: safe	unknown
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A2%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/dd00d4036b494fd987dfa08614f988f5?v=2254cd74&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://d2i34c80a0ftze.cloudfront.net/fullcircle.js?cid=96fced6a-d5a9-48e2-a85e-b1d292166b0c&domain=mimecast.com	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/b6c2916537114887a5ba7800de8d6ede?v=78059a5e	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22f4466bda-936e-4ad2-837f-3d4967eb4bfc%22%2C%22routeType%22%3A%22article%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22params%22%3A%7B%22viewid%22%3A%2273baec4e-1ebd-4970-b69d-f23d7befed73%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22urlName%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%2C%22recordId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A749%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/a9f12990a7a64a1f9628ab3ca508a6fa?v=49d01bf6&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/beb87be3865e4deeb2dd8bf265849d5d?v=53ad9bb6&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://www.mimecast.com/	false		unknown
https://www.mimecast.com/dist/fonts/open-sans-v18-latin-700.woff2	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/9bd89e511d2b44ccaeb12199e8897000?v=411770ce&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://tag.demandbase.com/d6f8cbc5.min.js	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/aura?r=5&aura.Component.getComponent=1	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/05ce22f3f02a4d20874334d3a17ced9b?v=4af23d84&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/aura?r=5&aura.ApexAction.execute=3&ui-self-service-components-controller.ArticleView.addArticleViewCount=1&ui-self-service-components-controller.ArticleView.getArticleHeaderDetail=1	false	Avira URL Cloud: safe	unknown
https://st.fullcircleinsights.com/v1/visitors/create	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://assets.mimecast.com/api/public/content/4766441092f24c1d8d5cb65f084680c0?v=98bbab41	false	Avira URL Cloud: safe	unknown
https://unpkg.com/web-vitals@4.2.2/dist/web-vitals.iife.js	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/9cfe697b6d3f4044a0dca3699fa70406?v=83c5c7da&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/aura?r=0&ui-comm-runtime-components-aura-components-siteforce-recordservicecomponent.RecordServiceComponent.getArticleVersionId=2&ui-self-service-components-profileMenu.ProfileMenu.getProfileMenuResponse=1	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/runtimedownload/fonts.css?lastMod=1688233401000&brandSet=774c7290-70ad-435a-896e-5352360ebe8b	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pu=1&pv=17214066060001102990252&rv=1721312700000	false	Avira URL Cloud: safe	unknown
https://bttrack.com/engagement/event?input=%7B%22globalId%22%3A%22cc4b8432-2c76-415c-bdeb-2f0fb8a4c3cb%22%2C%22creativeId%22%3A%22%22%2C%22placementId%22%3A%22%22%2C%22goalId%22%3A%2216174%22%2C%22sessionId%22%3A%220a54f41b-1b8a-4b7f-a1f0-d07a7f483e9e%22%2C%22parentPublisherId%22%3A%22%22%2C%22publisherId%22%3A%22%22%2C%22siteId%22%3A%22%22%2C%22commonId%22%3A%22%22%2C%22heartbeat%22%3A4%2C%22url%22%3A%22https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F%22%2C%22fingerprint%22%3A%22%22%2C%22fingerprintProvider%22%3A%22%22%7D	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-overview	false		unknown
https://unpkg.com/web-vitals/dist/web-vitals.iife.js	false	Avira URL Cloud: safe	unknown
https://www.mimecast.com/sc-static/img/favicons/icons_m_192x192.png	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/aura?r=7&ui-comm-runtime-components-aura-components-siteforce-network-tracking.NetworkTracking.createLogRecord=1	false	Avira URL Cloud: safe	unknown
https://www.mimecast.com/dist/site.7bdbe456878bd11113ce.js	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=1022996381651647135&ttd_tdid=2fb51a27-edda-4f3b-89fa-ef37b539188b	false	Avira URL Cloud: safe	unknown
https://freemanhealthsystem.login-us.mimecast.com/u/login/cache.f692ac8003e8f0614f6bb1499f05c016.login.js	false	Avira URL Cloud: safe	unknown
https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css	false	Avira URL Cloud: safe	unknown
https://assets.mimecast.com/api/public/content/cfbe227215634da29c9efe4570f8f9a1?v=75a0021e&t=w1920hq	false	Avira URL Cloud: safe	unknown
https://freemanhealthsystem.login-us.mimecast.com/u/rest/branding/get-branding-item/mOr8-D5nYFSsjtIb3j5v5AeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoielJWQXE5ZU5ld01PMmluNiJ9.lH7ehwfuTByHOlxfDxb4qHbYlgn9aW-Y.A_inabXja3k5bJWN.z0agCYdzHeQpqVSo5gev3AmVm5VQ53dSbD5_Bd98CmkUabQCHVywLtL8GCCr353yOQyspk9apmBX8OzqXhJj5i5qGuxZf-VtffU5d7Hxu2_ldU-8rF64Iu1M1y7sRaLAdTJGMTHKigKqhVssyqLiOShRUHpqt1l5cYdGzF9g6L8GpB3ZUZACXljZVyNUVElalv50_fFo5Y9Lqcg2iUo9VcizSiXE0mECYT6SwDob3TynM2Gi-kwI3Tdn9dZ_U9b6S2uvG5p7X4DzuqznYkeIpu5-Rr3GF988kjudVzc6l8QJVpMiYFeQmD_W8aPDNs-7KpDd4CBJUfZAhrhQ8WZHJNklxQusMFKqsqQsXyQ15mrc85LzM1pLZnkckhJtcrn2Cy4DZLz_1ro_67LfJj06Jn0HsdqLzI-8oe2fKakV-jlu0vXlNkwP7WUs2i2dWIuYhOoAXKSv_WjIB-G7PJzz8MG2bgQfDFN7y2Eolsq14nG7lZbcWOn8D0iH7mx2Z0UqHi-B41SQKG4N813wrxdnmWwiDRty6voa3fcoLmBilNH0yLzOD8OtBAfb6fAFx_epFsK1M8DJS2JVrXOQse4dAHvO1lbm3XJ0lbhK5t0.pa5yWBMuXeDlK8FRZtLAAA?tkn=freemanhealthsystem	false	Avira URL Cloud: safe	unknown
https://www.mimecast.com/dist/2fabfab087ce242c96a0.svg	false	Avira URL Cloud: safe	unknown
https://insight.adsrvr.org/track/pxl/?adv=0k3db3j&ct=0:1lntxdf&fmt=3	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/aura?r=4&ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1	false	Avira URL Cloud: safe	unknown
https://attr.ml-api.io/?domain=mimecast.com&pId=1022996381651647135	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/sfsites/aura?r=1&ui-comm-runtime-components-aura-components-siteforce-qb.Quarterback.validateRoute=1&ui-communities-components-aura-components-forceCommunity-controller.QuestionPost.getTopicFromUrl=1&ui-communities-components-aura-components-forceCommunity-seoAssistant.SeoAssistant.getRecordAndTranslationData=1&ui-self-service-components-controller.ArticleTopicList.getTopics=1	false	Avira URL Cloud: safe	unknown
https://pixels.spotify.com/v1/ingest	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://info.mimecast.com/Safe_Phish_Demo.html?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l0	chromecache_396.2.dr, chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://bttrack.com/Pixel/Conversion/16174/ebookglobalthreat?type=img	chromecache_514.2.dr	false	Avira URL Cloud: safe	unknown
https://www.mimecast.com/demo/	chromecache_516.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/857000071/?random	chromecache_359.2.dr	false	Avira URL Cloud: safe	unknown
https://bttrack.com/Pixel/Conversion/16174/getthereport?type=img	chromecache_514.2.dr	false	Avira URL Cloud: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_388.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_232.2.dr	false	URL Reputation: safe	unknown
https://www04.timetrade.com/app/mimecast/workflows/mimecast002/schedule?ch=website-demo&location	chromecache_516.2.dr	false	Avira URL Cloud: safe	unknown
https://www.mimecast.com/coronavirus/?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l000001JNBI	chromecache_396.2.dr, chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://info.mimecast.com/AT-IEP-Demo.html?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l00000	chromecache_396.2.dr, chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/education-free-courses?utm_medium=pendo&utm_source=adcon&utm_campai	chromecache_396.2.dr, chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-impersonation-protection-g	chromecache_354.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://info.mimecast.com/SolutionFrameworkRequest?utm_medium=pendo&utm_source=adcon&utm_campaign=70	chromecache_396.2.dr, chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/mimecast-education?utm_medium=pendo&utm_source=adcon&utm_campaign=7	chromecache_396.2.dr, chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://agent.pendo.io/licenses	chromecache_347.2.dr, chromecache_345.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_232.2.dr	false	URL Reputation: safe	unknown
https://community.mimecast.com/s/article/email-security-cloud-gateway-targeted-threat-protection-int	chromecache_354.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_232.2.dr	false	URL Reputation: safe	unknown
https://www.mimecast.com/globalassets/documents/ebook/email-security-in-healthcare-2021.pdf	chromecache_516.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_251.2.dr	false	URL Reputation: safe	unknown
https://community.mimecast.com/s/knowledge-hub-email-security-cg	chromecache_354.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://scout.us2.salesloft.com	chromecache_498.2.dr	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/729758044/?random	chromecache_439.2.dr	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/article/cybergraph-cybergraph-1-0-configuration-settings	chromecache_354.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://www.lightningdesignsystem.com/resources/icons/	chromecache_333.2.dr	false	Avira URL Cloud: safe	unknown
https://play.vidyard.com/LE2oaRu3qApZkgaw4JjwZM.jpg	chromecache_358.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_232.2.dr	false	URL Reputation: safe	unknown
https://app.dmarcanalyzer.com/register?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l000001JNB	chromecache_396.2.dr, chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/knowledge-hub-case-review-application	chromecache_354.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://info.mimecast.com/security-awareness-remote-resources.html?utm_medium=pendo&utm_source=adcon	chromecache_396.2.dr, chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/article/email-security-cloud-gateway-configuring-url-protection	chromecache_354.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_319.2.dr	false	URL Reputation: safe	unknown
https://bttrack.com/Pixel/Conversion/16174/ebookbehindthescenes?type=img	chromecache_514.2.dr	false	Avira URL Cloud: safe	unknown
https://community.mimecast.com/s/knowledge-hub-awareness-training	chromecache_354.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/define-locale/	chromecache_232.2.dr	false	URL Reputation: safe	unknown
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_319.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_232.2.dr	false	URL Reputation: safe	unknown
https://community.mimecast.com/s/article/email-security-cloud-gateway-secure-messaging-getting-start	chromecache_354.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://et.company-target.com	chromecache_516.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.mouseflow.com/projects/	chromecache_334.2.dr, chromecache_388.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.17.186.161	o2.mouseflow.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
37.252.171.149	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
185.17.186.162	unknown	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
207.211.31.108	freemanhealthsystem.login-us.mimecast.com	United States	14135	NAVISITE-EAST-2US	false
52.222.169.27	d87k89vas8kdl.cloudfront.net	United States	16509	AMAZON-02US	false
185.89.210.153	unknown	Germany	29990	ASN-APPNEXUS	false
13.227.219.42	unknown	United States	16509	AMAZON-02US	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
104.17.249.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.70	unknown	United States	15169	GOOGLEUS	false
65.9.66.54	d2qlomkzr3gd97.cloudfront.net	United States	16509	AMAZON-02US	false
68.67.153.60	s.ml-attr.com.pxlsrv.net	United States	29990	ASN-APPNEXUS	false
142.250.185.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
207.211.31.115	unknown	United States	14135	NAVISITE-EAST-2US	false
207.211.31.113	protect-us.mimecast.com	United States	14135	NAVISITE-EAST-2US	false
142.250.185.238	analytics.google.com	United States	15169	GOOGLEUS	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
35.158.127.51	st1.edge.sfdc-yzvdd4.edge2.salesforce.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
134.213.193.62	336-tau-594.mktoresp.com	Ireland	15395	RACKSPACE-LONGB	false
146.75.120.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
34.117.162.98	pixel.byspotify.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
172.217.16.194	adservice.google.com	United States	15169	GOOGLEUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
65.9.66.49	unknown	United States	16509	AMAZON-02US	false
18.239.94.80	unknown	United States	16509	AMAZON-02US	false
74.125.133.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
108.138.217.18	unknown	United States	16509	AMAZON-02US	false
104.19.177.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
34.36.213.229	cdn.pendo.io	United States	2686	ATGS-MMD-ASUS	false
142.250.181.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
3.214.204.165	unknown	United States	14618	AMAZON-AESUS	false
142.250.185.166	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.239.18.49	tag-logger.demandbase.com	United States	16509	AMAZON-02US	false
15.197.193.217	insight.adsrvr.org	United States	7430	TANDEMUS	false
52.3.44.213	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
172.217.23.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
192.132.33.67	bttrack.com	United States	18568	BIDTELLECTUS	false
13.32.110.120	api.company-target.com	United States	16509	AMAZON-02US	false
34.107.204.85	app.pendo.io	United States	15169	GOOGLEUS	false
52.70.247.33	scout.us1.salesloft.com	United States	14618	AMAZON-AESUS	false
35.190.8.230	static.srcspot.com	United States	15169	GOOGLEUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
216.58.206.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.244.42.3	unknown	United States	13414	TWITTERUS	false
18.239.18.15	unknown	United States	16509	AMAZON-02US	false
104.18.39.66	mct-p-001-delivery.sitecorecontenthub.cloud	United States	13335	CLOUDFLARENETUS	false
143.204.9.21	tag.demandbase.com	United States	16509	AMAZON-02US	false
151.101.1.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
35.186.224.24	edge-web.dual-gslb.spotify.com	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
93.184.221.165	t.co	European Union	15133	EDGECASTUS	true
104.17.247.203	unknown	United States	13335	CLOUDFLARENETUS	false
143.204.9.105	unknown	United States	16509	AMAZON-02US	false
3.165.206.35	d2i34c80a0ftze.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.129.140	unknown	United States	54113	FASTLYUS	false
54.158.232.70	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.7
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1477015
Start date and time:	2024-07-19 22:21:19 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@29/483@206/69
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://www.mimecast.com/ Browse: https://community.mimecast.com/docs/DOC-1183 Browse: https://community.mimecast.com/community/knowledge-base/secure-messaging Browse: http://www.mimecast.com/Customers/Support/Contact-support/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 2.19.126.137, 142.250.185.227, 142.250.186.174, 66.102.1.84, 34.104.35.123, 142.250.184.234, 142.250.181.227, 172.217.16.138, 172.217.23.106, 142.250.185.234, 142.250.185.170, 142.250.184.202, 142.250.181.234, 142.250.185.138, 142.250.186.74, 216.58.212.170, 142.250.185.202, 142.250.185.106, 142.250.186.170, 142.250.186.42, 216.58.212.138, 172.217.18.106, 216.58.206.42, 142.250.185.123, 142.250.185.155, 142.250.185.187, 142.250.185.219, 142.250.185.251, 142.250.186.187, 172.217.18.123, 142.250.181.251, 172.217.16.219, 142.250.184.219, 142.250.186.123, 142.250.186.155, 142.250.74.219, 172.217.18.27, 172.217.16.155, 142.250.186.59, 172.217.23.123, 216.58.212.155, 142.250.186.91, 216.58.206.59, 20.12.23.50, 20.242.39.171, 2.19.126.206, 2.19.126.198, 172.217.16.200, 216.58.206.40, 52.165.164.15, 20.114.59.183, 20.3.187.198, 142.250.184.238, 216.239.34.178, 216.239.38.178, 216.239.36.178, 216.239.32.178, 13.85.23.86, 217.20.56.36, 142.250.184.227, 204.79.19
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, scout-cdn.salesloft.com.cdn.cloudflare.net, clientservices.googleapis.com, e10776.b.akamaiedge.net, pendo-static-5707797427912704.storage.googleapis.com, wildcard.marketo.net.edgekey.net, cdn.mouseflow.com.cdn.cloudflare.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, login.live.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, bat.bing.com, azurefd-t-prod.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, www-alv.google-analytics.com, a1093.dscb.akamai.net, ctldl.windowsupdate.com, od.linkedin.edgesuite.ne
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jul 19 19:22:30 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982338211119364
Encrypted:	false
SSDEEP:	48:8d2d4OTYKLRfHoUidAKZdA19ehwiZUklqehTy+3:8dROk6RPIy
MD5:	941BA7D895DED242F04CB0F755721D63
SHA1:	3C5A1B447E274781B9D50E51D91E9E0013D1EB75
SHA-256:	7FF722A3304BF669D26AB2395CDD1C38EBAFB178E8FA18F926A53586B88875B4
SHA-512:	C8B5C8DB9B82FD2B7EC25427FBDEB41F8582125AAEE99B6871B3B9CA9CDF379B6609552FC90814418239C7F56409053E50759E67499B2248809216E40A6431F9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......3a....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........e......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jul 19 19:22:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999190091875123
Encrypted:	false
SSDEEP:	48:8K2d4OTYKLRfHoUidAKZdA1weh/iZUkAQkqeh4y+2:8KROk6R19Q1y
MD5:	5AE569942951DB1CBEEF6C1AFE0D0BFD
SHA1:	2A746FC97425FE8285E90CB66429AC908EACC7BC
SHA-256:	4CECADB2FE7C020E2200F5AD15DF402CD543D148742BB41F06BA28DE219F5C7E
SHA-512:	AB617F4D03415CF1426D7E5BB95086ECE4391047608E3D7383CC531593BBED2CB3CDE6B0A32504B357407B92D124B024B4823ACF02B65DD76AA098C2497CFCBC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'{#a....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........e......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008497519899926
Encrypted:	false
SSDEEP:	48:8xv2d4OTYKLRsHoUidAKZdA14tseh7sFiZUkmgqeh7s6y+BX:8xvROk6RknUy
MD5:	D3E09B335AA26477C06C53ED5A3340F5
SHA1:	1F377CDBB4E0ABB52D3FACF66F494A1D8E28EE54
SHA-256:	11D5D62896103DFE4C6C6DEF6CB2587D0BBF6E0BF66D20622981C7456CE465C4
SHA-512:	D5C40D16F284F33B266D90901367C01D3720409A8089399FFCE3C12F57DD9AC31EA5B10FE8F02E20AA4295A4A26CC152E3A26FE8DA58B0F82694086690DA52C7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........e......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jul 19 19:22:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.995873306787674
Encrypted:	false
SSDEEP:	48:8X2d4OTYKLRfHoUidAKZdA1vehDiZUkwqeh8y+R:8XROk6RWCy
MD5:	C47D9EB2D72DB7EA93298AEAF889F004
SHA1:	ABACF3BD381DB3310B6C811F4A5C5EBBE82C162F
SHA-256:	60C3B46BB9E44E017BBA0FEC9AC19F778A150681336C326DC34DAB76CF5F748A
SHA-512:	001848BA7BCBEEC06167954033E3C04E20D440AE567768714CE013BC31FA28210F66E511CDD7D3DC5F830A144C8EC4E446869BDEC93533FEA9D9DD7986FDBBC3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......a....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........e......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jul 19 19:22:30 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9857801300164386
Encrypted:	false
SSDEEP:	48:8M2d4OTYKLRfHoUidAKZdA1hehBiZUk1W1qehGy+C:8MROk6R29my
MD5:	C7E655AE0FC2BBD5860C59A4BDA6B74F
SHA1:	96ECD376626EC49B14845EDAC8F7A1FAC7789617
SHA-256:	8868B7C44A89792D4C8A58466F6DE4241E701CD23500296FFE3364BBCAC0D948
SHA-512:	EA03E50D7551547CE02F2D87BA122970BB5FF8EDB605ECAB53826E9B7F8AF22FEAEE72442720E646DBD9D228F4EBF867A0E3AB550B8DC785012CDF7037A010F5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....]a....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........e......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jul 19 19:22:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9965865899674595
Encrypted:	false
SSDEEP:	48:8n2d4OTYKLRfHoUidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbUy+yT+:8nROk6RIT/TbxWOvTbUy7T
MD5:	DCE24F3BE109D0CC7D02EF06840A6C9D
SHA1:	6B13E316172A0474841B4DB6B395226A8E01238E
SHA-256:	98E03084A6162450DF254077F96AFCA1497483E26DCDC1C60F23EC4B458BBC18
SHA-512:	BFF75BB10AD4AB1FC64D2B51F37493FC9047C18E5CCE273B455C8D5911EA292679071A314276F9D13271AC0A2CF4A24446D91F8D61D42A8F17BF16D8F3811760
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......a....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........e......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10210
Entropy (8bit):	3.984305871136797
Encrypted:	false
SSDEEP:	192:pJMgoZuBEiEDI43JfoiPM8sCIZtFW/001rYhyv73KolDBUAUWGFIhJAbn5D0pZ:3hmDI45PCCIbubasOWUAU4MThOZ
MD5:	8FCAFE50B06B8F16667CF8D9D4550618
SHA1:	EEC8413B216AA2D9EB5E1AFBB7F61A6B188A05EC
SHA-256:	D67A7330DD75C25F79696790214D4F2CB05F0CD79E792ADDDE0A8B272DF64A31
SHA-512:	13E1707345E50D367FDA882420E33EDC67BEA0017FA8F87CBCFFC3BF4412D9E9CCE24BB465B32D94AEE398C315AF0009AFEE2ED4B8A2801F54CE8FC2A80A7D0D
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/6db1962dd31c45afbc8d5f9a804730c1?v=fab1a644&t=w1920hq
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #000;. }.. .cls-1, .cls-2 {. stroke-width: 0px;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. <g>. <path class="cls-2" d="M132.88,108.88c-.27.05-2.42.46-4.68.52-4.02.11-7.53-1.5-7.56-4.4-.05-5.03,5.03-7.79,8.78-8.56,1.68-.34,4.92-.72,8.15.07l-1.87,4.49c-.54-1.22-1.92-1.25-2.49-1.26-1.37-.03-2.5.33-3.34.72-1.9.87-3.55,3.66-.86,4.73,1.49.6,3.38.12,5.36-.19l-1.49,3.88Z"/>. <path class="cls-2" d="M211.3,96.33l-3.23,8.78c.05-.88.22-4.37.33-6.39.05-.83-.14-1.46-.53-1.88-.48-.51-1.12-.51-1.13-.51h-7.2l-4.71,12.79h5.23l3.34-9.06-.39,9.06h8.76l4.71-12.79h-5.18Z"/>. <path class="cls-2" d="M181.42,96.33h-6.03l-4.71,12.79h12.1l1.56-4.25h-6.07l3.14-8.54Z"/>. <path class="cls-2" d="M159.12,96.33l-4.71,12.79h13.07l1.27-3.45h-7.21l.53-1.42h6.73l1.16-3.15h-6.73l

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1774
Entropy (8bit):	7.182497231370724
Encrypted:	false
SSDEEP:	48:w/6suXBKHJmLHPFn+rOVs3BKxK66mZveYl+:wSsyBKHJmB+aSBKxuaei+
MD5:	D278BD74EAA47C6A11F8509465911FC0
SHA1:	7B86FC7E0D2F2B0A9E4AEC05152FEDEC423EF024
SHA-256:	FBFB5037E68DF3FE407FB09019AAF81D9A373D1AB73424EEA8ACFB413F29313F
SHA-512:	06779131876F99D5162CB33C0AD0EB146EB46EC7B8DADB4C0027A520B2B8685A3F0A9C13335E9DA8FFD24BFE9CA2EE9EFD5908B06568E4F54525B282B5240F17
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/sc-static/img/favicons/icons_m_192x192.png
Preview:	.PNG........IHDR.............R.l.....pHYs.................sRGB.........gAMA......a.....IDATx...Kl.u.........@)Pm..-."b(/...0....@L../..D.].G.^...%1j.".B$Q.<.....v............$..a.;i...........#... .M..N.1..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5....fiN{....[.0..TA3......B..X.Q..U..TJ....7w...K.{MN.u...].>.o..]...u....;:.c..4v....8.....=33...G.xh.f..{.M.3qcR..t4....C...u.....yMN.U...%.mj.p$.mk.Wh.[t.......}.....A].x..F..@..4k.x..)......../..^..>Q.s...l..Ww .....k8..D.7...G...AmX?.\sV'O.....I.F9...J......w^.=..p.%.#..# ...i.Z..v...CK.../u.........].z..m.....^.<>..$.@..a4.....]..P}]..,9.B.X..1e...{...nd....rc.@Uyb......=...........2m{..=..r#.T.....{~X.oRWW...P......n.Mk..\|SU.@.Z.x.6o^...e..@U[..}v...r..@U.f3z2...\...P....k....6....U/..:...}.~....&.,.P+..X.Li....jB[k......{.UJ...P........=%.@...[....xQM...jF.rl..pM.t.o..5...!.....t....j.%].V*....pag.`~...5.",z,.....d..O.K....[.&f.J:).USS..>\|\GGO.X,.......9'..

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	215185
Entropy (8bit):	5.5415174241519
Encrypted:	false
SSDEEP:	3072:u8ICuKurL5pQlXSpJ8X0LIOwSxl9kLEiLnyfJBwa4BbwJQNebmS7U:Xp2L/QlkJ9HwSp74BbwJQNkmSQ
MD5:	400E5B40E6E827B8679C5E7D574C31EF
SHA1:	EA273447393BFF13E81E4EF509CEDD86CD5CED7E
SHA-256:	58570364C68FD154046F0298189A4F720B076E6EFCE794F13F2A15457520C479
SHA-512:	5E8F5EE069831EC8216500802EF28BB2891133DC1F4B7A02E7A88CCE5B23802A36603E2AF99765B6AEAC87D57C8E323584FE43F8A3885A249F70929F8EA9E66D
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-9488543&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-9488543","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	5.2130920840468065
Encrypted:	false
SSDEEP:	24:Dt4An1AoZ9AnnP49AnqQTsJbAnRpkoY+VYzjgtTeneofK5gP+eBBkZlB4BRJXP8q:D+A1As9AQ9AqQYJbAJEjaRjiTRBCZe
MD5:	D801E9936920D12430A41C6621827EDB
SHA1:	A2AB5AA117B8475F21908751E0EFF6D25D862EED
SHA-256:	5A2D85276F3BB00A21502841E1591699056969A7066B92A9ECEDF9820872DBF3
SHA-512:	5D6FF6CD6139FAE1F2FE6FF2BD2EDF053AB3C71738C5F11EF4BBEDA527ACD1F5BBDD92BFB0740DBB06DA9E776198C6F24456598B20367EE78C9DD74B7647F04E
Malicious:	false
Reputation:	low
Preview:	#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 {. /* Style the links /. / Remove default bullets /. / Remove margins and padding from the parent ul /. / Style the caret/arrow /. / Style the caret/Text /. / Create the caret/arrow with a unicode, and style it /. / Rotate the caret/arrow icon when clicked on (using JavaScript) /. / Hide the nested list /. / Show the nested list when the user clicks on the caret/arrow (with JavaScript) */.}.#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 .link {. position: relative;. width: auto;. float: none;. vertical-align: baseline;. display: block;. color: #1976d2;. font-weight: 400;. padding: 0px;. line-height: 0.5;. text-align: left;. margin: 20px;. font-size: 18px;. letter-spacing: 0px;. text-transform: none;. white-space: pre-wrap;.}.#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 ul,.#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 #myUL {. list-style-type: none;.}.#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 #myUL {. margin: 0;. padding: 0px 0px 0px;.}.#

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.212566910755069
Encrypted:	false
SSDEEP:	48:DeA1As9AQ9AqQYJbAVEjaRBa29JSl6sRj12Zy:bKX7qPkVmcBBSYkjZ
MD5:	AB66811282F00C53FF9ABD92A24E6655
SHA1:	349FB68EFF39DEFEE85AFAC1884E61DA8F1D0A61
SHA-256:	F65864633E442C4DEBDEEA61EAC07877311038061C4EB43964AF0910CB7387D1
SHA-512:	2B505F36401DECCCF72BD5C5F876606847F4E0E46307BB68BA3CE9D5EBCBD146C4831786109B6C19DFE832A046C9401222A4C539B760BE4447E0B540801D9E61
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/EWuuX_o4U-xRldBOqT-LYFc69fQ@sn9p0ljv8dushqgktXFohVVCLNU/Imtq1OAS7QR5--1wWyrbg1YVU2c/NJ-2jv853v7oWvrBiE5h2o8dCmE.guide.css?sha256=9lhkYz5ELE3r3uph6sB4dzEQOAYcTrQ5ZK8JEMtzh9E
Preview:	#pendo-g-Imtq1OAS7QR5--1wWyrbg1YVU2c {. /* Style the links /. / Remove default bullets /. / Remove margins and padding from the parent ul /. / Style the caret/arrow /. / Style the caret/Text /. / Create the caret/arrow with a unicode, and style it /. / Rotate the caret/arrow icon when clicked on (using JavaScript) /. / Hide the nested list /. / Show the nested list when the user clicks on the caret/arrow (with JavaScript) */.}.#pendo-g-Imtq1OAS7QR5--1wWyrbg1YVU2c .link {. position: relative;. width: auto;. float: none;. vertical-align: baseline;. display: block;. color: #1976d2;. font-weight: 400;. padding: 0px;. line-height: 0.5;. text-align: left;. margin: 20px;. font-size: 18px;. letter-spacing: 0px;. text-transform: none;. white-space: pre-wrap;.}.#pendo-g-Imtq1OAS7QR5--1wWyrbg1YVU2c ul,.#pendo-g-Imtq1OAS7QR5--1wWyrbg1YVU2c #myUL {. list-style-type: none;.}.#pendo-g-Imtq1OAS7QR5--1wWyrbg1YVU2c #myUL {. margin: 0;. padding: 0px 0px 0px;.}.#

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6047), with no line terminators
Category:	dropped
Size (bytes):	6048
Entropy (8bit):	4.9454498621633975
Encrypted:	false
SSDEEP:	96:3HiZUm2rAvMOR/Q5IM7CQ5vgHPtDK9oAzHOSjHP0NHi8BUXpYUA45X/tqAVpxM:3MUm2rAYWM7LSHPt29/a0WHQXpJB5X/6
MD5:	9F74E2798D0C1A85A6D7A6896B5E2664
SHA1:	E2D1D7ECDAE24AB0404F10A74396E7C00F46E8DC
SHA-256:	26448ABFF144D0A5F6B0FD015E99B85229995030E9F760E88F137773E0D28CDC
SHA-512:	122A43B7BD1076271B5223E83F7F0B060F4C0633FD698D714BD8EF406277CC2B129C30AE0A1B7066C31A969BAB8BE1E26EFD7E9CE2944EEBA5FEB11177A7A77C
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("67e9EH2nmGI2q8_wiKCr04V4ODs", "8kb8zIKou5PV4zS4XX0acvJnkAY", {"props":{"id":"pendo-g-8kb8zIKou5PV4zS4XX0acvJnkAY","data-editing-id":"47c2359b-6602-46c9-ab9d-333b8e7c2cd6","data-layout":"AnnouncementsModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-fe8cc4c5::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-fe8cc4c5::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22096), with no line terminators
Category:	downloaded
Size (bytes):	22096
Entropy (8bit):	5.1556985111456
Encrypted:	false
SSDEEP:	384:BX0ZDdRzUjTFCa4oj2AlF8RrLPrGH/u2d2Cw25f80m92Nfx0K2Z2F2I02Kft0PEM:KZDdpUjwaPSA4gHMAZesNW4kacLi
MD5:	4EDDEEC95AFDA969B3D1B2FB970C1EB1
SHA1:	DA4C64223B6FF380F03AE2506DF526C22A9103D9
SHA-256:	42E2DD427DD9F9D45367C880C68289114B7DE56373FF8BDC664EA0FA3CE77880
SHA-512:	2D431F9BDB08263AB0BC0A596F13E35A136318DA42190EC08712FB1CF963A82EC56FD04231084C876F57853F5930E25F65B1F9D451BDDF140134C7C05F89A0C4
Malicious:	false
Reputation:	low
URL:	https://pixel.byspotify.com/ping.min.js
Preview:	(()=>{"use strict";var t={228:t=>{var n=Object.prototype.hasOwnProperty,e="~";function r(){}function o(t,n,e){this.fn=t,this.context=n,this.once=e\|\|!1}function i(t,n,r,i,c){if("function"!=typeof r)throw new TypeError("The listener must be a function");var u=new o(r,i\|\|t,c),a=e?e+n:n;return t._events[a]?t._events[a].fn?t._events[a]=[t._events[a],u]:t._events[a].push(u):(t._events[a]=u,t._eventsCount++),t}function c(t,n){0==--t._eventsCount?t._events=new r:delete t._events[n]}function u(){this._events=new r,this._eventsCount=0}Object.create&&(r.prototype=Object.create(null),(new r).__proto__\|\|(e=!1)),u.prototype.eventNames=function(){var t,r,o=[];if(0===this._eventsCount)return o;for(r in t=this._events)n.call(t,r)&&o.push(e?r.slice(1):r);return Object.getOwnPropertySymbols?o.concat(Object.getOwnPropertySymbols(t)):o},u.prototype.listeners=function(t){var n=e?e+t:t,r=this._events[n];if(!r)return[];if(r.fn)return[r.fn];for(var o=0,i=r.length,c=new Array(i);o<i;o++)c[o]=r[o].fn;return c},u

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25548)
Category:	downloaded
Size (bytes):	869467
Entropy (8bit):	5.447411549378595
Encrypted:	false
SSDEEP:	12288:VVSmkdZ0R1b0CdwN0pt/ORUZXxqSLrmorvmmgTVRqMor8fs6Sso65horDQ:6mkIR1b0Cdwep9ORUZXxl7q/ZCXQ
MD5:	78FB64616C1EDF674C5EAF6424080C39
SHA1:	CCBE3643CCD157BBEB0BE79EB26F6830DC6864A1
SHA-256:	000D5078B1C07A402CE060D52D3909C279B327D15AEDFE407F337F56E1E4C087
SHA-512:	4FFC7E375FB8A03155034FBE127F66BD872E79AE1E13FE774E5E44D00D49079EF2A5AC23DB60534ED2C37CC9383AEC2346AE851CB5C1EEAA4F1DD70CFAE23922
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/s/sfsites/auraFW/javascript/WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41/aura_prod.js
Preview:	!function(){"use strict";if(globalThis.lwcRuntimeFlags\|\|Object.defineProperty(globalThis,"lwcRuntimeFlags",{value:Object.create(null)}),!lwcRuntimeFlags.ENABLE_FORCE_SHADOW_MIGRATE_MODE){const{assign:e,create:t,defineProperties:n,defineProperty:l,entries:r,freeze:o,getOwnPropertyDescriptor:a,getOwnPropertyDescriptors:i,getOwnPropertyNames:c,getPrototypeOf:u,hasOwnProperty:s,isFrozen:f,keys:h,seal:g,setPrototypeOf:p}=Object,{concat:b,copyWithin:m,every:d,fill:y,filter:E,find:w,findIndex:v,includes:T,indexOf:N,join:M,map:S,pop:C,push:L,reduce:O,reverse:R,shift:D,slice:$,some:H,sort:I,splice:P,unshift:A,forEach:B}=Array.prototype;function x(e){return void 0===e}function _(e){return null===e}function F(e){return!0===e}function k(e){return!1===e}function W(e){return"function"==typeof e}function K(e){return"object"==typeof e}const U="$shadowResolver$",j="$$ShadowResolverKey$$",q="$shadowStaticNode$",G="$shadowStaticNodeKey$",Y="$shadowToken$",X="$$ShadowTokenKey$$",V="$legacyShadowToken$",z=

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8840
Entropy (8bit):	7.952708315755603
Encrypted:	false
SSDEEP:	192:cSSznJ0rA+80LkYqVailsgmI41zdd4Umo2LXiO09T0nT1r18q7JG:bCisH0LkYqgiqgW1Zi3ozAnT1r180E
MD5:	BA2DDA728710EC0BBFD7EB92EDE3A030
SHA1:	320D1BED916D90AEAA444A95469866C39A9D2500
SHA-256:	B7D5D06D98B736F09B48650AEBB85A4F9D53284A78A42A4E138E5E45CD072D27
SHA-512:	9FA1D32DC4A960E83D2EC55EAE9531C0B7EB74F22792C85BA0C2F563E780C3EE0A025A4B3D158F6D8E9F00A7687A264FA4963495E6B8DB0731978C90AF634901
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/2e6624e57dcf401aba62439ed1bf9f1f?v=4c53bcb4
Preview:	.PNG........IHDR...,...,.....y}.u....pHYs.................sRGB.........gAMA......a...".IDATx..=p..._.B.(.J...@..ePt...2.39...#B.9".:..........t....H.L...2...3....U.@[..{.....c>zf.{...D.Z...........0..FL.N......)..W.........o......!..p....-....Y..<$.9....=........D....>)->...hJ.. 1.F..)..GQ.........V..a.=RQ<..>.'JE....!..^\|._'.......q..~.#.X..%r3b.......>Eb.^.y@ . X^3......iq.....tN%;.......7^..!.......[mv.9..E..........LFQb..e.........} XN2.)y.S.M.T].C^..\..G..]....r.._.!R.0./D^N..j.#RH..'M...A.f.&.`5..\|...8Ge.3t..m.~..jc.@....T@.RFD].....-T..G.hT..H.a.W...2....n.p.x...v.T...:Z.^...kH.Z.H.....v.`Y.B.N...;.s.p...U...X.H.....b9 X..P..........$.&.L..p......'..$..e.[.`e..7...".l...h@.@..r..9.z.....%.....E.O.I}}..B.a-"M..O.#...i...a.B..?.=I.G..g.@.t9.F.O..^..... &.`M....o..=..Q..b.:?}.i".8..`....T.W...n...s.....<..W.1.....{[....=.........m)]I.6W.[.am....%T.......Q.._%.= ......}...5j.-J.G)..m.b....}....?........Z.....3....5)b.)......1..&i.H\|..N.)a...

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.136248672727249
Encrypted:	false
SSDEEP:	3:YIzIX/GZR49aLVAL4n:YIyGvvVln
MD5:	905B1FBB26E082557FF0B3B3553CDA6C
SHA1:	8FE0790D6026998BDB2C9FFA3B915952E613E1B4
SHA-256:	F249B63CB2FCB66B47E86F906C98F8FD912E82DD035B4E53D7E72FC1960CFD16
SHA-512:	284567E83A5C15761498249B27B4B700AA081A65B858F29458E5D0F3DEBDEA93DD5CFAD94EEFAEB43837E70CC288B2A34EA168D2771CB57C993E269C287097CE
Malicious:	false
Reputation:	low
Preview:	{"message":"Missing Authentication Token"}

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7964), with no line terminators
Category:	downloaded
Size (bytes):	7964
Entropy (8bit):	4.730389855909094
Encrypted:	false
SSDEEP:	192:3pPqi9bVLxjzYSgTIajSgTId6d+bVExjw1SgTI58HSgTId62TMVlxjOtSgTIwxSj:3InG
MD5:	F606E593DE70B94E4DABDA023D149A3E
SHA1:	2A68E0038165EA4ED7576BB0CD3FA4F881568FAD
SHA-256:	D81B23F886B51C9017EA2C6ACF3C7E07DE934A8B5A631775FA8C222335B6216B
SHA-512:	4AD36AFE79BA86721787A52EBCDF71F95589BA785467B4297F57DD4E7E4CD2AC57992C2E4A6075EDC63A9ED98FF49241E567310914AF5EAAC37A554C489F8169
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/4uuEt3uKX9wbyIODIz8a17xBxvE/aHJlFh9a6Rr2xV35WdhsnJSY9tI/KmjgA4Fl6k7XV2uwzT-k-IFWj60.dom.jsonp?sha256=2Bsj-Ia1HJAX6ixqzzx-B96TSotaYxd1-owiIzW2IWs
Preview:	pendo.receiveDomStructureJson("4uuEt3uKX9wbyIODIz8a17xBxvE", "aHJlFh9a6Rr2xV35WdhsnJSY9tI", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-8846525a:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-aHJlFh9a6Rr2xV35WdhsnJSY9tI","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25548)
Category:	dropped
Size (bytes):	869467
Entropy (8bit):	5.447411549378595
Encrypted:	false
SSDEEP:	12288:VVSmkdZ0R1b0CdwN0pt/ORUZXxqSLrmorvmmgTVRqMor8fs6Sso65horDQ:6mkIR1b0Cdwep9ORUZXxl7q/ZCXQ
MD5:	78FB64616C1EDF674C5EAF6424080C39
SHA1:	CCBE3643CCD157BBEB0BE79EB26F6830DC6864A1
SHA-256:	000D5078B1C07A402CE060D52D3909C279B327D15AEDFE407F337F56E1E4C087
SHA-512:	4FFC7E375FB8A03155034FBE127F66BD872E79AE1E13FE774E5E44D00D49079EF2A5AC23DB60534ED2C37CC9383AEC2346AE851CB5C1EEAA4F1DD70CFAE23922
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";if(globalThis.lwcRuntimeFlags\|\|Object.defineProperty(globalThis,"lwcRuntimeFlags",{value:Object.create(null)}),!lwcRuntimeFlags.ENABLE_FORCE_SHADOW_MIGRATE_MODE){const{assign:e,create:t,defineProperties:n,defineProperty:l,entries:r,freeze:o,getOwnPropertyDescriptor:a,getOwnPropertyDescriptors:i,getOwnPropertyNames:c,getPrototypeOf:u,hasOwnProperty:s,isFrozen:f,keys:h,seal:g,setPrototypeOf:p}=Object,{concat:b,copyWithin:m,every:d,fill:y,filter:E,find:w,findIndex:v,includes:T,indexOf:N,join:M,map:S,pop:C,push:L,reduce:O,reverse:R,shift:D,slice:$,some:H,sort:I,splice:P,unshift:A,forEach:B}=Array.prototype;function x(e){return void 0===e}function _(e){return null===e}function F(e){return!0===e}function k(e){return!1===e}function W(e){return"function"==typeof e}function K(e){return"object"==typeof e}const U="$shadowResolver$",j="$$ShadowResolverKey$$",q="$shadowStaticNode$",G="$shadowStaticNodeKey$",Y="$shadowToken$",X="$$ShadowTokenKey$$",V="$legacyShadowToken$",z=

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=8016&time=1721420609929&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 495 x 290, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	290275
Entropy (8bit):	7.978099471357226
Encrypted:	false
SSDEEP:	6144:N8IQEk0FyR2yDW3WCjAF4bYKCKY/6+cD1vqaiP55etc0G+bK:efZ0FRu5CEUl8c5i7P55PgbK
MD5:	69BAE65A673497DED41A00B661685902
SHA1:	DA2B42A51FC902EF5DD4726117EA5FBF3CE13994
SHA-256:	AA0442C8018871707CDA79493F34106AFF0810D32CF26812E41C067032C838DF
SHA-512:	0054D2A4D93198176067343B0E3B18748CDE18517003AE30C4D6A943CEE982242FDD2704CB91356CD6E980CC03637202691EF06ED9AFDB48C690C1CD6942D44A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......."....._.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 25.0 (Macintosh)" xmp:CreateDate="2023-11-02T15:05:11+02:00" xmp:ModifyDate="2023-11-02T15:15:15+02:00" xmp:MetadataDate="2023-11-02T15:15:15+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7b95a35e-28ac-47d5-ab19-2ec178f09d69" xmpMM:DocumentID="xmp.did:7b95a35e-28ac-47d5-ab19-2ec178f09d69" xmpMM:OriginalDocumentID="xmp.did:7b95a35e-28ac-4

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=326790021.1721420608;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F?
Preview:	<html></html>

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3193)
Category:	downloaded
Size (bytes):	58073
Entropy (8bit):	5.523973579049098
Encrypted:	false
SSDEEP:	768:+GnIhQKwkt9Fc1ufB8912kSmPi43aRVBBDCqmS+ZyA70Ml9:+GnIhwAFHm93Z643aLiAIl9
MD5:	E86947F770F9D127BE5AC8CF997C8011
SHA1:	FC0D1E7776C15A29BDC5577F234FE63C3EF38B36
SHA-256:	3806CE9B03B3F776523AF86B105352F18AE84D4427EB4154B1FC2C054352188D
SHA-512:	5EFEDADFD093625AE59CE7E6C867EC64DE31B03F0CECC165C274D575BED3B09A656E2B46986C47BB89BCA410A681E869A000E7C1879B2E948CD4C4D6AD621B09
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion.js
Preview:	(function(){var m,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},ia={};function t(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=fa;for(e=0;e<d.length-1;e++){var h=d[e];if(!(h in f))break a;f=f[h]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3816
Entropy (8bit):	4.669796403431544
Encrypted:	false
SSDEEP:	96:cJ5mIYk9OKI3m+TeQ4+w5iE5x2iQyim28LFayhDq6vbsd8TSMa+AaPnsWF2DxP:cJ0e9bI3maGpt2gjXe8TKGFkP
MD5:	921C6930E7DC6FBE13DAA24CBB6C923A
SHA1:	DC77EA0BDE29F8C598761EBD93FC78688E31681B
SHA-256:	A4349C5C1A20853454239CC6AFF126640C11338AC20D73F54571C35B06496D4C
SHA-512:	5ECE1354DE67D81862AF0D3FB1BD97951A1AC2706D17A7CBFAC2681C6CDB61DB47996274025B893FFC3B7CBD50AC9F62081C8965568A464C9EADC7CF9B4E51E2
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/b0d281d8bb0e4b8a89ee75e7f1de6bbb?v=a9fa1595&t=w1920hq
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <path class="cls-1" d="M57.97,41.56v54.84h16.25v-42.66l-16.25-12.16h0Z"/>. <path class="cls-1" d="M51.4,46.48v50.03h3.37v-52.58l-3.37,2.55Z"/>. <path class="cls-1" d="M44.82,96.22h3.37v-47.64l-3.37,2.41v45.23Z"/>. <path class="cls-1" d="M38.66,96.22h3.37v-42.83l-3.37,2.57v40.27Z"/>. <path class="cls-1" d="M77.29,66.21v30.31h16.26v-18.12l-16.26-12.18h0Z"/>. <path class="cls-1" d="M32.08,70.74v25.49h3.37v-27.9l-3.37,2.41h0Z"/>. <path class="cls-1" d="M25.5,96.22h3.37v-23.08l-3.37,2.41v20.69h0Z"/>. <path class="cls-1" d="M19.33,96.22h3.37v-18.28l-3.37,2.57v15.72h0Z"/>. <path class="cls-1" d="M135.25,71.98c-4.82,0-7.88-2.73-7.88-8.01v-10.26h4.02v10.26c0,2.89,1.45,4.49,4.02,4.49s3.86-1.6,3.86-4.49v-10.26h4.02v10.1c0,5.61-3.22,8.17-8.05,

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14880, version 1.0
Category:	downloaded
Size (bytes):	14880
Entropy (8bit):	7.985410829281173
Encrypted:	false
SSDEEP:	384:msMhHWtN6kDV1bhxh90tSZZOqB/dXg54gJ7JX6+BP+d2:/EHWSm18gdXSI2
MD5:	819AF3D3ABDC9F135D49B80A91E2FF4C
SHA1:	0FD9F29FAA386A9C8DE328F799D2698948ED3D25
SHA-256:	1491DE1B31182D38593BCF660C99BC6018AF8E192D91663F67EC9D045A3B5CCC
SHA-512:	FC681A8936D05463290945EED1065A2A5E3E4374900A1ACA1A728F900D276B801B1397D74873C1CA69680A9453F8910D677F41C81AA25CC6CE747F7AD611303A
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/fonts/open-sans-v18-latin-600.woff2
Preview:	wOF2......: ......n...9..............................t.`.....&..4.....l..[..N..6.$.... ..D..x....._%....[...i..E.q.......=A.....v...'Ur.5=...8..J...uV.h.H.....?vp.=.n.#.Z6..[.+.....dY.....~.8......y...Y.7..eO.../g.#49....O.{g.Q.&...aU`..UJ..UI..t..=.H!~.+)...'.Em...%.fykY.s..c3.[..~^.&.T..N....,ll.......81UW..:..T]r...s..>.....[.._.bvx......U.e......j.g..g..l..I.;..K..... .J8....B......\t.....B.hVG....T..X.9...5-.).....R...nW:....{..GL.r..h.......$u".....R...O..l3#&..H}.-tt...2.j......OU...L. ...H;.P.].N..p..Fe.......oY.l}t.\....[...i...l..r.C....&.....$)..`Y...,.....y.w..Y..\.....Q....n.w..;..`.?`.....K.DW:. .R.Dolf..9.r .@.k..63..A$.}. .e..=%........^9.2+)j..3..P..SDPl{.....l..X...2.N..`...PX......9MW.!...I.....B...8..u.........J.:Y.xBR=)....l....]q.0..B..8...`._.3.m.....o3(o..w@N..2.f...........g...A..)3...)E...=.K=.1.q.....y....{.h.e%.M.@!.s<..I>[.........4D.r....CP*J.:Ld...s!`.+.Y...A...\|.8D...@.......:...>.^..'.v..9.#.........{..:.Z.........

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4840), with no line terminators
Category:	dropped
Size (bytes):	4841
Entropy (8bit):	4.901369197948163
Encrypted:	false
SSDEEP:	96:32ZQmarUORFQ5IM7MQ5vg12itDK9lzHOSi2hkDP0mqi8BU3Z222Y:3AQmarxaWM7JS1rt29laftrqQJ22v
MD5:	B3C2773ADC59068A69AB1A0CFABD07F6
SHA1:	067F4F2F22E701887E50D6465818559DF65CD2F6
SHA-256:	D5C34C8ACEAA2678CA7995B83D5197F04AF6F7F8C8E4C39C973F54180322984F
SHA-512:	2D8C20A1904DA04520034BE6EE6EA52D6CA29D78795F6C70F6367B8074D882CDAF30830C7EFF082FBB60C129E9719E55AB2EFB57B9040B06B5FE297EA1D7E894
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("dP9u1Yj5gYondtURXeRiqcUqNWc@sn9p0ljv8dushqgktXFohVVCLNU", "HSnzFk61g0hDIbg3_i1hMHRvVR0", {"props":{"id":"pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0","data-layout":"SandboxModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-e9562ccb::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-e9562ccb::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-c21

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (372)
Category:	downloaded
Size (bytes):	28747
Entropy (8bit):	4.827937146352761
Encrypted:	false
SSDEEP:	384:95f0j++ArEPSIDqvnIDyYTnBrbkPvVY5JY+n:/0j++A4PSIDqvnI+YTBrQPvVwJjn
MD5:	3F05A51A1E5260F4179DB8CA65307A6A
SHA1:	2148B3DDDCA54F413E8BA50AA48B53B400BD99B8
SHA-256:	C374EFBA54279628793F04E10EBF5D0C1B4DBC36B3F4132D9235F01D64CA5C8E
SHA-512:	5C9DE7B561E5E34A2912213EE9D1A17CAF4D00A38210BAE98E205140AB6EEAE25FF4F962F1763E1E2929EEB945CD8E0494B485B738F1F461A01EA97B3CB49EA2
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/assets/font-awesome/css/font-awesome.css
Preview:	/!. Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). /./ FONT PATH. * -------------------------- /.@font-face {. font-family: 'FontAwesome';. src: url('../fonts/fontawesome-webfont.eot?v=4.3.0');. src: url('../fonts/fontawesome-webfont.eot?#iefix&v=4.3.0') format('embedded-opentype'), url('../fonts/fontawesome-webfont.woff2?v=4.3.0') format('woff2'), url('../fonts/fontawesome-webfont.woff?v=4.3.0') format('woff'), url('../fonts/fontawesome-webfont.ttf?v=4.3.0') format('truetype'), url('../fonts/fontawesome-webfont.svg?v=4.3.0#fontawesomeregular') format('svg');. font-weight: normal;. font-style: normal;.}..fa {. display: inline-block;. font: normal normal normal 14px/1 FontAwesome;. font-size: inherit;. text-rendering: auto;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. transform: translate(0, 0);.}./ makes the font 33% larger relat

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/163/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.272055208874201
Encrypted:	false
SSDEEP:	3:YRKOAzTYsHHntDDED:YYZDDED
MD5:	6BEC19AA68782F0B7196AA28CB33C215
SHA1:	3D0EA55651CBC31B69A5A4E4B348E1C57B21A66C
SHA-256:	8F0F69521E93E5477CCA09618D61267287C8F442475BB06765FE7A487F4195E7
SHA-512:	7BC76E02E54AA98182C108D891CA453FC7851C1A049BD080202524A8DB5156E3AF6C84C499787C2456696D2D44AA0DC286440F893D82E533D8AF551617699E96
Malicious:	false
Reputation:	low
Preview:	{"token":"96477b91-ef22-4153-8b31-1a53faffa665"}

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8840
Entropy (8bit):	7.952708315755603
Encrypted:	false
SSDEEP:	192:cSSznJ0rA+80LkYqVailsgmI41zdd4Umo2LXiO09T0nT1r18q7JG:bCisH0LkYqgiqgW1Zi3ozAnT1r180E
MD5:	BA2DDA728710EC0BBFD7EB92EDE3A030
SHA1:	320D1BED916D90AEAA444A95469866C39A9D2500
SHA-256:	B7D5D06D98B736F09B48650AEBB85A4F9D53284A78A42A4E138E5E45CD072D27
SHA-512:	9FA1D32DC4A960E83D2EC55EAE9531C0B7EB74F22792C85BA0C2F563E780C3EE0A025A4B3D158F6D8E9F00A7687A264FA4963495E6B8DB0731978C90AF634901
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,.....y}.u....pHYs.................sRGB.........gAMA......a...".IDATx..=p..._.B.(.J...@..ePt...2.39...#B.9".:..........t....H.L...2...3....U.@[..{.....c>zf.{...D.Z...........0..FL.N......)..W.........o......!..p....-....Y..<$.9....=........D....>)->...hJ.. 1.F..)..GQ.........V..a.=RQ<..>.'JE....!..^\|._'.......q..~.#.X..%r3b.......>Eb.^.y@ . X^3......iq.....tN%;.......7^..!.......[mv.9..E..........LFQb..e.........} XN2.)y.S.M.T].C^..\..G..]....r.._.!R.0./D^N..j.#RH..'M...A.f.&.`5..\|...8Ge.3t..m.~..jc.@....T@.RFD].....-T..G.hT..H.a.W...2....n.p.x...v.T...:Z.^...kH.Z.H.....v.`Y.B.N...;.s.p...U...X.H.....b9 X..P..........$.&.L..p......'..$..e.[.`e..7...".l...h@.@..r..9.z.....%.....E.O.I}}..B.a-"M..O.#...i...a.B..?.=I.G..g.@.t9.F.O..^..... &.`M....o..=..Q..b.:?}.i".8..`....T.W...n...s.....<..W.1.....{[....=.........m)]I.6W.[.am....%T.......Q.._%.= ......}...5j.-J.G)..m.b....}....?........Z.....3....5)b.)......1..&i.H\|..N.)a...

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	dropped
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcon9LuJ4vV/:T8wAD5ABwXw+krfflyxzxwn9D/
MD5:	5C4B768820444AFADEAC19D7ED7902AE
SHA1:	B3FD3A19CE89627DAB0129976956FD3EB11749C8
SHA-256:	E0C289FAA80333EFF728B8BDBBF10B11DEC1A6E1938A444E1CC41BE6744E96D2
SHA-512:	4664A19499181D9D8C1A60E2E727293423EDC33B3359A3A585BE215BDE914C4425473E8532A7BB2E415C845057E61F1833C1AE6B4DFCFC474BFAF7E27BAE017B
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	dropped
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5275
Entropy (8bit):	7.93236393572726
Encrypted:	false
SSDEEP:	96:9FgNyreKWtNL9oFGX4Tp4yvNF13gfckZqei0SigtAtX:0NyrfWt6GcrpocoqedVd
MD5:	23B601544D9CE3284CEF76CFD145F8D1
SHA1:	C4F853E1EAA4FEF2478A96329D3E48A2B1006652
SHA-256:	343E3504ABC5F09344FB16CB3CC1D77B696611D03ECFB1941674A14E02D19ABA
SHA-512:	96F641DA5097D9DEE77ABBC7D3C970BE7F55B88DE07FD32539AE5DD85CFBA1DC291D71B91DDB7E45A564D463BBB689E80DD4FC86FB7CF13345A7D320388B6D6A
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/05ce22f3f02a4d20874334d3a17ced9b?v=4af23d84&t=w1920hq
Preview:	.PNG........IHDR.............R:W.....pHYs...#...#.x.?v...MIDATx..=p.E..U..Af.s.5)TiEb2..d..$.....tD. )....M.\|....ZUA.W...K`\................RI.iw......S..aj!..:S..TW...O=...I...r...{...............&.....g.5....J....m..).Te.-..<.R^Z3.:,..(.`M ..-...&...\.s-\|..ET.5.X.<.M....D%..g....X8}!.=}...$..>....h..S$.S.PWa..u.h6....(.#!.....$j.).`i.....5....S..'.q8z;.......,T.g..D..Z...N3$ZL.1.)...xZ'.ILA.H)....[.k$1.)H...9.!...Q......ayp.a.c...T.........)..i.B.3..~....H..!'I.t.v....s...RjG......!.>W?x)".>...l....[..9.V.p.7"...c....D.q...Gy.D..-\|::....HOB...0.1.V.i..Y.q..L....u...8..h..pp.oI:......h3...X...`.....r!T.8.c=?, ..u.$...S/..<'.$f.........U.B.".........."$+"b.1.0.R..1D.X@LCtmE..;..f........M5.1L.y...,..y..Ky..K......2...F.w...O.al..e.-..C.F....G.b\|.$.....'W~ny...c.w[to.J?w:/.......Rc".H\y.G...........7..7E..n.....&#v.....t`e..........E..\| 66..uj8.........lm})&._DS.....0.P..h.n...T.,.....-..AL....M...:S..`u....@A.t.......#f_J..t>.n.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 104132
Category:	downloaded
Size (bytes):	45159
Entropy (8bit):	7.992185896542023
Encrypted:	true
SSDEEP:	768:ItWu9LMv92XHJEI6Bj/v0F1VGptvrQz9UFuqPLm1CqA7rlUnPjzWBbEh:9uBMAXHup9/FvzU9+uqPvK/WI
MD5:	B4264ECAC00918CE9C3A97A700455666
SHA1:	B4DFE9403D7809396F567EDDC01AFE29B0EB5619
SHA-256:	AE2938D596CD4F3C0463C21C087D8AFDD1897254FD86FCD4C0E011E7541E921E
SHA-512:	3B4E7564E9DF8C7E5AB256B6D2B399E00B5B71B0DF85094856B22EA2E91C9D8641D8FE08AD7513B3368A6F485E48C2B2882251FCFDD2F863B171A3B211216A04
Malicious:	false
Reputation:	low
URL:	https://static.srcspot.com/libs/galindo.js
Preview:	..........t.k..Z.&.W...g..u"5.%.zvG.wT.L.ZQ....DD.......2rU.8...4.....y..._...n5....\|j.....+...$t.l..._...q^..}.>.."..{y..Y.5sn..U..N........(..l.V&\|:..C.:r...~.r...".+..u3..[.,...>.y.z..a..O~^8....-.e...^."...(.\tMZ.Lz.7.z.....a".f........&.b..%.S.g-V3.^.K..._..U...y....?../]95..o.(/.....^.....<[.c.JZF..NOn.....T.F.....1\|.5....a.#.......=..of..u.%U.v!z..K....W.......7...$.I{kJ........K/C/...I./...;r....g.f...A>..x.....C...B..^.<....f..(......4.zN.?...).62.m.=t.l...N........L..Z.."..m.....cC..I..\|...w..]h..,.^.b..>..;.i...e[....I.....\|....<s.K....t..KJ/.}.O.4......4....f../.....pid...Y.....8...>...^Q..$]..q.[.Kh......(..~... .pX...{~d.....z...y.V"....C..&oy..\|~Z.zFQ...K\....g..ms...4..Om?x..-.y.^...#...........c."s-...+v(.(.f6.\|...b..>..l....3....j..{$......G.o.f.!\..l...3ZA.~.......^.5L..Ho?.".,....N...Azj.....3..I..fu..P.Bcq...hL...H+X_..%G..j._.]..U8...}.K.s..O..L.."9..`...#>..U..(D7.E.s..y]........W.EO.ko@b...7Z........f*.v?e.2..

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 67 x 67, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4407
Entropy (8bit):	7.927115682164262
Encrypted:	false
SSDEEP:	96:e+osZjjnIRchoVcLCkDi85Xr/w7RLGYWNudyF1VAbcI1JjDmYX4:pBnMchoYCk28dOLCNugV4/mI4
MD5:	50F3F3F4FC28201642DB4F7F4CB15D72
SHA1:	DE399181FFD1186DB7AC4F2080F90EF94A028889
SHA-256:	7B4A41DEE4F4A5049D10F158A0D14097D1DF758C948576F8BDDA5E59FFBBB70F
SHA-512:	D07043B4BC901A35AFE997E5BC711C0FF8D098892D61625E3ABFBEC648F36CC4A732D7CCDC65DDDA8CE7671A55F1917C8DC375B3AA6DBD6E28083435220873BA
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/rest/branding/get-branding-item/mOr8-D5nYFSsjtIb3j5v5AeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoielJWQXE5ZU5ld01PMmluNiJ9.lH7ehwfuTByHOlxfDxb4qHbYlgn9aW-Y.A_inabXja3k5bJWN.z0agCYdzHeQpqVSo5gev3AmVm5VQ53dSbD5_Bd98CmkUabQCHVywLtL8GCCr353yOQyspk9apmBX8OzqXhJj5i5qGuxZf-VtffU5d7Hxu2_ldU-8rF64Iu1M1y7sRaLAdTJGMTHKigKqhVssyqLiOShRUHpqt1l5cYdGzF9g6L8GpB3ZUZACXljZVyNUVElalv50_fFo5Y9Lqcg2iUo9VcizSiXE0mECYT6SwDob3TynM2Gi-kwI3Tdn9dZ_U9b6S2uvG5p7X4DzuqznYkeIpu5-Rr3GF988kjudVzc6l8QJVpMiYFeQmD_W8aPDNs-7KpDd4CBJUfZAhrhQ8WZHJNklxQusMFKqsqQsXyQ15mrc85LzM1pLZnkckhJtcrn2Cy4DZLz_1ro_67LfJj06Jn0HsdqLzI-8oe2fKakV-jlu0vXlNkwP7WUs2i2dWIuYhOoAXKSv_WjIB-G7PJzz8MG2bgQfDFN7y2Eolsq14nG7lZbcWOn8D0iH7mx2Z0UqHi-B41SQKG4N813wrxdnmWwiDRty6voa3fcoLmBilNH0yLzOD8OtBAfb6fAFx_epFsK1M8DJS2JVrXOQse4dAHvO1lbm3XJ0lbhK5t0.pa5yWBMuXeDlK8FRZtLAAA?tkn=freemanhealthsystem
Preview:	.PNG........IHDR...C...C.......s....pHYs...#...#.x.?v....IDATx.._.\W}...s..........U..r...y..nh.;-%@.OP..8..b.(..ZMJ..^....7/....S.c..Z..N\...'..-.9..b..{~.9.w.=.f..N..#].{g.....;w.D..4..;..V&G..=...6..N.....k_..3.G....=@P....z....no....F.u..<..\.v....~...}.8...n...}2<>.....".-.......v.....q..3n.j......j..[...J..4...........x...sZ.vp..h.<...2(xq@.+.....r.0.... ....d.9 .y.K..~..>yp.{......-.......w...>.4...M.?.4_.........(=..\|.....8....ao.D....N.gD....B!.{L:u....t..8.z.........Uh\.\|.x...... .S.........c...H.S.@.U4.............r.X.v.>..........Z......c.. T...N.C.....q3p.@.>...D....i.!...#..+Bx.\|..a."l.m.!..P.V.o>AE.5.f7.E.j..a On..`.........._....0...a...]..P.@.C....1....q* J..CIZ%.H..4.....}.H........,j7....yv....Q.2f \|(Bo[..v4..e"....}F.}E.?I.P.P..I...`R...%%....B,I.e...KI............@..0.]...>.@!"P....!`....U.h.V*3.F........I.a-.DZo!.......g..+......Z.IZ.8.\|&..........\|.......`..y.Z.....(.m..B......0 .B.65....h-I...f"O.$.....O .z..Z....P.i.$..Qk.Y.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35141)
Category:	dropped
Size (bytes):	592046
Entropy (8bit):	5.531809904880314
Encrypted:	false
SSDEEP:	6144:3UKc202xp2Q/QlyJbLwSbdk4BbwJQNqUm8xrlP:3pc20ANJ5m8v
MD5:	0F9494BE9E00DBC18230A75079D1ADEE
SHA1:	88337E22C0E557ED0C59F8079F494E83965D9E25
SHA-256:	DA45965EC930713B0359FFA7A5144514E4206A810311D74F8398D5965EBAFCD2
SHA-512:	3C1C90493177BAEFD05CAA4B82B15E2196F1E2B26A36E6EA915C2C060F5E6E615197159BBE5BE8C0665C1921E95CC0C7F2FEA86BEEA57275423C500EFD5BC1F2
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"749",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"ecPhone"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"ecEmail"},{"function":"__awec","vtp_mode":"MANUAL","vtp_phone_number":["macro",5],"vtp_email":["macro",6]},{"function":

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	634
Entropy (8bit):	5.26054676064036
Encrypted:	false
SSDEEP:	12:xPTsMfiIUliPD3tiWRG7vZ7I9KPD3tiWRG7vZzLZ5PyK3tiWRG7vHIQb:xoVpliPp567OKPp56znP15a
MD5:	9868C7C37984CD202F234F62702344DB
SHA1:	0B976E2B1D35A08B3B7516AEECFBA823FFCAA0E5
SHA-256:	75DC1F9D1DD4DB1778AFBE8DA85A4D979693D0C7EC46ACAC693D5C2D6832329D
SHA-512:	051522F816661B47469B69F5C30AA10DACD61F5D2B69806B3AA0F15FB758685DCDFA13049AF6D102625204F6F62CEC44178BDE70328146579398716486CB43D4
Malicious:	false
Reputation:	low
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>...<img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1737318211&external_user_id=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://partners.tremorhub.com/sync?UIDM=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://pixel.rubiconproject.com/tap.php?nid=5578&put=9b6cd5e4-ea9e-4aeb-b19c-779dd2872334&v=1181926" alt="" width="0" height="0" style="display:none", aria-hidden="true">..</body>.</html>

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.33221219626569
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyI:x2pHD5YEl5k9zyI
MD5:	1AE6B27EBA211F4CFCD99B904DA88BB7
SHA1:	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2
SHA-256:	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
SHA-512:	7DD325AB05B1A419614C2C39224C11E1388F09BCA5EA0F56811E6842B4FB243BCB53AA2BDDE00A94FBC324222B47924152C183337EB390F58C59AC80E89593B6
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2990
Entropy (8bit):	4.564727480348835
Encrypted:	false
SSDEEP:	48:c0CuJKZkFF5gcOb7eg9PCKKHghYRdk4KQUkEiqnprkLoX30a:jJmA5gcu19PCKSedlZzH0a
MD5:	B888584C3FB05C3B034414DC5AB57C15
SHA1:	375E984DCFDB3406D823C83F692B5E6C118B679B
SHA-256:	8B4A1CAD258C3BBBFFD6F7E92887F64692FBFA2D33E23F97D9C28026A2C20190
SHA-512:	F6C797ECBFA7796B5EF8AB57C9F651E8A6522EB0E99105B8A156C190F11F821C011CE63243A0CACC2C6152594DD5B6EBEC01811D77DBEBEF592D511B45DDB2C3
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/509ae1a8c65d4c52826a5829290dbd6c?v=d858776e&t=w1920hq
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill-rule: evenodd;. }.. .cls-1, .cls-2 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g>. <path class="cls-1" d="M78.91,67.01c-2.98,0-5.53,1.06-7.65,2.76v-2.34h-7.23v27.42h7.44v-17.43c1.06-1.49,3.61-3.4,6.8-3.4,1.06,0,2.13.21,2.98.43v-7.01c-.85-.21-1.7-.43-2.34-.43"/>. <path class="cls-1" d="M14.94,86.34c1.91,1.7,4.89,2.76,7.44,2.76,1.91,0,3.61-1.06,3.61-2.34,0-4.25-13.39-2.76-13.39-11.48,0-5.31,5.1-8.5,10.41-8.5,3.61,0,7.44,1.28,9.35,2.76l-3.4,5.31c-1.49-.85-3.19-1.91-5.31-1.91s-3.61.85-3.61,2.34c0,3.61,13.39,2.13,13.39,11.69,0,5.31-5.1,8.5-10.84,8.5-3.83,0-7.86-1.28-11.05-3.61l3.4-5.53Z"/>. <path class="cls-1" d="M60.85,80.82c0-7.65-5.31-14.03-12.96-14.03-8.08,0-13.39,6.8-13.39,14.24,0,8.71,6.16,14.24,14.24,14.24,4.25,0,8.5-1.7,11.26-4.89l-4.25-4.25c-1.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17327
Entropy (8bit):	6.949559841048331
Encrypted:	false
SSDEEP:	384:pTYcwQWb8E9VFqFx8j7a6bnDwRmkUqGNrWgFZTfNT/ee:FdpzEkFOi6bDim5hNrnNL5
MD5:	CCB64730A8775CAE638DC3A4E31FCAD0
SHA1:	A876A75F2746B7A4B4E657429F7FA9C220CC6DC4
SHA-256:	404AC724103BFF7B5274D9A18BAA9AD2D7AE1F38DAB75E321D1724513DE1BD97
SHA-512:	D148901AE8838A1282606ECC15C4F2600647ACA01D92E207C180525A6424BE824E1263874B0616BB7FD62AD532023B79BCCE660E9D6772092E7E83834AEB42DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R:W...,ocaBX..,ojumb....jumdc2pa.........8.q.c2pa...,Ijumb...Gjumdc2ma.........8.q.urn:uuid:76447592-656b-4004-a0f4-d3ae737ac1e3.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexShttp://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.,{dnamenjumbf manifestcalgfsha256dhashX `fu6O.....4Q1b.j.=E..k..57....#.cpadH............jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated imageidc:formatiimage/pngjinstanceIDx,xmp.iid:0d00bdb8-543c-4cb3-b032-0d95db9b1b25oclaim_generatorx6Adobe_Photoshop/25.1.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_info..dnameoAdobe Photoshopgversionf25.1.0.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX Ji.....A0x.$...1:.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4997
Entropy (8bit):	4.182725170581603
Encrypted:	false
SSDEEP:	96:cJkhd/ianm0MPh2g1tkycwigeJOP6pQWDuxpqt2day2ipBjxgQ/M+1Hc:cJkPnIh9tkycwigridDipqSr/U
MD5:	DF3EA858B32A1E76AE7C0E9E421D47A7
SHA1:	EA4494D2734D927EC145E5AC3A54F72D22297FCD
SHA-256:	2F23A24D48DE9E750A617E12BB656FE156EA11B1B6829962A8105AC2AFE3CBB0
SHA-512:	F60444E0782A4758B4F270E15832707F3C64F3044ECB86B220A5C1F9F9C22D08677B8747A5F252CC5253A7C4AFEB981EE1B2DBD5407C6763F8A27C45634D26D4
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/2acde0709cdf4ae2ada632bc3bb69977?v=360b4f6e&t=w1920hq
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g id="g14278">. <path class="cls-1" d="M157.31,46.54c-3.47.74-6.22,3.98-6.22,7.64,0,.12.02.25.02.31,5.84,1.42,8.49,4.95,8.51,9.82.02,4.88-3.84,10.23-10.34,10.25-5.27.02-10.75-4.48-10.78-11.71-.02-4.78,2.56-9.37,5.85-12.1,3.21-2.66,7.62-4.37,11.61-4.38.45,0,.91.03,1.24.12-2.46-1.15-5.19-1.8-8.08-1.8-10.6,0-19.19,8.59-19.19,19.19s8.59,19.18,19.18,19.19c10.6,0,19.19-8.59,19.19-19.19,0-7.67-4.5-14.26-11-17.34Z"/>. <path id="polygon14260" class="cls-1" d="M99.96,90.99l3.66,9.29,3.54-9.29h3.66l-5.69,14h-3.14l-5.86-14h3.83Z"/>. <g id="g14270">. <path id="path14262" class="cls-1" d="M121.03,97.91c0-.58-.07-1.14-.21-1.66s-.34-.98-.61-1.36-.6-.68-.98-.9c-.39-.22-.84-.34-1.37-.34s-.98.11-1.37.34-.72.53-.98.9c-.27.38-.47.83-.61,1.36s-.2

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18842
Entropy (8bit):	5.348219501729691
Encrypted:	false
SSDEEP:	384:tCo8KggTA9HtdBprSOT98uYrIUnh6EvvPFC3F1TpAPV:tKKggTA/dPrSs8IUnpvMa
MD5:	28AAF6D3F47A0F00BA6584ADF3C8ED50
SHA1:	9ABD03DE596DEC2D5140CAEFC15F24FC75F146CF
SHA-256:	534D3E23568BAC4EF4DF71A1535F12D940A95A085149EDF427056DC993EC4272
SHA-512:	25DED250F37B8FC80FBEC16023DD03F53C636509C51B30DDBB659B81CB570348271431036D2F74C4A0E65BF59FFEC18003CD06B17F18C9743C8E9D58E285022E
Malicious:	false
Reputation:	low
Preview:	{.."$I18N_SPINNER_LOADING": "Loading...",.."PWD_RULES_CHECKER_LOWER_CASE": "Include at least one lowercase character (a-z)",.."PWD_RULES_CHECKER_MIN_CHR_AFTER": "characters",.."PWD_RULES_CHECKER_MIN_CHR_BEFORE": "Minimum",.."PWD_RULES_CHECKER_NUMBER": "Include at least one numeric character (0-9)",.."PWD_RULES_CHECKER_UPPER_CASE": "Include at least one uppercase character (A-Z)",.."PWD_RULES_CHECKER_PASSWORDS_DONT_MATCH": "New Password and Confirm Password must match",.."PWD_RULES_CHECKER_PASSWORDS_MATCH": "New Password and Confirm Password must be the same",.."PWD_RULES_CHECKER_PASSWORDS_SAME_AS_CURRENT": "Current and new password can not be similar",.."PWD_RULES_CHECKER_SPECIAL_CHAR": "Include at least one non-alphanumeric ( !@#$..)",.."$I18N_ERR_USER_PREFERENCE_FETCH_HISTORY": "Sorry, we.re unable to load your history. Please try again later. If the problem persists, contact your service delivery team.",.."$I18N_ERR_USER_PREFERENCE_SAVE_HISTORY": "Sorry, we.re unable to save ite

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	87352
Entropy (8bit):	5.780406730778942
Encrypted:	false
SSDEEP:	1536:Cu+QjdWOxzNTJ70eTFCwHLfqwHLfaBBZSU:QsFHTvT89
MD5:	A415940113C5688BC17C10790BE98E02
SHA1:	D459E3FF6583FC7F41FEB9F0930E524FB74DF83D
SHA-256:	9D2C1CB978C52F3E687D7A3EA318AD9AD47F9EA17DB9482BC48500D1C73DE43C
SHA-512:	19483E68E2D909C63760ACDCB70AC47D0DB972C680B9002C20F2A79600EF24715BA6608041B3530E79AECE98C281455935ECDC2F906B17EC1D90F61E9171DC5A
Malicious:	false
Reputation:	low
Preview:	pendo.guidesPayload({"guides":[{"createdByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"createdAt":1706622695776,"lastUpdatedByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"lastUpdatedAt":1706624478551,"appId":-323232,"id":"4uuEt3uKX9wbyIODIz8a17xBxvE","name":"LHN Enhancements GA 30/01/2024","state":"public","emailState":"","launchMethod":"launcher","isMultiStep":false,"isTraining":false,"attributes":{"dates":{"en-US":"Jan 30, 2024"},"device":{"type":"all"},"isAnnouncement":true,"priority":1422,"sharedServiceVersion":"4.8.31","type":"building-block"},"audienceUiHint":{"filters":[]},"authoredLanguage":"en-US","recurrence":0,"recurrenceEligibilityWindow":0,"resetAt":0,"publishedAt":1706624478551,"publishedEver":true,"currentFirstEligibleToBeSeenAt":0,"showsAfter":1706654700000,"isTopLevel":false,"isModule":false,"editorType":"visualDesignStudio","dependentMetadata":[],"autoCreateFeedback":fa

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 104132
Category:	dropped
Size (bytes):	45159
Entropy (8bit):	7.992185896542023
Encrypted:	true
SSDEEP:	768:ItWu9LMv92XHJEI6Bj/v0F1VGptvrQz9UFuqPLm1CqA7rlUnPjzWBbEh:9uBMAXHup9/FvzU9+uqPvK/WI
MD5:	B4264ECAC00918CE9C3A97A700455666
SHA1:	B4DFE9403D7809396F567EDDC01AFE29B0EB5619
SHA-256:	AE2938D596CD4F3C0463C21C087D8AFDD1897254FD86FCD4C0E011E7541E921E
SHA-512:	3B4E7564E9DF8C7E5AB256B6D2B399E00B5B71B0DF85094856B22EA2E91C9D8641D8FE08AD7513B3368A6F485E48C2B2882251FCFDD2F863B171A3B211216A04
Malicious:	false
Reputation:	low
Preview:	..........t.k..Z.&.W...g..u"5.%.zvG.wT.L.ZQ....DD.......2rU.8...4.....y..._...n5....\|j.....+...$t.l..._...q^..}.>.."..{y..Y.5sn..U..N........(..l.V&\|:..C.:r...~.r...".+..u3..[.,...>.y.z..a..O~^8....-.e...^."...(.\tMZ.Lz.7.z.....a".f........&.b..%.S.g-V3.^.K..._..U...y....?../]95..o.(/.....^.....<[.c.JZF..NOn.....T.F.....1\|.5....a.#.......=..of..u.%U.v!z..K....W.......7...$.I{kJ........K/C/...I./...;r....g.f...A>..x.....C...B..^.<....f..(......4.zN.?...).62.m.=t.l...N........L..Z.."..m.....cC..I..\|...w..]h..,.^.b..>..;.i...e[....I.....\|....<s.K....t..KJ/.}.O.4......4....f../.....pid...Y.....8...>...^Q..$]..q.[.Kh......(..~... .pX...{~d.....z...y.V"....C..&oy..\|~Z.zFQ...K\....g..ms...4..Om?x..-.y.^...#...........c."s-...+v(.(.f6.\|...b..>..l....3....j..{$......G.o.f.!\..l...3ZA.~.......^.5L..Ho?.".,....N...Azj.....3..I..fu..P.Bcq...hL...H+X_..%G..j._.]..U8...}.K.s..O..L.."9..`...#>..U..(D7.E.s..y]........W.EO.ko@b...7Z........f*.v?e.2..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=18, height=5464, bps=230, compression=none, PhotometricIntepretation=RGB, description=Happy woman sitting on sofa and working on laptop computer. Smiling female working at home., manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, width=8192], baseline, precision 8, 1152x769, components 3
Category:	downloaded
Size (bytes):	73994
Entropy (8bit):	7.802088082270678
Encrypted:	false
SSDEEP:	1536:3+ydVVLydVsOMSk+2Zsr/lH+0Wj7UdOExNkOyBr6AMkxc6RfpV/kFN:hdqdiYa6b0mxSHBrE6hVcH
MD5:	F69E5A50A14809CF7EB88DDC33344DE3
SHA1:	50DB5E4BEE70FB48DE2A69D8CCC179FD23CF5965
SHA-256:	AC353173C5096B937DCC0519B1BD79C7F6614CAAEF07C022BA392AE5520A5926
SHA-512:	578611C0273A4448D0B8C37353A34E7092AFAF52E2C322DF228729B760D336FF9E19BB519EEC26C272FB23C57F48C208DDA0199CE5B9D8D1377F1E1B18DA8E2A
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/beb87be3865e4deeb2dd8bf265849d5d?v=53ad9bb6&t=w1920hq
Preview:	......Exif..II................ ..........X...........................................\...............H...........N...................................\...........d...............(...........1...<...l...2...........;...........i...........L.........Happy woman sitting on sofa and working on laptop computer. Smiling female working at home..Canon.Canon EOS R5...q...'...q...'..Adobe Photoshop 25.1 (20230830.m.2308 f86a029) (Macintosh).2023:09:19 08:21:28.Luis Alvarez..#.........t...........\|..."...........'.......d...0...........2.......d...........0231........................................................................................................................................................42..........0100........................................................................................................................1...........2...........4..........5.......@...........d...........2020:11:20 14:26:10.2020:11:20 14:26:10.+01:00..+01:00..+01:00...`e.@B..f...@B..........

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9993), with no line terminators
Category:	dropped
Size (bytes):	9994
Entropy (8bit):	4.88052724795239
Encrypted:	false
SSDEEP:	192:3X1GmkrAMqaWM7JS1Ct29lafwWHQVTK7kpzdLq+1pLrlVXLpVEGhhGdEsMLXxFjl:3X1Ds7WQ2kKjp8oD
MD5:	CE57F775E9B8B93C0B7ACF14CE55E4DA
SHA1:	2EECA68A929A65E6C23B4306579232F070F83A0B
SHA-256:	7EDB256461CD2277C3DAC240A59820133B69D74E0176FDEFAEA63AEEA065612A
SHA-512:	250E5BB4F87C8451FF1EEE44EE3E82A8301D977B715E4F5FD4D561854D861677CE7476B1CC86F97E295E079504817001A8A22EE0AB772222D89AA670A6DB7EFA
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("15p-yJX8ecYNaarLsYBwSeHKaRE", "CHS-ojsxsX_MnoPhtRe0TKQLBvQ", {"props":{"id":"pendo-g-CHS-ojsxsX_MnoPhtRe0TKQLBvQ","data-layout":"GuideListModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-10089919::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-10089919::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-b04f9b94:hover","styles":{"co

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1520 x 1490, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	318087
Entropy (8bit):	7.969035783105945
Encrypted:	false
SSDEEP:	6144:n5NzM4MSzdO/423ybO0h4EtrxBxiVTbazWxMjcXrqOvY2mJAWn3huuE44sSQ:nztg42SOybFBx6azgMjcq20n34uXb
MD5:	C7D7DD20FF9EC2B8B8B1E96F42E7CDC6
SHA1:	1B6A0AA1178358E3728A1772A0049DA0D13274A8
SHA-256:	20DFBEB00839D9F6F6E1EAB009E938CAB9CB8AF971FDBCD889C588BCBA69B5AE
SHA-512:	994A80B8FCB34C1650DC554D72A3A9B270ACE5417B61C5BB0998C34F5C4B194352F4898D51C4B8D15D3D53E8F2FBDA1BA54820E39CB65168DFAD0EA8E85F2267
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/1ffcb3e6423047f494f2570a804948ac?v=b159a002&t=w1920hq
Preview:	.PNG........IHDR.............W^.J....pHYs...#...#.x.?v.. .IDATx..........Uu.<..d!.@....M...0..{..:.......{w.....}.....\g...].xm2Xd......D.I PDY.;..9=5S]S.U..3]=...F........?F.X..........-f.7..........E...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@...........

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 820 x 790, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	137846
Entropy (8bit):	7.990553819842459
Encrypted:	true
SSDEEP:	3072:S1kFG/pzNLnPCM3ewDJwyI9vprfDUgH/k1dkbg:SYGpDDyycTDZskU
MD5:	BF4ED3474141ED2CF31064CAC854BF4F
SHA1:	EA6032F30D4819AB517E73F69B0116DF7CDD250A
SHA-256:	900820133854016F07117AC999DDB264957412144C2E20A5712DB558B4D8C12E
SHA-512:	EE948CEAE8BF5921E79D07CA7924B18CF56532CDD18613ACBB8D1CE9EA0C40666AC8E1B744011EA016017823F3ECE944AAB6E4CF13CD0F9471AF28F2BE2B0730
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4.........'..J....pHYs...#...#.x.?v.. .IDATx..]..T...n..kpw...RDE..+...(X.o.1.....%.c....A..;.QTP.."..v......7o.....{o.v...........f....+.F.............8................./4............8`................Mh44444444444.XhB...........q.B.................hhhhhhhhhhh...FCCCCCCCCCC.&4............,4............8`................Mh44444444444.XhB...........q.B.................hhhhhhhhhhh...FCCCCCCCCCC.&4............,4............8`..................n.......rE..(}....C.\|9Yk.F..T.Q6..T.UCCCCC#..I/+.kh45(HKZDF..PNS.P.z.#.<.).1`..'.V...5..w...)..t.T.VVP......S,Su<.r..M..b..."Y^..gbaI/.hh...F.I`..>.....{\nn.P.........MO4...@....2.Q&..x.l..H$j..l...E4.ZFy...QD.?...H.n7}F.v'.E.9.<g....F...hg.U.Q.VSy..`~e.p..\|z...Qv/..nv,.y..Z,.K.].2....KH.m.k.{,.r\.v..=...n.yp.....e.[*+.t.......YB..Lu.y..b)"a.:R..kV.^'....X.1.c..I.7.>j{..%.a.D..x.I../.p.8G.>b......m7..}.h[4~..y/.........>.^...t.l_.$..&...H.7...h.,.9...\|.......Sa.=U.D92^..}I.......$.....M}...

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10210
Entropy (8bit):	3.984305871136797
Encrypted:	false
SSDEEP:	192:pJMgoZuBEiEDI43JfoiPM8sCIZtFW/001rYhyv73KolDBUAUWGFIhJAbn5D0pZ:3hmDI45PCCIbubasOWUAU4MThOZ
MD5:	8FCAFE50B06B8F16667CF8D9D4550618
SHA1:	EEC8413B216AA2D9EB5E1AFBB7F61A6B188A05EC
SHA-256:	D67A7330DD75C25F79696790214D4F2CB05F0CD79E792ADDDE0A8B272DF64A31
SHA-512:	13E1707345E50D367FDA882420E33EDC67BEA0017FA8F87CBCFFC3BF4412D9E9CCE24BB465B32D94AEE398C315AF0009AFEE2ED4B8A2801F54CE8FC2A80A7D0D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #000;. }.. .cls-1, .cls-2 {. stroke-width: 0px;. }.. .cls-2 {. fill: #fff;. }. </style>. </defs>. <g>. <path class="cls-2" d="M132.88,108.88c-.27.05-2.42.46-4.68.52-4.02.11-7.53-1.5-7.56-4.4-.05-5.03,5.03-7.79,8.78-8.56,1.68-.34,4.92-.72,8.15.07l-1.87,4.49c-.54-1.22-1.92-1.25-2.49-1.26-1.37-.03-2.5.33-3.34.72-1.9.87-3.55,3.66-.86,4.73,1.49.6,3.38.12,5.36-.19l-1.49,3.88Z"/>. <path class="cls-2" d="M211.3,96.33l-3.23,8.78c.05-.88.22-4.37.33-6.39.05-.83-.14-1.46-.53-1.88-.48-.51-1.12-.51-1.13-.51h-7.2l-4.71,12.79h5.23l3.34-9.06-.39,9.06h8.76l4.71-12.79h-5.18Z"/>. <path class="cls-2" d="M181.42,96.33h-6.03l-4.71,12.79h12.1l1.56-4.25h-6.07l3.14-8.54Z"/>. <path class="cls-2" d="M159.12,96.33l-4.71,12.79h13.07l1.27-3.45h-7.21l.53-1.42h6.73l1.16-3.15h-6.73l

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11113837502?random=1721420610095&cv=11&fst=1721420610095&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1293), with no line terminators
Category:	downloaded
Size (bytes):	1293
Entropy (8bit):	5.210804004423346
Encrypted:	false
SSDEEP:	24:98AH1bijdWMbsEjQK3xBymXa6OArmOSDPGx5DqnLTcpXbWCzfK0+Y24HMeThTRAj:KAB+Z/3xBnK6gqxNqLTc4S6+MeThTRDs
MD5:	3E0177133D737A547FE51922D149E9E3
SHA1:	ED38872EA5C121B0AD4BEB5D8FDDD89FD9B5B3AA
SHA-256:	27658527291F7218F6D2C344EAEBBDCCABB9EE0FB47B3B1ECEA2AA81DC02C3A4
SHA-512:	648D200E6288D17CE7D79F008D394CD8BD6C0ADD40A6B667573FF58C283FA13542D6F4E1349C4A9B8209C1C2F63D95D8A59457AFDBAD96423A15AFC2AD9DFE7B
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/runtime.ae7f2517edfa26fd2d54.js
Preview:	(()=>{"use strict";var r,e={},t={};function o(r){var n=t[r];if(void 0!==n)return n.exports;var i=t[r]={exports:{}};return e[r].call(i.exports,i,i.exports,o),i.exports}o.m=e,o.amdO={},r=[],o.O=(e,t,n,i)=>{if(!t){var a=1/0;for(u=0;u<r.length;u++){t=r[u][0],n=r[u][1],i=r[u][2];for(var l=!0,s=0;s<t.length;s++)(!1&i\|\|a>=i)&&Object.keys(o.O).every((r=>o.O[r](t[s])))?t.splice(s--,1):(l=!1,i<a&&(a=i));if(l){r.splice(u--,1);var f=n();void 0!==f&&(e=f)}}return e}i=i\|\|0;for(var u=r.length;u>0&&r[u-1][2]>i;u--)r[u]=r[u-1];r[u]=[t,n,i]},o.n=r=>{var e=r&&r.__esModule?()=>r.default:()=>r;return o.d(e,{a:e}),e},o.d=(r,e)=>{for(var t in e)o.o(e,t)&&!o.o(r,t)&&Object.defineProperty(r,t,{enumerable:!0,get:e[t]})},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(r){if("object"==typeof window)return window}}(),o.o=(r,e)=>Object.prototype.hasOwnProperty.call(r,e),(()=>{var r={666:0};o.O.j=e=>0===r[e];var e=(e,t)=>{var n,i,a=t[0],l=t[1],s=t[

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18794
Entropy (8bit):	6.719589606480986
Encrypted:	false
SSDEEP:	384:81QWb8E9VFhFx8j7a/CgJmQWqk9tla5fj:8KzE/FOiPJa93Y
MD5:	59298E3AB67712ACC18099DD884A9AF5
SHA1:	20595148D39501E3A23200AF359F5D936A650A77
SHA-256:	A57C466CC9E17813FE2FA5CC364F1C2C216C4F0C45526C17DC74F656F077FE70
SHA-512:	50369164C45DA2B5E3323ABB12AA0D4BBACC62BAE9485D5A9020FF8263A9AD26E09842CAE4203EBFD6CB40B9449CB3E6DB4AE6443119DD505319F90E9B4A85B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R:W...,bcaBX..,bjumb....jumdc2pa.........8.q.c2pa...,<jumb...Gjumdc2ma.........8.q.urn:uuid:a20ec2d5-1b60-47db-aa08-6690ee05dd45.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexFhttp://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.,ndnamenjumbf manifestcalgfsha256dhashX ..BZ.h.]k$P.9No..\|...@..Z..ku0cpadH............jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated Imageidc:formatiimage/pngjinstanceIDx,xmp:iid:409584a4-8c11-4882-a76b-8df25666bfadoclaim_generatorx6Adobe_Illustrator/28.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_info..dnameqAdobe Illustratorgversiond28.0.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX .f.j..\|`..9...#A..]+...F."d.+

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4861), with no line terminators
Category:	downloaded
Size (bytes):	4862
Entropy (8bit):	4.893806239001046
Encrypted:	false
SSDEEP:	96:3NZxm9r8ORFQ5IM7MQ5vg1VtDK9lzHOSix507Fli8BUbZ22o:3rxm9rZaWM7JS1Vt29laf3qlQ922o
MD5:	80EDF9CD99FDB7178493BEE1FA666B36
SHA1:	54ABE77B13CBE6E1B5F2111894E30B8445987072
SHA-256:	A82C54AF99B3BA94F8876D4146E2E9841D949565ADEBCCBF674684977CFA056F
SHA-512:	90C9679616954515EC7B3B6416C1B5A41A2B79B527625A1EA6EEE6232FE4FB8DB53891A64B516196905075F78BD4B1608548C3AE98E2AA5FCA8506FD077BE2D8
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/yyTjAbf0U6P4FyCht9PDC37PECc@sn9p0ljv8dushqgktXFohVVCLNU/wNNiK8f0SEITG_a7n9-tBCaxh-s/VKvnexPL5uG18hEYlOMLhEWYcHI.dom.jsonp?sha256=qCxUr5mzupT4h21BRuLphB2UlWWt68y_Z0aEl3z6BW8
Preview:	pendo.receiveDomStructureJson("yyTjAbf0U6P4FyCht9PDC37PECc@sn9p0ljv8dushqgktXFohVVCLNU", "wNNiK8f0SEITG_a7n9-tBCaxh-s", {"props":{"id":"pendo-g-wNNiK8f0SEITG_a7n9-tBCaxh-s","data-layout":"IntegrationModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-eb261316::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-eb261316::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43430
Category:	downloaded
Size (bytes):	12116
Entropy (8bit):	7.984694744614838
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVH5yGIt9IKyLPlIUjtiXuXTthBR5:+tjRIm6SoITu3khUZS9yLPlIhuDLd
MD5:	71B328AFF914ADA8B774BFA8FFF542C4
SHA1:	3FB33AE4AB66FFFD1BA62BADC661BD910CDF8CF3
SHA-256:	52056C6C133887292D444EB1152DEC3F0A134FB0ED4DC33C2B116AC480455A3C
SHA-512:	933B32DE0C08CB7C7EF44E07F9D74FA5D034B4BC4B350207E343D7E613C56F926AAD4AECF0BEE4F897E4A056F3314E8F5737A9852F9D704FF99F41A4F1C80A17
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	460324
Entropy (8bit):	5.359560445520623
Encrypted:	false
SSDEEP:	6144:Uab9rWTxFBzE7qfzU21A986ysLMNDqus8mdRzAe+i9t9CCgs:UiwTxFBzE7qfTA78mmKB/
MD5:	2E56B303A79FC9FAE9FEECC549AE4221
SHA1:	B16B17616C34619512D2D677ADE88D1D8BCC8C2F
SHA-256:	DC750F921CF29A7897435F868856C4C63E22F7FD66AC456A72CED5F6ECA584E7
SHA-512:	E6CFD31F5BF5876517A445A18A1D4C07D431D07F9903205934FF2C23AB8E1F69E714DBCFE7872F5DC08BDFE7DB6111B4C26151A54E7BE09ACA77A97DF2AF5094
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202405.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202405.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	627805
Entropy (8bit):	5.463417363802722
Encrypted:	false
SSDEEP:	12288:J9Sou8nDdmp5esAvoiIhlN1bld1jkZAGpAGYwdYJJOGmOiB0oe8:jznDdWRlN+AGYwdYJJOGQ
MD5:	8E3CAEFE8F16F133E9D1F7A38C1DE48E
SHA1:	7BF4D409923400305EF4836B7A6D164C888CF5F3
SHA-256:	CC646405DEED66DCF7932170EF8AA8CC7981780722C55835EE4F91FDD626DD1F
SHA-512:	4F785DBBBC773A4CC8C9F152C89D8DAF16A7C4C1EA15DB87BF636910106B179D4E13CED7D897B4E63BFCDBDEC9270B23E359B6565E26CDC74C333416F9706735
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/bootstrap.js?aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22publishedChangelistNum%22%3A%22749%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D
Preview:	window.Aura \|\| (window.Aura = {});.window.Aura.bootstrap \|\| (window.Aura.bootstrap = {});.window.Aura.appBootstrap = {"data":{"app":{"componentDef":{"descriptor":"markup://siteforce:communityApp"},"creationPath":"/[0]","attributes":{"values":{"schema":"Published","authenticated":false,"ac":"","formFactor":"LARGE","brandingSetId":"774c7290-70ad-435a-896e-5352360ebe8b","uds":false,"language":"en_US","viewType":"Published","pageId":"e34eeddd-05a4-4255-b40f-64fcb4a6703f","themeLayoutType":"customTemplate","priv_themeLayoutReady":true,"isHybrid":false,"includeInstrumentation":true,"publishedChangelistNum":749}}},"components":[{"componentDef":{"descriptor":"markup://siteforce:baseApp"},"creationPath":"/[0]/$","model":{"appConfigData":{"allLanguages":[],"isHybridApp":false,"activeLanguage":"en_US","cmsSettings":{"isEnabled":"true","isPersonalizationEnabled":"true"},"cmsConnections":[]},"googleAnalyticsAnonymizeIpEnabled":true,"googleAnalyticsCustomDimensions":{},"googleAnalyticsDeveloperID"

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10509), with no line terminators
Category:	downloaded
Size (bytes):	10514
Entropy (8bit):	4.8490221272328835
Encrypted:	false
SSDEEP:	192:3hvP89PwsWbxj12RA2/RAh6BKCWRxjS+MyRAc7RAh6MdRu0ERAh6UY2HS0WcdB+X:3MTSmLzM
MD5:	24EDEE4A678B8296B37CD740A5BD8B2F
SHA1:	FA95FDB0538398CC2FDA8174181D70E6208521DC
SHA-256:	65664B0046C8C3815E49DA3A00843E3B7922C48B60A42E8808B21D17F302445D
SHA-512:	C64D871588C94FCC9CE04280CC2BA565B149243DF93C4834BE6C956B6B5FE579B1CD3F7BAC90F7FFD40E3267F7F5F616C30C404F9F5CC5B6DC79F266EF3370CC
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/W8wLAJJ-I1c5HQpcqjSuP-dHcdk/K-kKCZLF_TcoZSdvI4U8Mdo7t2Q/-pX9sFODmMwv2oF0GB1w5iCFIdw.dom.jsonp
Preview:	pendo.receiveDomStructureJson("W8wLAJJ-I1c5HQpcqjSuP-dHcdk", "K-kKCZLF_TcoZSdvI4U8Mdo7t2Q", {"props":{"id":"pendo-base","data-layout":"lightboxBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-button-f6b6e33f:hover","styles":{"background":"rgba(22, 106, 188, 1)","border":"1px solid #166ABC","border-radius":"6px","color":"#FFFFFF","font-weight":400,"border-width":"1px"}},{"selector":"#pendo-button-f6b6e33f:focus","styles":{"outline":"none"}},{"selector":"#pendo-close-guide-3175006d:hover","styles":{"color":"#333333"}},{"selector":"#pendo-close-guide-3175006d:focus","styles":{"outline":"none"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-backdrop","class":"_pendo-backdrop","style":{"position":"fixed","right":0,"left":0,"top":0,"bottom":0,"-ms-filter":"progid:DXImageTransform.Microsoft.gr

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	154805
Entropy (8bit):	5.193278312541184
Encrypted:	false
SSDEEP:	1536:fvP9x7fBE1+Q+mpy4xFMXvmuhvWPEjCtFWveDu50dtEB02nocD3F0dkSQbM6ur9i:vq+KWGo4sL
MD5:	81D3202FEFD1EEF626FCB254A7296B30
SHA1:	E0DC86613898F73CF58D0321E1FB5F40D2DB157C
SHA-256:	86484480D73E1582FD7180AB2593FE67C9888E1E388364535EEDCE147E43C2E2
SHA-512:	573B1C3EE3AD94F22093D082AD1D7328789DCE89F04EAD3A2E61B0FC89B7F64A795059B9141C352D3DA5C6AD6BA5D1B6EACFA8C152AC4E4D4E786B3C62695BDB
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/site.7bdbe456878bd11113ce.js
Preview:	"use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[641],{7312:(e,t,i)=>{function r(e,t,i){return(t=function(e){var t=function(e,t){if("object"!=typeof e\|\|null===e)return e;var i=e[Symbol.toPrimitive];if(void 0!==i){var r=i.call(e,"string");if("object"!=typeof r)return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==typeof t?t:String(t)}(t))in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}i.d(t,{m:()=>s});class s{constructor(e,t){r(this,"invisibleRecaptchaComponent",null),r(this,"invisibleRecaptchaElement",void 0),this.invisibleRecaptchaComponent=document.querySelector(".invisible-recaptcha"),this.invisibleRecaptchaComponent&&(this.checkRecaptchaElement(),this.invisibleRecaptchaElement.callingElement=t,this.setCallbackFunction(e))}setCallbackFunction(e){this.invisibleRecaptchaComponent&&(this.checkRecaptchaElement(),this.invisibleRecaptchaElement.componentCal

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30828), with no line terminators
Category:	dropped
Size (bytes):	30829
Entropy (8bit):	4.69729384381527
Encrypted:	false
SSDEEP:	192:3xsWZjYDWMxjgaXAKaXAt6cLLfOnxji0XApLXAt6mEs4vzrBrfOnxjz+XAg+XAt/:3+BnmXc675K+Uz73
MD5:	3011C5DC1B9095F48E82813238C6F29E
SHA1:	C4C280AF0C6B39B1DF10858AC94464598059B4C3
SHA-256:	509EA5F4043E25B0B89E3861D1B585036092268D00D882980C63445398D4B526
SHA-512:	40FF2036191080B24FA84CC0FF7018EED979761787E4D92597FC16135392FDC10AF80A07FDD90EE2DE8B771AF8FEE706A4531B8F8169D3FF2FF81E10B855CC2F
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("FoUy0HZZbBso7IklGCirKbfLHwg", "weeK_Xx8yPOx7zLp8zRQ_faS_A4", {"props":{"id":"pendo-base","data-layout":"lightboxBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-16ac08be:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}},{"selector":"#pendo-button-d68abc20:hover","styles":{"background":"rgba(255, 255, 255, 0)","border":"0px solid #FFFFFF","color":"#1976D2","font-weight":400,"border-radius":"0px"}},{"selector":"#pendo-link-9e2c76df:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}},{"selector":"#pendo-link-14e592b7:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}},{"selector":"#pendo-link-3e9609a2:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}},{"selector":"#pendo-link-b7ce4826:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1293), with no line terminators
Category:	dropped
Size (bytes):	1293
Entropy (8bit):	5.210804004423346
Encrypted:	false
SSDEEP:	24:98AH1bijdWMbsEjQK3xBymXa6OArmOSDPGx5DqnLTcpXbWCzfK0+Y24HMeThTRAj:KAB+Z/3xBnK6gqxNqLTc4S6+MeThTRDs
MD5:	3E0177133D737A547FE51922D149E9E3
SHA1:	ED38872EA5C121B0AD4BEB5D8FDDD89FD9B5B3AA
SHA-256:	27658527291F7218F6D2C344EAEBBDCCABB9EE0FB47B3B1ECEA2AA81DC02C3A4
SHA-512:	648D200E6288D17CE7D79F008D394CD8BD6C0ADD40A6B667573FF58C283FA13542D6F4E1349C4A9B8209C1C2F63D95D8A59457AFDBAD96423A15AFC2AD9DFE7B
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var r,e={},t={};function o(r){var n=t[r];if(void 0!==n)return n.exports;var i=t[r]={exports:{}};return e[r].call(i.exports,i,i.exports,o),i.exports}o.m=e,o.amdO={},r=[],o.O=(e,t,n,i)=>{if(!t){var a=1/0;for(u=0;u<r.length;u++){t=r[u][0],n=r[u][1],i=r[u][2];for(var l=!0,s=0;s<t.length;s++)(!1&i\|\|a>=i)&&Object.keys(o.O).every((r=>o.O[r](t[s])))?t.splice(s--,1):(l=!1,i<a&&(a=i));if(l){r.splice(u--,1);var f=n();void 0!==f&&(e=f)}}return e}i=i\|\|0;for(var u=r.length;u>0&&r[u-1][2]>i;u--)r[u]=r[u-1];r[u]=[t,n,i]},o.n=r=>{var e=r&&r.__esModule?()=>r.default:()=>r;return o.d(e,{a:e}),e},o.d=(r,e)=>{for(var t in e)o.o(e,t)&&!o.o(r,t)&&Object.defineProperty(r,t,{enumerable:!0,get:e[t]})},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(r){if("object"==typeof window)return window}}(),o.o=(r,e)=>Object.prototype.hasOwnProperty.call(r,e),(()=>{var r={666:0};o.O.j=e=>0===r[e];var e=(e,t)=>{var n,i,a=t[0],l=t[1],s=t[

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 210, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4667
Entropy (8bit):	7.911439348770004
Encrypted:	false
SSDEEP:	96:9SyKcZKE7FLJOE/qG9bFKuJM6GJ52ykkJHuSDPzwH:9S+kKxk6L/Kd6o52yhOEPi
MD5:	FB7E9859F4E420D054035F0B2B0C9BB5
SHA1:	85C624BCEACE980363A058837BF744569F4FE2EE
SHA-256:	198BB257647FC230B045EF3C47EAA3A92D8B32DF0EA12DEA7ED65EA0D0EC19AF
SHA-512:	C24F1936A583D8C60F063A89DCCA1A9F87A28B499F2E2B09EE56AE3DFA42487A6170EE8F83527356C5D21E79BDEFD8CC3B8A57E3379B59630BD29DD5FC833D79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............?..B....pHYs.................IDATx..?p....w9j..).B.+'.@.$.N.2v+R.-...I.r..L<.B2.R..][.Zg"A.2..5..Xp.6..>...]......w.....L....x...o.{+....T[...B.....'..[.!.>.f..`...>?....K).5....B.U..R.b...IG.l....>>..(0.PHv.LW...E......RJ..H.(..(..r..!.k.4.il3....V>(..(........V....L..C!-.O/..S6Z.PT.PH/.m...BQ..H.u..Bz.}.#J.l.(u$...VH..5g.dc$.......&}.....b...,}...5..~L...D.C........D..RJA@O).F..w..~S...".M.....Q..6....R..~{4..p.d@........>..eHk!...\|O.R.H}L.yIG...;....3!..ld...+.F'/#.R.i...((.>G'."..O.z.<G".N.D$..^.QD....Z).:H/....!.{....k...}'...T....-9..1.#&.{..r..x....\9.9...hr...Z.\..y.H).H...1S."B..!.8.Bl.bBH.D.T..6.VO:..J.x..5$..."..D......("...j..EDB.S.B..HM@D.uZ.K5[.h.`#......b...Y.OD.....GH.>..C.,=]r...0..&..A.R.A..c]DH....14~....q..v.F..I.%h.CG\+r]....j..u.ED\t.i.\.....y$.AV..BJ..q..z..p..S:..C).s.../.../tln.J.)...!Q./...S:.u.x..)...dS[.F$.t$ ....m$"....B).a...../"....t}..k.H........E#...gDB.U.x...h0....)....<V..K.."..H.F$

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	154805
Entropy (8bit):	5.193278312541184
Encrypted:	false
SSDEEP:	1536:fvP9x7fBE1+Q+mpy4xFMXvmuhvWPEjCtFWveDu50dtEB02nocD3F0dkSQbM6ur9i:vq+KWGo4sL
MD5:	81D3202FEFD1EEF626FCB254A7296B30
SHA1:	E0DC86613898F73CF58D0321E1FB5F40D2DB157C
SHA-256:	86484480D73E1582FD7180AB2593FE67C9888E1E388364535EEDCE147E43C2E2
SHA-512:	573B1C3EE3AD94F22093D082AD1D7328789DCE89F04EAD3A2E61B0FC89B7F64A795059B9141C352D3DA5C6AD6BA5D1B6EACFA8C152AC4E4D4E786B3C62695BDB
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[641],{7312:(e,t,i)=>{function r(e,t,i){return(t=function(e){var t=function(e,t){if("object"!=typeof e\|\|null===e)return e;var i=e[Symbol.toPrimitive];if(void 0!==i){var r=i.call(e,"string");if("object"!=typeof r)return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbol"==typeof t?t:String(t)}(t))in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}i.d(t,{m:()=>s});class s{constructor(e,t){r(this,"invisibleRecaptchaComponent",null),r(this,"invisibleRecaptchaElement",void 0),this.invisibleRecaptchaComponent=document.querySelector(".invisible-recaptcha"),this.invisibleRecaptchaComponent&&(this.checkRecaptchaElement(),this.invisibleRecaptchaElement.callingElement=t,this.setCallbackFunction(e))}setCallbackFunction(e){this.invisibleRecaptchaComponent&&(this.checkRecaptchaElement(),this.invisibleRecaptchaElement.componentCal

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5673
Entropy (8bit):	7.931787490212191
Encrypted:	false
SSDEEP:	96:VOJsK3PoA1of0ez4F7/7e0wRj5OwwEiVj3MWdD1xrs20xgH8UWXy5ETd:IJsK3QAQ8F7DYRwwgoo+vXPh
MD5:	4B36CBA79896F31140C285E4C6141ABC
SHA1:	DD1BA28E5E42A79A6EE3D6DD32C8570934D03DED
SHA-256:	60FCF5A4BE294CCAF8545F8A6D536892F0F9B32F028F169BE9B61ED3CB5EB4BD
SHA-512:	7FEEE8F98D54739DE9A2FFC036A87D1D3AFDF4F8E79167693AD788F33142685F90A53C1A87A028277B66D4F5AB5A375E650473CA7C59102DF0E629681F4493A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R:W.....pHYs...#...#.x.?v....IDATx..=l....g...l@...tJT..)E`@.xTcu..TiN.".S.TaW1....,l..\|d...TV....H..:VI.9:!..$+@..4.....x.;......@.(...n..>.7J.......<.cZJ..._.3~.@)...h...NT...x.4.Rx<g.........;I?.....(.....},J(....;..}...5....y`..5.hV.X..a.....>....#""7..bYc,.E@DG.....B.DD...QJ]..M.HRA.Q\...&..p...X,.YDD..8..:...EA.+..$...Z....K.e.4~^#d.o.T..I.8...q......,T.c.Z...s.Gb.bH..v.$.Z.H.S:I......1.uv..TFR.1E)".y.(.6....E..0U...G....)...%.........iZJ......@GRa.CR....zW1....1wl.Z.K_)..\..RDb}.#.l..H.O..Y....FD6.=.R..I.R78e.... .&.n...<.,.LR.8...G.Z%...Y....`.Z!.$K...@.N..$/T.4.{.:H.,.M_#...S..]].....U.4.T....xE.K ..MIHY.....>@......1fEk.U. c.....N.......R.......1.P{........C.........un.."...l."....P..4PJ.V-.JE$.N@)......WT....Re".../ .h.....j.....T).J.." w...p..x..I...TE.."..;...K..U.s..y.9...v..s....@......"....4..>GZ...N(I@..7.&....Nt...~$........Et...K,&.Z..ln~..v.y..".S..Q.]............./"..H...lc"..2".....RD6.'.J..R..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18343)
Category:	downloaded
Size (bytes):	325580
Entropy (8bit):	5.5952188740019215
Encrypted:	false
SSDEEP:	6144:b4YGp2L/QlIzo5Jse9S6Hu0bwJQNjnvrhiiXiPQm:sYXtkJXV8/
MD5:	04DF5F48A98DE7C60828B99A8F40FD09
SHA1:	A38AF6F029A3D042FA86D6DE91B8CE0952995E62
SHA-256:	04F626259EBF5F18986A8FFF2F1AA66AE92C6D6608E6029D5157BB83F6243287
SHA-512:	5BC8B7C34957B752CE44D5BFDE844BE592D7FF0F9FE5D6EFDDC0947337A92D88EB125DBE1D6144CBA77C4D4005937FAC48BF252FB1F5B10CE019D075819E8254
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-2RRJFGC554&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"56",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":40,"vtp_rules":["list","info\\.mimecast\\.com","integrations\\.mimecast\\.com","community\\.mimecast\\.com","www\\.mimecast\\.com","www\\.workprotected\\.com","status\\.mimecast\\.com","^getreprise\\.com$","^status\\.io$","^careers\\.mimecast\\.com$","^mimecast\\-prod\\-apigee\\-developer\\.apigee\\.io$"],"tag_id":139},{"function":"__ogt_ga_send",

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4838), with no line terminators
Category:	downloaded
Size (bytes):	4839
Entropy (8bit):	4.908860390556065
Encrypted:	false
SSDEEP:	96:3KZJzmVr5ORFQ5IM7MQ5vg12ltDK9lzHOSi2hbH4060i8BUNZ222Y:3UJzmVreaWM7JS1Et29lafI4QQb22v
MD5:	0F42BFA972368D57F112B97695C1E8F0
SHA1:	82CC7D4C86D192BE68492841A08261B077214DEB
SHA-256:	959C55A33DAFCC2ECE2B32FBC93C4F516667C46AA1C3ED83782AE78C98876A44
SHA-512:	9FF26AC52EFE9CE156FD71D3BAF46DCF67B8169F933F91C67C8CE85366AB5C47A73838E5406DF7A094A93553BAB9C598DABE7E6CB034B1F0457B2733E9C293C7
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/EWuuX_o4U-xRldBOqT-LYFc69fQ@sn9p0ljv8dushqgktXFohVVCLNU/Imtq1OAS7QR5--1wWyrbg1YVU2c/gsx9TIbRkr5oSShBoIJhsHchTes.dom.jsonp?sha256=lZxVoz2vzC7OKzL7yTxPUWZnxGqhw-2DeCrnjJiHakQ
Preview:	pendo.receiveDomStructureJson("EWuuX_o4U-xRldBOqT-LYFc69fQ@sn9p0ljv8dushqgktXFohVVCLNU", "Imtq1OAS7QR5--1wWyrbg1YVU2c", {"props":{"id":"pendo-g-Imtq1OAS7QR5--1wWyrbg1YVU2c","data-layout":"SandboxModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-f88be748::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-f88be748::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-f46

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3471
Entropy (8bit):	7.815274748339315
Encrypted:	false
SSDEEP:	96:HSbvgyROVeJnW7fOzH1Nfp/a7bzkqQrmNNgP:HScCnW72fta7bg7mEP
MD5:	9DA532E701D8563E517FD0D059608BCC
SHA1:	8025CF2E1C767F7F658AAAA568EC14EF7F05FDBF
SHA-256:	4BB1BCC2288EB53FA7CD7118655023DEB8F96F891CFFEAF993EA0EFED0F81273
SHA-512:	B5D872097A88D02068239C492AE1D9F70AC5869875FA8B2441246A4BAE655A317DD0D0A8FB6FFDAF0031EF28F8F76B43B5F267D043D00FA08C83DC532BDF3E82
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/9cfe697b6d3f4044a0dca3699fa70406?v=83c5c7da&t=w1920hq
Preview:	.PNG........IHDR.............R:W.....pHYs................AIDATx..=lV...?..rT.)C.U26.#.`#. U.8. C.....Y..2!5m:d(,0./D.J..R#...\....2..........__.1~_..<..{......~.}..y>.s.3..CG.2.pej......... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#..'...<.\|6...7~...W...........{..{.1...d..e.......y6\|...'1=.....%[.s.Q................6..K-N..-.....e..% ........y(.....F. ...}.l6:~..._..)oz..'....Z^/...P.<b............4.......:...M].?.h...x.:z8.u.R+..GI............Y..+=\|.B..J.OD2B..>.oy.'.....O..OY..<.....=".2...dLU.&..<......T+:.F.Ogc.T.C(....J.".M@B.<\|[I^D2.=..u.W....y..'z...T.....:.&i....ok7@.[......\|100.?.....D.".!.iy.k.~.D......F..s!.@..V...s.-..^.U..4..+..../.b.....z5..ThHND..C...'.[.j.i...E....-.\|..-..5G....{.=..^[6c.+q?ws.[...$.....g.x..UV.."d......k.V.[a\H..2.2..P..3h..h.]t.D..9...iM.!....S3f..)2X~...H.>:(..o..e..F.Ogm ..H.....{....#...`....wP..o..q..&.2..._..5....T..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8575), with no line terminators
Category:	dropped
Size (bytes):	8575
Entropy (8bit):	4.7268204848216335
Encrypted:	false
SSDEEP:	192:33FPqiZbVLxjzwSgTIabSgTId6XrbVExjWvSgTIwISgTId6m8SgTI9mwMVlxj3dr:3iknD
MD5:	3EFF36AE531C66A565D37DF3FD0146D3
SHA1:	ABB0F91E26393CCE0C756082CA434310E9B2D5AE
SHA-256:	4277321CB06067CAB91EFC1FEF91B15CE91D79FC37DDB6933BA7849085C4806E
SHA-512:	3AB88A990E65DF8B4DC86581366F5BC8448E2B7F0B1E242EF3171A18430BBAEFD80FD384054C2623AB67FFC7EEF535899A10FA6CCFD2DF2280A5D5612782132F
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("7lo-wMtsik3XgBq3SnM4gDiphK0", "O7fo65xagzGRHr0FmErK1rvPY64", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-fb0429ba:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-O7fo65xagzGRHr0FmErK1rvPY64","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2817
Entropy (8bit):	7.794005861462191
Encrypted:	false
SSDEEP:	48:H/64TEA4XQPEZ6052hU+pjmKwPHF/0a8dXHIuF0HBIJAIEmiQrzwFGYHa:HSGiQKZ2hUSmKwvF/0a8dXouwBZIEmiO
MD5:	76E5039F79ABCAF791A5B5D47D5E3703
SHA1:	C6E35151D66D6A3CD89E01FDD30E5832579E082D
SHA-256:	4E0D36A018B8B1222252FFDA1135C5A8C2C7DBFB0E99750A657CCA6B728C67E1
SHA-512:	E15EB19047AE629841A703205495EBBABDBD33827209450327E125069F7E3A993BDC1414B1472D2BF9B665BB342C191F006CB4ED889E09E822A94C0888049635
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/e662e5cd49944cccb74def0f296c65b0?v=c9b9ee8b&t=w1920hq
Preview:	.PNG........IHDR.............R:W.....pHYs.................IDATx...?l].....g....n...J..1.<...0@.,N..!...R...?1T...C...K.......YJ.zR....S.NAu....~.\.....s.}..~.\|?.........s..?.f....r.....\...@."."......HD.D"" .......DD@$"."......HD.D"" ...q..N... "4j..Iw.o.....DDh<.....TB""4.P).......RHD...J%$"B...........DDP.PI..._;K..j....n....."......wn{....+..2.{.uN.....M+o.....$.(a.......?.&.trO<..6._.........4 1q...v.?...if..#g^...(.^_.......d..9.D...q.x.a..=..........P..R.ydJx..W.y=.9.}x..92..JDd....E@.o....'.B........{.............4&...[..p._....a$2"v&.M...@%F"..H7"R....p.......g.?.....kM;K.N..!.C.AD.p@....C..[w......B..~..O.k....Y.$X..h@...?..9$.g......W....b!.....%...iW...H.S.^2B..8~.XQ.."R.......A.Q~.w......V5.p../"RB.....C..d4""...T.I..Qn..W\.eV....2"...>O....R@..)3.>......%..=......d....r@B^.g.a..9..z@...?.~.T..#Q... ..I..A.\|/.v....iED...B.\....}5.G>.....jED-..p...p.#..D..B.[+@D.J!$.Q.,..{.....9.....d.."R.bH.J. "E,.$..s.k..cZ,""e....a..=.*

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43430
Category:	dropped
Size (bytes):	12116
Entropy (8bit):	7.984694744614838
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVH5yGIt9IKyLPlIUjtiXuXTthBR5:+tjRIm6SoITu3khUZS9yLPlIhuDLd
MD5:	71B328AFF914ADA8B774BFA8FFF542C4
SHA1:	3FB33AE4AB66FFFD1BA62BADC661BD910CDF8CF3
SHA-256:	52056C6C133887292D444EB1152DEC3F0A134FB0ED4DC33C2B116AC480455A3C
SHA-512:	933B32DE0C08CB7C7EF44E07F9D74FA5D034B4BC4B350207E343D7E613C56F926AAD4AECF0BEE4F897E4A056F3314E8F5737A9852F9D704FF99F41A4F1C80A17
Malicious:	false
Reputation:	low
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	dropped
Size (bytes):	242321
Entropy (8bit):	5.541347304246857
Encrypted:	false
SSDEEP:	3072:7VICuKurL5pQlXfpJzX0LoOwSxl9kLEiLn8JuoIxxa4BbwJQNeK6g:Rp2L/QlxJynwSYdk4BbwJQNlz
MD5:	A5352FE93069C107A186BCDCDBE027EC
SHA1:	0FE06F95984BB89F584FA84DE65CC15669056903
SHA-256:	F6A7163DAB14242668593FA142D890BF4CE61D29CDC8E7E4B68D63F1729E0804
SHA-512:	E5AEFEE4432264D4A377CC493EBF0D11B87B5CCFA29FE1464818190E3DC7B35996E1C9C17BCC617F7507E22457BABBDF347A54F3ABB56DF403322C89E75F1B7B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":2,"vtp_instanceDestinationId":"AW-11113837502","tag_id":8},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-11113837502","tag_id":7},{"function":"__rep","vtp_containerId":"AW-11113837502","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_ads_last","priority":0,"vtp_instanceDestinationId":"AW-11113837502","tag_id":6}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	4.638838030432581
Encrypted:	false
SSDEEP:	24:2dk1WNYkIJKR6WWIMbToKIljsXVHWRIM0F7i9ymWA+TiXJhT2:c0V9JKoIcsKIx+2RI5F7i9ymWDV
MD5:	2B4AD9D86A5008652084DBED2E0C6547
SHA1:	C1A1416BF61415F0607A4BE8E44CB07390A5DEFA
SHA-256:	81123F16B0998744776E8927AC91B7C8472E11AABCB8AA78E3C0E82AF7BB87E1
SHA-512:	8B4435FA88A548BDF60C48E909ACB47220D794BECA6BF89E12B6014B01BF471D266E2696F93CEC00FEF769135830D53D7382F58B728D15AECEA1302C0CFF7A26
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #010041;. stroke-width: 0px;. }. </style>. </defs>. <g id="_2020_Icon_cloud-archive-email" data-name="2020_Icon_cloud-archive-email">. <path class="cls-1" d="m85.14,60.75l.04-.02-.04-.02c-.02-.76-.04-1.53-.09-2.92l-3.1-1.24,3.27-1.53c-.04-1.39-.06-2.16-.09-2.92l.04-.02-.04-.02c-.02-.76-.04-1.53-.09-2.91l-13.94-5.61v-19.52H14v42.03h39.65l-1.04.42c-.04,1.39-.06,2.16-.09,2.92l-.04.02.04.02c-.02.76-.04,1.53-.08,2.91l16.39,7.67,16.39-7.67c-.04-1.38-.06-2.15-.09-2.91l.04-.02-.04-.02c-.02-.76-.04-1.53-.09-2.92l-3.09-1.24,3.26-1.53c-.04-1.39-.06-2.16-.09-2.92Zm-6.43,8.85l-9.61,4.53-9.61-4.53,3.14-1.27,6.48,3.05,6.48-3.05,3.14,1.27Zm-3.31-15.88l-3.32,1.56-.71.34-2.27,1.07-.42-.19-2.57-1.22-.13-.05-3.2-1.51-3.3-1.55,6.5-2.64,2.69-1.09.42-.17,2.27.93,7.34,2.97-3.31,1.55Zm-9.68-20.73l-23.17,13.92

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1470
Entropy (8bit):	4.415496572736847
Encrypted:	false
SSDEEP:	24:t2sZuXMMjtVcT0Xtz0Wy+M9Wuaz7yYatxpsqbyhatrj3fgTYnpHatKwXXOofnO+y:jmrdAr5U7iHpBZJ3fgTYnp6/tn6pR
MD5:	DB915F2A254484FA2944236B8BCDFFAB
SHA1:	9B75E5D04959FF0170B4A6C46167C8375022EE42
SHA-256:	E1395C92B9357763C81AAE3D18CC0B8F38391318DE5A11C894BDF31232C80DB5
SHA-512:	4712C0258FFD750B3FA8FF6B66C4B43322904A728F7EF13310B449FA1E7C69E73523B37D6EB397B98FD0D4EF6EB7F6B6EF8AB04962C7550E958DF8C47459B29A
Malicious:	false
Reputation:	low
Preview:	<svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M4.34472 16.8974C4.34472 9.5144 10.3942 3.5 17.9224 3.5C25.4047 3.5 31.5 9.51001 31.5 16.8566C31.5 24.2396 25.4505 30.254 17.9224 30.254C15.7978 30.254 13.8192 29.793 12.0318 28.94L3.5 31.5L6.00106 23.3067C4.97246 21.4134 4.34472 19.2177 4.34472 16.8974ZM17.9224 5.54229C11.5417 5.54229 6.41448 10.6379 6.41448 16.8974C6.41448 18.9899 7.02074 20.9801 8.01427 22.6768L8.23821 23.0593L6.59688 28.4361L12.2316 26.7454L12.6072 26.9395C14.1976 27.7615 15.9784 28.2117 17.9224 28.2117C24.303 28.2117 29.4302 23.116 29.4302 16.8566C29.4302 10.6423 24.266 5.54229 17.9224 5.54229Z" fill="#010041"/>.<path d="M24.2558 23.7187H11.0508V13.9157H24.2144L24.2558 23.7187ZM12.334 22.4524H22.9312V15.2227H12.334V22.4524Z" fill="#010041"/>.<path d="M20.4475 14.9777V11.9551C20.4475 10.4438 19.2056 9.21841 17.674 9.21841C16.1424 9.21841 14.9005 10.4438 14.9005 11.9551V14.

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.66077513626963
Encrypted:	false
SSDEEP:	24576:hskBix/HRM//GT69wryvFzQmqErOEBmbT0h36YD:hdix/HiXGT69wryvFzk8Oo+Ta3FD
MD5:	68F231FABE51D83C2118B6B4187D212E
SHA1:	EE4BE1843DD1A25CD07348F88892CCC600C740C3
SHA-256:	3F1ACA20B3EB08535ADCA080DECEFA944A66DF32BE60075BABB6F8AAC4DB1CE5
SHA-512:	91965E0961B1DD084FC7D4C8A8D4575F728B1BFCC290415F1603F0705A73A66D053C8CCD311879C9E52E64581BBE53F72BB00F58A7A8816BEB7B522BBBAF0B28
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/75013efacc6a4fe5b9de645b642dfa78?v=0e57c20b:2f7c35be5c86b3:4
Preview:	H.[!...N.......q...S..>./.ieS~...b.f.hY.-R..>... E\|{c0.F-.Z.4.T...`.*B.....sc.....h.w.9u.$Q..w.M..]KG........r...I....U.pc.....s.iA.t.U<..F.......U.@f.0..[p.t.y./^K..._.1C9f.W,.....66.H....4K._......).{\.ce......L].r...=.........Jv.....q.w...V.5....$;...`S)..cI.pVqp.&.bI..Q..2..ML....k..!S......../3y.#.E.../(..N.1V..S...c ..-X.._"~.....6......wo.Zdi...q./...=....-.CQM..}6..W.}+..Ay.... ..4..F7,...?=....+..c...6.\|..B.........\...uO.7%L3.z9r\v7..N..b...b8'a..p....~.I.)/.% .rA.x....r....1U....s......o.0e...b...f3.m..v..,>.E...\f..h..g..v.....r....5.....L..7;.+\|..9.E.b.'..4..3...._.G.".e$.& ...J.>..%1.j...4...N...%F.....).,t.G.i. ..(8,.^Z..........Q.....+.S..V..FD..<..c....f.....}..]mW".0...N.s..do..X..fvl"T..l.Py.p.k.......gns ...6.\|....0...J[...3+MW.o..+&.E..jQ5..........^.7....2.7,......~.aR$_.t....\|...N...GC.@m.z.04.B.....b....P.. ...)..fJ...#.g[Y[.'6..........6....\|z..W.B..+{`.).....B....J..k......1u.....dM...eR..=...=...X.US%.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4523
Entropy (8bit):	4.943205960459409
Encrypted:	false
SSDEEP:	96:npyIm40waDOMgYaeSiaCBHxYa6Ayp58mjWGpjUHNjJjWW5hyfF:FZe1gwSiaM6vp58SWGpUHVJF09
MD5:	1A2A82094CB661CC75AE6DB4A19BFB1E
SHA1:	87293DF85D092961D2371C399BBC605DC463E12D
SHA-256:	BF9B4204687922A5AE645DF911BCB942F5E87D01B338DA7750A2CA6BEF923655
SHA-512:	D59FDEF18D238D311D22E6763913E0CBA8D839F5679F9D1462A4B050C08A914CF064F6B0C8F3927E14213C2675EBC3581690A407A65FAC0DDEA306E87B841FC5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202405.1.0","OptanonDataJSON":"3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018fac0d-7794-76fd-9018-58846813622e","Name":"European Union (EU), UK & CH","Countries":["no","de","fi","be","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","mc","si","sk","mf","sm","gb","yt","ie","gf","ee","mq","ch","mt","gp","is","it","gr","es","re","at","cy","ax","cz","pl","ro","li","nl"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","default":"en","fr":"fr","nl":"nl"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Varian

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	200914
Entropy (8bit):	5.193196659430929
Encrypted:	false
SSDEEP:	1536:gnFF+CvrpB/xBjnbrdEfJiiFPUDknkXknk/knkABgM2fcvwuSlYR26efc57B:OFACjzlLknkXknk/knkNfYI66Q7B
MD5:	0E3738DCE9B18269C4B8AF27CE6CD8BF
SHA1:	FCF3BCF3BEADC69368F95F29339B840A74D4EE56
SHA-256:	90972CB4BA2AFB32701B9809C3E0962572B6F46EC0833EA1868FE20D99EAB400
SHA-512:	B786B3FFD92DA1E488C44A962373D6E4D94756D7E5DD8980A94CEDD7B534E12F6B3C9B5BADE9E3E11FCDE18AA4A1E2CDB50BDD38CE617B8C951ACD3A6E8DB3DB
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.136248672727249
Encrypted:	false
SSDEEP:	3:YIzIX/GZR49aLVAL4n:YIyGvvVln
MD5:	905B1FBB26E082557FF0B3B3553CDA6C
SHA1:	8FE0790D6026998BDB2C9FFA3B915952E613E1B4
SHA-256:	F249B63CB2FCB66B47E86F906C98F8FD912E82DD035B4E53D7E72FC1960CFD16
SHA-512:	284567E83A5C15761498249B27B4B700AA081A65B858F29458E5D0F3DEBDEA93DD5CFAD94EEFAEB43837E70CC288B2A34EA168D2771CB57C993E269C287097CE
Malicious:	false
Reputation:	low
Preview:	{"message":"Missing Authentication Token"}

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10120), with no line terminators
Category:	downloaded
Size (bytes):	10120
Entropy (8bit):	5.357849475456818
Encrypted:	false
SSDEEP:	192:MLTVN4eglsWbz6lybr3I1xtcWUzYR2xuv+BbPKDB3b:MMOtcWUzYR2xuv+B76B3b
MD5:	78865502655DCE8F513D1E75280B42B2
SHA1:	0F94F0868CE0C254D53C6230892E36019D657269
SHA-256:	64115EED5E09AA2ECB433BEA6361D9232A98A3687A185CAFCF61CB890F1F3884
SHA-512:	86875BBF7926389E94A9586775BDFF54CEE8CA0C5207AE80F9718106A4011A671FF7BF904A4561335B32210FDE3236C7F5D5E4423C191BAE0CBE32B441D0D0FC
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/engagement/js?goalId=16174&cb=1721420611964
Preview:	(function(bidtellect){"use strict";var JSON={};bidtellect.JSON=JSON;function f(n){return n<10?"0"+n:n}var toString=Object.prototype.toString;var REPLACERS={Date:function(key){var ms=this.valueOf();return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"."+("00"+ms%1e3).slice(-3)+"Z":null},String:String.prototype.valueOf,Number:Number.prototype.valueOf,Boolean:Boolean.prototype.valueOf};var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,gap,indent,meta={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"},rep;function quote(string){escapable.lastIndex=0;return escapable.test(string)?'"'+string.replace(escapable,function(a){var c=meta[a];r

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 912 x 894, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	160709
Entropy (8bit):	7.985180007502577
Encrypted:	false
SSDEEP:	3072:L67c2vZhHsiCopNyLWdTs+Qg2qiFiH6pq9NFGYQhNwBlPXqKydDnNpZQ88ZJnqwT:W5ZhMiCMN/Tv2qwXqbwYQEPXqKyBnLOf
MD5:	E38AD8F6BFB17CF27689F4FB7CD9224D
SHA1:	9BB3B628A81A41910AA94E06EBCBE818A576EFA9
SHA-256:	2B5CD370FB44D334B5600C6F219ECF73FF2A5D88D47805B8CD4CE1E25605C1B6
SHA-512:	4AD8C8BE2BC35D9C6985F11C42F7E7706EEC413C12A772027CC847D68CE14C0A7C14DD1E6DB754ECCEB75E68A01D003E73D61DDBD4BBB13631B7036C66DAC3F7
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/e1028a80bdb54d0489c0b0775d7a8ebd?v=465a9fc1&t=w1920hq
Preview:	.PNG........IHDR.......~.....c.......pHYs...#...#.x.?v.. .IDATx....$E....gN.s....%.%G...H.#("+../...x.(^.KP...p..aEA.$-aa. ...........U....>...3.g.....tWWUw.t.S.[o)................................. .,.................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1826)
Category:	downloaded
Size (bytes):	199513
Entropy (8bit):	5.532861578740467
Encrypted:	false
SSDEEP:	3072:LxICuKurL5pQlXB0O0LAOlSxl9kLEiyo9BHp4BbwJQNNMiKg:1p2L/QlR+vlSY4BbwJQN9X
MD5:	8D8C9F0EC92937F327998F572D7FAFD3
SHA1:	4047852E840BC20ABE401676B782453F286F32F0
SHA-256:	364BFE46C49562E6FBFA465968A8E8A8F4710A3C6D6859867BDEC5C9A7C2AF7F
SHA-512:	C45D83D99D0C5B02DFC46030985112ADEF0D7E403FD9129BDBFF845F084EE8D4E0F56B83F2F8C8558E41C3029FB04892BC64392E40533B3CF6F829FEBBCF0C02
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-1898620-6
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1826)
Category:	dropped
Size (bytes):	199513
Entropy (8bit):	5.532714590336859
Encrypted:	false
SSDEEP:	3072:LxICuKurL5pQlXBpO0LAOlSxl9kLEiyo9BHp4BbwJQNNMiKg:1p2L/QlRTvlSY4BbwJQN9X
MD5:	8C58AF7E2E47F908825E52DF29D1ACD2
SHA1:	66CADFF4FEF6ADAEDD40A64A646282F22B7F18FE
SHA-256:	C5FF8590E4D77552F5E16B9D5C7086C83084E6EB401640119BD45F13C692C5A7
SHA-512:	FF030C89C0DEE517D119A842F0268E5499B81EC1DBFA9E426899A9E1DC35D6D1BF9AC0C7174095877AA55BA73D62D23B0496C58278870AB324D7E01671C64510
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1398
Entropy (8bit):	4.342650302185063
Encrypted:	false
SSDEEP:	24:t2sZuXMMWaw6hTkIYWlEjG9MM2Voa/oiyGR4yElKOTmrmaYIldJM0ZZ/+z1S9AU:jZ6hTkIdEVoGoiRTvjrmaYIldO61R
MD5:	7F05B10DFB09DA36EB4D8731A7461A4F
SHA1:	A21FA61A4E9677469A996AA74E3E3E0AD3FDF387
SHA-256:	9B8F58BE4E018543B9A7BE3EC6838F074F06327FF4E2BB562856DE8A2F5757EA
SHA-512:	53B0DAE39890D1479D3D273AF50E8C423B2B8AB63E2BD88D09749AF7843E76353E6E93D2201D95F6B3BEA66642F4EEFDF3A3E081C50BA01FDD95343052CB5FEF
Malicious:	false
Reputation:	low
Preview:	<svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M22.4542 16.9077C22.4542 19.6436 20.2363 21.8616 17.5004 21.8616C14.7644 21.8616 12.5465 19.6436 12.5465 16.9077C12.5465 14.1718 14.7644 11.9539 17.5004 11.9539C20.2363 11.9539 22.4542 14.1718 22.4542 16.9077ZM19.9773 16.9077C19.9773 18.2757 18.8683 19.3846 17.5004 19.3846C16.1324 19.3846 15.0234 18.2757 15.0234 16.9077C15.0234 15.5397 16.1324 14.4308 17.5004 14.4308C18.8683 14.4308 19.9773 15.5397 19.9773 16.9077Z" fill="#000129"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.5004 7C26.3922 7 33.6004 17.4291 33.6004 17.4291C33.6004 17.4291 26.3922 26.8154 17.5004 26.8154C8.6086 26.8154 1.40039 18.4721 1.40039 16.3862C1.40039 16.3862 8.6086 7 17.5004 7ZM29.5634 17.3189C28.8717 18.0301 27.9837 18.8725 26.9427 19.7109C24.236 21.891 20.8981 23.7192 17.5004 23.7192C14.0054 23.7192 10.6478 22.0574 8.05805 19.9717C6.783 18.9447 5.78453 17.88

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 912 x 894, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	160709
Entropy (8bit):	7.985180007502577
Encrypted:	false
SSDEEP:	3072:L67c2vZhHsiCopNyLWdTs+Qg2qiFiH6pq9NFGYQhNwBlPXqKydDnNpZQ88ZJnqwT:W5ZhMiCMN/Tv2qwXqbwYQEPXqKyBnLOf
MD5:	E38AD8F6BFB17CF27689F4FB7CD9224D
SHA1:	9BB3B628A81A41910AA94E06EBCBE818A576EFA9
SHA-256:	2B5CD370FB44D334B5600C6F219ECF73FF2A5D88D47805B8CD4CE1E25605C1B6
SHA-512:	4AD8C8BE2BC35D9C6985F11C42F7E7706EEC413C12A772027CC847D68CE14C0A7C14DD1E6DB754ECCEB75E68A01D003E73D61DDBD4BBB13631B7036C66DAC3F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......~.....c.......pHYs...#...#.x.?v.. .IDATx....$E....gN.s....%.%G...H.#("+../...x.(^.KP...p..aEA.$-aa. ...........U....>...3.g.....tWWUw.t.S.[o)................................. .,.................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R@@.......................................... ..$........) ........H..........@..H........R

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43094)
Category:	downloaded
Size (bytes):	44779
Entropy (8bit):	5.283843760630674
Encrypted:	false
SSDEEP:	768:NrrC6q4mPnrc518qBnrFnDlIfO5q5BfPpfYKfvNbp850WdIiOOv5sQatdpBCF4o8:NvzWfuKxQevb7
MD5:	C7D17430C2034CFE91A787227E1E2B70
SHA1:	BF402AAA66A0D5B43022688DA10340ED88514E01
SHA-256:	C52D6A374C5FB6CE03EE338569990BADF1F38FD52A4D44982C034DE377B26733
SHA-512:	B659FDDD409FDD2C21FBB85AC6FA0C459579B357DF3DFA2365FB5C79D21FC4E11B865B2CA6B2BF99FA32E4CB1B186F1E22CA6E8390B728D3434F88CBEE208038
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apce%22%3A1%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22mlr%22%3A1%2C%22pathPrefix%22%3A%22%22%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/resources.js?pu=1&pv=17214066060001102990252&rv=1721312700000
Preview:	'undefined'===typeof Aura&&(Aura={});.(function() { .. function initAccessResources() {.... $A.componentService.addModule('markup://force:customPerms', 'force/customPerms', ['exports'], null, {BypassValidationRules: true,}); .... $A.componentService.addModule('markup://force:userPerms', 'force/userPerms', ['exports'], null, {UseWebLink: true,EmailAdministration: true,EmailTemplateManagement: true,EnableNotifications: true,AddDirectMessageMembers: true,PasswordNeverExpires: true,AllowUniversalSearch: true,ShowCompanyNameAsUserBadge: true,ActivitiesAccess: true,ContentWorkspaces: true,SelectFilesFromSalesforce: true,}); .. };.. if(Aura.frameworkJsReady)initAccessResources();else{Aura.beforeFrameworkInit=Aura.beforeFrameworkInit\|\|[],Aura.beforeFrameworkInit.push(initAccessResources)}.})(); .Aura.StaticResourceMap = {"CDO_ADD":{"seismic":1679067540000},"AngularJS":{"SBQQ":1683970685000,"refedge":1692280109000},"penpal":{"dca_mass_action":1645132854000},"Reassign":{"sbaa":1575308622000},"jq

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1304 x 222, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4234
Entropy (8bit):	7.590913877364732
Encrypted:	false
SSDEEP:	96:97qV4zCcnm9rHITrvOoeb/x6G2CZ6ZHaQ8U11pYEknK7:97M4zCcnKjIvvm16IZ8HaQ8Yht7
MD5:	7DA570655B487100628F33F8E98B215C
SHA1:	72AED87BBBC384331251842B1B5D19A6B49C2EA8
SHA-256:	0671F415E319CC335325E0111523C8E5F79F6D5D1526E6F8FBBC5A619022B84B
SHA-512:	EA8DB903F211EE7A8394AF73D79AB0C77820161B4F121152E4BC7DE984D1C50F4B0A50A98513E2DAC001157EDAE58B7B31C4B69DCC88F9E3699122757B1056F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............aO.!...ZPLTEGpL..?..A..>..>..A..@..@..>..A..A..?..@..>..@..@..?..@..?..A..?..A..A..?.....?..@..?..>..A........tRNS.@. A.....o0.OP.`...p.a.pQ....m....IDATx..... ...H...bK.....k.et. F.1...@..b..#..... F.1...@..b...)... F.1.s..G...Ew....1......1......1.......1"F.#b.1"F.#b.1"F.#.b..(F@.b..(F@.b..(F@.b..(F.A...{..#..... F.1...@..b.hA..b..#..... F.1...@..b..#..... F.1..@..b..cf\|..^v.l.Y.......!Y......k.e...c .B.+_...o.!F....nE.....m`h.C..^.....8.tu.G.<...[.o'C.}.\.1.M.o3..q.0R..RI.I."x.&.....O......2..kx....;.X....Tb...Om'..d`....Y...h7.s...^.7.#^r..C3p)r3....(_..F.:N.=..W.....u..%...l.^...J.`[.....a[n.$[..A.......<[...c..[e.....0....q...I....6.h...af..cP2./...l.N=.[......M.B..al ..D.a\.. >.j,..`...a4.\|......5...1...Q....T...%.m....](..N..qJ...c.L.J.5......Qr.r.2..F..0..k!9..(...H>.N.w'..:r..0:`%...\|...z...N:.J...<a.9g\|.(.....a..U....lW.a.+.....]V.2.\n.._....r~[A.......0..h7.\|G...Q.+O.F...3.M..9O...x..{..*c.x....b.a.v..I.1..Si.X

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (540)
Category:	downloaded
Size (bytes):	581846
Entropy (8bit):	5.226908988973584
Encrypted:	false
SSDEEP:	12288:4UQ0hJIM5oHh6obCimoC8m3CeDKzPmDm2XOFXi9oUZb4sj5BFViAJ23N+MvYTh3B:k//g
MD5:	123669601BCAEB2E38997190849A922F
SHA1:	A44482DD66120C0F5B5ABA09A529E022E853B344
SHA-256:	16B0A049F0543C9E6B7511A2DCBC64D5EB2C4C181EF32287B60DE7E96068E4A1
SHA-512:	15120BDC70193AB99D504B5C0119E7E61FB9985B28B539E998715C94FE95D94C82B2A218F670A1F95EE288935DD95E0C4D224ADD0DA83DA476F5ECED55C2D0B6
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg
Preview:	..........<!DOCTYPE html>.<html lang="en" id="ng-app" ng-app="appLogin" ng-cloak="" class="ng-cloak animate-on-enter-alt" ng-controller="AppLoginController as appCtrl">. <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, user-scalable=yes">.. <title></title>... <link href="../assets/entypo/font/entypo.css" type="text/css" rel="stylesheet"/>. <link href="../assets/font-awesome/css/font-awesome.css" type="text/css" rel="stylesheet"/>. <link href="../assets/mimecast-icons/css/mimecast-icons.css" type="text/css" rel="stylesheet"/>. <link href="https://fonts.googleapis.com/css?family=Open+Sans:400,600,700" rel="stylesheet">.. <script async="async" src="https://static.srcspot.com/libs/galindo.js" type="application/javascript"></script>.. <style type="text/css">.@charset "UTF-8";./* Layout for this specific app /./ S

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55937), with CRLF line terminators
Category:	dropped
Size (bytes):	181458
Entropy (8bit):	5.622553391032701
Encrypted:	false
SSDEEP:	1536:8Yk759BO63LZX7GrRWayRhs54dywnX1NIaRXNi0x/iQSZdBBHC/XEybN53NbDRsQ:ivO63LZrGrRWayXnopSyy
MD5:	0EE9451CE9CA8CFB6B0D7450DD000DCE
SHA1:	FAD4F977CD699821636E1A847FB8BF4FDB7B91FF
SHA-256:	486A78737472297E52734895C37608869E68224C45633B2461EB95782067003B
SHA-512:	38E55E8D19CD23475D3E059E9A380063A401CE7B2A3CA2F24DB0924CB87A7300A1C30AD8290FBFD47ABCF71C50088F017E8270B763CC2A87DCD65FEAA6A952D3
Malicious:	false
Reputation:	low
Preview:	window._mfq = window._mfq \|\| [];..window.mouseflowEnableCssRecording = true;....//Form submit success workaround..var formId = document.querySelector("#mktoForm_11119");..if(document.location.href.indexOf("/analyst-reports/") > -1 && formId){..formId.onsubmit = function() {..window._mfq = window._mfq \|\| [];..window._mfq.push(["formSubmitSuccess", formId]);..}..};....//Form submit success workaround..var formId = document.querySelector("#mktoForm_11119");..if(document.location.href.indexOf("/ebooks/") > -1 && formId){..formId.onsubmit = function() {..window._mfq = window._mfq \|\| [];..window._mfq.push(["formSubmitSuccess", formId]);..}..};....//Form submit success workaround..var formId = document.querySelector("#mktoForm_5957");..if(document.location.href.indexOf("/get-a-quote") > -1 && formId){..formId.onsubmit = function() {..window._mfq = window._mfq \|\| [];..window._mfq.push(["formSubmitSuccess", formId]);..}..};window.mouseflowAutoStart = false;..if (typeof mfRecord === 'undefined')

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	17305
Entropy (8bit):	4.9623908838266235
Encrypted:	false
SSDEEP:	192:7Ad4DoMFbzvnBnRQAaRG1/yst6/INl2YSHyyge:vswbzvHCET36SM
MD5:	AB05F838C4DABF2FF308E3589972DDCC
SHA1:	2299D89D1CAB2F864AEB5B8DE7C01089C3EE02F6
SHA-256:	7A24726189EC811CBF06E22AAABFFBB801AC7053AB29639DB0BE79D4F1806C1D
SHA-512:	1ED639285346C8223F618DCEC9AC39D01587CF2E1FB7FBF88DF4D32C2644721CFE4F78D12D4C65F70BC701ED2E6386170A323D12B0E7CA0B101BD7BA430C5C45
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/assets/entypo/font/entypo.css
Preview:	@font-face {. font-family: 'entypo';. src: url('entypo.eot?60859844');. src: url('entypo.eot?60859844#iefix') format('embedded-opentype'),. url('entypo.woff?60859844') format('woff'),. url('entypo.ttf?60859844') format('truetype'),. url('entypo.svg?60859844#fontello') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'fontello';. src: url('../font/fontello.svg?60859844#fontello') format('svg');. }.}./. . [class^="icon-"]:before, [class=" icon-"]:before {. font-family: "entypo";. font-style: normal;. font-weight: normal;. speak: none;. . display: inline-block;. text-decoration: inherit;. width: 1em;. margin-right: .2em;. text-align: center;. /* opacity: .8; */. .

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1826)
Category:	downloaded
Size (bytes):	199545
Entropy (8bit):	5.532990281696137
Encrypted:	false
SSDEEP:	3072:LxICuKurL5pQlXB0O0LkOlSxl9kLEiyo9BHp4BbwJQNeMiKe:1p2L/QlR+DlSY4BbwJQN4x
MD5:	87F0EF9FBD0563B77451A8C59E33066A
SHA1:	E0026F996342F63A67B0CC84E58928750FF7BC64
SHA-256:	839FCF67EC55A3D3C35C914F98D4677FB97DA93E45F09AAD8221771250E70FAA
SHA-512:	E84400FC2183038C9F286695F3AD0DF83B23C9933FFA9600ECF34AAE4A3C6A0958468DC2BD656582E7C9FC542870B26907627C3904B8E2622569C2DF255C9EEA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-1898620-6&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1774
Entropy (8bit):	7.182497231370724
Encrypted:	false
SSDEEP:	48:w/6suXBKHJmLHPFn+rOVs3BKxK66mZveYl+:wSsyBKHJmB+aSBKxuaei+
MD5:	D278BD74EAA47C6A11F8509465911FC0
SHA1:	7B86FC7E0D2F2B0A9E4AEC05152FEDEC423EF024
SHA-256:	FBFB5037E68DF3FE407FB09019AAF81D9A373D1AB73424EEA8ACFB413F29313F
SHA-512:	06779131876F99D5162CB33C0AD0EB146EB46EC7B8DADB4C0027A520B2B8685A3F0A9C13335E9DA8FFD24BFE9CA2EE9EFD5908B06568E4F54525B282B5240F17
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R.l.....pHYs.................sRGB.........gAMA......a.....IDATx...Kl.u.........@)Pm..-."b(/...0....@L../..D.].G.^...%1j.".B$Q.<.....v............$..a.;i...........#... .M..N.1..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5..5....fiN{....[.0..TA3......B..X.Q..U..TJ....7w...K.{MN.u...].>.o..]...u....;:.c..4v....8.....=33...G.xh.f..{.M.3qcR..t4....C...u.....yMN.U...%.mj.p$.mk.Wh.[t.......}.....A].x..F..@..4k.x..)......../..^..>Q.s...l..Ww .....k8..D.7...G...AmX?.\sV'O.....I.F9...J......w^.=..p.%.#..# ...i.Z..v...CK.../u.........].z..m.....^.<>..$.@..a4.....]..P}]..,9.B.X..1e...{...nd....rc.@Uyb......=...........2m{..=..r#.T.....{~X.oRWW...P......n.Mk..\|SU.@.Z.x.6o^...e..@U[..}v...r..@U.f3z2...\...P....k....6....U/..:...}.~....&.,.P+..X.Li....jB[k......{.UJ...P........=%.@...[....xQM...jF.rl..pM.t.o..5...!.....t....j.%].V*....pag.`~...5.",z,.....d..O.K....[.&f.J:).USS..>\|\GGO.X,.......9'..

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 354, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	24452
Entropy (8bit):	7.978044771934917
Encrypted:	false
SSDEEP:	384:vuEZKhtrmuvHREX1WiqUZMyduWeBnBLWo+YWWVMK+eAl7ngd1qux2hQmkej1I0FP:mEZKhtFvxEdqIMRDBBWoll3A7Jux6BSs
MD5:	CA332883777F3A0E403061A31B48E930
SHA1:	262272E5B4C42348FC436EE74A75E737DCFAE83D
SHA-256:	6AD269FBBFF5488466E440CB38C9513B223D19E99CDAD9DA406B271DD8B4CE4A
SHA-512:	04222739C04A60AED08F376F4E84B3D2FC62DF757CAB3D4AE34A99057271AC47DC0CD79F43A27E18D0CA8C49C1F30FB740E7975520BD77B0B9E427FE25BAE17C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...b.....+.......sRGB.........pHYs...t...t..f.x.._)IDATx^...T...w./.K.TPPQPDDQQ..E..4.^.Dc.S.X.`D.X.....@...(V$...........,l........7o.......r...s.....<yr.>.."...oK......@@V.3.8C.P...V..c.=F.u.o....T...(..P......m.........E..!.l..\...(...P....^.x..-.....l.2;.;w>....=..].f.....................o.y......l..G.y..'@[.H.h./........{g."-\..{.w..W......;..{.7.\|s.m.m.!C ....}..W..p...?..._..Pu.=.\|......_.[.!..XE.5!......X..>.l.....9...=.Fs.....r..%C...@bl/E.k......?...}.g.p....r.3.<SWW'......#F.'.\|....;...^.....O...\|v...K..~...s.y.Q).../.\|...R..?....s........B.D....w..._...g.F.7o...W.\|.....?.......8..#..d;........).b.9.~.i.M.<..%...[.x..fj2E -.$..+W.,((.n......=....'D...i.........k.z.)>..?....s..p..[o........\|6r..l:v.a.x.y._....c..b...@..LQ........I..M..d.._.z.!.........r......s...Y...o..o.....`...........oS.{...x...q..EEE.\.......o....!.d.#/....fj2E -.$...P....O<q..G...P.p..g.}........0..T>....Cuu5K.{..}{...

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 512x302, components 3
Category:	downloaded
Size (bytes):	20524
Entropy (8bit):	7.763073518841138
Encrypted:	false
SSDEEP:	384:hYNg7elBHCazZCQlL7G4nl754rhKcciulRjZTNkItWOlpQLSt:hYy8CadCQV6SterUcNu3ZTmItws
MD5:	F0BFA18A2B2B98602CCF5F698F2D5349
SHA1:	54D228167191C581900540DB7682223F273C0738
SHA-256:	7BB880615219E2FBECFB7792494703E51E3FBE0C959C988D1E054975D0F618FB
SHA-512:	E4E962538CB85A4408B6D19905A464DC0BAE2D9822168CB727C6686D77369659338EF41BF7FD0C5A5CE6E44B1BDEB580ABF447BCE321A131B448E4F0C5E8CDE2
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/71680926188a4357b6b246fb0177c4b4?v=9a69a64d
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	335
Entropy (8bit):	4.624475766564882
Encrypted:	false
SSDEEP:	6:2LGa3ImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47JsnVtEsVsVt:2f4myCkMwykgIaoO4nsnv9yv
MD5:	3D32A9F3A6EBD5C5BAC41AFAC6AF1775
SHA1:	0DACD52EE7D7BEB58E538F1DD0F3DF6764B04C69
SHA-256:	E0F9A49B3445DF93031EF8414EAB4C9266E8E6AEFC9594C8B3F49376F57EE97C
SHA-512:	B4CE78D1DACE874D37D1A35C9C2D556A30BD104BB1BBD46CD9364D2C3251F9E072B2280B4254279EBF8DD1FA098995FDF799CF7889181457B9E3FF37701FF4DD
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/5435866.js
Preview:	(function(w,d,c,k,a,b) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b});.. }.. }..})(window, document, 'us', false, false, false);..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7207)
Category:	downloaded
Size (bytes):	7208
Entropy (8bit):	5.164123343165375
Encrypted:	false
SSDEEP:	192:HA1SI+LtL9xW+XUB1SAfQu+BzaNPQznTjdNs6L:g1SIaxWLym+TD3
MD5:	F046BFA3E2CD2807E16D96CF04BDD930
SHA1:	E1FFB6FC6599857968CE3A361A2040FBB541F4EC
SHA-256:	8E6B3272816C9B6EFEB0B3CCC16326C123D9860F38D7C7C4FC215334559996E2
SHA-512:	C9718C6FE21E0D4D0AF31C393466A467478E9CF6DF4BDCCE2AD52F4CE4C00CEECF0296239A0FB65E128047035A02CDB684763038132A106D53167B5D1B2CAB62
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/web-vitals@4.2.2/dist/web-vitals.iife.js
Preview:	var webVitals=function(e){"use strict";var n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){var e=self.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0];if(e&&e.responseStart>0&&e.responseStart<performance.now())return e},s=function(){var e=u();return e&&e.activationStart\|\|0},f=function(e,n){var t=u(),r="navigate";a>=0?r="back-forward-cache":t&&(document.prerendering\|\|s()>0?r="prerender":document.wasDiscarded?r="restore":t.type&&(r=t.type.replace(/_/g,"-")));return{name:e,value:void 0===n?-1:n,rating:"good",delta:0,entries:[],id:"v4-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},d=function(e,n,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var r=new PerformanceObserver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5451)
Category:	dropped
Size (bytes):	232267
Entropy (8bit):	5.543384131174015
Encrypted:	false
SSDEEP:	3072:cX2xICuKurL5pQlqBxO0LUOlSxl9kLEi2CBQa4BbwJQNnb0s6G3:A2xp2L/QlgbzlSg4BbwJQNQs9
MD5:	F20941D87E0C93D3E90727F06E2C7748
SHA1:	0B7939F7AEE71A161412410415C0A4EBA2B18510
SHA-256:	B298F8EF71D738DCC4D8D332621FB4AC4BEAC9443AC7A547C1C2412BCF4DFD81
SHA-512:	FFB0620836009B4B77995E595C7EC5C112ED50465DE5CDC0034627B554CE86C3A2AD888D9C590A073532CF6C1C339BD3D94896887B5D45C22A7EDA17885C8D17
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"31",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__e"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"demandbase_sid"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"Non-Company Visitor","vtp_name":"company_name"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"audien

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39068)
Category:	downloaded
Size (bytes):	364771
Entropy (8bit):	5.175222994377721
Encrypted:	false
SSDEEP:	3072:kI5cQE0s1FU2pydFE9D9TZfjnuU2c2u2o2aQmFSWDxL5NtQWkKoFxvlNYKmyp0Eh:kI5cQ1s1F/vD9VfjnBnSWDQFnNZ0gX
MD5:	5581EAA92ED6AECAC94EDF772DEA84CC
SHA1:	AFF94051C50832FF40F080B4C7E54235BA2CC8FE
SHA-256:	354CC4293702F92DCB54F861E1F04EB6873B2B6CF1C57E2717593D84721131FB
SHA-512:	7581DC9EE45E5BB1E5B3A00CAF90168B23634D5C58EF5D4330E2C432BCEF23FA57DC46C6433A9E91CA11949731D6E735871A11A2A2385F58BAF99980269B8C98
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css
Preview:	*,:after,:before{box-sizing:border-box}ol[class],ul[class]{padding:0}blockquote,body,dd,dl,figcaption,figure,h1,h2,h3,h4,h5,li,ol[class],p,ul[class]{margin:0}body{min-height:100vh;scroll-behavior:smooth;text-rendering:optimizeSpeed;line-height:1.5}ol[class],ul[class]{list-style:none}button,input,select,textarea{font:inherit}input[type=text]{-webkit-appearance:none;appearance:none}html{font-size:16px;overflow-x:hidden;overflow-y:scroll;position:relative;width:100%;height:100%;margin:0;padding:0;font-family:Open Sans,Arial,sans-serif;font-style:normal;color:var(--mc-typography-copy);scroll-behavior:smooth;-webkit-text-size-adjust:100%}.mc-anchor{text-decoration:none;-webkit-tap-highlight-color:rgba(255,255,255,0);color:var(--mc-anchor)}h1,h2,h3,h4,h5{color:var(--mc-typography-headings)}body{display:flex;flex-direction:column;line-height:1.5rem;font-weight:400}footer{margin-top:auto}.scEmptyPlaceholder{width:100%}@font-face{font-family:neo-sans;src:url(https://use.typekit.net/af/d14aa2/00

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4523
Entropy (8bit):	4.943205960459409
Encrypted:	false
SSDEEP:	96:npyIm40waDOMgYaeSiaCBHxYa6Ayp58mjWGpjUHNjJjWW5hyfF:FZe1gwSiaM6vp58SWGpUHVJF09
MD5:	1A2A82094CB661CC75AE6DB4A19BFB1E
SHA1:	87293DF85D092961D2371C399BBC605DC463E12D
SHA-256:	BF9B4204687922A5AE645DF911BCB942F5E87D01B338DA7750A2CA6BEF923655
SHA-512:	D59FDEF18D238D311D22E6763913E0CBA8D839F5679F9D1462A4B050C08A914CF064F6B0C8F3927E14213C2675EBC3581690A407A65FAC0DDEA306E87B841FC5
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202405.1.0","OptanonDataJSON":"3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018fac0d-7794-76fd-9018-58846813622e","Name":"European Union (EU), UK & CH","Countries":["no","de","fi","be","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","mc","si","sk","mf","sm","gb","yt","ie","gf","ee","mq","ch","mt","gp","is","it","gr","es","re","at","cy","ax","cz","pl","ro","li","nl"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","default":"en","fr":"fr","nl":"nl"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Varian

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14829), with no line terminators
Category:	downloaded
Size (bytes):	14830
Entropy (8bit):	5.029953946135502
Encrypted:	false
SSDEEP:	192:37QNvfPz9aWM7CzVJS1qlafRWHQmpqx5X3+zNEDbhDulmaDxbDWfwDxDx6fOBDZw:37qr074VWvNZJxSZXdBFQgafGYRT7
MD5:	980BD70C0616A68A9B3999ED160F6EB6
SHA1:	E449CD48D79635CE3420B4F4C3696EFA2F0F31C6
SHA-256:	014735A9D87C9EC56B6D26130B79629FF6A004AB926FAFC95FE10424BA03D120
SHA-512:	153C32DA37D41C91E9CE21E8B65C065324E4ADC6B415C0891AD0A58B5C4AC88C7BABA520A2F3B6D0BBF29010E75DD25AE72BAE09F8FAA83FD48B5F86A10F8878
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/sn9p0ljv8dushqgktXFohVVCLNU/OjZf5qtiHR_vmdtEQCu1dPifU1o/5EnNSNeWNc40ILT0w2lu-i8PMcY.dom.jsonp?sha256=AUc1qdh8nsVrbSYTC3lin_agBKuSb6_JX-EEJLoD0SA
Preview:	pendo.receiveDomStructureJson("sn9p0ljv8dushqgktXFohVVCLNU", "OjZf5qtiHR_vmdtEQCu1dPifU1o", {"props":{"aria-modal":"false","aria-label":"Resource Center","role":"dialog","id":"pendo-resource-center-container","data-layout":"HomeViewModule","style":{"overflow":"hidden","position":"fixed","width":"400px","height":"460px","right":"auto","bottom":"auto","-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","background-color":"rgba(255, 255, 255, 1)","border-radius":"3px","z-index":300000,"left":"auto","top":"auto","box-shadow":"0px 0px 20px 0px rgba(136, 136, 136, 1)","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container _pendo-resource-center-global-container"},"type":"div","children":[{"css":[{"selector":"#pendo-close-guide-b04f9b94:hover","styles":{"color":"#333333"}},{

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	dropped
Size (bytes):	32342
Entropy (8bit):	5.406635303770299
Encrypted:	false
SSDEEP:	768:MyuC0/ycbDOg0OYF8gyyIotzqOnUtNbKK96TGop61g1V2sShrjlrkR:MyuCeDOV8gyyIotzqOnUtNbKe6TGop6E
MD5:	0BC77B78EEFD446FB2EDB9932460D3FB
SHA1:	4530517CD1B9187813EA74B58B942A00E23B0EF4
SHA-256:	FF0BE85B8B1565D25993C75D2F7B48E9227E4DE1458F12F62A3CC87878DAEA1B
SHA-512:	10BB5EF25A812DAAF5CCB7271FA2F7E11A653DC084E15CE8B2F2C712F340ED959587F75FAC5E91B9E8B5A210D33E596E4CD080AFEDE2429613A414A344B6DD9E
Malicious:	false
Reputation:	low
Preview:	/. @overview es6-promise - a tiny implementation of Promises/A+.. @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald). @license Licensed under MIT license. See https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE. @version 4.1.0+f046478d./.var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(w){var p=0;return function(){return p<w.length?{done:!1,value:w[p++]}:{done:!0}}};$jscomp.arrayIterator=function(w){return{next:$jscomp.arrayIteratorImpl(w)}};$jscomp.makeIterator=function(w){var p="undefined"!=typeof Symbol&&Symbol.iterator&&w[Symbol.iterator];if(p)return p.call(w);if("number"==typeof w.length)return $jscomp.arrayIterator(w);throw Error(String(w)+" is not an iterable or ArrayLike");};.(function(w,p){"object"===typeof exports&&"undefined"!==typeof module?module.exports=p():"function"===typeof define&&define.amd?define(p):w.ES6Promise=p()})(this,func

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	downloaded
Size (bytes):	32342
Entropy (8bit):	5.406635303770299
Encrypted:	false
SSDEEP:	768:MyuC0/ycbDOg0OYF8gyyIotzqOnUtNbKK96TGop61g1V2sShrjlrkR:MyuCeDOV8gyyIotzqOnUtNbKe6TGop6E
MD5:	0BC77B78EEFD446FB2EDB9932460D3FB
SHA1:	4530517CD1B9187813EA74B58B942A00E23B0EF4
SHA-256:	FF0BE85B8B1565D25993C75D2F7B48E9227E4DE1458F12F62A3CC87878DAEA1B
SHA-512:	10BB5EF25A812DAAF5CCB7271FA2F7E11A653DC084E15CE8B2F2C712F340ED959587F75FAC5E91B9E8B5A210D33E596E4CD080AFEDE2429613A414A344B6DD9E
Malicious:	false
Reputation:	low
URL:	https://d2i34c80a0ftze.cloudfront.net/fullcircle.js?cid=96fced6a-d5a9-48e2-a85e-b1d292166b0c&domain=mimecast.com
Preview:	/. @overview es6-promise - a tiny implementation of Promises/A+.. @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald). @license Licensed under MIT license. See https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE. @version 4.1.0+f046478d./.var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.arrayIteratorImpl=function(w){var p=0;return function(){return p<w.length?{done:!1,value:w[p++]}:{done:!0}}};$jscomp.arrayIterator=function(w){return{next:$jscomp.arrayIteratorImpl(w)}};$jscomp.makeIterator=function(w){var p="undefined"!=typeof Symbol&&Symbol.iterator&&w[Symbol.iterator];if(p)return p.call(w);if("number"==typeof w.length)return $jscomp.arrayIterator(w);throw Error(String(w)+" is not an iterable or ArrayLike");};.(function(w,p){"object"===typeof exports&&"undefined"!==typeof module?module.exports=p():"function"===typeof define&&define.amd?define(p):w.ES6Promise=p()})(this,func

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	607
Entropy (8bit):	4.9004595045357835
Encrypted:	false
SSDEEP:	12:trqsWwuXM65FMZ/7cB5xFqch6k4Rat4p29jwwYw0qwOat4xasmCaJegefg9zR+aR:t2sZuXMMFMZ/7m7FqU6NRatZdwwoqwOw
MD5:	3C0FFB8EB3465230032E56B97E6EF60D
SHA1:	6973EDD24CAEF3AF9386D53900FFB57504298B92
SHA-256:	CC17BD361C4A96706D4285B3B2B88E89BB234FFD8371660A59BF17EE8FFF425E
SHA-512:	3BF9EE99AFB1E28620DF2FA37BB1D2E0A1DAB6CB61B89ADBE86AD433BDCBF7EC72E23C701C9B830ADFB6B6B8057592F334A7CD3A55D71B3AC0899AA7D11BDCD6
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/088d3c3cdc384092b7542a48ec783d57?v=183f3895
Preview:	<svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.4075 21.8646L21.1238 18.1453L22.2626 19.3069L17.4021 24.1715L14.4052 21.1436L15.5495 19.9874L17.4075 21.8646Z" fill="#010041"/>.<path d="M28.935 28.6998H4.2158L8.18059 13.6575H32.8998L28.935 28.6998ZM7.25007 26.329H27.1145L29.7846 16.0691H9.96069L7.25007 26.329Z" fill="#010041"/>.<path d="M26.3053 28.6998H2.7998V6.2998H15.7865L18.0925 10.2648H27.4786V14.7611H25.0916V12.6356H16.7575L14.4514 8.67061H5.14631V26.329H26.3053V28.6998Z" fill="#010041"/>.</svg>.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=2fb51a27-edda-4f3b-89fa-ef37b539188b&expiration=1724012618&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6113), with no line terminators
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	4.756393503828589
Encrypted:	false
SSDEEP:	96:3735cwLWCMfD0BqECxjMHX0RsZOX0RsC62FX0BgCxj0PX0Rs6YX0RsC6hji0O0:3T5O1fDWMxjMHXAKOXAt62FXWRxj0PXT
MD5:	B336B078040D2597051DC33E6EFDDC22
SHA1:	D85B023436098873BCE47C2FF963A621C810CEE3
SHA-256:	45F430983D367678F09F03FA6C4EC3244C67C38D4DFCE13C4E276C7EC74AE534
SHA-512:	DB172404F0526B45263382C64C81B4B32BE7719ED40AEA1A9639481E7D4F5F74157062857DC912857AC861119539D95F839B5D61AC2AA24829606B187D779ABE
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/rhKDInkdpJqnU4ZzOF06qUryhQg/F3XXM5Ld9qnQ4paenScsz3SZanA/2FsCNDYJiHO85Hwv-WOmIcgQzuM.dom.jsonp?sha256=RfQwmD02dnjwnwP6bE7DJExnw41N_OE8TidsfsdK5TQ
Preview:	pendo.receiveDomStructureJson("rhKDInkdpJqnU4ZzOF06qUryhQg", "F3XXM5Ld9qnQ4paenScsz3SZanA", {"props":{"id":"pendo-base","data-layout":"lightboxBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-close-guide-a5fb9daa:hover","styles":{"color":"#333333"}},{"selector":"#pendo-close-guide-a5fb9daa:focus","styles":{"outline":"none"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-F3XXM5Ld9qnQ4paenScsz3SZanA","data-vertical-alignment":"Relative to Element","data-relative-alignment":true,"style":{"z-index":300000,"position":"relative","width":"400px","animation":"none","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"aria-modal":"false","id":"pendo-guide-container","data-caret-width":"12px","data-caret-height":

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49705), with no line terminators
Category:	downloaded
Size (bytes):	49706
Entropy (8bit):	5.296906073277617
Encrypted:	false
SSDEEP:	768:IaOFhhRyOIFhHjfRys3LzQRP4TbYyDMqWxKQ:IaOFnRODRtzQF4DXWUQ
MD5:	893AA032CCA0EEB0079379CD69B84708
SHA1:	F589765745CBC5F548630B1668D593A15C3517A2
SHA-256:	ABD0C69608A1A4B0CE5F6056BC20BCF62A2A29271A4CF5E33FA1F53BF7CB19CB
SHA-512:	4D8CD2162E6A35F2DED63C73E81F416509C9041061A9E91A7BEAEA72E577EC8138F63B57DA112BD884F371292F3CC8395D821C8EF6BC3FA43BC4F2F84BC14812
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	9828
Entropy (8bit):	5.030649758703863
Encrypted:	false
SSDEEP:	96:Al8SOrhXSxBtOBIO8AeQW3i2N0ycdSz1ESYW6PPhFiOvT:Al8jKu8bQWy2N0fdQDiiw
MD5:	4C5D6667334CBBF164D9F4B0CBB2F45F
SHA1:	AE1EC8886F5108CEC11EAD768B91812EF4AC2626
SHA-256:	A1D33188074B02E6B9BE49187407105B4205FEDFFAE6444AFCE0850CE8196AFB
SHA-512:	EDCA145BBE487BF2F72C1CCB6C529B27C480D978539713B6D477495D74FF6175D35B6915E1EEFDDBAA2435FBFBB72E9692F45E55B2E4E3170B2289A032148CAA
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/assets/mimecast-icons/css/mimecast-icons.css
Preview:	@font-face {. font-family: 'mimecast-icons';. src: url('../font/mimecast-icons.eot?88870484');. src: url('../font/mimecast-icons.eot?88870484#iefix') format('embedded-opentype'),. url('../font/mimecast-icons.woff2?88870484') format('woff2'),. url('../font/mimecast-icons.woff?88870484') format('woff'),. url('../font/mimecast-icons.ttf?88870484') format('truetype'),. url('../font/mimecast-icons.svg?88870484#mimecast-icons') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'mimecast-icons';. src: url('../font/mimecast-icons.svg?88870484#mimecast-icons') format('svg');. }.}./. . [class^="mc-icon-"]:before, [class=" mc-icon-"]:before {. font-family: "mimecast-icons";.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1826)
Category:	downloaded
Size (bytes):	230373
Entropy (8bit):	5.527011521470642
Encrypted:	false
SSDEEP:	3072:mMICuKurL5pQlXfpJ9X0LZOwSxl9kLEibn8JuoIxxa4BbwJQNeS6U:Hp2L/QlxJ0YwScdk4BbwJQN5V
MD5:	148E7EB2BEB99C5F6DFFC0AE5754A30A
SHA1:	E7BD0FF56ECE650DCED5EC64FA15CEB1E55A9762
SHA-256:	E5031986842C1FBB2AF8025E9D023FC724B98F11683E1D27F90315D71D0BEFF8
SHA-512:	C2816CC26A7EED79A71C3952F7DCDD5B4D1E0693EC44A56F45A02E9AC30331F68086EE4868CF786183A14765AF2A9E7C6BC70A1869CE995DD5ECCE9378A32B11
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-857000071&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-857000071","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};..var productSettings = {. "AW-857000071":{"preAutoPii":true}.};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 2000, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7764695
Entropy (8bit):	7.980072466467024
Encrypted:	false
SSDEEP:	196608:rPhUe9WjAbcbCYfLoDBV4hazL3ly77zztptWuytGdX:rZU0WcIjyVxL3ly77zzUuSGV
MD5:	C8E5ADA44EA42B423FAA3F007876DB25
SHA1:	4E9D1B5854476E71F076AD5A6DA91D3CF05C4BE6
SHA-256:	961689275D20C9A47C1BFC51AC2437280426724F154CB272EE3B98A453E11923
SHA-512:	556D1A6812D9A5E092CF0AF464AF049724F0B3256729BE70072CAFE7D8A0C735E98A6157F83C7D11C1EEEECEAB7CA08CF6B7E548221EC1E330D354C9451D12CE
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/3de62109b5794239ac94fc95e68d8718?v=792a3c09
Preview:	.PNG........IHDR..............p.m...IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (599), with no line terminators
Category:	dropped
Size (bytes):	599
Entropy (8bit):	5.035838453530576
Encrypted:	false
SSDEEP:	12:2wiGD0yq/IQEA2+UlkAkxVYr4Mpq+iuHnINDRWZBbS4vps:2wiGoygIoVUlN0wvc+iuH4RWZBbS7
MD5:	ECEBB0A051727E327EC411B0AE780DD5
SHA1:	4EAE21427093633ACFE20F161D720BA1EC1B8614
SHA-256:	D736B528B7442FD01C5C0B454F5EC0D0D569EDDA393B1C6E81AAE3DF3D4E9988
SHA-512:	140EE7DECF5DF3DCBC04D09DB16E68071EB401F157A3C9423CF545E669DB23DF0A56488D50E342D515273DD69C419B7CD8871EBD7D6C0C848473A1957CDAC002
Malicious:	false
Reputation:	low
Preview:	(function(n){var f,t,r,i,u;n.hasSessionStorage=function(){var n="bidtellect";try{return sessionStorage.setItem(n,n),sessionStorage.removeItem(n),!0}catch(t){return!1}};f=(new Date).getTime();t="https://bttrack.com/engagement/js?goalId=16174&cb="+f;t.substring(0,5)=="http:"&&location.protocol!="file:"&&(t=t.substring(5));n.hasSessionStorage()&&(r=sessionStorage.getItem("bt-session-id"),r&&(t=t+"&sid="+r));i=document.createElement("script");i.async=1;i.src=t;u=document.getElementsByTagName("script")[0];u.parentNode.insertBefore(i,u)})(window.bidtellectEngagement=window.bidtellectEngagement\|\|{})

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6078)
Category:	downloaded
Size (bytes):	9927
Entropy (8bit):	5.303854744931305
Encrypted:	false
SSDEEP:	96:Xqy1GX+PVPiwNQX6bhqTk3teaJARO1FUr1OMnBxrmz4MEqzdVe:XqycXgR5NQzRaKRO1FOYizbRqzdVe
MD5:	49C919C25491F1B4ADA6C5B31DFD7FFE
SHA1:	BE79C350272A7EC36E0415888DDE297028BED97E
SHA-256:	62839581180212340C11586D3C3A57B93AECF10F89D9664228AE09E2219B3FB9
SHA-512:	592D79E7D3874CE9BFC9323346AF2C26E69CF882AA7CA531573935477D412CA9D0D2ABC601E911D75D031F07FBA1EE26A85C98FFD62463B7E1E540B201B2CC61
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/dP9u1Yj5gYondtURXeRiqcUqNWc@sn9p0ljv8dushqgktXFohVVCLNU/HSnzFk61g0hDIbg3_i1hMHRvVR0/vnnDUCcqfsNuBBWIjd4pcCi-2X4.guide.js?sha256=YoOVgRgCEjQMEVhtPDpXuTrs8Q-J2WZCKK4J4iGbP7k
Preview:	pendo.guideContent('dP9u1Yj5gYondtURXeRiqcUqNWc@sn9p0ljv8dushqgktXFohVVCLNU','HSnzFk61g0hDIbg3_i1hMHRvVR0',"<ol class=\"_pendo-text-list-ordered\" style=\"overflow: hidden auto; height: 330px; float: none; vertical-align: baseline; padding: 0px 16px 0px; border-width: 0px; border-style: solid; border-color: rgb(218, 220, 229); margin: 0px; list-style-position: inherit;\">\n\n \n ---L1 Dropdowns-------> \n<ul id=\"myUL\">\n <li><span class=\"caret\">Review your current protection</span>\n <ul class=\"nested\">\n <li><a class=link target=\"_blank\" href=\"https://login-alpha.mimecast.com/administration/app/#/l/accountassessment\">View your Account Assessment</a>\n <li><a class=link target=\"_blank\" href=\"https://info.mimecast.com/SolutionFrameworkRequest?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l000001JNBIAA4\">Assess your solution framework</a></li>\n </ul>\n <ul id=\"myUL\">\n <li><span class=\"caret\">Enhance your

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	607
Entropy (8bit):	4.9004595045357835
Encrypted:	false
SSDEEP:	12:trqsWwuXM65FMZ/7cB5xFqch6k4Rat4p29jwwYw0qwOat4xasmCaJegefg9zR+aR:t2sZuXMMFMZ/7m7FqU6NRatZdwwoqwOw
MD5:	3C0FFB8EB3465230032E56B97E6EF60D
SHA1:	6973EDD24CAEF3AF9386D53900FFB57504298B92
SHA-256:	CC17BD361C4A96706D4285B3B2B88E89BB234FFD8371660A59BF17EE8FFF425E
SHA-512:	3BF9EE99AFB1E28620DF2FA37BB1D2E0A1DAB6CB61B89ADBE86AD433BDCBF7EC72E23C701C9B830ADFB6B6B8057592F334A7CD3A55D71B3AC0899AA7D11BDCD6
Malicious:	false
Reputation:	low
Preview:	<svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.4075 21.8646L21.1238 18.1453L22.2626 19.3069L17.4021 24.1715L14.4052 21.1436L15.5495 19.9874L17.4075 21.8646Z" fill="#010041"/>.<path d="M28.935 28.6998H4.2158L8.18059 13.6575H32.8998L28.935 28.6998ZM7.25007 26.329H27.1145L29.7846 16.0691H9.96069L7.25007 26.329Z" fill="#010041"/>.<path d="M26.3053 28.6998H2.7998V6.2998H15.7865L18.0925 10.2648H27.4786V14.7611H25.0916V12.6356H16.7575L14.4514 8.67061H5.14631V26.329H26.3053V28.6998Z" fill="#010041"/>.</svg>.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (688)
Category:	dropped
Size (bytes):	3091008
Entropy (8bit):	5.363201348664648
Encrypted:	false
SSDEEP:	49152:mJGGrjOhGnHzaljC7mj7CtGH3mo7fqVD46Tigk1yjuUzDTVGsRoGz48Q5boe8cPQ:p7fqu/+0dxAvbV3Dj/JQt7xAFFv9B0C
MD5:	866EB6A3DDDDC9A56621C5A7D4630CFD
SHA1:	ADB356B0E0300030934E5FCBE7E1CFDC387CAAA4
SHA-256:	BB148D4A0C9BC3F5AB13715C16FEA3CE08F0F9B263F3815C90A7EEFE4EE10B56
SHA-512:	7FA3FA82FB28C2658EEF63E3794C6E6E64A6773F304D349A77A403FDA9F0C5703D338DA69415DFAA07F9F124628059822D6C51BB2F92388C9E4D2EA39B264B2C
Malicious:	false
Reputation:	low
Preview:	"undefined"===typeof Aura&&(Aura={});Aura.bootstrap\|\|(Aura.bootstrap={});Aura.frameworkJsReady\|\|(Aura.ApplicationDefs={cmpExporter:{},libExporter:{}},$A={componentService:{addComponent:function(a,b){Aura.ApplicationDefs.cmpExporter[a]=b},addLibraryExporter:function(a,b){Aura.ApplicationDefs.libExporter[a]=b},initEventDefs:function(a){Aura.ApplicationDefs.eventDefs=a},initLibraryDefs:function(a){Aura.ApplicationDefs.libraryDefs=a},initControllerDefs:function(a){Aura.ApplicationDefs.controllerDefs=a},initModuleDefs:function(a){Aura.ApplicationDefs.moduleDefs=a}}});.$A.componentService.addLibraryExporter("js://force.sfdcAjaxLibrary.Ajax",function(){/*$A.componentService.addLibraryInclude("js://force.sfdcAjaxLibrary.Ajax",[],function(){var g=["while(1);\n","while(1);\n".replace("\n","")];return{parseWithCSRF:function(d){if(!$A.util.isString(d))return null;a:{for(var a=0,b=g.length;a<b;a++){var e=g[a];if(0===d.indexOf(e)){d=d.slice(e.length);break a}}$A.assert(!1,"CSRF protect string not ad

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5451)
Category:	downloaded
Size (bytes):	232267
Entropy (8bit):	5.543384131174015
Encrypted:	false
SSDEEP:	3072:cX2xICuKurL5pQlqBxO0LUOlSxl9kLEi2CBQa4BbwJQNnb0s6G3:A2xp2L/QlgbzlSg4BbwJQNQs9
MD5:	F20941D87E0C93D3E90727F06E2C7748
SHA1:	0B7939F7AEE71A161412410415C0A4EBA2B18510
SHA-256:	B298F8EF71D738DCC4D8D332621FB4AC4BEAC9443AC7A547C1C2412BCF4DFD81
SHA-512:	FFB0620836009B4B77995E595C7EC5C112ED50465DE5CDC0034627B554CE86C3A2AD888D9C590A073532CF6C1C339BD3D94896887B5D45C22A7EDA17885C8D17
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-W55VM84
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"31",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__e"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"demandbase_sid"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":"Non-Company Visitor","vtp_name":"company_name"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"audien

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10674
Entropy (8bit):	4.803257704289444
Encrypted:	false
SSDEEP:	96:xad/8vWaMKwLZZ3ZZlFkHhO8JiPzRskyB42UCjc/obJzl0XyrrR:x3vW8wjXf8kRskyB7UYcwbJz6XyrrR
MD5:	E9BF123819AFFFB58D76A3AC2F76EDAD
SHA1:	31C223790B0F69796A90876D0E34A45152FDCEF6
SHA-256:	0CA43B2A5253B9298C0D8DDDCD4F7339BCBFDEA5F70BBA91344640FD66B6CA6A
SHA-512:	601352A5E8F71198A950B1B53C0C1C19F4228B6467963D0EBDF683BDD92EBD1D5B17A35F065AF21356D7E7722EEC873B7CCE0536A7BD00DD7AA6BDC4FBC29F29
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide.-323232.1641566401970.css
Preview:	/* ------------------------------. * -- Main Global Styling -------. * ------------------------------ /...\_pendo-guide\_ {. / -- Overarching settings for all guides -- /.}...\_pendo-guide-container\_ {. / -- Guide border, shadow, background, etc. -- /.box-shadow: 0px 0px 8px #888;.}...\_pendo-guide-container\_ .\_pendo-guide-content\_ {. / -- Content area -- use for font attributes, padding, etc. /.}.../ ------------------------------. * -- Lightbox Specific Styling -. * ------------------------------ /...\_pendo-guide-lb\_ {. / -- Overarching settings for Lightbox -- /.}...\_pendo-guide-lb\_ .\_pendo-guide-container\_ {. / -- Guide border, shadow, background, etc. -- /.}...\_pendo-guide-lb\_ .\_pendo-guide-container\_ .\_pendo-guide-content\_ {. / -- Content area -- use for font attributes, padding, etc. /.}...\_pendo-backdrop\_ {. / The backdrop displayed behind lightboxes /. display: none !important;. z-index: 1 !important;.}.../ --------------------------

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5275
Entropy (8bit):	7.93236393572726
Encrypted:	false
SSDEEP:	96:9FgNyreKWtNL9oFGX4Tp4yvNF13gfckZqei0SigtAtX:0NyrfWt6GcrpocoqedVd
MD5:	23B601544D9CE3284CEF76CFD145F8D1
SHA1:	C4F853E1EAA4FEF2478A96329D3E48A2B1006652
SHA-256:	343E3504ABC5F09344FB16CB3CC1D77B696611D03ECFB1941674A14E02D19ABA
SHA-512:	96F641DA5097D9DEE77ABBC7D3C970BE7F55B88DE07FD32539AE5DD85CFBA1DC291D71B91DDB7E45A564D463BBB689E80DD4FC86FB7CF13345A7D320388B6D6A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R:W.....pHYs...#...#.x.?v...MIDATx..=p.E..U..Af.s.5)TiEb2..d..$.....tD. )....M.\|....ZUA.W...K`\................RI.iw......S..aj!..:S..TW...O=...I...r...{...............&.....g.5....J....m..).Te.-..<.R^Z3.:,..(.`M ..-...&...\.s-\|..ET.5.X.<.M....D%..g....X8}!.=}...$..>....h..S$.S.PWa..u.h6....(.#!.....$j.).`i.....5....S..'.q8z;.......,T.g..D..Z...N3$ZL.1.)...xZ'.ILA.H)....[.k$1.)H...9.!...Q......ayp.a.c...T.........)..i.B.3..~....H..!'I.t.v....s...RjG......!.>W?x)".>...l....[..9.V.p.7"...c....D.q...Gy.D..-\|::....HOB...0.1.V.i..Y.q..L....u...8..h..pp.oI:......h3...X...`.....r!T.8.c=?, ..u.$...S/..<'.$f.........U.B.".........."$+"b.1.0.R..1D.X@LCtmE..;..f........M5.1L.y...,..y..Ky..K......2...F.w...O.al..e.-..C.F....G.b\|.$.....'W~ny...c.w[to.J?w:/.......Rc".H\y.G...........7..7E..n.....&#v.....t`e..........E..\| 66..uj8.........lm})&._DS.....0.P..h.n...T.,.....-..AL....M...:S..`u....@A.t.......#f_J..t>.n.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	335
Entropy (8bit):	4.624475766564882
Encrypted:	false
SSDEEP:	6:2LGa3ImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47JsnVtEsVsVt:2f4myCkMwykgIaoO4nsnv9yv
MD5:	3D32A9F3A6EBD5C5BAC41AFAC6AF1775
SHA1:	0DACD52EE7D7BEB58E538F1DD0F3DF6764B04C69
SHA-256:	E0F9A49B3445DF93031EF8414EAB4C9266E8E6AEFC9594C8B3F49376F57EE97C
SHA-512:	B4CE78D1DACE874D37D1A35C9C2D556A30BD104BB1BBD46CD9364D2C3251F9E072B2280B4254279EBF8DD1FA098995FDF799CF7889181457B9E3FF37701FF4DD
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b});.. }.. }..})(window, document, 'us', false, false, false);..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcon9LuJ4vV/:T8wAD5ABwXw+krfflyxzxwn9D/
MD5:	5C4B768820444AFADEAC19D7ED7902AE
SHA1:	B3FD3A19CE89627DAB0129976956FD3EB11749C8
SHA-256:	E0C289FAA80333EFF728B8BDBBF10B11DEC1A6E1938A444E1CC41BE6744E96D2
SHA-512:	4664A19499181D9D8C1A60E2E727293423EDC33B3359A3A585BE215BDE914C4425473E8532A7BB2E415C845057E61F1833C1AE6B4DFCFC474BFAF7E27BAE017B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	229376
Entropy (8bit):	7.962446705211039
Encrypted:	false
SSDEEP:	6144:I+O3m5VHPHskR1vOqJk5trVY6bmi9zdgmNSd:GWHvpRI5trV7LHtN0
MD5:	96EB88272D00241674988E0158A57003
SHA1:	BDD9A765FA588E95C4C01C92D2A6B11A8E15FE12
SHA-256:	9793E8B8C4E6C937B5A431A974151DE33F1D7E9A4B67E29F71EEC53A4041A983
SHA-512:	CD5353FC0DA4150DBA3CB1D32AFDF4B3BB82A66F17F44AFEAE674646954BCB5FAFE2410349AD6C79908B8C6EB3E33A9DE1C7FA72BC4EFE4A53F4D9DB14611D81
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/1850fe2511d74a93bd0d286ea69d6bc8?v=d9cfd148&t=w1920hq
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......H.......H.................0210....................0100...........................................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....oM.....eH.OSU"..z.......+...f..a..&x...L.=.f.Fj2...$.!..l..)._..M-]...(...)E1...i(.B..Z...%..(..`9zR.....5..).IR....R..(..@.........z.u6...QEP..@4.(.....I.....M-..=...:1.3....9.R.....a^C=e.P.=(..

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12263
Entropy (8bit):	4.188468496963155
Encrypted:	false
SSDEEP:	192:AJ4U45WFYWxwu/wRRdmfsZeQ0glAc2hqIa2GfE2AcXQ32N1v2RdIOSd3nR+0ItxR:F5WBmu/wtxZeQRlqhqIa2eE2zK2iR+1s
MD5:	995954DE866C31290D4F005A62C766DB
SHA1:	9ADED847E2CE68B30D2BF653AFCEF7C610DE5E7A
SHA-256:	027AD7395E3E4E247C016973AEC3C8B6A8DF4646CD7B6B7862FD6AD22A0105F4
SHA-512:	63D431C03A2D76DA40C257DAD74268FB8CA3F1635C78B2B618AA711C60EB7D458B3649E4A094FEEB0B37A29E3267961D893DF11FD64997A3B8D159BA6E0C8BFC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. fill-rule: evenodd;. stroke-width: 0px;. }. </style>. </defs>. <g id="_0" data-name=" 0">. <g id="_42253856" data-name=" 42253856">. <path class="cls-1" d="M242.9,46.68c-.65-1.09-1.84-1.17-2.32-1.19h-74.8c-2.12,0-3.83.65-5.09,1.92-.91.91-1.53,2.1-1.86,3.53,0,.03-.09.33-.73.33h-14.78c-.64,0-.73-.3-.73-.33-.32-1.43-.95-2.62-1.86-3.53-1.27-1.28-2.98-1.92-5.09-1.92H60.81c-.48.02-1.67.1-2.32,1.19-.31.53-.54,1.42.13,2.67,0,.01,1.37,2.29,1.37,2.29.56.92,1.2,1.26,2.54,1.35.02,0,.64.07,1.08.83l1.4,2.47c.29.57.99,1.89,3.35,2.21.04,0,.73.08,1.11.81,0,0,1.72,3.05,1.72,3.05.5.98,1.2,1.34,2.48,1.74,0,0,31.28,9.24,31.28,9.24,1.06.32,1.5,1.52,1.5,1.52.75,1.94,1.72,3.54,6.6,5.02,0,0,25.59,7.03,25.59,7.03.31.1,3.24,1,5.45-1.14,0,0,5.99-5.75,6-5.76,0,0,.25-.26.59-.26h0c.34,0,.59.25.59

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1076
Entropy (8bit):	4.977295932644795
Encrypted:	false
SSDEEP:	24:2dk1WNxIJKk0Tfyqu+fab/jbyaCXXrwYquhpbhgDDdAmq5k:c0DJKkyfju2aXulwYquhpbhWRAmWk
MD5:	C54B78CB4748205DA0A5517362A3B8EC
SHA1:	FBE70B4CE0C46A1486B7942A47E62D918DACCC1E
SHA-256:	7244B42C1D95614E6E69A590AF36308FBD0F9EECD1FFC569057FD707A9C5F348
SHA-512:	B65464FE53C5BC631A2602F18E9AAB1F34B9D7614DA828EEAE45B68BE7C6D7E9F2C52FD716AEC227E8D077D98CF3A6A31C2BFCC6592B7AF97A013771EBEADD0A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g id="_2020_Icon_CXI" data-name="2020_Icon_CXI">. <g>. <path class="cls-1" d="m72.68,69.99v2.95h-11.34c-1.22-4.21-5.11-7.29-9.7-7.29s-8.48,3.08-9.7,7.29h-11.34v-2.95h-5.63v10.83h5.63v-2.26h11.34c1.22,4.21,5.11,7.29,9.7,7.29s8.48-3.08,9.7-7.29h11.34v2.26h5.63v-10.83h-5.63Zm-16.56,5.76c0,1.06-.38,2.04-1,2.81-.82,1.01-2.07,1.67-3.48,1.67s-2.66-.65-3.48-1.67c-.62-.78-1-1.76-1-2.81s.38-2.04,1-2.81c.82-1.01,2.07-1.67,3.48-1.67s2.66.65,3.48,1.67c.62.78,1,1.76,1,2.81Z"/>. <path class="cls-1" d="m49.38,61.29h5.68l10.61-9.35h11.59V14.15H24.98v39.6h24.4v7.54Zm-18.78-13.16v-28.35h41.03v26.53h-8.09l-8.54,7.52v-5.69h-24.4Z"/>. <path class="cls-1" d="m51.9,24.83c-3.16,0-5.73,2.56-5.73,5.73,0,2.27,1.32,4.22,3.23,5.15v7.16h5v-7.16c1.91-.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	downloaded
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Reputation:	low
URL:	https://pixel-config.reddit.com/pixels/t2_2s9dur0o/config
Preview:	...........................

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65310)
Category:	downloaded
Size (bytes):	509657
Entropy (8bit):	5.3404088573066195
Encrypted:	false
SSDEEP:	6144:bly8GlOdX3wRNQ3/qB/hPGNAUPsOEH5N1lA3af1XEMM5QggJNXSj39hL4a3:blgOdX+Q3/qB/hPGNct1XE7sXSj3j73
MD5:	E8AAFBA3E09158DED6026A0DD231687A
SHA1:	8F6D48273C306AF35FC4657F26888F8FAA3CDE05
SHA-256:	261765B292FD3396E98C7F1AFC31B61E5AFE432F4700B3801A0EADAE7199E96C
SHA-512:	8E6361EA28A9D22C8779CBCEC2B2AF679EDA7D7D396AC10C19C4EB8684D7D1824EAFAFD16D9DEB40F7B7CFAE20C86AA9763DC13EC3D632F9099E9387670A503F
Malicious:	false
Reputation:	low
URL:	https://cdn.pendo.io/agent/static/0600cd7b-e6b2-4ba9-4249-ab1342c3631b/pendo.js
Preview:	// Pendo Agent Wrapper.// Copyright 2024 Pendo.io, Inc..// Environment: production.// Agent Version: 2.239.0.// Installed: 2024-07-18T19:17:05Z.(function (PendoConfig) {./.@license https://agent.pendo.io/licenses./.!function(Rb,Lb,kb){!function(){var T=Array.prototype.slice;try{T.call(Lb.documentElement)}catch(Ut){Array.prototype.slice=function(e,t){if(t=void 0!==t?t:this.length,"[object Array]"===Object.prototype.toString.call(this))return T.call(this,e,t);var n,i=[],r=this.length,o=e\|\|0,a=(t<0?r+t:t\|\|r)-(o=0<=o?o:r+o);if(0<a)if(i=new Array(a),this.charAt)for(n=0;n<a;n++)i[n]=this.charAt(o+n);else for(n=0;n<a;n++)i[n]=this[o+n];return i}}String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")});var A=function(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".split("");return{uint8ToBase64:function(e){var t,n,i,r=e.length%3,o="";for(t=0,i=e.length-r;t<i;t+=3)n=(e[t]<<16)+(e[t+1]<<8)+e[t+2]

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 442 x 104, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9649
Entropy (8bit):	7.902218039936796
Encrypted:	false
SSDEEP:	192:I6S7knSY6fVd1Q3SMHYu6HyN/uB0DqNdl229mZxkp/t3j7qz:KQnSBNd1Q3XwH600DcdlT9mZx6l3j7qz
MD5:	A5DC0B89CE76A71F33AAE27D56902F64
SHA1:	8BF5A89761ED727F20CFFC3B688E9283966C65EF
SHA-256:	80076E71A41E7E74D22D285F20B9B2F442F48C27E971D08647A445931F488356
SHA-512:	23088EFF811CBA08C6EADB7CBF25E27CB8F2A2F4C29E61E45E973B2FC13B4B8C29900B49EE17D3200A56394C4ACF3F7D22CA22910F0E2C2EF290F609826A3B7C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......h......v5.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 116.164766, 2021/02/19-23:10:07 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Macintosh)" xmp:CreateDate="2021-03-10T11:00:50Z" xmp:ModifyDate="2021-03-15T11:22:10Z" xmp:MetadataDate="2021-03-15T11:22:10Z" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:91cc5ba5-d8d2-41ba-89bf-d8d9c6815aec" xmpMM:DocumentID="xmp.did:91cc5ba5-d8d2-41ba-89bf-d8d9c6815aec" xmpMM:OriginalDocumentID="

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65310)
Category:	dropped
Size (bytes):	509657
Entropy (8bit):	5.3404088573066195
Encrypted:	false
SSDEEP:	6144:bly8GlOdX3wRNQ3/qB/hPGNAUPsOEH5N1lA3af1XEMM5QggJNXSj39hL4a3:blgOdX+Q3/qB/hPGNct1XE7sXSj3j73
MD5:	E8AAFBA3E09158DED6026A0DD231687A
SHA1:	8F6D48273C306AF35FC4657F26888F8FAA3CDE05
SHA-256:	261765B292FD3396E98C7F1AFC31B61E5AFE432F4700B3801A0EADAE7199E96C
SHA-512:	8E6361EA28A9D22C8779CBCEC2B2AF679EDA7D7D396AC10C19C4EB8684D7D1824EAFAFD16D9DEB40F7B7CFAE20C86AA9763DC13EC3D632F9099E9387670A503F
Malicious:	false
Reputation:	low
Preview:	// Pendo Agent Wrapper.// Copyright 2024 Pendo.io, Inc..// Environment: production.// Agent Version: 2.239.0.// Installed: 2024-07-18T19:17:05Z.(function (PendoConfig) {./.@license https://agent.pendo.io/licenses./.!function(Rb,Lb,kb){!function(){var T=Array.prototype.slice;try{T.call(Lb.documentElement)}catch(Ut){Array.prototype.slice=function(e,t){if(t=void 0!==t?t:this.length,"[object Array]"===Object.prototype.toString.call(this))return T.call(this,e,t);var n,i=[],r=this.length,o=e\|\|0,a=(t<0?r+t:t\|\|r)-(o=0<=o?o:r+o);if(0<a)if(i=new Array(a),this.charAt)for(n=0;n<a;n++)i[n]=this.charAt(o+n);else for(n=0;n<a;n++)i[n]=this[o+n];return i}}String.prototype.trim\|\|(String.prototype.trim=function(){return this.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")});var A=function(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".split("");return{uint8ToBase64:function(e){var t,n,i,r=e.length%3,o="";for(t=0,i=e.length-r;t<i;t+=3)n=(e[t]<<16)+(e[t+1]<<8)+e[t+2]

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1455)
Category:	dropped
Size (bytes):	2558
Entropy (8bit):	5.145721909876602
Encrypted:	false
SSDEEP:	48:X4oeaJOhJ1dMNcGxAzwNyUdNxkNAQwrK8VpQMr1dgNc4XADFULDQ0:XVeaJMJ1dMNFA9UpgwFQMr1dgNvXAJUZ
MD5:	A8DA88F6108339D352D26AA5D18136C5
SHA1:	A14EEF4747A49E6614B3E6C8702DC310EF400AD0
SHA-256:	677C4E3485A7F300DDC2E729E4EA2922B524CA13849C2E2E0EA82EC0210B1966
SHA-512:	53F196DFCFE3CE31181B312F069CA712B19B0CD7B1DC451F58EB5B8D42DD32F0D018901A4615CFA0DEF344729364C57E6B0BA50206BB353F999C37C0F5E78B84
Malicious:	false
Reputation:	low
Preview:	pendo.guideContent('yyTjAbf0U6P4FyCht9PDC37PECc@sn9p0ljv8dushqgktXFohVVCLNU','wNNiK8f0SEITG_a7n9-tBCaxh-s',"<div id=\"integration-container-018a0b9e-904e-4c50-bdcd-1045a640399b\"></div><script id=\"pendo-inline-script\">\n<% if (typeof guide !== 'undefined') { %>\nvar guide = pendo.findGuideById('<%= guide.id %>');\nvar step = guide && guide.findStepById('<%= step.id %>');\n<% } %>\n/BEGIN PENDO SCRIPT WRAPPER/\n(function () {\n var integrationContainer = document.getElementById('integration-container-018a0b9e-904e-4c50-bdcd-1045a640399b');\n if(!integrationContainer) return;\n\n var guideContainer = integrationContainer;\n for(var i = 0; i < 10; i++) {\n if(guideContainer.id === 'pendo-guide-container' \|\| guideContainer.tagName.toLowerCase() === 'body') break;\n\n guideContainer = guideContainer.parentElement;\n }\n\n if(guideContainer.id !== 'pendo-guide-container') return;\n\n var resourceCenter = pendo.Sizzle('#pendo-resource-center-container');

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	4.638838030432581
Encrypted:	false
SSDEEP:	24:2dk1WNYkIJKR6WWIMbToKIljsXVHWRIM0F7i9ymWA+TiXJhT2:c0V9JKoIcsKIx+2RI5F7i9ymWDV
MD5:	2B4AD9D86A5008652084DBED2E0C6547
SHA1:	C1A1416BF61415F0607A4BE8E44CB07390A5DEFA
SHA-256:	81123F16B0998744776E8927AC91B7C8472E11AABCB8AA78E3C0E82AF7BB87E1
SHA-512:	8B4435FA88A548BDF60C48E909ACB47220D794BECA6BF89E12B6014B01BF471D266E2696F93CEC00FEF769135830D53D7382F58B728D15AECEA1302C0CFF7A26
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/4766441092f24c1d8d5cb65f084680c0?v=98bbab41
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #010041;. stroke-width: 0px;. }. </style>. </defs>. <g id="_2020_Icon_cloud-archive-email" data-name="2020_Icon_cloud-archive-email">. <path class="cls-1" d="m85.14,60.75l.04-.02-.04-.02c-.02-.76-.04-1.53-.09-2.92l-3.1-1.24,3.27-1.53c-.04-1.39-.06-2.16-.09-2.92l.04-.02-.04-.02c-.02-.76-.04-1.53-.09-2.91l-13.94-5.61v-19.52H14v42.03h39.65l-1.04.42c-.04,1.39-.06,2.16-.09,2.92l-.04.02.04.02c-.02.76-.04,1.53-.08,2.91l16.39,7.67,16.39-7.67c-.04-1.38-.06-2.15-.09-2.91l.04-.02-.04-.02c-.02-.76-.04-1.53-.09-2.92l-3.09-1.24,3.26-1.53c-.04-1.39-.06-2.16-.09-2.92Zm-6.43,8.85l-9.61,4.53-9.61-4.53,3.14-1.27,6.48,3.05,6.48-3.05,3.14,1.27Zm-3.31-15.88l-3.32,1.56-.71.34-2.27,1.07-.42-.19-2.57-1.22-.13-.05-3.2-1.51-3.3-1.55,6.5-2.64,2.69-1.09.42-.17,2.27.93,7.34,2.97-3.31,1.55Zm-9.68-20.73l-23.17,13.92

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7984), with no line terminators
Category:	downloaded
Size (bytes):	7984
Entropy (8bit):	4.739645034872339
Encrypted:	false
SSDEEP:	192:3Vlv2PqiJbVLxjXXSgTIavSgTId6PFbVExjzkSgTI5jSgTId6RpNMVlxjoDSgTIb:3LvNn0
MD5:	6CBC1B4D2A31CE0AC40951463921B1FF
SHA1:	DE60017E29EFC9329BB82609D4D861B2893E7193
SHA-256:	89901C04ADE117C77D30154A678BA7D0C85DC5772A4A8F1E3ED596E0E2F0AC28
SHA-512:	3281E3B9E199166125F9CA1CDEAC8AB8A6CCEA4C57804B4A08C228204ABAB4210E81E84938C4219623B4620D46F40EDF52B29E9660E4B0B0D6C4E70FED1FFF9A
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/7MsygD11dcxG1UJ9AhZqNEuZS-c/70xG16IS90Y5-MDdgaW2zL5U6Y4/3mABfinvyTKbuCYJ1Nhhsok-cZM.dom.jsonp?sha256=iZAcBK3hF8d9MBVKZ4un0MhdxXcqSo8ePtWW4OLwrCg
Preview:	pendo.receiveDomStructureJson("7MsygD11dcxG1UJ9AhZqNEuZS-c", "70xG16IS90Y5-MDdgaW2zL5U6Y4", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-3a33f036:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-70xG16IS90Y5-MDdgaW2zL5U6Y4","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5673
Entropy (8bit):	7.931787490212191
Encrypted:	false
SSDEEP:	96:VOJsK3PoA1of0ez4F7/7e0wRj5OwwEiVj3MWdD1xrs20xgH8UWXy5ETd:IJsK3QAQ8F7DYRwwgoo+vXPh
MD5:	4B36CBA79896F31140C285E4C6141ABC
SHA1:	DD1BA28E5E42A79A6EE3D6DD32C8570934D03DED
SHA-256:	60FCF5A4BE294CCAF8545F8A6D536892F0F9B32F028F169BE9B61ED3CB5EB4BD
SHA-512:	7FEEE8F98D54739DE9A2FFC036A87D1D3AFDF4F8E79167693AD788F33142685F90A53C1A87A028277B66D4F5AB5A375E650473CA7C59102DF0E629681F4493A3
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/ee526f84c5ac42b1a8b11c26f7067787?v=aa4c8287&t=w1920hq
Preview:	.PNG........IHDR.............R:W.....pHYs...#...#.x.?v....IDATx..=l....g...l@...tJT..)E`@.xTcu..TiN.".S.TaW1....,l..\|d...TV....H..:VI.9:!..$+@..4.....x.;......@.(...n..>.7J.......<.cZJ..._.3~.@)...h...NT...x.4.Rx<g.........;I?.....(.....},J(....;..}...5....y`..5.hV.X..a.....>....#""7..bYc,.E@DG.....B.DD...QJ]..M.HRA.Q\...&..p...X,.YDD..8..:...EA.+..$...Z....K.e.4~^#d.o.T..I.8...q......,T.c.Z...s.Gb.bH..v.$.Z.H.S:I......1.uv..TFR.1E)".y.(.6....E..0U...G....)...%.........iZJ......@GRa.CR....zW1....1wl.Z.K_)..\..RDb}.#.l..H.O..Y....FD6.=.R..I.R78e.... .&.n...<.,.LR.8...G.Z%...Y....`.Z!.$K...@.N..$/T.4.{.:H.,.M_#...S..]].....U.4.T....xE.K ..MIHY.....>@......1fEk.U. c.....N.......R.......1.P{........C.........un.."...l."....P..4PJ.V-.JE$.N@)......WT....Re".../ .h.....j.....T).J.." w...p..x..I...TE.."..;...K..U.s..y.9...v..s....@......"....4..>GZ...N(I@..7.&....Nt...~$........Et...K,&.Z..ln~..v.y..".S..Q.]............./"..H...lc"..2".....RD6.'.J..R..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1470
Entropy (8bit):	4.415496572736847
Encrypted:	false
SSDEEP:	24:t2sZuXMMjtVcT0Xtz0Wy+M9Wuaz7yYatxpsqbyhatrj3fgTYnpHatKwXXOofnO+y:jmrdAr5U7iHpBZJ3fgTYnp6/tn6pR
MD5:	DB915F2A254484FA2944236B8BCDFFAB
SHA1:	9B75E5D04959FF0170B4A6C46167C8375022EE42
SHA-256:	E1395C92B9357763C81AAE3D18CC0B8F38391318DE5A11C894BDF31232C80DB5
SHA-512:	4712C0258FFD750B3FA8FF6B66C4B43322904A728F7EF13310B449FA1E7C69E73523B37D6EB397B98FD0D4EF6EB7F6B6EF8AB04962C7550E958DF8C47459B29A
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/6737d53c3d2a40dd828cc52fd9f972fa?v=df36f5b2
Preview:	<svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M4.34472 16.8974C4.34472 9.5144 10.3942 3.5 17.9224 3.5C25.4047 3.5 31.5 9.51001 31.5 16.8566C31.5 24.2396 25.4505 30.254 17.9224 30.254C15.7978 30.254 13.8192 29.793 12.0318 28.94L3.5 31.5L6.00106 23.3067C4.97246 21.4134 4.34472 19.2177 4.34472 16.8974ZM17.9224 5.54229C11.5417 5.54229 6.41448 10.6379 6.41448 16.8974C6.41448 18.9899 7.02074 20.9801 8.01427 22.6768L8.23821 23.0593L6.59688 28.4361L12.2316 26.7454L12.6072 26.9395C14.1976 27.7615 15.9784 28.2117 17.9224 28.2117C24.303 28.2117 29.4302 23.116 29.4302 16.8566C29.4302 10.6423 24.266 5.54229 17.9224 5.54229Z" fill="#010041"/>.<path d="M24.2558 23.7187H11.0508V13.9157H24.2144L24.2558 23.7187ZM12.334 22.4524H22.9312V15.2227H12.334V22.4524Z" fill="#010041"/>.<path d="M20.4475 14.9777V11.9551C20.4475 10.4438 19.2056 9.21841 17.674 9.21841C16.1424 9.21841 14.9005 10.4438 14.9005 11.9551V14.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (6598)
Category:	dropped
Size (bytes):	10871
Entropy (8bit):	5.17110530548231
Encrypted:	false
SSDEEP:	96:X6y1iSLnTOYHjjAJbrmHln26bhqTkzuqc8teaJARM1FUr16GCbi71+0jlKAZSlK9:X6ykIpEnmJqNXaKRM1FOI3xdly1gdFO
MD5:	2C9BE078A704FCD270C1873C5DE3EEFE
SHA1:	5B94B76B58CEC330424DFCA823409E62523C0B97
SHA-256:	F998F2A38636FB230DCF2ED79677465BFAD0F0F1F8AD60ADF4DF663A4A42FA55
SHA-512:	A41DB5AB277E0FFEFCACCFF686A22813010057B47B9D11CF7F550FE6817D3001F3B79470EE996C387F8487374B87496A49B7BF229B738128A9A57AE339D37ED4
Malicious:	false
Reputation:	low
Preview:	pendo.guideContent('EWuuX_o4U-xRldBOqT-LYFc69fQ@sn9p0ljv8dushqgktXFohVVCLNU','Imtq1OAS7QR5--1wWyrbg1YVU2c',"<ol class=\"_pendo-text-list-ordered\" style=\"overflow: hidden auto; height: 330px; float: none; vertical-align: baseline; padding: 0px 16px 0px; border-width: 0px; border-style: solid; border-color: rgb(218, 220, 229); margin: 0px; list-style-position: inherit;\">\n ---L1 Dropdowns------->\n<ul id=\"myUL\">\n <li><span class=\"caret\">Email Security</span>\n\t <ul class=\"nested\">\n\t\t\t <li><a class=link target=\"_blank\" href=\"https://community.mimecast.com/s/knowledge-hub-email-security-cg\">Email Security Cloud Gateway</a></li>\n\t\t\t <li><a class=link target=\"_blank\" href=\"https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-configuration\">Attachment Protect</a></li>\n\t\t\t\t\t<li><a class=link target=\"_blank\" href=\"https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-i

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	208060
Entropy (8bit):	5.071133372628038
Encrypted:	false
SSDEEP:	1536:XQG/wgYFnomp7A3R335JcIQOu7dxDU99caB06e9hJSltpsOwWY0wZ9kMcDU+:gR+3RQIQOu4g/eltpGWYDCMAU+
MD5:	F692AC8003E8F0614F6BB1499F05C016
SHA1:	2EF9E0DDFAE17B12B709C842AA17AC2390AFE128
SHA-256:	E6B779A8581AAAD1DA9C19B1A4402BDD5525167C6703D1BE6EDB698C9907F079
SHA-512:	9633D9D80C50E41C01F9889A12017F20AE64FB83A6F9777F967176BB1C786112CAB28C992D2F59B4CFAF0C525FC00BDF22F829A7E4F162D95E361DB199313A76
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/login/cache.f692ac8003e8f0614f6bb1499f05c016.login.js
Preview:	"use strict";angular.module("messageFormatter.directive",[]).directive("mcMessageFormatter",["$translate","$sanitize","$injector","$window","$location",function(n,s,l,o,i){return{restrict:"A",templateUrl:"components/message-formatter/message-formatter.tpl.html",scope:{mcmessageFormatter:"<mcMessageFormatter"},link:function(n){var e=[],a={TEXT:"MC-TEXT",ANCHOR:"MC-ANCHOR",ADCON:"MC-ADCON",KB:"MC-KB",STRONG:"MC-STRONG",ITALIC:"MC-ITALIC",ACTION:"MC-ACTION",NEWLINE:"MC-NEWLINE"};angular.forEach(n.mcmessageFormatter.split(/\[\[\|\]\]/g).filter(Boolean),function(n){var n=n.split("\|"),t={};1===n.length?n[0]===a.NEWLINE?t.type=n[0]:_.isEmpty(n[0])\|\|(t.type=a.TEXT,t.text=n[0]):t=_.pickBy({type:n[0],text:n[1],location:-1<_.indexOf([a.ANCHOR,a.ADCON,a.KB],n[0])?s(n[2]):n[2]&&angular.fromJson(n[2]).state&&angular.fromJson(n[2]).state+"("+angular.fromJson(n[2]).params+")"},_.identity),e.push(t)}),n.mcTagType=a,n.mcProcessedKey=e,n.openAdcon=function(n){{var t,e;l.has("applicationSwitcherService")?(

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550), with no line terminators
Category:	dropped
Size (bytes):	550
Entropy (8bit):	5.1593080604958494
Encrypted:	false
SSDEEP:	12:+dThTB6RFsyKLWRF5Ee6YFOf1KZgFOJa4gj+4OCJ4Mz1KVS+s/tB:iThTBOkiRFsYA14w+4ON1St
MD5:	39FE049DE5A5C8058A2A085711AD81E1
SHA1:	2ED7B1DEDE6D9BC575785E19CE6FFCCB2529B943
SHA-256:	7D7A0668DD7CF951F67F2A40D5CB5381DF908ADA68DEFA5BB3CB165EDD791C8F
SHA-512:	90D414309BDBCC2B2ACC7A1FA957F7048F6546B3977D44100472679E04D0CD826B032343E3FD5CDF0E0062A7D1AE7B604C625DDC8BB2FC0B635B60587927B6F4
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[712],{9917:(e,a,r)=>{r.d(a,{Z:()=>t});const t=new class{pushEvent(e){const a=e;a.eventLabel=this.replaceEventLabelParameters(a.eventLabel),window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push(a)}replaceEventLabelParameters(e){return e.replace(/{currentPageUrl}/g,document.URL).replace(/{referralPath}/g,document.referrer\|\|"Not Available")}pushEventGA4(e){window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push(e)}}},1385:(e,a,r)=>{r(9917)}},e=>{e(e.s=1385)}]);

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2600), with no line terminators
Category:	downloaded
Size (bytes):	2600
Entropy (8bit):	5.833280408667316
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08xetTfxXWAplkwUG9Qb6:aJd6SUtJfNrVlCWWWdtqjZtehtzF
MD5:	9778748D19C9C0E3B4B2C2B6685F9F8F
SHA1:	1B6BE1FC8991D810CF29C95259C134E5B85BDC23
SHA-256:	267256C9ED928BDFC67FBD6ACA2692269DD1326A47315097EA5DFD94A94D14C9
SHA-512:	59FD22300C2AD88B1AD4DB6EFFEE29203244C4E44449DD217931AA33CD15872C9BF4D918506ABB71426A4F413FF0E1DC12C856B8E2017611C925DF67E25C4748
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11113837502/?random=1721420610095&cv=11&fst=1721420610095&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (705)
Category:	dropped
Size (bytes):	1311
Entropy (8bit):	5.427604428015032
Encrypted:	false
SSDEEP:	24:X6xCX6YAd73s3pD6vOmS3T3N5wBXfcAnCV3pD6vNSW67y9:X6xzUYWmS35YlSV7y9
MD5:	7B4DCBD935D09A368BE6A0EEEDA7E2E4
SHA1:	43A5DB8071C893615357C268E8E71CD54807E412
SHA-256:	5B57952971C85ACC68C811AD332B9A2CAB8175784F815C5B4D6112838AD4B5C9
SHA-512:	2133188AED3399FA318D32E405F579829C4D0F6624420A55232E0435D1AFABD6304017FC4685C1AE27AC453E45786C5870CFBF7B4C45A633415DD357E0AC5C3D
Malicious:	false
Reputation:	low
Preview:	pendo.guideContent('W8wLAJJ-I1c5HQpcqjSuP-dHcdk','K-kKCZLF_TcoZSdvI4U8Mdo7t2Q'," The script tag should live in the head of your page if at all possible -->\n<script type=\"text/javascript\" async src=\"https://play.vidyard.com/embed/v4.js\"></script>\n\n Put this wherever you would like your player to appear -->\n<img\n style=\"width: 100%; margin: auto; display: block;\"\n class=\"vidyard-player-embed\"\n src=\"https://play.vidyard.com/LE2oaRu3qApZkgaw4JjwZM.jpg\"\n data-uuid=\"LE2oaRu3qApZkgaw4JjwZM\"\n data-v=\"4\"\n data-type=\"inline\"\n/>\n<style id=\"pendo-inline-css\" type=\"text/css\">#pendo-g-K-kKCZLF_TcoZSdvI4U8Mdo7t2Q {\n min-height: 600px;\n}\n</style>",function(root){.var __t,__p='',__j=Array.prototype.join,print=function(){__p+=__j.call(arguments,'');};.__p+=' The script tag should live in the head of your page if at all possible -->\n<script type="text/javascript" async src="https://play.vidyard.com/embed/v4.js"></script>\n\n Put this wherever you

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2598), with no line terminators
Category:	downloaded
Size (bytes):	2598
Entropy (8bit):	5.83122927094788
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08UkGfxXWAplkwUG9Q16:aJd6SUtJfNrVlCWWWdtqjZYkKzT
MD5:	3920CFCEE3E1AA1C64345BFFBA61219E
SHA1:	B6C700CEC8E4DEEB681DE93D4F91CB60C7A05260
SHA-256:	0FDC37C4B3AEE4A6BE6FD7D5B57997CB73E6FF694CBECCCC9EF60D18BFC61761
SHA-512:	BE31821F917F87ADB3E9556645D4FC3A524E4D4AF95146361FBFABE0A15C06DF315F68E6D2503809BFCF42F570243F21239BBF88E789F029E65A6F6780262846
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/857000071/?random=1721420610056&cv=11&fst=1721420610056&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14380, version 1.0
Category:	downloaded
Size (bytes):	14380
Entropy (8bit):	7.9845370486959855
Encrypted:	false
SSDEEP:	384:V9e9MoSnw455BJzE0wBQSBUjJWpKlsyIyY8lQGSsrtAvHM:V9e0wK5BJVR9C6sKVlQcJ2M
MD5:	33543C5CC5D88F5695DD08C87D280DFD
SHA1:	600DB9374E47E4F73A59CCC0A99BCC42F4A3E02A
SHA-256:	9C50A96C859B9BEEA47B71740BD14E7F69A4DF586D015F47434037F8DEF53B52
SHA-512:	131AFCE4CECA8E606F46BA8BEDE1A7D84793C04AA507E09FB0D88F0FB5E49DFF61C70A739A279AF185C8C0D2F937761D4D70DC9069F3771EF7A13448E2D1230D
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/fonts/open-sans-v18-latin-regular.woff2
Preview:	wOF2......8,......j...7..............................t.`....."..4.....T..2..N..6.$.... ..Z..x.....\U.z.8...\|tQ...i...O.t.e.../"...[.W....~.KC?.D...<...a...3...Xay.Q..1..:.G_.<....$............If[...".UW......B...\|d$.'..b.E...@.=.N....gg.P.!e.$cfg..Uq...8..V:.q..a.s{........I.. "A.d....It..0.4>.........u...%.`Nu...FQN...\|...r...._{.a/..R.j..)..H.q...i....}z..k.pE:..f......JZ..a..b.+.......... .....G=....d.0.+...2....}E..dM\|_5...F..F..)lH.w.eo...,.-O.."E......%.qc.IP.I,i.oj.....w7..y......J..p.4...................x!.{...\.....S.Z.r...@...L3r..te...K..Cn..Y.. .)Yd.b..^..1..sv...l.o..Q..N@.H.}>...I...?E...N.3.'Sc.+.!r...x..j.2.pBT.(...`. .<?4>@...B..Gx..O..>7.q.[..i.pc}Y....._ogt.@...h;...&.c.^..2....@:.=....h..<..q.Q......^...l......xD.....p.\|..p\..j..\G..\|^.y.,n....\|.O.i>....O..'...........gq..5....g..c\|......?..s..0kg........o=.~..x.........(<.}..G..l.!..#..G......&e.wA.z.44...u....v.-....yYl....(..].z...8....5.:.V.....4.^.V...gN.:y.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (705)
Category:	downloaded
Size (bytes):	1311
Entropy (8bit):	5.427604428015032
Encrypted:	false
SSDEEP:	24:X6xCX6YAd73s3pD6vOmS3T3N5wBXfcAnCV3pD6vNSW67y9:X6xzUYWmS35YlSV7y9
MD5:	7B4DCBD935D09A368BE6A0EEEDA7E2E4
SHA1:	43A5DB8071C893615357C268E8E71CD54807E412
SHA-256:	5B57952971C85ACC68C811AD332B9A2CAB8175784F815C5B4D6112838AD4B5C9
SHA-512:	2133188AED3399FA318D32E405F579829C4D0F6624420A55232E0435D1AFABD6304017FC4685C1AE27AC453E45786C5870CFBF7B4C45A633415DD357E0AC5C3D
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/W8wLAJJ-I1c5HQpcqjSuP-dHcdk/K-kKCZLF_TcoZSdvI4U8Mdo7t2Q/Q6XbgHHIk2FTV8Jo6Occ1UgH5BI.guide.js
Preview:	pendo.guideContent('W8wLAJJ-I1c5HQpcqjSuP-dHcdk','K-kKCZLF_TcoZSdvI4U8Mdo7t2Q'," The script tag should live in the head of your page if at all possible -->\n<script type=\"text/javascript\" async src=\"https://play.vidyard.com/embed/v4.js\"></script>\n\n Put this wherever you would like your player to appear -->\n<img\n style=\"width: 100%; margin: auto; display: block;\"\n class=\"vidyard-player-embed\"\n src=\"https://play.vidyard.com/LE2oaRu3qApZkgaw4JjwZM.jpg\"\n data-uuid=\"LE2oaRu3qApZkgaw4JjwZM\"\n data-v=\"4\"\n data-type=\"inline\"\n/>\n<style id=\"pendo-inline-css\" type=\"text/css\">#pendo-g-K-kKCZLF_TcoZSdvI4U8Mdo7t2Q {\n min-height: 600px;\n}\n</style>",function(root){.var __t,__p='',__j=Array.prototype.join,print=function(){__p+=__j.call(arguments,'');};.__p+=' The script tag should live in the head of your page if at all possible -->\n<script type="text/javascript" async src="https://play.vidyard.com/embed/v4.js"></script>\n\n Put this wherever you

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280
Category:	downloaded
Size (bytes):	156400
Entropy (8bit):	7.9965951555863395
Encrypted:	true
SSDEEP:	3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3
MD5:	1EC0BA058C021ACF7FEAA18081445D63
SHA1:	73E7EABF7A8AE9BE149A85D196C9F3F26622925B
SHA-256:	AE17C16AFBEA216707B2203EA1CF9BDB45B9BFE47D0F4AE3258DDBC6294DD02F
SHA-512:	16A1B8A067AD4A33DCF4483C8370CA42E32F1385E3C4E717F8D0CE9995CA1F8397B15A63C0CEE044C4B0FCA96C4B648C850F483EEB1188A20F8B6CBF11D2B208
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/fonts/fa-solid-900.woff2
Preview:	wOF2......b........9..b..........................6.$. .`..D.......H..m. %..........y......).=<E............p\..... ..O~.._..w..G..g..W..w..O..o.._....)0.w.@.......o.._.;w~~J...]c.D.U...Q.u%Q..A7.aSw...m.Hw.`....\..f.....Z.K...L\|....OHM7=p&.G...+!..."..........q.'{.5l.fo.[k..M.M....~...-..&.;....^R.v..J ...l.r....v.....7ALxxd.\|...........?5#..".WJ.."H.Z9....C.a..I......2..pa...G".;y..U..oP....@..$J"E.....H...v.-.M+....g+/...8.....k..:...4gw......^.....!.....<..3.....^...t.F.I:......F. !.....d.....I .`.....6.i.q...mp`..'U..}S.)oJC!........C`@Qe$Q..*iH..\..k...9k.{]..Mo"GNE...g..v..AZWZ..).}......%(...!NK.#E..".J.v.....d ..M..8K.{.#..a.8w<.>...z..H.y~...\.....F.G..5.'z.!.!.....'....z.@...v!@..7..N......%...Zj......`w5UcI..K.V....q.LdG.q.\o'..8...$;.!..{.5..<...K..m...]....2....{.tvC,.;.n+.c.c'}.a7s.[!+v..,..X1G;.A...U.oC]d.............).....zhwZL.bj..s.....m.+....+e.S..\|..'.{...!2.r..K..,.V....e2..M.X.\..........$E7...V.7...1.}.^...&..O..

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	62
Entropy (8bit):	5.143475947378966
Encrypted:	false
SSDEEP:	3:DL8IkhG2lFq8SWemsNRfFTfeAv:DA5lo8wRtT2Av
MD5:	D58F30FFAC767060B52827A51F71AF2F
SHA1:	6C9C800BCFE16FF7A4C81B631D747811981CE22E
SHA-256:	46A7155334AB24474F5AA34B9CA50B0DE97988A3961552D845C87E1A47A61A0B
SHA-512:	1D00BFEB4D859A006448A41433296FC6B3D5F460348457273DC79A5BF822EC5F5AB8683EB1F847EAD753ABA77AA940CD29B43583AA9B2C7E2E69116CD63CC3F2
Malicious:	false
Reputation:	low
Preview:	#pendo-g-K-kKCZLF_TcoZSdvI4U8Mdo7t2Q {. min-height: 600px;.}.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
URL:	https://attr.ml-api.io/?domain=mimecast.com&pId=1022996381651647135
Preview:	null

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7207)
Category:	dropped
Size (bytes):	7208
Entropy (8bit):	5.164123343165375
Encrypted:	false
SSDEEP:	192:HA1SI+LtL9xW+XUB1SAfQu+BzaNPQznTjdNs6L:g1SIaxWLym+TD3
MD5:	F046BFA3E2CD2807E16D96CF04BDD930
SHA1:	E1FFB6FC6599857968CE3A361A2040FBB541F4EC
SHA-256:	8E6B3272816C9B6EFEB0B3CCC16326C123D9860F38D7C7C4FC215334559996E2
SHA-512:	C9718C6FE21E0D4D0AF31C393466A467478E9CF6DF4BDCCE2AD52F4CE4C00CEECF0296239A0FB65E128047035A02CDB684763038132A106D53167B5D1B2CAB62
Malicious:	false
Reputation:	low
Preview:	var webVitals=function(e){"use strict";var n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){var e=self.performance&&performance.getEntriesByType&&performance.getEntriesByType("navigation")[0];if(e&&e.responseStart>0&&e.responseStart<performance.now())return e},s=function(){var e=u();return e&&e.activationStart\|\|0},f=function(e,n){var t=u(),r="navigate";a>=0?r="back-forward-cache":t&&(document.prerendering\|\|s()>0?r="prerender":document.wasDiscarded?r="restore":t.type&&(r=t.type.replace(/_/g,"-")));return{name:e,value:void 0===n?-1:n,rating:"good",delta:0,entries:[],id:"v4-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},d=function(e,n,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){var r=new PerformanceObserver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 442 x 104, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9649
Entropy (8bit):	7.902218039936796
Encrypted:	false
SSDEEP:	192:I6S7knSY6fVd1Q3SMHYu6HyN/uB0DqNdl229mZxkp/t3j7qz:KQnSBNd1Q3XwH600DcdlT9mZx6l3j7qz
MD5:	A5DC0B89CE76A71F33AAE27D56902F64
SHA1:	8BF5A89761ED727F20CFFC3B688E9283966C65EF
SHA-256:	80076E71A41E7E74D22D285F20B9B2F442F48C27E971D08647A445931F488356
SHA-512:	23088EFF811CBA08C6EADB7CBF25E27CB8F2A2F4C29E61E45E973B2FC13B4B8C29900B49EE17D3200A56394C4ACF3F7D22CA22910F0E2C2EF290F609826A3B7C
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/file-asset/mimecaster_central_logo?v=1
Preview:	.PNG........IHDR.......h......v5.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 116.164766, 2021/02/19-23:10:07 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Macintosh)" xmp:CreateDate="2021-03-10T11:00:50Z" xmp:ModifyDate="2021-03-15T11:22:10Z" xmp:MetadataDate="2021-03-15T11:22:10Z" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:91cc5ba5-d8d2-41ba-89bf-d8d9c6815aec" xmpMM:DocumentID="xmp.did:91cc5ba5-d8d2-41ba-89bf-d8d9c6815aec" xmpMM:OriginalDocumentID="

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1721420609036&id=t2_2s9dur0o&event=PageVisit&m.itemCount=undefined&m.value=&m.valueDecimal=undefined&m.currency=undefined&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=3aafe886-aa62-4474-bb22-6200409a67b7&aaid=&em=&external_id=&idfa=&integration=gtm&opt_out=0&sh=1280&sw=1024&v=rdt_e9773deb&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6113), with no line terminators
Category:	dropped
Size (bytes):	6114
Entropy (8bit):	4.756393503828589
Encrypted:	false
SSDEEP:	96:3735cwLWCMfD0BqECxjMHX0RsZOX0RsC62FX0BgCxj0PX0Rs6YX0RsC6hji0O0:3T5O1fDWMxjMHXAKOXAt62FXWRxj0PXT
MD5:	B336B078040D2597051DC33E6EFDDC22
SHA1:	D85B023436098873BCE47C2FF963A621C810CEE3
SHA-256:	45F430983D367678F09F03FA6C4EC3244C67C38D4DFCE13C4E276C7EC74AE534
SHA-512:	DB172404F0526B45263382C64C81B4B32BE7719ED40AEA1A9639481E7D4F5F74157062857DC912857AC861119539D95F839B5D61AC2AA24829606B187D779ABE
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("rhKDInkdpJqnU4ZzOF06qUryhQg", "F3XXM5Ld9qnQ4paenScsz3SZanA", {"props":{"id":"pendo-base","data-layout":"lightboxBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-close-guide-a5fb9daa:hover","styles":{"color":"#333333"}},{"selector":"#pendo-close-guide-a5fb9daa:focus","styles":{"outline":"none"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-F3XXM5Ld9qnQ4paenScsz3SZanA","data-vertical-alignment":"Relative to Element","data-relative-alignment":true,"style":{"z-index":300000,"position":"relative","width":"400px","animation":"none","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"aria-modal":"false","id":"pendo-guide-container","data-caret-width":"12px","data-caret-height":

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9260), with no line terminators
Category:	dropped
Size (bytes):	9261
Entropy (8bit):	4.825760925887632
Encrypted:	false
SSDEEP:	192:3NBm9rEBNoWM7JS1bt2hafwT40VTK7Zpzd4I9kJqIlVXLtVEGhhGdEsMWXvck76:3NDg7W52WyupJoC6
MD5:	810A40E10BF86F4BD47A2648E8A92EA5
SHA1:	78B62DD50E3FB34A8005AA9F96E31094176D2295
SHA-256:	736D7FC9019380865078BF6A839878485A4DE0615892F70BF03F774BF912FA46
SHA-512:	FB45793ABCDDB8206BE706B7D59EB46D1CB5E8B7A291C9E6F4E6E093AB2F637AD94BE7504161F538E8083C44C6343EFE28A20D654AF00E2FD7430E076D69804B
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("zdB7-J0evdQGCMkKHZkjYH0yI5c@sn9p0ljv8dushqgktXFohVVCLNU", "QXLXJOxUK1v5JjDCscvJY0mAi5E", {"props":{"id":"pendo-g-QXLXJOxUK1v5JjDCscvJY0mAi5E","data-layout":"GuideListModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-da11adec::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-da11adec::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-0

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 625 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23736
Entropy (8bit):	7.939481008608786
Encrypted:	false
SSDEEP:	384:7yEEEyr6CcGEvumfBvkFWK5RS256yNpiMX9+Il1EdsJ88kKtJUOu9Sq6N3E7jEEK:isjBve/Rp5CMXnHkKsq
MD5:	713CF7FB93586F3D0E68D422C249812F
SHA1:	C82DD128CBC88C1B669EB139E2A557FDE676EAC3
SHA-256:	E8E0C7E05FE43ABFC297336D933EB5CFAEC7F372E0C20BE438C86BFED553AD8C
SHA-512:	21A0F2C580172E36462961C728391DAD3807D7D574E0D50A8E89A4D5195A0690EDF2AB7CAB87BC982419D62698E356465A113DAEEE001AE9E63FFD9CABE47A51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...q..........e......pHYs..........&.?.. .IDATx....$.y...Y3...t7....o..>4... w..^.X.8.....$.. .. 85.]...N.x.hM.!.:,O.\|..,o.. ......bq,....&..2...E.a;.b..u.....ofe.U.Y..DMW.UyU.7.S................@.........!.q.....=.".......@.........8..............C ......z.D.....@.........!.q.....=.".......@.........8..............C ......z.D.....@.........!.q.....=.".......@.........8..............C ......z.D.....@.........!.q.....=.".......@.........8..............C ......z.D.....@.........!.q.....=.".......@........s.r......bU.a...LM...~$.x@...{...=J........R)5.}-?...!....5!.x$.gY.......}.xG..S.H..G..........A..@..a^.S...p..5..d.;P....Z......`.[.'?..M!.y...S..-K.e.N.......S-.H.........(I.D...o..!...[3..<.-..5.F.o...,t.....J/D...om.).B.K.....V7.>.%.D`.r....u,..Y..C..........-.=:.2..]L...1K.....25.MW..G..;e}HM..;.BM....9.....C.D\$.B...RSE.[V"Cj......#w_...k.P.).1....U..dc..=P.c... ..q....... ..e1..p.....'So......I..v..S..r;............y...;n.`.tB..O..O..(..K.-...

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	5.143475947378966
Encrypted:	false
SSDEEP:	3:DL8IkhG2lFq8SWemsNRfFTfeAv:DA5lo8wRtT2Av
MD5:	D58F30FFAC767060B52827A51F71AF2F
SHA1:	6C9C800BCFE16FF7A4C81B631D747811981CE22E
SHA-256:	46A7155334AB24474F5AA34B9CA50B0DE97988A3961552D845C87E1A47A61A0B
SHA-512:	1D00BFEB4D859A006448A41433296FC6B3D5F460348457273DC79A5BF822EC5F5AB8683EB1F847EAD753ABA77AA940CD29B43583AA9B2C7E2E69116CD63CC3F2
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/W8wLAJJ-I1c5HQpcqjSuP-dHcdk/K-kKCZLF_TcoZSdvI4U8Mdo7t2Q/bJyAC8_hb_ekyBtjHXR4EZgc4i4.guide.css
Preview:	#pendo-g-K-kKCZLF_TcoZSdvI4U8Mdo7t2Q {. min-height: 600px;.}.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12421), with no line terminators
Category:	dropped
Size (bytes):	12422
Entropy (8bit):	5.100140991325246
Encrypted:	false
SSDEEP:	192:30tmJrZWf/aWM7JS1/t29lafZqlQVTK7KHSbG0k2k2BA8pzDL3R1SLr6VXIGtVEZ:30ev7Wl2kFvqCYA8pGtoXE
MD5:	01CA7C0CDF758987E8B88D4FBDDCF27C
SHA1:	2BEF6ECCF1B3C61F010C03F1F579AD186A301E6D
SHA-256:	AEFC214BAE8A6500E426B53A770AD80CB05FA6FE689BA0E0A20FDE6180DC3A9C
SHA-512:	396F99BDA2F19088EB2465E0852A900F65650863925FBA49F902A499F3A431185710380D0729A87A2DD3418BF9E6C65A0B01BF69814C94F3F406F31BA009E458
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("7SHTPNi_Xpm4UJSECcvOI9Ne9TM@sn9p0ljv8dushqgktXFohVVCLNU", "WmvWv3yoJPY5zIiS-0_34FvCVEw", {"props":{"id":"pendo-g-WmvWv3yoJPY5zIiS-0_34FvCVEw","data-layout":"GuideListModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-df278a82::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-df278a82::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-d

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1398
Entropy (8bit):	4.342650302185063
Encrypted:	false
SSDEEP:	24:t2sZuXMMWaw6hTkIYWlEjG9MM2Voa/oiyGR4yElKOTmrmaYIldJM0ZZ/+z1S9AU:jZ6hTkIdEVoGoiRTvjrmaYIldO61R
MD5:	7F05B10DFB09DA36EB4D8731A7461A4F
SHA1:	A21FA61A4E9677469A996AA74E3E3E0AD3FDF387
SHA-256:	9B8F58BE4E018543B9A7BE3EC6838F074F06327FF4E2BB562856DE8A2F5757EA
SHA-512:	53B0DAE39890D1479D3D273AF50E8C423B2B8AB63E2BD88D09749AF7843E76353E6E93D2201D95F6B3BEA66642F4EEFDF3A3E081C50BA01FDD95343052CB5FEF
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/42614e9cf56247afa6fa9d9baf3a7d8a?v=4e5ac00d
Preview:	<svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M22.4542 16.9077C22.4542 19.6436 20.2363 21.8616 17.5004 21.8616C14.7644 21.8616 12.5465 19.6436 12.5465 16.9077C12.5465 14.1718 14.7644 11.9539 17.5004 11.9539C20.2363 11.9539 22.4542 14.1718 22.4542 16.9077ZM19.9773 16.9077C19.9773 18.2757 18.8683 19.3846 17.5004 19.3846C16.1324 19.3846 15.0234 18.2757 15.0234 16.9077C15.0234 15.5397 16.1324 14.4308 17.5004 14.4308C18.8683 14.4308 19.9773 15.5397 19.9773 16.9077Z" fill="#000129"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.5004 7C26.3922 7 33.6004 17.4291 33.6004 17.4291C33.6004 17.4291 26.3922 26.8154 17.5004 26.8154C8.6086 26.8154 1.40039 18.4721 1.40039 16.3862C1.40039 16.3862 8.6086 7 17.5004 7ZM29.5634 17.3189C28.8717 18.0301 27.9837 18.8725 26.9427 19.7109C24.236 21.891 20.8981 23.7192 17.5004 23.7192C14.0054 23.7192 10.6478 22.0574 8.05805 19.9717C6.783 18.9447 5.78453 17.88

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	dropped
Size (bytes):	215185
Entropy (8bit):	5.541596399548431
Encrypted:	false
SSDEEP:	3072:u8ICuKurL5pQlXSpJ4X0LIOwSxl9kLEiLnyfJBwa4BbwJQNebmS7U:Xp2L/QlkJZHwSp74BbwJQNkmSQ
MD5:	F90D0319494B8F201CC15659ECA1680A
SHA1:	2EC5C17F36C5CCDF1B3210D83A8A150CD2CA3D9B
SHA-256:	20751CDA0A3A1B28742DDD16701814B2451D8A0B4B1E6AD02F5FAC40039FB891
SHA-512:	607D9B2B3D6A8E04001E88AAF8EBC3E61D1C744A4C5093FBC15737895F0BE398939E11874520ABF96E3A7A53B2A2363261BD4C23E03668CC3396404ACF2BB05B
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"DC-9488543","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__ogt_1p_data_v2","priority":0,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"",

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.669105788705328
Encrypted:	false
SSDEEP:	24576:wDd0Ec8FFbNEoacUct42PHQ1tK/LHYzhZm37Dxq1h:Axc8DhRbhdFHqOFqv
MD5:	D4036C23CCD3FC1F0EF4CE5229556A35
SHA1:	E34BF42DE0F7EC8545FA4B66F1F4144614E4FA02
SHA-256:	4F1F01095A121341C395D8F89559435DEDBEE3744F7C9B9A4D9A4AA1BF755949
SHA-512:	57B0A203ABEB456387E25BC8C4DCB29F28EC96B87BD7B36E2AD577111A7CA7929E552D7B58E1BB8007A43AEA5A79B333B4BF6357D4E13E4C9EF45854A7299B90
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/75013efacc6a4fe5b9de645b642dfa78?v=0e57c20b:2f7c35be5c86b3:3
Preview:	^.v..vzU$....LJX...W...0\4...RW......U.;#.l....\.......~\|...Y.u..._..#bj.f..........r%1..2yb.ti.^..^.....7...CL.....)........s".2.a..Ib.A9.y"G..&)...$..gHtR8.A..=+^......e..1..d.V....!,.U.r...u...e%<J.p..b....p.....Yy.(..C.?b.` k=f.c>.....X.f....Oc.....\|..t.fR..(.r....RA...#.m!..\|.t......_..%..Q.V,......5o....^c-.T..).G..........Q.b.[..rhH.8...D...A..]..G.......G...h$.i.A..$...n.=.....c....B.!.e...<.Ui$...U..e.Z..X4.b.B.P@ME.t.../A\|.1.)....`aQ.4D..,...D.[...hu.:.G.....jm.N<HH1...5L...;..5Y..5.;(.X.n\|..V.U...@....V..tSb....%...~.6...S....". ...P.g8.\....V....;{.....W..B...=\.]E....o'...P..{].&$f^....{L...l...`J...M.J..b[DGq.................0Q....6#.Tjt.g...g4......(OS&....Ox.9.Y[.P...K'.b2.4...!.m'l...s ...F..*J....i.MH.p>.U......I\|'Ik....#.)...`.......J..{OU^...,]....<...b!`oqj........2\|../o...L.N.A.......r....<..+..z.z.j.....>n..'>...}..Z..W.G.(........@.....G.U.'..gK.....&.c..V...N.oN. .....j...Aw.-...&.D...F...e..."e^.F.....S...KK.[

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2878), with no line terminators
Category:	dropped
Size (bytes):	2880
Entropy (8bit):	5.2417615524757375
Encrypted:	false
SSDEEP:	48:JvHc4P5G+5XCUkVX1RW0GT9XLQRS2puZYGnTEit4W8Ib97GW/o:JvHnGbDV/W0KraGYdWbbBGWQ
MD5:	BA9457B4EE74A7DBF13AEF7685AED34B
SHA1:	00D1AF4F5776400F1D09C7F11EB5B49D9B410AF6
SHA-256:	D7945DA26154582BD6C5EA68C47A9A01DCC3F8925804CD34810082FDBC29408B
SHA-512:	8828D51B2D89CE681F0B324EE8B204FDF5B41B4D90E5E8EFD522FE2BCBA583962358CE94B3DAC305D0C1848CA5CAE9D84997CA9BE06FB8EC64FAC8320B1FC432
Malicious:	false
Reputation:	low
Preview:	(function(){"use strict";var n=window.document,u=function(){return Array.prototype.forEach?function(n,t){return n.forEach(t)}:function(n,t){for(var r=n.length,i=0;i<r;i+=1)t(n[i],i)}}(),e=function(n,t){var i=[];return u(n,function(n){i.push(t(n))}),i},o=function(n){return n.toLocaleLowerCase()},s=function(n){var t=n.indexOf("//");return t>=0?n.substring(t+2):n},h=function(n){return n.endsWith("/")},v=function(n){return window.decodeURIComponent(n.replace(/%(?![0-9a-f]{2})/gi,"%25"))},i=function(){var t=window.location.href;return n.currentScript&&n.currentScript.dataset.url&&(t=v(n.currentScript.dataset.url)),t=o(t),s(t)}(),r=function(){return i.includes("bt-debug")?function(n){window.console.log("Bidtellect Universal Pixel . "+n.toString())}:function(){}}(),y=function(n,t){n=s(o(n));switch(t){case 2:return i.startsWith(n);case 3:return i.includes(n);case 4:return new RegExp(n).test(i);default:return h(i)&&!h(n)&&(n+="/"),i===n}},f=function(t){return n.createElement(t)},t=function(n,

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6047), with no line terminators
Category:	downloaded
Size (bytes):	6048
Entropy (8bit):	4.9454498621633975
Encrypted:	false
SSDEEP:	96:3HiZUm2rAvMOR/Q5IM7CQ5vgHPtDK9oAzHOSjHP0NHi8BUXpYUA45X/tqAVpxM:3MUm2rAYWM7LSHPt29/a0WHQXpJB5X/6
MD5:	9F74E2798D0C1A85A6D7A6896B5E2664
SHA1:	E2D1D7ECDAE24AB0404F10A74396E7C00F46E8DC
SHA-256:	26448ABFF144D0A5F6B0FD015E99B85229995030E9F760E88F137773E0D28CDC
SHA-512:	122A43B7BD1076271B5223E83F7F0B060F4C0633FD698D714BD8EF406277CC2B129C30AE0A1B7066C31A969BAB8BE1E26EFD7E9CE2944EEBA5FEB11177A7A77C
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/67e9EH2nmGI2q8_wiKCr04V4ODs/8kb8zIKou5PV4zS4XX0acvJnkAY/4tHX7NriSrBATxCnQ5bnwA9G6Nw.dom.jsonp?sha256=JkSKv_FE0KX2sP0BXpm4UimZUDDp92DojxN3c-DSjNw
Preview:	pendo.receiveDomStructureJson("67e9EH2nmGI2q8_wiKCr04V4ODs", "8kb8zIKou5PV4zS4XX0acvJnkAY", {"props":{"id":"pendo-g-8kb8zIKou5PV4zS4XX0acvJnkAY","data-editing-id":"47c2359b-6602-46c9-ab9d-333b8e7c2cd6","data-layout":"AnnouncementsModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-fe8cc4c5::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-fe8cc4c5::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 2000, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7764695
Entropy (8bit):	7.980072466467024
Encrypted:	false
SSDEEP:	196608:rPhUe9WjAbcbCYfLoDBV4hazL3ly77zztptWuytGdX:rZU0WcIjyVxL3ly77zzUuSGV
MD5:	C8E5ADA44EA42B423FAA3F007876DB25
SHA1:	4E9D1B5854476E71F076AD5A6DA91D3CF05C4BE6
SHA-256:	961689275D20C9A47C1BFC51AC2437280426724F154CB272EE3B98A453E11923
SHA-512:	556D1A6812D9A5E092CF0AF464AF049724F0B3256729BE70072CAFE7D8A0C735E98A6157F83C7D11C1EEEECEAB7CA08CF6B7E548221EC1E330D354C9451D12CE
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/3de62109b5794239ac94fc95e68d8718?v=a79d7c27
Preview:	.PNG........IHDR..............p.m...IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1455)
Category:	downloaded
Size (bytes):	2558
Entropy (8bit):	5.145721909876602
Encrypted:	false
SSDEEP:	48:X4oeaJOhJ1dMNcGxAzwNyUdNxkNAQwrK8VpQMr1dgNc4XADFULDQ0:XVeaJMJ1dMNFA9UpgwFQMr1dgNvXAJUZ
MD5:	A8DA88F6108339D352D26AA5D18136C5
SHA1:	A14EEF4747A49E6614B3E6C8702DC310EF400AD0
SHA-256:	677C4E3485A7F300DDC2E729E4EA2922B524CA13849C2E2E0EA82EC0210B1966
SHA-512:	53F196DFCFE3CE31181B312F069CA712B19B0CD7B1DC451F58EB5B8D42DD32F0D018901A4615CFA0DEF344729364C57E6B0BA50206BB353F999C37C0F5E78B84
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/yyTjAbf0U6P4FyCht9PDC37PECc@sn9p0ljv8dushqgktXFohVVCLNU/wNNiK8f0SEITG_a7n9-tBCaxh-s/oU7vR0eknmYUs-bIcC3DEO9ACtA.guide.js?sha256=Z3xONIWn8wDdwucp5OopIrUkyhOEnC4uDqguwCELGWY
Preview:	pendo.guideContent('yyTjAbf0U6P4FyCht9PDC37PECc@sn9p0ljv8dushqgktXFohVVCLNU','wNNiK8f0SEITG_a7n9-tBCaxh-s',"<div id=\"integration-container-018a0b9e-904e-4c50-bdcd-1045a640399b\"></div><script id=\"pendo-inline-script\">\n<% if (typeof guide !== 'undefined') { %>\nvar guide = pendo.findGuideById('<%= guide.id %>');\nvar step = guide && guide.findStepById('<%= step.id %>');\n<% } %>\n/BEGIN PENDO SCRIPT WRAPPER/\n(function () {\n var integrationContainer = document.getElementById('integration-container-018a0b9e-904e-4c50-bdcd-1045a640399b');\n if(!integrationContainer) return;\n\n var guideContainer = integrationContainer;\n for(var i = 0; i < 10; i++) {\n if(guideContainer.id === 'pendo-guide-container' \|\| guideContainer.tagName.toLowerCase() === 'body') break;\n\n guideContainer = guideContainer.parentElement;\n }\n\n if(guideContainer.id !== 'pendo-guide-container') return;\n\n var resourceCenter = pendo.Sizzle('#pendo-resource-center-container');

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2817
Entropy (8bit):	7.794005861462191
Encrypted:	false
SSDEEP:	48:H/64TEA4XQPEZ6052hU+pjmKwPHF/0a8dXHIuF0HBIJAIEmiQrzwFGYHa:HSGiQKZ2hUSmKwvF/0a8dXouwBZIEmiO
MD5:	76E5039F79ABCAF791A5B5D47D5E3703
SHA1:	C6E35151D66D6A3CD89E01FDD30E5832579E082D
SHA-256:	4E0D36A018B8B1222252FFDA1135C5A8C2C7DBFB0E99750A657CCA6B728C67E1
SHA-512:	E15EB19047AE629841A703205495EBBABDBD33827209450327E125069F7E3A993BDC1414B1472D2BF9B665BB342C191F006CB4ED889E09E822A94C0888049635
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R:W.....pHYs.................IDATx...?l].....g....n...J..1.<...0@.,N..!...R...?1T...C...K.......YJ.zR....S.NAu....~.\.....s.}..~.\|?.........s..?.f....r.....\...@."."......HD.D"" .......DD@$"."......HD.D"" ...q..N... "4j..Iw.o.....DDh<.....TB""4.P).......RHD...J%$"B...........DDP.PI..._;K..j....n....."......wn{....+..2.{.uN.....M+o.....$.(a.......?.&.trO<..6._.........4 1q...v.?...if..#g^...(.^_.......d..9.D...q.x.a..=..........P..R.ydJx..W.y=.9.}x..92..JDd....E@.o....'.B........{.............4&...[..p._....a$2"v&.M...@%F"..H7"R....p.......g.?.....kM;K.N..!.C.AD.p@....C..[w......B..~..O.k....Y.$X..h@...?..9$.g......W....b!.....%...iW...H.S.^2B..8~.XQ.."R.......A.Q~.w......V5.p../"RB.....C..d4""...T.I..Qn..W\.eV....2"...>O....R@..)3.>......%..=......d....r@B^.g.a..9..z@...?.~.T..#Q... ..I..A.\|/.v....iED...B.\....}5.G>.....jED-..p...p.#..D..B.[+@D.J!$.Q.,..{.....9.....d.."R.bH.J. "E,.$..s.k..cZ,""e....a..=.*

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HNmR:O
MD5:	731AB7F20FA1BB4868E6542095037941
SHA1:	A100412F0830DDC777E6936A76E26C7F8981170F
SHA-256:	C56070E34AF5037117F2B219E5FF7888E1BDB55FBA4FC0709CE36BCC227B19C3
SHA-512:	D2FA373BCF9300EF72D66E2D311D6F2214B6268133E1F891D5D487A36B0C7DEAD0F03CE855D013692505916365D5696085ADE5E35573C8B7C3232FA7A7DB42E1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnyxRpc4TP7VxIFDZrRdFA=?alt=proto
Preview:	CgkKBw2a0XRQGgA=

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4838), with no line terminators
Category:	dropped
Size (bytes):	4839
Entropy (8bit):	4.908860390556065
Encrypted:	false
SSDEEP:	96:3KZJzmVr5ORFQ5IM7MQ5vg12ltDK9lzHOSi2hbH4060i8BUNZ222Y:3UJzmVreaWM7JS1Et29lafI4QQb22v
MD5:	0F42BFA972368D57F112B97695C1E8F0
SHA1:	82CC7D4C86D192BE68492841A08261B077214DEB
SHA-256:	959C55A33DAFCC2ECE2B32FBC93C4F516667C46AA1C3ED83782AE78C98876A44
SHA-512:	9FF26AC52EFE9CE156FD71D3BAF46DCF67B8169F933F91C67C8CE85366AB5C47A73838E5406DF7A094A93553BAB9C598DABE7E6CB034B1F0457B2733E9C293C7
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("EWuuX_o4U-xRldBOqT-LYFc69fQ@sn9p0ljv8dushqgktXFohVVCLNU", "Imtq1OAS7QR5--1wWyrbg1YVU2c", {"props":{"id":"pendo-g-Imtq1OAS7QR5--1wWyrbg1YVU2c","data-layout":"SandboxModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-f88be748::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-f88be748::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-f46

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 625 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23736
Entropy (8bit):	7.939481008608786
Encrypted:	false
SSDEEP:	384:7yEEEyr6CcGEvumfBvkFWK5RS256yNpiMX9+Il1EdsJ88kKtJUOu9Sq6N3E7jEEK:isjBve/Rp5CMXnHkKsq
MD5:	713CF7FB93586F3D0E68D422C249812F
SHA1:	C82DD128CBC88C1B669EB139E2A557FDE676EAC3
SHA-256:	E8E0C7E05FE43ABFC297336D933EB5CFAEC7F372E0C20BE438C86BFED553AD8C
SHA-512:	21A0F2C580172E36462961C728391DAD3807D7D574E0D50A8E89A4D5195A0690EDF2AB7CAB87BC982419D62698E356465A113DAEEE001AE9E63FFD9CABE47A51
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/rest/branding/get-branding-item/WKQ6McxzG4swkfOqOLSMVAeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoiU3RVdUV0cFQxUnozejI5ZiJ9.B0qOyoKogie6_0tKl7zF_Z-NM7pDP9kk.8GVGyjDi5jRGxfMq.wgH3wbn82zS0_OqwoiHBEpXp47uoxJqBWet8dPnSNx6WYGdy7BXDp6AOqGUx7UW57lzqt_N3LW74GfO3g2mRKp5b0zuRFFYUcVFgp2iH6su1lLYqeSgg3rhz_uzPlY7Wu3cWuNbYIcbs6wyVFpT9lUj7cr9wa0sHlLNBaCEQXu143WKTjmhMA3w9U_Mcg2FvrEuoyiR0ifqNdyLYUAmCMAI05SyKIlQbOYf7lvO6dEKAQircZ0dVmTuIcrG1vD62ZmHn-gE0Fb-lmuMJ3O9rPZxfEAGl9SMcHC62s2t_c5TgcxZZchaIqLCr6rmDXmDfLagDVnsqRdvdHg_tqoqaT8FT_iVlNZB8COtWXeWy3CK9y5s3dPgyXvr3jb1Y4O-uhxIwpqmjP8SXvSDXqvQy0MJdo4BWjsFNaS-2c72Vjqx9x6sdFrauZTvfHYQyeKseJJZ-Joue8pJQOyx3evKrw0Ed2IMVwEFqJNPh9HnFl_KytDO_qe18rcKpks9xGsFhvxu8eYW7r1B-GxITVALVPF0j_cOO_6T7hi9vS8-UROZmaACF52axuXvt5T_hW9_AV2S9E5UnzebhwiQKWzVV2qrAiRUs.L86csBQ1j7KqH7uRUAyd8Q?tkn=freemanhealthsystem
Preview:	.PNG........IHDR...q..........e......pHYs..........&.?.. .IDATx....$.y...Y3...t7....o..>4... w..^.X.8.....$.. .. 85.]...N.x.hM.!.:,O.\|..,o.. ......bq,....&..2...E.a;.b..u.....ofe.U.Y..DMW.UyU.7.S................@.........!.q.....=.".......@.........8..............C ......z.D.....@.........!.q.....=.".......@.........8..............C ......z.D.....@.........!.q.....=.".......@.........8..............C ......z.D.....@.........!.q.....=.".......@.........8..............C ......z.D.....@.........!.q.....=.".......@........s.r......bU.a...LM...~$.x@...{...=J........R)5.}-?...!....5!.x$.gY.......}.xG..S.H..G..........A..@..a^.S...p..5..d.;P....Z......`.[.'?..M!.y...S..-K.e.N.......S-.H.........(I.D...o..!...[3..<.-..5.F.o...,t.....J/D...om.).B.K.....V7.>.%.D`.r....u,..Y..C..........-.=:.2..]L...1K.....25.MW..G..;e}HM..;.BM....9.....C.D\$.B...RSE.[V"Cj......#w_...k.P.).1....U..dc..=P.c... ..q....... ..e1..p.....'So......I..v..S..r;............y...;n.`.tB..O..O..(..K.-...

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	16791
Entropy (8bit):	5.341211169175881
Encrypted:	false
SSDEEP:	192:w/A85q1H6uy2rbqGIwYRe1qW/uaDqPN6uyIrbqGIwY7w1Mh/ZFgqsC6uyrrbqGIA:mUhq9IW/q935Cq9C
MD5:	85797B9763526C7B157F499EBE2044A5
SHA1:	E832FDCF940D9BFB2763982C37BF43D83495EA9F
SHA-256:	3FF27E82D78A471905EDF58F54D412011E0F3B07CB596B50D425151E7DF84404
SHA-512:	5F484D35AE3FE1781CAB0BA6502B75C00733494A6DF599500FB5360887B5B5EB72DA69C50FB7F41C95B089BF1DE47B91AD93259114D13FE3831B87A21F31CDDB
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:400,600,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Open Sans';. font-style: normal;

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3193)
Category:	dropped
Size (bytes):	58073
Entropy (8bit):	5.523973579049098
Encrypted:	false
SSDEEP:	768:+GnIhQKwkt9Fc1ufB8912kSmPi43aRVBBDCqmS+ZyA70Ml9:+GnIhwAFHm93Z643aLiAIl9
MD5:	E86947F770F9D127BE5AC8CF997C8011
SHA1:	FC0D1E7776C15A29BDC5577F234FE63C3EF38B36
SHA-256:	3806CE9B03B3F776523AF86B105352F18AE84D4427EB4154B1FC2C054352188D
SHA-512:	5EFEDADFD093625AE59CE7E6C867EC64DE31B03F0CECC165C274D575BED3B09A656E2B46986C47BB89BCA410A681E869A000E7C1879B2E948CD4C4D6AD621B09
Malicious:	false
Reputation:	low
Preview:	(function(){var m,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},ia={};function t(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=fa;for(e=0;e<d.length-1;e++){var h=d[e];if(!(h in f))break a;f=f[h]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4296
Entropy (8bit):	4.714178842767438
Encrypted:	false
SSDEEP:	48:c0CZJKuD3KTBYd5XLpqGYuVVBiO/zwB5l4WkF8yzpJ1kBqY++x+jWI+yLeHGeBjJ:cJr3iQQGYLl6qyFJ1k0YIjWI+yEG2J
MD5:	4D1F4E11F350DA80C450829871EC53CA
SHA1:	7F260B706DF71AFCE6380170C00707C6A9EC544A
SHA-256:	703A8E4FA732BFEB3F0A6642AE1FB1D3BE837103768DB6197EA69F01234C49D1
SHA-512:	C30916AC4B1DDE58E96ED2343EFD5BD740D4C2A23BA358380F3A6B6CF8533BD5EC0540C6636F48BB8A54DEBD51FE5219E37F06023C909CB0291EF86CD10EF691
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/1c9bb09595ba4175b9b901a7fdc0a7bf?v=28be8a73&t=w1920hq
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g id="layer1">. <g id="g10836">. <g id="g6310">. <path id="path6312" class="cls-1" d="M65.95,90.6v-13.55l-4.64,9.84-4.47-9.84v13.55h-3.68v-20.76h4.05l4.09,9.46,4.27-9.46h4.08v20.76"/>. </g>. <path id="path6314" class="cls-1" d="M73,90.6h3.71v-20.76h-3.71v20.76Z"/>. <g id="g6316">. <path id="path6318" class="cls-1" d="M86.52,72.99v17.61h-3.7v-17.61h-4.44v-3.15h12.61v3.15"/>. </g>. <g id="g6320">. <path id="path6322" class="cls-1" d="M97.84,91.17c-4.83,0-6.49-3.16-6.67-7.07h3.53c0,1.88.93,3.71,3.15,3.71s2.96-.92,2.96-2.39-.92-1.87-4.82-4.08c-2.78-1.68-4.63-3.34-4.63-6.31s2.04-5.37,6.31-5.37,6.3,2.96,6.49,6.47h-3.7c0-1.67-.92-3.35-2.78-3.35s-2.6.76-2.6,2.04,1.1,2.22,4.07,3.71c3.34,1.87,5.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1160040
Entropy (8bit):	5.06147372809329
Encrypted:	false
SSDEEP:	12288:hCN/bAGGq0mBzvUUKJMESwU2bnAQo1hnJsRls:oN/bWmBzvUZHVO
MD5:	79733EC4F49EE89B8667DFC57A0A4139
SHA1:	6C64A4827C4CA8FB89BF24637B42D0D64A970971
SHA-256:	CEA435E36758099306F2E6F36908757A40F3E50E82509949D6B6C640ABA76773
SHA-512:	37117A5BB1189D0A4F7586E688E950CBC177D920D9116B8369C00B9A767EB28EFA1AF22B6792F4157CC0F7ED1782459C9EE19C4791566E511EB522585B507F6A
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22styleContext%22%3A%7B%22c%22%3A%22webkit%22%2C%22x%22%3A%5B%22SLDS%22%2C%22isDesktop%22%5D%2C%22tokens%22%3A%5B%22markup%3A%2F%2Fsiteforce%3AserializedTokens%22%2C%22markup%3A%2F%2Fforce%3AsldsTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityTokens%22%2C%22markup%3A%2F%2Fforce%3AformFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AcommunityFormFactorLarge%22%2C%22markup%3A%2F%2Fsiteforce%3AauraDynamicTokens%22%2C%22markup%3A%2F%2Fsiteforce%3AsldsFontOverride%22%5D%2C%22tuid%22%3A%222Vbq4FI0PYuVodwHAmCzoA%22%2C%22cuid%22%3A94208334%7D%2C%22pathPrefix%22%3A%22%22%7D/app.css?2=&aura.attributes=%7B%22ac%22%3A%22%22%2C%22authenticated%22%3A%22false%22%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%2C%22formFactor%22%3A%22LARGE%22%2C%22isHybrid%22%3A%22false%22%2C%22language%22%3A%22en_US%22%2C%22pageId%22%3A%22e34eeddd-05a4-4255-b40f-64fcb4a6703f%22%2C%22publishedChangelistNum%22%3A%22749%22%2C%22schema%22%3A%22Published%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22uds%22%3A%22false%22%2C%22viewType%22%3A%22Published%22%7D
Preview:	:root{--lwc-mqLarge:only screen and (min-width: 64.0625em);--lwc-mqSingleColumnRecordLayout:(max-width: 599px);--lwc-mqMediumLandscape:only screen and (min-width: 48em) and (min-aspect-ratio: 4/3);--lwc-mqMedium:only screen and (min-width: 48em);--lwc-mqHighRes:only screen and (-webkit-min-device-pixel-ratio: 2), screen and (min-device-pixel-ratio: 2),screen and (min-resolution: 192dpi),screen and (min-resolution: 2dppx);--lwc-mqSmall:only screen and (max-width: 47.9375em);--lwc-paletteIndigo10:rgb(32, 6, 71);--lwc-popoverWalkthroughHeaderImage:;--lwc-zIndexDialog:6000;--lwc-colorPickerSelectorWidth:14rem;--lwc-nubbinSizeDefault:1rem;--lwc-navigationItemVerticalPadding:var(--lwc-spacingXSmall);--lwc-paletteCloudBlue40:rgb(5, 98, 138);--lwc-brandNavigationColorText:rgb(0, 0, 102);--lwc-colorBackgroundContextBarInverseItemHover:rgba(255, 255, 255, 0.2);--lwc-dropZoneSlotHeight:0.25rem;--lwc-colorTextTabLabelSelected:rgb(0, 0, 102);--lwc-colorStrokeBrandActive:rgb(3, 45, 96);--lwc-palette

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35141)
Category:	downloaded
Size (bytes):	592046
Entropy (8bit):	5.531810100494441
Encrypted:	false
SSDEEP:	6144:3UKc202xp2Q/QlyJlLwSbdk4BbwJQNqUm8xrlP:3pc20ANJ/m8v
MD5:	1FBCED3E8664E71D339AA743B1B81295
SHA1:	53CD57F07699DD7CF1A1667DE56ED2C9CCB4837E
SHA-256:	47B6579637D51DD3D002ECD915D3954358CC76712C607C95CD794CFD1819B480
SHA-512:	5799DE1B4481EC66143F7D951A2AE71BAE087C24933EB0FDE8D233D63A24816C0A4B8BCA276203135480FB36AF0990231E9668305830AF2087A86ADD40F9E661
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-M2787TN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"749",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"ecPhone"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"ecEmail"},{"function":"__awec","vtp_mode":"MANUAL","vtp_phone_number":["macro",5],"vtp_email":["macro",6]},{"function":

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 1678x373, components 3
Category:	downloaded
Size (bytes):	18683
Entropy (8bit):	7.541319419214933
Encrypted:	false
SSDEEP:	384:1/Al2vMg9AA2ISNdpvoKENU+YgpiLxOPHE2dfH0i:1/X2ISNdpvorNloNO7D
MD5:	46E86EC507138EE0D310EFD9C49E15CD
SHA1:	AE7A072AFA93674240C56F145EF54FDE638A480A
SHA-256:	C8A71F222B2FAC5A67876F7BAD88F35475424B92C18C7977853FA6CF91486A1A
SHA-512:	A400A58632191819F4BCEAE6464141D454226D10C18E51FCD5C249DBF4C7BCAD47A2A5EC12B4194D76A0A23DF2BBE083867FAE42CA4EAA8E3EFCC14A6D12FAEC
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/s/sfsites/c/file-asset/communitybg?v=1
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...C....................................................................C.......................................................................u...."........................................M.........................!2"1A..BQRaqr...356Sbs...#........C..%c...$dt4DT..................................$.....................1!2..A."QBaq.............?..#Lx..o.W."9a+.....8.4...^.-OZ./s...V.....S.K..>s....:..ydU..d........."z..wE..~..\|.K.....=?....z......Ir....V.l_..ok.d.........h@....tU...4.b.$.,.Y.D....V.e.......o#...}.\|..........{e...(.........o..+.../.x:.'...<i.........\|..1+\|9.{].......z....Y..0..d.W.G.LsB..(...g^....P..... X.<....qeb4.+.4.j..O,....."4. .....7\|..............................i..d.i.Wz...N...7..8....%^.......":V.k...>.zp......p...f............}G........x..e. ......^....h....{.=...k.X.\|.z.w...cZ....8...0......f.8.......c{.6..sS.~...<^.i1....R\|.....U......c.NI.y..

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1304 x 222, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4234
Entropy (8bit):	7.590913877364732
Encrypted:	false
SSDEEP:	96:97qV4zCcnm9rHITrvOoeb/x6G2CZ6ZHaQ8U11pYEknK7:97M4zCcnKjIvvm16IZ8HaQ8Yht7
MD5:	7DA570655B487100628F33F8E98B215C
SHA1:	72AED87BBBC384331251842B1B5D19A6B49C2EA8
SHA-256:	0671F415E319CC335325E0111523C8E5F79F6D5D1526E6F8FBBC5A619022B84B
SHA-512:	EA8DB903F211EE7A8394AF73D79AB0C77820161B4F121152E4BC7DE984D1C50F4B0A50A98513E2DAC001157EDAE58B7B31C4B69DCC88F9E3699122757B1056F9
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/aac7c7d3363d4892b9f909aa59250d04?v=52228a06
Preview:	.PNG........IHDR.............aO.!...ZPLTEGpL..?..A..>..>..A..@..@..>..A..A..?..@..>..@..@..?..@..?..A..?..A..A..?.....?..@..?..>..A........tRNS.@. A.....o0.OP.`...p.a.pQ....m....IDATx..... ...H...bK.....k.et. F.1...@..b..#..... F.1...@..b...)... F.1.s..G...Ew....1......1......1.......1"F.#b.1"F.#b.1"F.#.b..(F@.b..(F@.b..(F@.b..(F.A...{..#..... F.1...@..b.hA..b..#..... F.1...@..b..#..... F.1..@..b..cf\|..^v.l.Y.......!Y......k.e...c .B.+_...o.!F....nE.....m`h.C..^.....8.tu.G.<...[.o'C.}.\.1.M.o3..q.0R..RI.I."x.&.....O......2..kx....;.X....Tb...Om'..d`....Y...h7.s...^.7.#^r..C3p)r3....(_..F.:N.=..W.....u..%...l.^...J.`[.....a[n.$[..A.......<[...c..[e.....0....q...I....6.h...af..cP2./...l.N=.[......M.B..al ..D.a\.. >.j,..`...a4.\|......5...1...Q....T...%.m....](..N..qJ...c.L.J.5......Qr.r.2..F..0..k!9..(...H>.N.w'..:r..0:`%...\|...z...N:.J...<a.9g\|.(.....a..U....lW.a.+.....]V.2.\n.._....r~[A.......0..h7.\|G...Q.+O.F...3.M..9O...x..{..*c.x....b.a.v..I.1..Si.X

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7964), with no line terminators
Category:	dropped
Size (bytes):	7964
Entropy (8bit):	4.730389855909094
Encrypted:	false
SSDEEP:	192:3pPqi9bVLxjzYSgTIajSgTId6d+bVExjw1SgTI58HSgTId62TMVlxjOtSgTIwxSj:3InG
MD5:	F606E593DE70B94E4DABDA023D149A3E
SHA1:	2A68E0038165EA4ED7576BB0CD3FA4F881568FAD
SHA-256:	D81B23F886B51C9017EA2C6ACF3C7E07DE934A8B5A631775FA8C222335B6216B
SHA-512:	4AD36AFE79BA86721787A52EBCDF71F95589BA785467B4297F57DD4E7E4CD2AC57992C2E4A6075EDC63A9ED98FF49241E567310914AF5EAAC37A554C489F8169
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("4uuEt3uKX9wbyIODIz8a17xBxvE", "aHJlFh9a6Rr2xV35WdhsnJSY9tI", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-8846525a:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-aHJlFh9a6Rr2xV35WdhsnJSY9tI","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3744
Entropy (8bit):	4.5850160413210705
Encrypted:	false
SSDEEP:	48:c0CZJKIChyBF7Wwr8Jo/bKTSqP8H8oX585HhQBF7aZjnVjolbLWYGH2O2hwsSXJI:cJhQS8OKPi8znpjnQL1UvoRScH
MD5:	F2A172AD91FBE9867FB051DD59BFE393
SHA1:	FBD4D7CCEC3F50AB13A17F7A7E843A80B3E39319
SHA-256:	022EC7741B1DD6D24EA57E1F7FC9D716E31A6CEEBB22D0D914341C8E7A17128F
SHA-512:	D74A3D133FB1C9152EDF8FD4AED7AE2128AE11F87C630FCD45781BF5EFA42BB049DD54E1B974A8ED6473AC391A425309D95482B00A01E50A4B5F5C38F88E3A03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g id="g10">. <g id="g12">. <path id="path14" class="cls-1" d="M174.05,77.05c-.38-.07-1.64-.28-2-.35-1.99-.36-3.69-.83-3.69-2.83s1.8-2.52,4.05-2.52c3.34,0,6.27,1.51,6.6,1.68l1.83-4.83c-.7-.37-3.68-1.95-8.38-1.95s-9.55,2.26-9.55,7.87,3.59,6.64,7.05,7.24c.48.09,1.98.35,2.4.42,2.33.39,3.61,1.26,3.61,2.78s-1.82,2.84-4.56,2.84c-4.41,0-6.98-1.31-7.73-1.62l-2.03,4.72c.63.33,3.64,2.02,9.49,2.02s10.25-2.82,10.25-8.06c-.05-4.88-3.33-6.73-7.35-7.43"/>. <path id="path16" class="cls-1" d="M191.42,57.46l-5.39,2.98v6.31h-2.84v5.15h2.84v11.13c0,4.75,1.95,9.02,8.85,9.02h2.15v-5.16h-.81c-3.39,0-4.81-1.95-4.81-4.61v-10.39h6.18v-5.15h-6.18v-9.28"/>. <path id="path18" class="cls-1" d="M233.47,71.49c2.1,0,4.25.95,4.9,3.27l4.89-1.86c-1.37-4.84-

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30828), with no line terminators
Category:	downloaded
Size (bytes):	30829
Entropy (8bit):	4.69729384381527
Encrypted:	false
SSDEEP:	192:3xsWZjYDWMxjgaXAKaXAt6cLLfOnxji0XApLXAt6mEs4vzrBrfOnxjz+XAg+XAt/:3+BnmXc675K+Uz73
MD5:	3011C5DC1B9095F48E82813238C6F29E
SHA1:	C4C280AF0C6B39B1DF10858AC94464598059B4C3
SHA-256:	509EA5F4043E25B0B89E3861D1B585036092268D00D882980C63445398D4B526
SHA-512:	40FF2036191080B24FA84CC0FF7018EED979761787E4D92597FC16135392FDC10AF80A07FDD90EE2DE8B771AF8FEE706A4531B8F8169D3FF2FF81E10B855CC2F
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/FoUy0HZZbBso7IklGCirKbfLHwg/weeK_Xx8yPOx7zLp8zRQ_faS_A4/xMKArwxrObHfEIWKyURkWYBZtMM.dom.jsonp?sha256=UJ6l9AQ-JbC4njhh0bWFA2CSJo0A2IKYDGNEU5jUtSY
Preview:	pendo.receiveDomStructureJson("FoUy0HZZbBso7IklGCirKbfLHwg", "weeK_Xx8yPOx7zLp8zRQ_faS_A4", {"props":{"id":"pendo-base","data-layout":"lightboxBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-16ac08be:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}},{"selector":"#pendo-button-d68abc20:hover","styles":{"background":"rgba(255, 255, 255, 0)","border":"0px solid #FFFFFF","color":"#1976D2","font-weight":400,"border-radius":"0px"}},{"selector":"#pendo-link-9e2c76df:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}},{"selector":"#pendo-link-14e592b7:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}},{"selector":"#pendo-link-3e9609a2:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}},{"selector":"#pendo-link-b7ce4826:hover","styles":{"color":"#166ABC","font-weight":400,"text-decoration":"underline"}

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6078)
Category:	dropped
Size (bytes):	9927
Entropy (8bit):	5.303854744931305
Encrypted:	false
SSDEEP:	96:Xqy1GX+PVPiwNQX6bhqTk3teaJARO1FUr1OMnBxrmz4MEqzdVe:XqycXgR5NQzRaKRO1FOYizbRqzdVe
MD5:	49C919C25491F1B4ADA6C5B31DFD7FFE
SHA1:	BE79C350272A7EC36E0415888DDE297028BED97E
SHA-256:	62839581180212340C11586D3C3A57B93AECF10F89D9664228AE09E2219B3FB9
SHA-512:	592D79E7D3874CE9BFC9323346AF2C26E69CF882AA7CA531573935477D412CA9D0D2ABC601E911D75D031F07FBA1EE26A85C98FFD62463B7E1E540B201B2CC61
Malicious:	false
Reputation:	low
Preview:	pendo.guideContent('dP9u1Yj5gYondtURXeRiqcUqNWc@sn9p0ljv8dushqgktXFohVVCLNU','HSnzFk61g0hDIbg3_i1hMHRvVR0',"<ol class=\"_pendo-text-list-ordered\" style=\"overflow: hidden auto; height: 330px; float: none; vertical-align: baseline; padding: 0px 16px 0px; border-width: 0px; border-style: solid; border-color: rgb(218, 220, 229); margin: 0px; list-style-position: inherit;\">\n\n \n ---L1 Dropdowns-------> \n<ul id=\"myUL\">\n <li><span class=\"caret\">Review your current protection</span>\n <ul class=\"nested\">\n <li><a class=link target=\"_blank\" href=\"https://login-alpha.mimecast.com/administration/app/#/l/accountassessment\">View your Account Assessment</a>\n <li><a class=link target=\"_blank\" href=\"https://info.mimecast.com/SolutionFrameworkRequest?utm_medium=pendo&utm_source=adcon&utm_campaign=7013l000001JNBIAA4\">Assess your solution framework</a></li>\n </ul>\n <ul id=\"myUL\">\n <li><span class=\"caret\">Enhance your

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (599), with no line terminators
Category:	downloaded
Size (bytes):	599
Entropy (8bit):	5.035838453530576
Encrypted:	false
SSDEEP:	12:2wiGD0yq/IQEA2+UlkAkxVYr4Mpq+iuHnINDRWZBbS4vps:2wiGoygIoVUlN0wvc+iuH4RWZBbS7
MD5:	ECEBB0A051727E327EC411B0AE780DD5
SHA1:	4EAE21427093633ACFE20F161D720BA1EC1B8614
SHA-256:	D736B528B7442FD01C5C0B454F5EC0D0D569EDDA393B1C6E81AAE3DF3D4E9988
SHA-512:	140EE7DECF5DF3DCBC04D09DB16E68071EB401F157A3C9423CF545E669DB23DF0A56488D50E342D515273DD69C419B7CD8871EBD7D6C0C848473A1957CDAC002
Malicious:	false
Reputation:	low
URL:	https://cdn.bttrack.com/js/16174/analytics/1.0/analytics.min.js
Preview:	(function(n){var f,t,r,i,u;n.hasSessionStorage=function(){var n="bidtellect";try{return sessionStorage.setItem(n,n),sessionStorage.removeItem(n),!0}catch(t){return!1}};f=(new Date).getTime();t="https://bttrack.com/engagement/js?goalId=16174&cb="+f;t.substring(0,5)=="http:"&&location.protocol!="file:"&&(t=t.substring(5));n.hasSessionStorage()&&(r=sessionStorage.getItem("bt-session-id"),r&&(t=t+"&sid="+r));i=document.createElement("script");i.async=1;i.src=t;u=document.getElementsByTagName("script")[0];u.parentNode.insertBefore(i,u)})(window.bidtellectEngagement=window.bidtellectEngagement\|\|{})

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3339), with no line terminators
Category:	downloaded
Size (bytes):	3339
Entropy (8bit):	5.973363404887975
Encrypted:	false
SSDEEP:	96:aJd6SUtJfNrVlCWWWdtqjZoEDwaoS1+2ebE9WdDD78:ae35ljWwg9DwaoSkBCED4
MD5:	3CA58815AAE0D8B80FFEF6B340E0388A
SHA1:	8BE6319F9BE81B4DCFB9322B96A6ACD059D19132
SHA-256:	6D74F942BB9E658BAB40B29DC6358D84EAC8F27A071B1AABCFC0213A16957AB3
SHA-512:	20DD7C0FFC9E15E009E1E378DEC401623BA54FC02EB6A2263444220DDB335DA05DE2CC6C5347ECD7A663D048FD3314B3D94EBEFEDAC15C9BA7A2003FF89A175E
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/729758044/?random=1721420613184&cv=9&fst=1721420613184&num=1&npa=1&label=oNKJCMuPktYBENzy_NsC&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2F9488543.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCOnXz8D3s4cDFaZCHgIdDnoO7w%3Bsrc%3D9488543%3Btype%3Daudie0%3Bcat%3Dgl_mi0%3Bord%3D2936519596697%3Bnpa%3D0%3Bauiddc%3D326790021.1721420608%3Bu1%3Dundefined%3Bu2%3Dundefined%3Bu3%3Dundefined%3Bps%3D1%3Bpcor%3D2131391307%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bfrm%3D0%3Bgtm%3D45fe47h0v9190624996z876373427za201zb76373427%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Btag_exp%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fw&ref=https%3A%2F%2Fwww.mimecast.com%2F&top=https%3A%2F%2Fwww.mimecast.com%2F&capi=1&hn=www.googleadservices.com&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6036), with no line terminators
Category:	downloaded
Size (bytes):	6037
Entropy (8bit):	4.953793660496312
Encrypted:	false
SSDEEP:	96:3wZGZGwmKmruMORVQ5IM7bmQ5vg4ftDK92zHOSjo8P0nQVi8BUYpYUA45X4nqwVs:3wZQ5mtrSqWM7rSIt292a+DVQYpJB5XZ
MD5:	089BC2F072F8E97870B05848D01EBE79
SHA1:	DBADA24FCCFBCE4C193E3BC6C374072D2276150D
SHA-256:	A671A4DC537788601F7A2C5ABCE4B612D4C63C2778C0245F3F5A0CE030846062
SHA-512:	79DC0F403EDD6A610EE3F266C5D2BC3BB7222134485A16B8FB5A27F456CE440A7496F958AC132457864ACAC434F11360250D8DE15699C4295192048343BA69A9
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/zEjbHDG91TLcfCdFOKDMaigHnB8@sn9p0ljv8dushqgktXFohVVCLNU/MJsaWPm9qU58xZQVTZCt959W7Y4/262iT8z7zkwZPjvGw3QHLSJ2FQ0.dom.jsonp?sha256=pnGk3FN3iGAfeixavOS2EtTGPCd4wCRfP1oM4DCEYGI
Preview:	pendo.receiveDomStructureJson("zEjbHDG91TLcfCdFOKDMaigHnB8@sn9p0ljv8dushqgktXFohVVCLNU", "MJsaWPm9qU58xZQVTZCt959W7Y4", {"props":{"id":"pendo-g-MJsaWPm9qU58xZQVTZCt959W7Y4","data-editing-id":"6787cf78-a6d2-4965-9dab-8290fad46c95","data-layout":"AnnouncementsModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-71cce856::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-71cce856::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","bord

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	880950
Entropy (8bit):	5.390024229673577
Encrypted:	false
SSDEEP:	6144:yqT5yvPw/G7g1LQ47GKIqlFH7ooUHEW13nZVnW3vZ0WhCupucALXWWyPIkvOS92W:knw/T1vl1Va3i3vZi5TYKL2Iehx9
MD5:	11B6BB90C259F8ED592F58F8B212170A
SHA1:	3667481D2A59844DA47692AC56739F4787C8D32F
SHA-256:	D5738325538C99F753B3C065D4A0C9A9198677ECB0729FEE9C6761328F57203A
SHA-512:	2AFC20F9527E675A0FE4D1493083B98863AD7F815D589E2C7CBBF9E1CE7937E35A135DEC07F9F2288E367B1B3A30E8E0F4D56CA2E4039C36DC660A6849D4545B
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/login/cache.11b6bb90c259f8ed592f58f8b212170a.login-lib.js
Preview:	if(!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?window:this,function(w,L){"use strict";function y(e){return"function"==typeof e&&"number"!=typeof e.nodeType}function m(e){return null!=e&&e===e.window}var t=[],P=Object.getPrototypeOf,s=t.slice,R=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},j=t.push,B=t.indexOf,U={},z=U.toString,H=U.hasOwnProperty,V=H.toString,q=V.call(Object),g={},D=w.document,Y={type:!0,src:!0,nonce:!0,noModule:!0};function W(e,t,n){var r,i,o=(n=n\|\|D).createElement("script");if(o.text=e,t)for(r in Y)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function h(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?U[z.call(e)]\|\|"object":typeof e}var e="3.5.1",

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 820 x 790, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	179707
Entropy (8bit):	7.991680066876861
Encrypted:	true
SSDEEP:	3072:S1kFG/pzNLnPCM3ewDJwyI9vprfDUgH/k1dkbJUp6NBXy5z:SYGpDDyycTDZskw6NBXy5z
MD5:	A5C667F6AF27EF0A3B8FB92F1D9B3DFF
SHA1:	3B04E696E439CA561DDDFE64CC4C6E9722AD72A0
SHA-256:	72C5E723FE3D33A5D81ADCA8B195D26CEAD13A2088159B68033237531B22D9CE
SHA-512:	378ADD131BFA821F9B8E4E35C13690210B0C4471B4A824BED6C4E160A01487E23C197913A7DA22830F0E6F673585D176CA3FC1BDCB1508E6B85F1302386D526E
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/b310bf37eca948cbac2e2b1e79015256?v=aa212b94&t=w1920hq
Preview:	.PNG........IHDR...4.........'..J....pHYs...#...#.x.?v.. .IDATx..]..T...n..kpw...RDE..+...(X.o.1.....%.c....A..;.QTP.."..v......7o.....{o.v...........f....+.F.............8................./4............8`................Mh44444444444.XhB...........q.B.................hhhhhhhhhhh...FCCCCCCCCCC.&4............,4............8`................Mh44444444444.XhB...........q.B.................hhhhhhhhhhh...FCCCCCCCCCC.&4............,4............8`..................n.......rE..(}....C.\|9Yk.F..T.Q6..T.UCCCCC#..I/+.kh45(HKZDF..PNS.P.z.#.<.).1`..'.V...5..w...)..t.T.VVP......S,Su<.r..M..b..."Y^..gbaI/.hh...F.I`..>.....{\nn.P.........MO4...@....2.Q&..x.l..H$j..l...E4.ZFy...QD.?...H.n7}F.v'.E.9.<g....F...hg.U.Q.VSy..`~e.p..\|z...Qv/..nv,.y..Z,.K.].2....KH.m.k.{,.r\.v..=...n.yp.....e.[*+.t.......YB..Lu.y..b)"a.:R..kV.^'....X.1.c..I.7.>j{..%.a.D..x.I../.p.8G.>b......m7..}.h[4~..y/.........>.^...t.l_.$..&...H.7...h.,.9...\|.......Sa.=U.D92^..}I.......$.....M}...

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.444235677759419
Encrypted:	false
SSDEEP:	3:YRKOAzkXfh7XBSdXA0WYDXYn:YYA4rWuI
MD5:	48FB9BEE534AACE45136430C12AD2511
SHA1:	5056CBBA54180970E311C2DAA0F8736F9C271F8C
SHA-256:	774AD4EC00D9AB4520AA56790959A705283EF7F957A14633C74D2E34FC69AACE
SHA-512:	0CCF3BDEDC47A186144F3A0B64F35E16DF008B9632D207E356E9FF3B0679E4880426EB31F964120DE1572791FF14BE25058A44275CE74B99C5B526026A9B0CE2
Malicious:	false
Reputation:	low
URL:	https://scout.salesloft.com/i
Preview:	{"token":"aa761586-42c3-402b-9309-f2be473d38f2"}

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (40178)
Category:	downloaded
Size (bytes):	40271
Entropy (8bit):	5.263646067369121
Encrypted:	false
SSDEEP:	768:FlNgP+7cZmOdOYLzz6w+XbC8YS8gmgQLIfaLQbQXoC0rKZa0WD5KGWL/DdlFFW7A:PiP+qmOdOun6w+XbC8YS8glQLIfaLQby
MD5:	5EFE108209B67CDEB1A74EC43A924C6B
SHA1:	489FD339461A1EE83B668987501D244E7418ACAA
SHA-256:	C826F748FDD98851E0808B3AE0145F7297A149F281989B60365BE2F219557318
SHA-512:	EE0A395E425AF66631F2608DEFF3A758748E0FA10A45E0282E4FF4C8EA41697DCF4A9151220429550A9F84ED810F95BD5317EFBE4B71B9B7A31DD5A49EAB8DA7
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/sharedVendor.48f94c21b16af0164137.js
Preview:	/! For license information please see sharedVendor.48f94c21b16af0164137.js.LICENSE.txt /."use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[470],{8595:(t,e,n)=>{function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}n.d(e,{tv:()=>qe});var o="(prefers-reduced-motion: reduce)",r={CREATED:1,MOUNTED:2,IDLE:3,MOVING:4,SCROLLING:5,DRAGGING:6,DESTROYED:7};function s(t){t.length=0}function u(t,e,n){return Array.prototype.slice.call(t,e,n)}function a(t){return t.bind.apply(t,[null].concat(u(arguments,1)))}var c=setTimeout,l=function(){};function d(t){return requestAnimationFrame(t)}function f(t,e){return typeof e===t}function h(t){return!y(t)&&f("object",t)}var p=Array.isArray,v=a(f,"function"),m=a(f,"string"),g=a(f,"undefined");function y(t){return null===t}function _(t){try{return t instanceof(t.ownerDocument.defaultView\|\|window).HTMLElement}catch(t){retu

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24822), with no line terminators
Category:	dropped
Size (bytes):	24822
Entropy (8bit):	4.792614630155596
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:JlpuJ
MD5:	F5EBACB2CAF0A00CD5395B0869DBE17D
SHA1:	06F7CD5E0E6E31688B1E9D8FB631B8EAE2042C19
SHA-256:	C52550189AD7A781A37919AF639C2D6A786821AAD8B982DAA6A54AF46817B8FA
SHA-512:	E8B90E9C6B5078E7DC93121AF552B17B4D6E891D2B04BDD511634A2116A3E4F45AAA5CC147070123A8CD98B2E2E03B2B17FFD28878DCA468126A4E39E363856B
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	dropped
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Reputation:	low
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.622779539717608
Encrypted:	false
SSDEEP:	12288:uPfEzpO1i9NmcY6xEtBJqlwHwbk6w++yunI/cBNKfHysEJGqneg29jPjYubiaBz9:uXa9xAiqwI++yuRcSsEJLeSoLzMyLu6j
MD5:	B324E946AD030CD2F02A50518D0C4C0C
SHA1:	982BE53F25E4835DC33A32808330E2197F03F748
SHA-256:	F9E95400DDE0946A70A0BA8901F998AEB765383245977F915F28652975E26A69
SHA-512:	1249E85ECD5D8328EC1B9C107E39324B1D2F3A797D616E4BBEFC77ABF03BDF68ADA189A262F2B98978DE7806AE3B1AD0F0448AFC042762A7EEC0FD644CD5F959
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/75013efacc6a4fe5b9de645b642dfa78?v=0e57c20b:2f7c35be5c86b3:1
Preview:	...&a..L..`..3....Z..W/..#R].;..s6..].....N......'...$...F...$I......Js..:..5aK`:.B3E`B.._[]....a..:'(.s......-.......}..]S...t......lR.~.>...r.D$...w....F^.I...?"X......q.j.~q-..}S..E..E.... ........\.0....\|.,.'...yJh........J..T:....o.y..53!..]_:".lf..5....U.5ye.{..y>...Q...?../..A...pz`."v..o..N2 .`&........zyE...@=.....:J....Y..f...Vt../..%b...-.....#L[ui..2......kd'.._s1n$.L..(.`aa...B........\|T:1.....l;.........\|"..W......r.8.aZ.<....2.>zgrO.........@7d.......P.z...r..^............=.Do..N.R.{.\wW...c.[C.>;7..Cf.W.<....l!.....-p.&..P.(\|.9...y8...NQC-I...D.\|m..V....{.....bK.O.H..].w..9r=.m...>.8....u...........+..1[y.d....Sa..cL..'...>....ex.qSxx.q,.6.eR3...)4..>~.C....S..-....O.g..dl..Z.o.}..........g...o-..A.T..J.T.+].....m...........,F-E.u}\|....K......V..B.(.J..9.J.sP.F..hg.G`.Q..%.u....]............&[}v...M..H........IJ..K........;......9....O..G....1.!....Nl.Y....H..[.T..8b.......^...\...s.K..G..S..zt..\|.5]..U.tN%.<..4..-l ....zd

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4296
Entropy (8bit):	4.714178842767438
Encrypted:	false
SSDEEP:	48:c0CZJKuD3KTBYd5XLpqGYuVVBiO/zwB5l4WkF8yzpJ1kBqY++x+jWI+yLeHGeBjJ:cJr3iQQGYLl6qyFJ1k0YIjWI+yEG2J
MD5:	4D1F4E11F350DA80C450829871EC53CA
SHA1:	7F260B706DF71AFCE6380170C00707C6A9EC544A
SHA-256:	703A8E4FA732BFEB3F0A6642AE1FB1D3BE837103768DB6197EA69F01234C49D1
SHA-512:	C30916AC4B1DDE58E96ED2343EFD5BD740D4C2A23BA358380F3A6B6CF8533BD5EC0540C6636F48BB8A54DEBD51FE5219E37F06023C909CB0291EF86CD10EF691
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g id="layer1">. <g id="g10836">. <g id="g6310">. <path id="path6312" class="cls-1" d="M65.95,90.6v-13.55l-4.64,9.84-4.47-9.84v13.55h-3.68v-20.76h4.05l4.09,9.46,4.27-9.46h4.08v20.76"/>. </g>. <path id="path6314" class="cls-1" d="M73,90.6h3.71v-20.76h-3.71v20.76Z"/>. <g id="g6316">. <path id="path6318" class="cls-1" d="M86.52,72.99v17.61h-3.7v-17.61h-4.44v-3.15h12.61v3.15"/>. </g>. <g id="g6320">. <path id="path6322" class="cls-1" d="M97.84,91.17c-4.83,0-6.49-3.16-6.67-7.07h3.53c0,1.88.93,3.71,3.15,3.71s2.96-.92,2.96-2.39-.92-1.87-4.82-4.08c-2.78-1.68-4.63-3.34-4.63-6.31s2.04-5.37,6.31-5.37,6.3,2.96,6.49,6.47h-3.7c0-1.67-.92-3.35-2.78-3.35s-2.6.76-2.6,2.04,1.1,2.22,4.07,3.71c3.34,1.87,5.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9260), with no line terminators
Category:	downloaded
Size (bytes):	9261
Entropy (8bit):	4.825760925887632
Encrypted:	false
SSDEEP:	192:3NBm9rEBNoWM7JS1bt2hafwT40VTK7Zpzd4I9kJqIlVXLtVEGhhGdEsMWXvck76:3NDg7W52WyupJoC6
MD5:	810A40E10BF86F4BD47A2648E8A92EA5
SHA1:	78B62DD50E3FB34A8005AA9F96E31094176D2295
SHA-256:	736D7FC9019380865078BF6A839878485A4DE0615892F70BF03F774BF912FA46
SHA-512:	FB45793ABCDDB8206BE706B7D59EB46D1CB5E8B7A291C9E6F4E6E093AB2F637AD94BE7504161F538E8083C44C6343EFE28A20D654AF00E2FD7430E076D69804B
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/zdB7-J0evdQGCMkKHZkjYH0yI5c@sn9p0ljv8dushqgktXFohVVCLNU/QXLXJOxUK1v5JjDCscvJY0mAi5E/eLYt1Q4_s0qABaqfluMQlBdtIpU.dom.jsonp?sha256=c21_yQGTgIZQeL9qg5h4SFpN4GFYkvcL8D93S_kS-kY
Preview:	pendo.receiveDomStructureJson("zdB7-J0evdQGCMkKHZkjYH0yI5c@sn9p0ljv8dushqgktXFohVVCLNU", "QXLXJOxUK1v5JjDCscvJY0mAi5E", {"props":{"id":"pendo-g-QXLXJOxUK1v5JjDCscvJY0mAi5E","data-layout":"GuideListModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-da11adec::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-da11adec::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-0

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6036), with no line terminators
Category:	dropped
Size (bytes):	6037
Entropy (8bit):	4.953793660496312
Encrypted:	false
SSDEEP:	96:3wZGZGwmKmruMORVQ5IM7bmQ5vg4ftDK92zHOSjo8P0nQVi8BUYpYUA45X4nqwVs:3wZQ5mtrSqWM7rSIt292a+DVQYpJB5XZ
MD5:	089BC2F072F8E97870B05848D01EBE79
SHA1:	DBADA24FCCFBCE4C193E3BC6C374072D2276150D
SHA-256:	A671A4DC537788601F7A2C5ABCE4B612D4C63C2778C0245F3F5A0CE030846062
SHA-512:	79DC0F403EDD6A610EE3F266C5D2BC3BB7222134485A16B8FB5A27F456CE440A7496F958AC132457864ACAC434F11360250D8DE15699C4295192048343BA69A9
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("zEjbHDG91TLcfCdFOKDMaigHnB8@sn9p0ljv8dushqgktXFohVVCLNU", "MJsaWPm9qU58xZQVTZCt959W7Y4", {"props":{"id":"pendo-g-MJsaWPm9qU58xZQVTZCt959W7Y4","data-editing-id":"6787cf78-a6d2-4965-9dab-8290fad46c95","data-layout":"AnnouncementsModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-71cce856::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-71cce856::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","bord

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	5.435667965470459
Encrypted:	false
SSDEEP:	12:TMHdPEi/nzVJ/KYf3n6WcOLgH9OaqQGV5PKM:2dsATLf3wNMQGV5R
MD5:	7E20429B9DF74B4BB2D83D4E88F80B87
SHA1:	FE07630F5DEF252CAA02FFE797B420750AF53229
SHA-256:	3785D9EE6704BF8986DA6722E919697CC3B45ACA53C583F2B70066A683688DF4
SHA-512:	A315D3C2CBCBA655422C7315534CB8D0C41461D3CD26EA498028D753CBF39F16A1E746989C5CF4BC1FFDEF4A63B5CAB2F3B15C55CDDFA5A0271A8BD012FD6387
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/e04557dae5fe925694a0.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 21.4 13.4" style="enable-background:new 0 0 21.4 13.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<path class="st0" d="M13.3,12l1.4,1.4l6.7-6.7L14.7,0l-1.4,1.4l4.3,4.3H0v2h17.6L13.3,12z"/>.</svg>.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.612457348662773
Encrypted:	false
SSDEEP:	3:YTyLV/VfsqPNVcSLQzRE9Ldu1S4:YWLV9soDLQmpdwS4
MD5:	69EE36929D2172DEA5C1763BAC240040
SHA1:	77EF82FC4B7757D445E8901E16D785AA44E3B1DF
SHA-256:	45DA241A91C843B268ADA7481CDECE1AA679F2720931EFFEA28D83E1398D66A9
SHA-512:	FDA2E41AF332441315A0BC6352DD1B9350F92E13447CD1A58CBAA96748271C26780A653EA94F023808F572D1E329C855EF6A0E3B51558BF474ABA614AB26051A
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_2s9dur0o_telemetry
Preview:	{"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	505
Entropy (8bit):	5.435667965470459
Encrypted:	false
SSDEEP:	12:TMHdPEi/nzVJ/KYf3n6WcOLgH9OaqQGV5PKM:2dsATLf3wNMQGV5R
MD5:	7E20429B9DF74B4BB2D83D4E88F80B87
SHA1:	FE07630F5DEF252CAA02FFE797B420750AF53229
SHA-256:	3785D9EE6704BF8986DA6722E919697CC3B45ACA53C583F2B70066A683688DF4
SHA-512:	A315D3C2CBCBA655422C7315534CB8D0C41461D3CD26EA498028D753CBF39F16A1E746989C5CF4BC1FFDEF4A63B5CAB2F3B15C55CDDFA5A0271A8BD012FD6387
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 21.4 13.4" style="enable-background:new 0 0 21.4 13.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<path class="st0" d="M13.3,12l1.4,1.4l6.7-6.7L14.7,0l-1.4,1.4l4.3,4.3H0v2h17.6L13.3,12z"/>.</svg>.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5543
Entropy (8bit):	7.941725705331511
Encrypted:	false
SSDEEP:	96:jy74SgQPpSuVNHVXxPZhZmXStsJBtb2zrbZAZquwz0hDnjGyChP:jyy2fXxPDZmXt2zrbZ6qTWnq7hP
MD5:	AB47CD17F75409AA2A02E0C307CDBC6B
SHA1:	F1C23723DD18A6F73AAFBD99E85476BAA73FA72C
SHA-256:	7ED1D49FE4945E4F5C4ECEACB3AB5AF5BBBC1D507DB06766E93AD1077BF6249C
SHA-512:	99B0BF6BCD50B2C3FD7CE811ACAB60BAF6886713305F5F5B65E61F21B85717717184BBB187D50933E500621A04C08EE3B6DB2823878F007BAD807AF640483E18
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R:W.....pHYs...#...#.x.?v...YIDATx..=p\I..U...$o3....l.$.%B..D.....6`#..G..J.x......$.m..Ul.r.g.}.\W......f<...}..=....T.w5.h..}>...J.......B..1C..`.?m6\|.X)U..h.G.N.(.H.R.\|.~...).......[D...Q$.1.V....TB.eb-..<.Z..fB8"...1.&...KS7L...\.gVT.......5.X...f....D...g.."....UJ...$'(\|..o1".....A]..z...c..f.`B....R..C..h..c`i.....k.f......t......}$$Na.J.....1....:i...NJ.S."..tNU.....1...X..J.S.".....R.@k..^v..S.<.}.z.....:_S.`.y..z!.".P)uc.9..^..L.....w..>Q.a-"c.S....2RJ.q.~`)".>.Qq.J.D$.'k..Ub..g#"..^J.N.TJ.G.2xk..}.y.Z.......].h&.k....1.V..{GVDrpX&VH8.%.&,..9..,.M8..[.D...P6'.B4.(...L ...E.\..).X#..#..V..4!..za..\Q9..]D" ....m.-.^E$..r.Ro"................U..9....a_Y;....Tb.B0@rO.h.....!.9...,..y.....9..%........suq.y...0..:>..".........O.y6...J...........?........{........?....hD....h.{.z.JR.Y....W.`..................w.......Y..gHw.g..g..r}.......:%... ".ig.....`.;.mg..+..DB..8..q...kibR[....l.\|O=..A.Y...{.*...]..T

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	554615
Entropy (8bit):	5.415521011733622
Encrypted:	false
SSDEEP:	12288:qc0xlugsQN2rsQV0nLZv0eAa93zxQJ8oyktl8bld1jkZAVMMtTROip5UB/HHDpTV:EN2rsQV0nLHj9l5UB/HHDp/Crk
MD5:	446FF6DA3208651BB1F774627E60B6DF
SHA1:	8AEC88A1D2AE13C0169E6BE3EBCF2881912150CB
SHA-256:	AC0ADB79072417E83A4898525971555FCC6713EFC200FFBF8BB36EC0DF704F6F
SHA-512:	5920F8FE50F42570EE993D21E5B1C8C9F7CD270747D174E365D51F0613852BCEA0FDCD7A8CD8379249B356CCCEF0BA744813B5F3F16CE786144B4272C61582F4
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/s/sfsites/aura?message=%7B%22actions%22%3A%5B%7B%22descriptor%22%3A%22serviceComponent%3A%2F%2Fui.comm.runtime.components.aura.components.siteforce.controller.PubliclyCacheableComponentLoaderController%2FACTION%24getPageComponent%22%2C%22callingDescriptor%22%3A%22UNKNOWN%22%2C%22params%22%3A%7B%22attributes%22%3A%7B%22viewId%22%3A%22f4466bda-936e-4ad2-837f-3d4967eb4bfc%22%2C%22routeType%22%3A%22article%22%2C%22themeLayoutType%22%3A%22customTemplate%22%2C%22params%22%3A%7B%22viewid%22%3A%2273baec4e-1ebd-4970-b69d-f23d7befed73%22%2C%22view_uddid%22%3A%22%22%2C%22entity_name%22%3A%22%22%2C%22audience_name%22%3A%22%22%2C%22urlName%22%3A%22%22%2C%22picasso_id%22%3A%22%22%2C%22routeId%22%3A%22%22%2C%22recordId%22%3A%22%22%7D%2C%22hasAttrVaringCmps%22%3Afalse%2C%22pageLoadType%22%3A%22STANDARD_PAGE_CONTENT%22%2C%22includeLayout%22%3Atrue%7D%2C%22publishedChangelistNum%22%3A749%2C%22brandingSetId%22%3A%22774c7290-70ad-435a-896e-5352360ebe8b%22%7D%7D%5D%7D&aura.context=%7B%22mode%22%3A%22PROD%22%2C%22fwuid%22%3A%22WFIwUmVJdmtIRnI3MTFpX0d6c1VwQWhZX25NdHFVdGpDN3BnWlROY1ZGT3cyNTAuOC4zLTYuNC41%22%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22apck%22%3A%22JHt0aW1lc3RhbXB9MDAwMDAwMDAwNDJlbl9VUw%22%2C%22uad%22%3Afalse%7D&aura.isAction=true
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-73baec4e-1ebd-4970-b69d-f23d7befed73.c749"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"f4466bda-936e-4ad2-837f-3d4967eb4bfc","themeLayoutType":"customTemplate","params":{"viewid":"73baec4e-1ebd-4970-b69d-f23d7befed73","view_uddid":"","entity_name":"","audience_name":"","urlName":"","picasso_id":"","routeId":"","recordId":""},"includeLayout":true}},"version":"61.0"},"error":[],"components":[{"componentDef":{"descriptor":"layout://siteforce-generatedpage-73baec4e-1ebd-4970-b69d-f23d7befed73.c749"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"f4466bda-936e-4ad2-837f-3d4967eb4bfc","themeLayoutType":"customTemplate","params":{"viewid":"73baec4e-1ebd-4970-b69d-f23d7befed73","view_uddid":"","entity_

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 210, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4667
Entropy (8bit):	7.911439348770004
Encrypted:	false
SSDEEP:	96:9SyKcZKE7FLJOE/qG9bFKuJM6GJ52ykkJHuSDPzwH:9S+kKxk6L/Kd6o52yhOEPi
MD5:	FB7E9859F4E420D054035F0B2B0C9BB5
SHA1:	85C624BCEACE980363A058837BF744569F4FE2EE
SHA-256:	198BB257647FC230B045EF3C47EAA3A92D8B32DF0EA12DEA7ED65EA0D0EC19AF
SHA-512:	C24F1936A583D8C60F063A89DCCA1A9F87A28B499F2E2B09EE56AE3DFA42487A6170EE8F83527356C5D21E79BDEFD8CC3B8A57E3379B59630BD29DD5FC833D79
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/c69d271971804a34830bdcb0c1cce78f?v=30a21149&t=w1920hq
Preview:	.PNG........IHDR.............?..B....pHYs.................IDATx..?p....w9j..).B.+'.@.$.N.2v+R.-...I.r..L<.B2.R..][.Zg"A.2..5..Xp.6..>...]......w.....L....x...o.{+....T[...B.....'..[.!.>.f..`...>?....K).5....B.U..R.b...IG.l....>>..(0.PHv.LW...E......RJ..H.(..(..r..!.k.4.il3....V>(..(........V....L..C!-.O/..S6Z.PT.PH/.m...BQ..H.u..Bz.}.#J.l.(u$...VH..5g.dc$.......&}.....b...,}...5..~L...D.C........D..RJA@O).F..w..~S...".M.....Q..6....R..~{4..p.d@........>..eHk!...\|O.R.H}L.yIG...;....3!..ld...+.F'/#.R.i...((.>G'."..O.z.<G".N.D$..^.QD....Z).:H/....!.{....k...}'...T....-9..1.#&.{..r..x....\9.9...hr...Z.\..y.H).H...1S."B..!.8.Bl.bBH.D.T..6.VO:..J.x..5$..."..D......("...j..EDB.S.B..HM@D.uZ.K5[.h.`#......b...Y.OD.....GH.>..C.,=]r...0..&..A.R.A..c]DH....14~....q..v.F..I.%h.CG\+r]....j..u.ED\t.i.\.....y$.AV..BJ..q..z..p..S:..C).s.../.../tln.J.)...!Q./...S:.u.x..)...dS[.F$.t$ ....m$"....B).a...../"....t}..k.H........E#...gDB.U.x...h0....)....<V..K.."..H.F$

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12490
Entropy (8bit):	7.977508810254547
Encrypted:	false
SSDEEP:	192:3A0mJ1jOnZSP4Tw2AkTapnoDTnF0I+lk1S3QEEm75QAg3UDdSOue/2:bw1KnAP4BR0oDx0I+lCPm75akH52
MD5:	BA3C427207154403254AE2B37A307AA6
SHA1:	F2E32606FD155996A86310B9930265A2570E6968
SHA-256:	4168EC437B89142E440FCF863696B82B94FF504A7B1851794ED288D47C0B2D17
SHA-512:	9D543875777E017E3A635697A5D940BEA075371709526B41D6E01B36129D9F4D4180F3C64532802BDC62B80C46FF5AFE1F1FBA0735E2DA913A30899BAF481604
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T...IiCCPicc..H..WwTS..[.... ..).7ADJ.)!t..m.$.PB......k....U....V.EW...Z.uQXY.u.+.........9..s..w..yo........T..P".%....32Y.^...z...<~.......0.~-.n..\..(c..M...b>.....b~!....^....D%n=C.U.r.0..gd...u.Z.V..j...'9..@l...x2..N'..J."9.....I.b........E..z..8..ER..2>;..8..bf....D#....h......Y..-...a.;...."..5. ...:...d....>..F,P.....\ED...5..s3......x!..`...I.bc4xv.8,..t..byd2....K..I...D...#.r4...L...O.h...Fj.c:...i.@..lJ.........'Ek\|&..rc.}d.De.6.X.P..........5.....b.s.....<79B.....S.o..u.%.MO..aqz.p-.aH..v.W(II..y#..+...p..@.........J....(.I...S.d...9Ry...L..4...\|.............l(.<.w.7..Kc....@.Bp. .;.T... .J.O....G....B(..\|.A.w..QYKT;..1.......P..... ...y..>.A...........p!F.(..Y.aOb(1..A.#:.&x.....x.....l.g........C.uB7..4.a.a....M....e/p;....q.<@..g.&..{.l....~.'..\M..\|...T..ih..nd.<..Dv..N.'..(.^...u..#.......-b.@.D...[......E....,.4..c'....<]..[..\|(....OV..b.:.>..j.\8S...n.t.L,..8Ri...).a...{.(./......w.a.....

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11899
Entropy (8bit):	7.964220739239869
Encrypted:	false
SSDEEP:	192:cSYhWdI5xBAn+yUpfW4ORWm+MzzS28eRSN6H3VsqVH/cRmfoG59+NWfdMikkagTP:bPS7ajFBRj3VVVHkQfo6UN8D0gT+gTbr
MD5:	50DC9B2B82D344F6F96FA45F46891848
SHA1:	3B55D325E6FF025CEF97C2F727D7CB7327D40843
SHA-256:	209CA6E1B8C04B1EB2049A07F8564E1B102309B223E58DCE4F9D3594CB475C23
SHA-512:	3EE227DC6FE31EECF91992A9E1D9D12F39446BFBE352D413D1BF27A6E919D7458CDF09011A3F301339893C76DDF0943A19816F238F302C89CF6BD2A3D185AB07
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/a74558d866934fd38d631466eda4fae9?v=31f14de1
Preview:	.PNG........IHDR...,...,.....y}.u....pHYs.................sRGB.........gAMA......a.....IDATx...\|Te.....PBS$.".H@QT\.".Z..k[...]....p.]?W...V.b[A..F@@D ......J...&.......!...{g.......IH....c.!e..&SJ..%....i..."..OW_.......]..`...).....M.l....;.....H+.j...../..a.IM J.....1;..Q..$D......Z1.\|......\|!)..+...dd...,...q.(Y...1[.D,W..T....$-..."3]......p..3b.5~......3.e..\!I........J. N9B.#W=.U.6.Q...`y...D........nR.J.\|.$M.M/.SP.\Ox.e..@9.<.\.g..~(X.$$R.~..K...F.zELT..IRR0Q..`..j.s(Rn.T..y...V..".t.....@`...Y...+!...W...8ge.c.qu....jc..`..FSIDi..+.P......d.0.JVT.QF..=...q ..(..m...U.8LJ.....(X....5PU..1.KYJ..$..P...BE....q...O.r...m(T.JJ.k.(V..A.....D.=..P.....W.2Bh..kP.,B....'.g.iv...9........../.8M.g.j....._[.QU..\|..BHl.V.._\|.j..e...a.U....>U...?.&V.#.C@...1..c..M.......A.k..f.."El.......3...^o!$.(..0.JZ..M...R(X....T....}......E...a...W.=U..(o+.:..~.....*.)..e..(.\IL...M...>.V..7I.J.OR._.@1\|yB."....<.\.$)F....).)C..5..o..p.`.C.oD..J..").N....u...L...)!

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39381)
Category:	downloaded
Size (bytes):	39384
Entropy (8bit):	5.514196595847643
Encrypted:	false
SSDEEP:	768:j07PC4Li1TB9BgxFJWUwcYeTivmT7+S5nC8PC/VDUZLqHQ48a96:YY3gxF8bvyB5TPCWJqHQEc
MD5:	0027FC7D4E882DE34A05A77C4F049857
SHA1:	BB2B14A8B0092942181324B010DA70C2EF816F45
SHA-256:	DBFEB010A0C8ACDDC38DEA97E228787F16AC5E30B4AF96B764FA2252FE3827E4
SHA-512:	16CBD5274FFEAD4C3BFF7843A0032DF70E0E8F9DA8F0939BCFC419B5D1704583D78B77108CD2220DAB4D6F47F4F1EC2AE7D5594F0A492B889A1960A41F6B19D7
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function Je(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Je),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.07391321234758
Encrypted:	false
SSDEEP:	3:YQZPNVUxXLWFOKaY:YQx+bOT
MD5:	8C11E15DB0F3E1EA036EDBA78ABF1151
SHA1:	72F74F85AA08C65E9927B8D53916A7C45A102D44
SHA-256:	AA011ED383CB780028A85CAAA0DDA67DCE19B0F4BC596F4F708D1857015C1362
SHA-512:	985C2D0148E254CA3386C955DB8F18C02639F156D0FF565BADA0CF91E52A691C504FAEA3A109F9D7CDB4A9C1F6CF48B343EEEEC5803941AE56599411388E4B9A
Malicious:	false
Reputation:	low
Preview:	{"url":"https://scout.us2.salesloft.com"}

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2618), with no line terminators
Category:	dropped
Size (bytes):	2618
Entropy (8bit):	5.851534128228623
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08xetTfxXWAplkwUG9Qh+Y0U7:aJd6SUtJfNrVlCWWWdtqjZtehtzxS
MD5:	89796D3CF140340E40E143F1B4D37EE1
SHA1:	A400DCD20180E73F0DC47A998EE6ECEC7E049FD1
SHA-256:	363202E418AA7A3CA3C4D4D728BE22719C79AB8507DA502AAA5FCF404ECEF266
SHA-512:	80C5EC5904F3CA95411D4D805149BC8C734656130B0931195E7BA10FCB06D1C9C0E72F3B9594F508F30C03D470A37EFCD76FD65A20D2BAA7FA13CCB91959757D
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10120), with no line terminators
Category:	dropped
Size (bytes):	10120
Entropy (8bit):	5.3593594251475345
Encrypted:	false
SSDEEP:	192:MLTVN4eglsWbz6lybr3I1xtcWUzYR2xuv+nPKDB3b:MMOtcWUzYR2xuv+P6B3b
MD5:	C14134C90AD860697F3135D589BB6E1D
SHA1:	8053D5D5CC5D3BBB6AA67AE987DDF0E529F7AA3F
SHA-256:	58FFC6B29A751DC4623CC4A7000E5181E50372D78E809A1F415E1BFF40FF65D1
SHA-512:	6DF91BF3ED82F9669A735A7E7FE336DFE5F05FAFA978F48D81A892E0C9897F8D42DAA7B68E6268753D6A6D1AC262814882BAC13A9A5281D3B3E5F5F6728CAE1F
Malicious:	false
Reputation:	low
Preview:	(function(bidtellect){"use strict";var JSON={};bidtellect.JSON=JSON;function f(n){return n<10?"0"+n:n}var toString=Object.prototype.toString;var REPLACERS={Date:function(key){var ms=this.valueOf();return isFinite(this.valueOf())?this.getUTCFullYear()+"-"+f(this.getUTCMonth()+1)+"-"+f(this.getUTCDate())+"T"+f(this.getUTCHours())+":"+f(this.getUTCMinutes())+":"+f(this.getUTCSeconds())+"."+("00"+ms%1e3).slice(-3)+"Z":null},String:String.prototype.valueOf,Number:Number.prototype.valueOf,Boolean:Boolean.prototype.valueOf};var cx=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,escapable=/[\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,gap,indent,meta={"\b":"\\b","\t":"\\t","\n":"\\n","\f":"\\f","\r":"\\r",'"':'\\"',"\\":"\\\\"},rep;function quote(string){escapable.lastIndex=0;return escapable.test(string)?'"'+string.replace(escapable,function(a){var c=meta[a];r

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
Preview:	null

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 67 x 67, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4407
Entropy (8bit):	7.927115682164262
Encrypted:	false
SSDEEP:	96:e+osZjjnIRchoVcLCkDi85Xr/w7RLGYWNudyF1VAbcI1JjDmYX4:pBnMchoYCk28dOLCNugV4/mI4
MD5:	50F3F3F4FC28201642DB4F7F4CB15D72
SHA1:	DE399181FFD1186DB7AC4F2080F90EF94A028889
SHA-256:	7B4A41DEE4F4A5049D10F158A0D14097D1DF758C948576F8BDDA5E59FFBBB70F
SHA-512:	D07043B4BC901A35AFE997E5BC711C0FF8D098892D61625E3ABFBEC648F36CC4A732D7CCDC65DDDA8CE7671A55F1917C8DC375B3AA6DBD6E28083435220873BA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...C...C.......s....pHYs...#...#.x.?v....IDATx.._.\W}...s..........U..r...y..nh.;-%@.OP..8..b.(..ZMJ..^....7/....S.c..Z..N\...'..-.9..b..{~.9.w.=.f..N..#].{g.....;w.D..4..;..V&G..=...6..N.....k_..3.G....=@P....z....no....F.u..<..\.v....~...}.8...n...}2<>.....".-.......v.....q..3n.j......j..[...J..4...........x...sZ.vp..h.<...2(xq@.+.....r.0.... ....d.9 .y.K..~..>yp.{......-.......w...>.4...M.?.4_.........(=..\|.....8....ao.D....N.gD....B!.{L:u....t..8.z.........Uh\.\|.x...... .S.........c...H.S.@.U4.............r.X.v.>..........Z......c.. T...N.C.....q3p.@.>...D....i.!...#..+Bx.\|..a."l.m.!..P.V.o>AE.5.f7.E.j..a On..`.........._....0...a...]..P.@.C....1....q* J..CIZ%.H..4.....}.H........,j7....yv....Q.2f \|(Bo[..v4..e"....}F.}E.?I.P.P..I...`R...%%....B,I.e...KI............@..0.]...>.@!"P....!`....U.h.V*3.F........I.a-.DZo!.......g..+......Z.IZ.8.\|&..........\|.......`..y.Z.....(.m..B......0 .B.65....h-I...f"O.$.....O .z..Z....P.i.$..Qk.Y.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.612457348662773
Encrypted:	false
SSDEEP:	3:YTyLV/VfsqPNVcSLQzRE9Ldu1S4:YWLV9soDLQmpdwS4
MD5:	69EE36929D2172DEA5C1763BAC240040
SHA1:	77EF82FC4B7757D445E8901E16D785AA44E3B1DF
SHA-256:	45DA241A91C843B268ADA7481CDECE1AA679F2720931EFFEA28D83E1398D66A9
SHA-512:	FDA2E41AF332441315A0BC6352DD1B9350F92E13447CD1A58CBAA96748271C26780A653EA94F023808F572D1E329C855EF6A0E3B51558BF474ABA614AB26051A
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/857000071?random=1721420610056&cv=11&fst=1721420610056&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be47h0z876373427za201zb76373427&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F&hn=www.googleadservices.com&frm=0&tiba=404%20%7C%20Mimecast&npa=0&pscdl=noapi&auid=326790021.1721420608&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202405.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15056, version 1.0
Category:	downloaded
Size (bytes):	15056
Entropy (8bit):	7.984680532189018
Encrypted:	false
SSDEEP:	384:30+gD+0lYYJjB8XuRkEZ60P+iit7TEmfT3zj/o:xp0lYqjGXu7ZN+pEcTjj/o
MD5:	0EDB76284A7A0F8DB4665B560EE2B48F
SHA1:	02496387A5F7BF7B79DF52C7B76ECE4EBC7A0710
SHA-256:	74201A4B97EC1D5E86252DD0180EAFD8C5378A9235864DBCD682F3575B41C85B
SHA-512:	6A835B18154581C56EFDB906CFB10E3DABECE6679EB4EA980CFD4506B2B1C2CC23A637D01B3D577C399C8CE1033A9DBB47A28142C3BF95EEFE70BB72F2729669
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/fonts/open-sans-v18-latin-700.woff2
Preview:	wOF2......:.......q...:o.............................t.`.......`.....@.....N..6.$.... ..B..x..x.[b.l\e.......0........q....:d.2..7.F..t.u.5.UJ..>.SX....2n...7J...&..^q7.........C...z&O......#.f....aG_E.....}.K.......G.&...5.2p..'..7...?)g....Fb%i$.".....`d..4jn..sa..b..\.{.E[U.%.U..n.9@..........Xg~.##C...T.;.5P...C'...X."....w.......L..i.H.=yM...jL....vbX"{.4J...!.....0._g..A.@.I"....]y.._`.C{.Us.6.m....Hg6+....C.L.qQ...........L#]:.......B.E...........xf.<.m.C9NK0u[!.)?.6I....3.lw..nE...G.!..$.D..rQ.....&D.....R..P.........y.tJ..t.TZ.....K.X.P.P...(}EY.u.m,k.I../2t+.......V.5/.j...p....;...?...[.Mq..n@.?.4..23.r....OK....C..{...%.....#.k........<.sr....a...W.z.y.....{...].E....F..!.....Y.....Liel......G.\.p..S.....H?h.K...6....^...r.v.@.].(... ....Q.+n...FZHk.Qz...2..@...8....)X.2..h;...._.....D$'\u3..)x...'..$,.}..ZG...).s...-.......w..=.......>.{....g...{..S...%@.X..G..v...).U.....^D....-}k...\|.../.....5...!.w.D..X.Iv<3..sF...=[..lom6...u.Z

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 492 x 290, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	181031
Entropy (8bit):	7.988245953732625
Encrypted:	false
SSDEEP:	3072:3AoU9Co9QuR1WbpScT5JixAqhyEZ3GoO8IWCQlFuqQOotAGzdXUvLBZ:QoU9Co9h8j3YNwEZ3GiCQDQdKedXY/
MD5:	3482B778E4BBB16CFA6E07A404BFCC1E
SHA1:	475345D2B6C428195EC77A03971B8D53D718B644
SHA-256:	BF637FE53BC7AA785CF61CB99C9EE40539AC682E6441A2ECADEB25DA6314CE21
SHA-512:	14618FD73B4B14DDBD2C4D9BECF469DCBAC5A0AADFE9BDDFBF8EA065644923BAA25C768606FD67918D916888CBA4F43E3F9BA2F11075480E059264F4B188B04A
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/682272e31e2c49f2824e8f36f05c9aa3?v=2270add9
Preview:	.PNG........IHDR.......".......v.....gAMA......a....KiCCPsRGB IEC61966-2.1..H..SgTS..=...BK...KoR.. RB..Ti........@...."....q....."..A...y.(..(6T....}..7o....9g..}>.F`.D....dJ....<6..'w..T ...@.-.................m@..n....8..P.....$......B....2r.2..2...t...%..[.....j..;e.O..v.$....(S*.@..@&.......X......`.(..s....`....`....).d....`...S......GE...3.(...x.W\!.S...d..T.n!...\].x.87C.P........ee......3...FvD.....9;.:;.8.:\|...........?........E..............e..../.....B.._......T.B.fg...k+..m.._......_.....................2..r<[&..q.?......wL..'..b.P.GK..i....$.I...H.........k.`.~..B[P..... ..%....w......1...w..0....h....................4P.6h.>....#..;x...P..8X.BH.L.C.,.UP.%...B..Z..F8.-p.........<.^...0.o`.A.2.DX.6b..".#.Ef!~H0...!.H."E..Rd5R..#U.^....9..E.!=.=...F~C>...@..j..\...B...h....G...h%Z..B.......>G.0....3.l0...B.x,..c.b......6.....b#.{..."....;!.0. $,",'..........B.a...$....nD>1..B.%..+.u.c...[.......!..\H..8R.i......D:C.!....d.6..A.%...r.y;...

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1520 x 1490, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	318087
Entropy (8bit):	7.969035783105945
Encrypted:	false
SSDEEP:	6144:n5NzM4MSzdO/423ybO0h4EtrxBxiVTbazWxMjcXrqOvY2mJAWn3huuE44sSQ:nztg42SOybFBx6azgMjcq20n34uXb
MD5:	C7D7DD20FF9EC2B8B8B1E96F42E7CDC6
SHA1:	1B6A0AA1178358E3728A1772A0049DA0D13274A8
SHA-256:	20DFBEB00839D9F6F6E1EAB009E938CAB9CB8AF971FDBCD889C588BCBA69B5AE
SHA-512:	994A80B8FCB34C1650DC554D72A3A9B270ACE5417B61C5BB0998C34F5C4B194352F4898D51C4B8D15D3D53E8F2FBDA1BA54820E39CB65168DFAD0EA8E85F2267
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............W^.J....pHYs...#...#.x.?v.. .IDATx..........Uu.<..d!.@....M...0..{..:.......{w.....}.....\g...].xm2Xd......D.I PDY.;..9=5S]S.U..3]=...F........?F.X..........-f.7..........E...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@........... ............A........... ..........D..\|........"..>.........D...........".........@...........

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	2.8233365691305745
Encrypted:	false
SSDEEP:	96:8PdvvvvvvlS777777777777774PsbgpI3p3:8PW7777777777777747p2
MD5:	B6A354215B7ACDB86BF61F3E4E05491A
SHA1:	3FF4865BC8B65B06B8C758B51EEF7350814F7024
SHA-256:	85735D6E11046852DF535E8616500D6B3246704F4CB3A15AB11C14F3219343D9
SHA-512:	C6A444BDA9DCA6E0668EE9AFC5AAB404DB6DF081A0CCD8F4507B3AD0029F89477CBD1A9B582504250AD26A6625FC8D9D6B439BBD8492940D38F8EDA18488B735
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ........................................................................................................................................................._..@b...b...b..h........b..]a...b...b..P........b..tb...b...c..6b..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...b...........d...c...c...b..u........a...c...c...c..Mb..`c...c...b...b...b...b...c...c...b...b...c...b...c...b..._..0b..`c...c...c...c...c...c...c...c...c...c...c...c...c...c...U...`..Jb...b...b...b...b...b...b...b...b...b...b...b...c..y[.................

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 820 x 790, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	168069
Entropy (8bit):	7.992734011395797
Encrypted:	true
SSDEEP:	3072:+zyAD3gOS1rxohGZuWnXBRa3i2gDPcl6zLaIEmGKJB0Tx1SayutC2OPQ:oy0imotXWS2gAmOVmGqB8sxutyY
MD5:	EAB07C8C98DA4983C9B87CD4A8A63B40
SHA1:	E3562357C0FF2C52B95470F04EAE5AEF06BD3516
SHA-256:	948378AA6019FBED6F1AC6F584FF96D44422654030E8DF928685AFFA3D310C3A
SHA-512:	BF372F8C0C6146A55CA6184D31807F06C492AC9B9E11BECB1BB64CB42CE18124634884D2042F35138750BA656B0C8420D0B185FF3E6BD7D77A8D4EA9147609E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4.........'..J...,iCCPicc..H..SwXSw.>....J.....l.."#.!S...$@.!.......(..E.....!u"..... ED....}....>..._.?.}..;...y.s.h.!"q....).I#...q..lb..@........(.h..@_.;;........(.W....l....He.H8.8...\|.$..2re.E\|........).4.>...P..\|....S...b.....D.)P.N.X.#......(...s..k.`.!...`....B^6......T..-...\.....-.........)..fI.KE).2...m...a..s3.2.U8......L.O...s.......u.sqr.....B..z.....3{...3...G...j.8....?b...Z..h..#f..@9.....~X.yI..$.66...."!.Z!......._..Z...a...y...[..?+#K.egKx\|!..C......."..B.P...cD.\.8.....D2Q..-..'..e._.y...Q....A......cP.K.p.w.B.1..X...s......@...lQ.:nd4./..\|>S.%......M..C0.+..gp.O.. ..h..y..T..)..2X..P..a;T@5.B.4.ah.cp...%...p..a...8..I.A...a ...b.X"......"!H$..$!)...#.5H.R.T {.:.[.(r....!7.!d...y.b(.e.:..j.rP/4..F.).Bt...nB.... ..F/... ......b,L...8......dL.....R..k....*6.=....8.......p.q\|.B...F\...........>..xm.%.......s...R.>\|3.,..?..I .X.S.3!..OH#,%l$.$4.N....."..I.$...<..X@,'.$.$^!.._..$=.=..@...H..z.....(i..B6&......br1...

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	505
Entropy (8bit):	5.41896986078548
Encrypted:	false
SSDEEP:	12:TMHdPEi/nzVJ/KYf3n6WcOLgHuOaqQGV5PKM:2dsATLf3wNRQGV5R
MD5:	3A22347B12B3419C8E0B7796B335D7B6
SHA1:	0F13CE70C3C8AD1C52CD20D0788D793B38B0F94E
SHA-256:	3666CBFE873D55D617ADC3DAD7FA3158E50AD07AA89F2B0AEDC26A154EAC5924
SHA-512:	DFE313CF8E632C0CB53881AB758659CA22392CF93EC32F65D74DEDD54B576734E51BF5CFA4202E4128EA218F12F524AD01E9BD79DBAB090CED7E29EDC731C0D9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 21.4 13.4" style="enable-background:new 0 0 21.4 13.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#0F103E;}.</style>.<path class="st0" d="M13.3,12l1.4,1.4l6.7-6.7L14.7,0l-1.4,1.4l4.3,4.3H0v2h17.6L13.3,12z"/>.</svg>.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12490
Entropy (8bit):	7.977508810254547
Encrypted:	false
SSDEEP:	192:3A0mJ1jOnZSP4Tw2AkTapnoDTnF0I+lk1S3QEEm75QAg3UDdSOue/2:bw1KnAP4BR0oDx0I+lCPm75akH52
MD5:	BA3C427207154403254AE2B37A307AA6
SHA1:	F2E32606FD155996A86310B9930265A2570E6968
SHA-256:	4168EC437B89142E440FCF863696B82B94FF504A7B1851794ED288D47C0B2D17
SHA-512:	9D543875777E017E3A635697A5D940BEA075371709526B41D6E01B36129D9F4D4180F3C64532802BDC62B80C46FF5AFE1F1FBA0735E2DA913A30899BAF481604
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/a63e63b6df7443898bc7a682d78133c3?v=2e7b068c
Preview:	.PNG........IHDR...d...d.....p.T...IiCCPicc..H..WwTS..[.... ..).7ADJ.)!t..m.$.PB......k....U....V.EW...Z.uQXY.u.+.........9..s..w..yo........T..P".%....32Y.^...z...<~.......0.~-.n..\..(c..M...b>.....b~!....^....D%n=C.U.r.0..gd...u.Z.V..j...'9..@l...x2..N'..J."9.....I.b........E..z..8..ER..2>;..8..bf....D#....h......Y..-...a.;...."..5. ...:...d....>..F,P.....\ED...5..s3......x!..`...I.bc4xv.8,..t..byd2....K..I...D...#.r4...L...O.h...Fj.c:...i.@..lJ.........'Ek\|&..rc.}d.De.6.X.P..........5.....b.s.....<79B.....S.o..u.%.MO..aqz.p-.aH..v.W(II..y#..+...p..@.........J....(.I...S.d...9Ry...L..4...\|.............l(.<.w.7..Kc....@.Bp. .;.T... .J.O....G....B(..\|.A.w..QYKT;..1.......P..... ...y..>.A...........p!F.(..Y.aOb(1..A.#:.&x.....x.....l.g........C.uB7..4.a.a....M....e/p;....q.<@..g.&..{.l....~.'..\M..\|...T..ih..nd.<..Dv..N.'..(.^...u..#.......-b.@.D...[......E....,.4..c'....<]..[..\|(....OV..b.:.>..j.\8S...n.t.L,..8Ri...).a...{.(./......w.a.....

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	880950
Entropy (8bit):	5.390024229673577
Encrypted:	false
SSDEEP:	6144:yqT5yvPw/G7g1LQ47GKIqlFH7ooUHEW13nZVnW3vZ0WhCupucALXWWyPIkvOS92W:knw/T1vl1Va3i3vZi5TYKL2Iehx9
MD5:	11B6BB90C259F8ED592F58F8B212170A
SHA1:	3667481D2A59844DA47692AC56739F4787C8D32F
SHA-256:	D5738325538C99F753B3C065D4A0C9A9198677ECB0729FEE9C6761328F57203A
SHA-512:	2AFC20F9527E675A0FE4D1493083B98863AD7F815D589E2C7CBBF9E1CE7937E35A135DEC07F9F2288E367B1B3A30E8E0F4D56CA2E4039C36DC660A6849D4545B
Malicious:	false
Reputation:	low
Preview:	if(!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?window:this,function(w,L){"use strict";function y(e){return"function"==typeof e&&"number"!=typeof e.nodeType}function m(e){return null!=e&&e===e.window}var t=[],P=Object.getPrototypeOf,s=t.slice,R=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},j=t.push,B=t.indexOf,U={},z=U.toString,H=U.hasOwnProperty,V=H.toString,q=V.call(Object),g={},D=w.document,Y={type:!0,src:!0,nonce:!0,noModule:!0};function W(e,t,n){var r,i,o=(n=n\|\|D).createElement("script");if(o.text=e,t)for(r in Y)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function h(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?U[z.call(e)]\|\|"object":typeof e}var e="3.5.1",

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.8233365691305745
Encrypted:	false
SSDEEP:	96:8PdvvvvvvlS777777777777774PsbgpI3p3:8PW7777777777777747p2
MD5:	B6A354215B7ACDB86BF61F3E4E05491A
SHA1:	3FF4865BC8B65B06B8C758B51EEF7350814F7024
SHA-256:	85735D6E11046852DF535E8616500D6B3246704F4CB3A15AB11C14F3219343D9
SHA-512:	C6A444BDA9DCA6E0668EE9AFC5AAB404DB6DF081A0CCD8F4507B3AD0029F89477CBD1A9B582504250AD26A6625FC8D9D6B439BBD8492940D38F8EDA18488B735
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/favicon.ico?v=2
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ........................................................................................................................................................._..@b...b...b..h........b..]a...b...b..P........b..tb...b...c..6b..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...a...........b...c...c...b..t........b...c...c...b..Nb..`c...c...b...........d...c...c...b..u........a...c...c...c..Mb..`c...c...b...b...b...b...c...c...b...b...c...b...c...b..._..0b..`c...c...c...c...c...c...c...c...c...c...c...c...c...c...U...`..Jb...b...b...b...b...b...b...b...b...b...b...b...c..y[.................

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3962
Entropy (8bit):	4.958947607208349
Encrypted:	false
SSDEEP:	96:T4vjJmWBHW/4PXgCo2tTyNcXQdE1pWT1CnFQEqe:cvjJtG4PzoIlXQdg69e
MD5:	E4D8E279508E8DA958D975686D97A7EC
SHA1:	9E94ABD705113924B11AD9C20D7B7BE224DE426E
SHA-256:	478933873A22DFDFF5100961891C06EDBD0CE63A37AF62950CB523AB2F05B3B5
SHA-512:	75AE86F07549E4E00D8C02C03B6EC5663F8B20429627ABDBEB129049A045870E32E2F1D38C88D8489C7E6F5E33E9B2CB961FE1E557A09FDF7E05073D1579C3EC
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/dd00d4036b494fd987dfa08614f988f5?v=2254cd74&t=w1920hq
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: none;. }.. .cls-1, .cls-2, .cls-3 {. stroke-width: 0px;. }.. .cls-4 {. mask: url(#mask);. }.. .cls-2 {. fill: url(#linear-gradient);. }.. .cls-5 {. fill: #fff;. }.. .cls-6 {. clip-path: url(#clippath-1);. }.. .cls-7 {. opacity: .4;. }.. .cls-3 {. fill: url(#linear-gradient-2);. }. </style>. <clipPath id="clippath-1">. <path class="cls-1" d="M198.35,58.46l-3.41,7.68c-.49.85-1.33,1.45-2.3,1.62l-6.82.96c-.94.17-1.75.76-2.2,1.6-.28.69,3.12-7.37,3.12-7.37,2.05-4.93,5.3-5.41,7.68-5.37,1.34.05,2.65.34,3.87.9M168.76,57.88c-1.29-.36-2.62-.55-3.95-.59-4.22,0-6.55,1.54-8.99,4.18l-11.58,12.65c.62.19,1.26.24,1.9.14l9.29-1.3c1.27-.19,2.43-.79,

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49705), with no line terminators
Category:	dropped
Size (bytes):	49706
Entropy (8bit):	5.296906073277617
Encrypted:	false
SSDEEP:	768:IaOFhhRyOIFhHjfRys3LzQRP4TbYyDMqWxKQ:IaOFnRODRtzQF4DXWUQ
MD5:	893AA032CCA0EEB0079379CD69B84708
SHA1:	F589765745CBC5F548630B1668D593A15C3517A2
SHA-256:	ABD0C69608A1A4B0CE5F6056BC20BCF62A2A29271A4CF5E33FA1F53BF7CB19CB
SHA-512:	4D8CD2162E6A35F2DED63C73E81F416509C9041061A9E91A7BEAEA72E577EC8138F63B57DA112BD884F371292F3CC8395D821C8EF6BC3FA43BC4F2F84BC14812
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3220), with no line terminators
Category:	dropped
Size (bytes):	3220
Entropy (8bit):	5.93892448896272
Encrypted:	false
SSDEEP:	96:aJd6SUtJfNrVlCWWWdtqjZoEDOoS1+2ebE9WdDD5Df:ae35ljWwg9DOoSkBCElL
MD5:	65EB1F4F6CC8452184D5502A169F80E0
SHA1:	9346E7462B8B8D404DA27CA9DC568CDC5AC599A8
SHA-256:	8FC9DA4A985AFA0E4E8D1C15D8968E0E30A99F0CD31A201401E15EA4D93D1CD0
SHA-512:	16FBCBC31660AF1B3753D7347A8B2ABFD1F5529F7AFE4CD93654B21DB03DEFC55983E98427D9B1C5CBE97E5387CC47E9B510357C801C55319773F2C8B801AA54
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 2000, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7764695
Entropy (8bit):	7.980072466467024
Encrypted:	false
SSDEEP:	196608:rPhUe9WjAbcbCYfLoDBV4hazL3ly77zztptWuytGdX:rZU0WcIjyVxL3ly77zzUuSGV
MD5:	C8E5ADA44EA42B423FAA3F007876DB25
SHA1:	4E9D1B5854476E71F076AD5A6DA91D3CF05C4BE6
SHA-256:	961689275D20C9A47C1BFC51AC2437280426724F154CB272EE3B98A453E11923
SHA-512:	556D1A6812D9A5E092CF0AF464AF049724F0B3256729BE70072CAFE7D8A0C735E98A6157F83C7D11C1EEEECEAB7CA08CF6B7E548221EC1E330D354C9451D12CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............p.m...IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2530
Entropy (8bit):	4.520304769367354
Encrypted:	false
SSDEEP:	48:c0V9JKKBvO6NFhdTXolORbVDuqzYqhdLBfSwTDSVR9NxdltkN8zOjxd0fr:9Jp1rhdbvR0qsqrLByRlviyzEG
MD5:	F9F6C932B371C69F6C09B2A25349D1FD
SHA1:	910BB80182054FB4BC7EBE8B03D5FF57D41E290B
SHA-256:	8BD944A0301B3904BE67C405BA0CDD0DE0E086994E1B1BC1F7C81F283EC4C47D
SHA-512:	C7A242A9B945E405A5C1C9904D5D06DA4C4A9605912443AD44CDA528B117511880E0F8D82F8EFCA61A8EF1B7ACF524789317974F8437AC08734B293139EDC916
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/ba203cf576844201a13385cc94eaf22d?v=2c1b7329
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #010041;. stroke-width: 0px;. }. </style>. </defs>. <g id="Updated_Icons_Outline_Users">. <g>. <path class="cls-1" d="m30.93,52.76c-5.42,0-9.9-4.48-9.9-9.9s4.48-9.9,9.9-9.9,9.9,4.48,9.9,9.9-4.36,9.9-9.9,9.9Zm0-13.78c-2.24,0-4.01,1.77-4.01,4.01s1.77,4.01,4.01,4.01,4.01-1.77,4.01-4.01-1.77-4.01-4.01-4.01Z"/>. <path class="cls-1" d="m44.54,54.44c-.59-.82-1.18-1.53-1.88-2.24-1.18-1.18-2.47-2.24-4.01-3.06-2.36-1.3-4.95-2-7.89-2s-5.54.71-7.89,2c-4.95,2.83-8.36,8.25-8.36,14.49v2.94h25.33c1.18-3.77,3.3-7.07,6.24-9.54-.47-.82-.94-1.77-1.53-2.59Zm-23.74,6.24c1.3-4.48,5.42-7.66,10.13-7.66,3.06,0,5.77,1.3,7.66,3.3.71.71,1.3,1.53,1.77,2.47.35.59.59,1.18.71,1.88,0,0-20.26,0-20.26,0Z"/>. </g>. <g>. <g>. <path class="cls-1" d="m58.73,26.94c-6.36,0-11.54,5.18-11.54,11.66,0,

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (14829), with no line terminators
Category:	dropped
Size (bytes):	14830
Entropy (8bit):	5.029953946135502
Encrypted:	false
SSDEEP:	192:37QNvfPz9aWM7CzVJS1qlafRWHQmpqx5X3+zNEDbhDulmaDxbDWfwDxDx6fOBDZw:37qr074VWvNZJxSZXdBFQgafGYRT7
MD5:	980BD70C0616A68A9B3999ED160F6EB6
SHA1:	E449CD48D79635CE3420B4F4C3696EFA2F0F31C6
SHA-256:	014735A9D87C9EC56B6D26130B79629FF6A004AB926FAFC95FE10424BA03D120
SHA-512:	153C32DA37D41C91E9CE21E8B65C065324E4ADC6B415C0891AD0A58B5C4AC88C7BABA520A2F3B6D0BBF29010E75DD25AE72BAE09F8FAA83FD48B5F86A10F8878
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("sn9p0ljv8dushqgktXFohVVCLNU", "OjZf5qtiHR_vmdtEQCu1dPifU1o", {"props":{"aria-modal":"false","aria-label":"Resource Center","role":"dialog","id":"pendo-resource-center-container","data-layout":"HomeViewModule","style":{"overflow":"hidden","position":"fixed","width":"400px","height":"460px","right":"auto","bottom":"auto","-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","background-color":"rgba(255, 255, 255, 1)","border-radius":"3px","z-index":300000,"left":"auto","top":"auto","box-shadow":"0px 0px 20px 0px rgba(136, 136, 136, 1)","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container _pendo-resource-center-global-container"},"type":"div","children":[{"css":[{"selector":"#pendo-close-guide-b04f9b94:hover","styles":{"color":"#333333"}},{

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4840), with no line terminators
Category:	downloaded
Size (bytes):	4841
Entropy (8bit):	4.901369197948163
Encrypted:	false
SSDEEP:	96:32ZQmarUORFQ5IM7MQ5vg12itDK9lzHOSi2hkDP0mqi8BU3Z222Y:3AQmarxaWM7JS1rt29laftrqQJ22v
MD5:	B3C2773ADC59068A69AB1A0CFABD07F6
SHA1:	067F4F2F22E701887E50D6465818559DF65CD2F6
SHA-256:	D5C34C8ACEAA2678CA7995B83D5197F04AF6F7F8C8E4C39C973F54180322984F
SHA-512:	2D8C20A1904DA04520034BE6EE6EA52D6CA29D78795F6C70F6367B8074D882CDAF30830C7EFF082FBB60C129E9719E55AB2EFB57B9040B06B5FE297EA1D7E894
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/dP9u1Yj5gYondtURXeRiqcUqNWc@sn9p0ljv8dushqgktXFohVVCLNU/HSnzFk61g0hDIbg3_i1hMHRvVR0/Bn9PLyLnAYh-UNZGWBhVnfZc0vY.dom.jsonp?sha256=1cNMis6qJnjKeZW4PVGX8Er29_jI5MOclz9UGAMimE8
Preview:	pendo.receiveDomStructureJson("dP9u1Yj5gYondtURXeRiqcUqNWc@sn9p0ljv8dushqgktXFohVVCLNU", "HSnzFk61g0hDIbg3_i1hMHRvVR0", {"props":{"id":"pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0","data-layout":"SandboxModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-e9562ccb::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-e9562ccb::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-c21

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5583), with no line terminators
Category:	downloaded
Size (bytes):	5584
Entropy (8bit):	4.884236002437424
Encrypted:	false
SSDEEP:	96:3jZ75m3hr/MOXQ5IM7MQ5vgJ0tDKDzHOSj38ST406DUuHpYUA45XGIqwVpxM:3175m3hrAWM7JSJ0t2DaST40SpJB5XGN
MD5:	AFDAC86597A88D414642BBD3CCA47AFB
SHA1:	14EB5ABF084A0CB2C59A17716A7833D049F06373
SHA-256:	6CB52B343D39DEEDE7DD3406912CADA0C33C30AE6731BBE700A503B6207D1D79
SHA-512:	88943E13B2AA5F80F020C771FF961C4D67928FA6535AB9FA9BC55810C279BDECAEF3457998B42D72428554759A0CA41F41A64C9CDBE9CEFA6FD6DEA7795CC804
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/RzkonpIMqVMMtrBxUvCVyAV9okM@sn9p0ljv8dushqgktXFohVVCLNU/B8yz6G72MbDkDBsTovOHQl5kTPA/FOtavwhKDLLFmhdxangz0EnwY3M.dom.jsonp?sha256=bLUrND053u3n3TQGkSytoMM8MK5nMbvnAKUDtiB9HXk
Preview:	pendo.receiveDomStructureJson("RzkonpIMqVMMtrBxUvCVyAV9okM@sn9p0ljv8dushqgktXFohVVCLNU", "B8yz6G72MbDkDBsTovOHQl5kTPA", {"props":{"id":"pendo-g-B8yz6G72MbDkDBsTovOHQl5kTPA","data-layout":"AnnouncementsModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-224c80e4::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-224c80e4::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-gui

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	167918
Entropy (8bit):	7.35884032071028
Encrypted:	false
SSDEEP:	3072:NyjgkhNLM/BSg00ofnIuCVjHr6R9Q8Blfs3Rm:NyjgkzViqOeRvUw
MD5:	ACE7FEB64511DE4A634B80ED62C670C0
SHA1:	F231AEE7691810479196209B8E4E58AF4E9A5F05
SHA-256:	C3B3DAE38A4364167C1B356EBC22904BCC811A31368778BE3CA2D2D769A90E90
SHA-512:	36C39550A739C5DE2E4961D5755B419D1B26D78AF70F6574453DFB8082935B9B5F80445F66F5BCB354359248D02E49E2E678A2EEB41A07443445A10B6F43B744
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/75013efacc6a4fe5b9de645b642dfa78?v=0e57c20b:2f7c35be5c86b3:5
Preview:	...ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ].......................................!.P.~@.?!..B.........................................................................................................................................................................................................................................................................----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------....ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_close.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 512x302, components 3
Category:	downloaded
Size (bytes):	21437
Entropy (8bit):	7.788540007546444
Encrypted:	false
SSDEEP:	384:hYNg7VildNTzpkmtK/Efs/8v25LCYJ3wfw0I+zXpZid:hYyBMqmtK8tv2JCYJV+zXrid
MD5:	613DEC9C5CC2E7C6EC2C9087D92463D8
SHA1:	42C3737F39292007FFEFABE0B5B609CDCA4FAE25
SHA-256:	CB9A9322E5E3BCA6CA0BE893656212B26D000206574CF2EBB629C1A5E9D1994D
SHA-512:	96E7EAC20DEAA3C2E07F1B983C6550F6908AF0E1EAD8718AB52DA5EC25F4221B6573488302ED9C6379266025BD6F3EC199CAEF749945C3A05CF3CABD660D017F
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/40074a2fd2f848cb91f70e474add3d9a?v=ff1a19a9
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1013 x 979, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	285998
Entropy (8bit):	7.983717171124716
Encrypted:	false
SSDEEP:	6144:FY2cdYj0eQeoGvCSZD+Lp38Q4mb4kDLe6qjfD5kqIR7:1cYjpiuE4mIZZE
MD5:	D535E20B70DDC0C5C608EAA5269B93FF
SHA1:	A907E5A6799C3CE705C46B12C8CCFDD0A26E797E
SHA-256:	9761A0EAA3D22ADCDE9EBA32E0FBF3C2D7C3223A7ED220DE80C4DF451BEF6E11
SHA-512:	374F68F819A28073AB222E600DC112AD16EFB0389E0D0D2B9D9F5C1DB08276FAF429FC7E7D22880552D36A08E75766A7F658C6717EF359C888BA531BC3BBD742
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N).....pHYs.........n.u>.. .IDATx.....E...Y.$'...a_.DAD....DD....z.^..\.W..PQ..O........B......B..o'g_f.{.z......z.e<..O83.U....=....b.\..........Py.G...........(..z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B............

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39381)
Category:	dropped
Size (bytes):	39384
Entropy (8bit):	5.514196595847643
Encrypted:	false
SSDEEP:	768:j07PC4Li1TB9BgxFJWUwcYeTivmT7+S5nC8PC/VDUZLqHQ48a96:YY3gxF8bvyB5TPCWJqHQEc
MD5:	0027FC7D4E882DE34A05A77C4F049857
SHA1:	BB2B14A8B0092942181324B010DA70C2EF816F45
SHA-256:	DBFEB010A0C8ACDDC38DEA97E228787F16AC5E30B4AF96B764FA2252FE3827E4
SHA-512:	16CBD5274FFEAD4C3BFF7843A0032DF70E0E8F9DA8F0939BCFC419B5D1704583D78B77108CD2220DAB4D6F47F4F1EC2AE7D5594F0A492B889A1960A41F6B19D7
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function Je(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Je),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://app.pendo.io/data/ptm.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?v=2.239.0_prod&ct=1721420554468&jzb=eJztU1uPokgY_S9ssk-tcr3YSWeCgqJcVKRV3GxICcWlobhVgeBk_vvg9O5mn-ZtHzaZt_rO932nTqXO-eMrRYYKUq8UggRQL9StKe8YNj5J0YgyEsvwLC0IPC_QL1SX4pSUjZ-G44K_12x157v-8IiqpG5M4nojQdvkYzMhpMKvs1nUQIhAkUCQkwQPmEA0zcs4LSYtnqLxjgBgMg1KNGtnP_DZl5iANwyDtoG_k6x446ajiCiba3wh5sOHeIPWWWAWBASiXnqafSD60H1IEht7Wl0Dxe8LcW8mgVgyitA7cu95Z04zHkkrbD8UOd_L0mOQ9GE-dwHfWsxJsUN-oty2rDAxW3jUAnuR2V5xE1vtNLihg6cmA-AqEND1tPP8SbuLSlk9xb99Cv6CIMYghm_QruwPxJj3h_LudHOza2p-qzPbHX3EhyF1VRdfDaVforlI2LBG9hqF6d4PT6u1NvjMUHAtlHnNGgxNP4HNChb5UdDFUEZ7ljUvW-YiTIzQQRcrD-eNWteTIb3QLKgzqTfDmMZ-K0S-cT7BXU8mHBKWMGtF5Qrw0vOVlGFamGC_tMxTTR8Ybp-tOexUUZzG6faiGpdTSfuPoAuD3linTnDnXWviOsnBcmIzet9VgZ732t1ZHVW0tTaZnBacsdsI1020XqzohZppZ6eXgh3b1_etc0e3RNWth7O8CQ676pybB1g9rBs5eZfTDvQT1xOWXqHaiVIZm8f6fEP23l_YWbJHmutH5aNXpEM_HGLtbCWS3iFbzerCky3uGEotEy4uOTEeaifVVs8wG07cW6aLc3Z5H11YNWWFqdevf1v2efyZa3NQxO34i-MELPz3I_XthQJBULYFGVfHogINLIjybygE5DnPzGe0NGNplh95OtjgtCxGmJ2y3HxK-6OS8Mn2SeCC22aUUbR5_kKRz4LSjes5ipJlFcNG1gI08kQNQPBHc5FuVmHADk7uIbsLh2dGBwLHx8156dvLP_nNSxD-NL_sr_z-yu__Lr9PW_9lZl6WpKnwn0RJ5uhvf34Hu5pZ7g
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43094)
Category:	dropped
Size (bytes):	44779
Entropy (8bit):	5.283843760630674
Encrypted:	false
SSDEEP:	768:NrrC6q4mPnrc518qBnrFnDlIfO5q5BfPpfYKfvNbp850WdIiOOv5sQatdpBCF4o8:NvzWfuKxQevb7
MD5:	C7D17430C2034CFE91A787227E1E2B70
SHA1:	BF402AAA66A0D5B43022688DA10340ED88514E01
SHA-256:	C52D6A374C5FB6CE03EE338569990BADF1F38FD52A4D44982C034DE377B26733
SHA-512:	B659FDDD409FDD2C21FBB85AC6FA0C459579B357DF3DFA2365FB5C79D21FC4E11B865B2CA6B2BF99FA32E4CB1B186F1E22CA6E8390B728D3434F88CBEE208038
Malicious:	false
Reputation:	low
Preview:	'undefined'===typeof Aura&&(Aura={});.(function() { .. function initAccessResources() {.... $A.componentService.addModule('markup://force:customPerms', 'force/customPerms', ['exports'], null, {BypassValidationRules: true,}); .... $A.componentService.addModule('markup://force:userPerms', 'force/userPerms', ['exports'], null, {UseWebLink: true,EmailAdministration: true,EmailTemplateManagement: true,EnableNotifications: true,AddDirectMessageMembers: true,PasswordNeverExpires: true,AllowUniversalSearch: true,ShowCompanyNameAsUserBadge: true,ActivitiesAccess: true,ContentWorkspaces: true,SelectFilesFromSalesforce: true,}); .. };.. if(Aura.frameworkJsReady)initAccessResources();else{Aura.beforeFrameworkInit=Aura.beforeFrameworkInit\|\|[],Aura.beforeFrameworkInit.push(initAccessResources)}.})(); .Aura.StaticResourceMap = {"CDO_ADD":{"seismic":1679067540000},"AngularJS":{"SBQQ":1683970685000,"refedge":1692280109000},"penpal":{"dca_mass_action":1645132854000},"Reassign":{"sbaa":1575308622000},"jq

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10509), with no line terminators
Category:	dropped
Size (bytes):	10514
Entropy (8bit):	4.8490221272328835
Encrypted:	false
SSDEEP:	192:3hvP89PwsWbxj12RA2/RAh6BKCWRxjS+MyRAc7RAh6MdRu0ERAh6UY2HS0WcdB+X:3MTSmLzM
MD5:	24EDEE4A678B8296B37CD740A5BD8B2F
SHA1:	FA95FDB0538398CC2FDA8174181D70E6208521DC
SHA-256:	65664B0046C8C3815E49DA3A00843E3B7922C48B60A42E8808B21D17F302445D
SHA-512:	C64D871588C94FCC9CE04280CC2BA565B149243DF93C4834BE6C956B6B5FE579B1CD3F7BAC90F7FFD40E3267F7F5F616C30C404F9F5CC5B6DC79F266EF3370CC
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("W8wLAJJ-I1c5HQpcqjSuP-dHcdk", "K-kKCZLF_TcoZSdvI4U8Mdo7t2Q", {"props":{"id":"pendo-base","data-layout":"lightboxBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-button-f6b6e33f:hover","styles":{"background":"rgba(22, 106, 188, 1)","border":"1px solid #166ABC","border-radius":"6px","color":"#FFFFFF","font-weight":400,"border-width":"1px"}},{"selector":"#pendo-button-f6b6e33f:focus","styles":{"outline":"none"}},{"selector":"#pendo-close-guide-3175006d:hover","styles":{"color":"#333333"}},{"selector":"#pendo-close-guide-3175006d:focus","styles":{"outline":"none"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-backdrop","class":"_pendo-backdrop","style":{"position":"fixed","right":0,"left":0,"top":0,"bottom":0,"-ms-filter":"progid:DXImageTransform.Microsoft.gr

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 820 x 790, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	185156
Entropy (8bit):	7.9937583439788735
Encrypted:	true
SSDEEP:	3072:+zyAD3gOS1rxohGZuWnXBRa3i2gDPcl6zLaIEmGKJB0Tx1SayutC2OP1i0kq:oy0imotXWS2gAmOVmGqB8sxutyz
MD5:	6C504B61FF3FD2A12DA522B56E7FD0DB
SHA1:	B78FC385F5A9C7431E7348DAFCE72642A5145BF7
SHA-256:	FEC255EE7E9F98052102D7826A48D5F81A365C78DFACA079FAF66FA7330DF71A
SHA-512:	8CF021A35A47FBADE37B6319A47B5E8FB4F5D9AE7FEEBB0504483A5C7059EB2CBDD8997AF709CC2BF0EE7EA8705BD84BD95A38F992E50F011DA11FE897B3F4F7
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/482db570fe8e449fb6b1e2d90dfda927?v=dd6313bd&t=w1920hq
Preview:	.PNG........IHDR...4.........'..J...,iCCPicc..H..SwXSw.>....J.....l.."#.!S...$@.!.......(..E.....!u"..... ED....}....>..._.?.}..;...y.s.h.!"q....).I#...q..lb..@........(.h..@_.;;........(.W....l....He.H8.8...\|.$..2re.E\|........).4.>...P..\|....S...b.....D.)P.N.X.#......(...s..k.`.!...`....B^6......T..-...\.....-.........)..fI.KE).2...m...a..s3.2.U8......L.O...s.......u.sqr.....B..z.....3{...3...G...j.8....?b...Z..h..#f..@9.....~X.yI..$.66...."!.Z!......._..Z...a...y...[..?+#K.egKx\|!..C......."..B.P...cD.\.8.....D2Q..-..'..e._.y...Q....A......cP.K.p.w.B.1..X...s......@...lQ.:nd4./..\|>S.%......M..C0.+..gp.O.. ..h..y..T..)..2X..P..a;T@5.B.4.ah.cp...%...p..a...8..I.A...a ...b.X"......"!H$..$!)...#.5H.R.T {.:.[.(r....!7.!d...y.b(.e.:..j.rP/4..F.).Bt...nB.... ..F/... ......b,L...8......dL.....R..k....*6.=....8.......p.q\|.B...F\...........>..xm.%.......s...R.>\|3.,..?..I .X.S.3!..OH#,%l$.$4.N....."..I.$...<..X@,'.$.$^!.._..$=.=..@...H..z.....(i..B6&......br1...

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 495 x 290, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	290275
Entropy (8bit):	7.978099471357226
Encrypted:	false
SSDEEP:	6144:N8IQEk0FyR2yDW3WCjAF4bYKCKY/6+cD1vqaiP55etc0G+bK:efZ0FRu5CEUl8c5i7P55PgbK
MD5:	69BAE65A673497DED41A00B661685902
SHA1:	DA2B42A51FC902EF5DD4726117EA5FBF3CE13994
SHA-256:	AA0442C8018871707CDA79493F34106AFF0810D32CF26812E41C067032C838DF
SHA-512:	0054D2A4D93198176067343B0E3B18748CDE18517003AE30C4D6A943CEE982242FDD2704CB91356CD6E980CC03637202691EF06ED9AFDB48C690C1CD6942D44A
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/d0635f650d1f47db87d21f2928042499?v=ce4369d8
Preview:	.PNG........IHDR......."....._.......pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 25.0 (Macintosh)" xmp:CreateDate="2023-11-02T15:05:11+02:00" xmp:ModifyDate="2023-11-02T15:15:15+02:00" xmp:MetadataDate="2023-11-02T15:15:15+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7b95a35e-28ac-47d5-ab19-2ec178f09d69" xmpMM:DocumentID="xmp.did:7b95a35e-28ac-47d5-ab19-2ec178f09d69" xmpMM:OriginalDocumentID="xmp.did:7b95a35e-28ac-4

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 512x302, components 3
Category:	dropped
Size (bytes):	20524
Entropy (8bit):	7.763073518841138
Encrypted:	false
SSDEEP:	384:hYNg7elBHCazZCQlL7G4nl754rhKcciulRjZTNkItWOlpQLSt:hYy8CadCQV6SterUcNu3ZTmItws
MD5:	F0BFA18A2B2B98602CCF5F698F2D5349
SHA1:	54D228167191C581900540DB7682223F273C0738
SHA-256:	7BB880615219E2FBECFB7792494703E51E3FBE0C959C988D1E054975D0F618FB
SHA-512:	E4E962538CB85A4408B6D19905A464DC0BAE2D9822168CB727C6686D77369659338EF41BF7FD0C5A5CE6E44B1BDEB580ABF447BCE321A131B448E4F0C5E8CDE2
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.62578943468986
Encrypted:	false
SSDEEP:	24576:MmQ9g+eC1Jt3BvBpq8KCzMUcOvkM9DYhIHgQF:lpExR7wrOvkM9MOgQF
MD5:	76B850047845F5EFA093359741ED4AFA
SHA1:	4B6CB84F61FCABA1E5C311647EFDC7813D899F63
SHA-256:	D2E981CEEFE7DD2F7DCF41F0DF230A713920CD933076DD6E57B7D4CBEBA26DB3
SHA-512:	99260809EDB6141C48898CD633E08C159E477BFA97D24FDB4572454099A6AEBAED0B42692194B4B00BD32F7C16EB65C24123C9A914B89096917CA51BC8E963C3
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/75013efacc6a4fe5b9de645b642dfa78?v=0e57c20b:2f7c35be5c86b3:2
Preview:	y..(.."._z.z..a...K....6Y,..a6....h.%..\|AR.{...#.....e.$.%..8$l...=pc....A.Za.".Q....p.Hd..m..1.O5}{.q.....k....b..h#.X..s&.]4v...<u....Cn...?l...E...hcO...:9...Rv3....5$a............j.c.g..?.....".0}..)..6..k$.U....wu..O..9..f....B...E.{......i.v..e.]...YP..Z......<....6BY.Y{.>.b.....E...W.!O&Y..........$.Ex.h}V.>...l.b...1._&.3.ec9S.Q.d/.......I...Dn.N...g..9.c.V.J1.&..0...H'...]m..........t.PS.c..y..+.k0\|...0......:..vtc..yXD..h....:n..K.e..b.....W.N......48....:....."_....Ym..3%........9.L.<..y..6..H/.FI...r..PPM... .C>.}c..{9pH^.we....j....]>i.^.7.2.[.vEi.M.o..3K..a.p.-Gc...;..{..,\|g...f..{...^..~.(...B....7....,l....F...3s../..(c.b....S.p;..I.Xp../.q......l^$..[H..c..a..u.3....G}...._&..\|D....o.N..:.0".t..P...P.....zt.J7......Q.....F...(wI...<.Ag.5.e..xG }.[...t..G...I.....q\|G.}^j.>....V.$7......./Mn.Y.)hdN..kesB.....57.C]~.d.M......y...U`S..2....R.2.f.my. ....M.j....V.....P...G... ...<.0.ql.a..O..b.G..!........J=.\|.~..D...

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8497), with no line terminators
Category:	downloaded
Size (bytes):	8497
Entropy (8bit):	4.716380817567596
Encrypted:	false
SSDEEP:	192:3GPqiwbVLxjPWSgTI59SgTId6j/SgTI9jObVExjEcSgTIwCSgTId6+eMVlxjwEST:3o9nG
MD5:	5A450B9731B9922ADF201A802A0440E8
SHA1:	933F73BBC89DC906AECF8F3515F85BA682E34F99
SHA-256:	56C35E647AFA2EFBA29801063576B08654118330B846EA0BF1AF7E15C3268FB3
SHA-512:	B82006BF3C7175F6DCE68981C7954F3D0C004F484EA4F141859DC94C069CD9530A1E2E9058F4CE83DCF48CC2A4624993A666E204A53925E5E0590A98944C523A
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/CBsqh2yXG6dsq7VO9JHTxSmCJPg/hG-mSoZF8JaZzkhqDmFhA1VVaMQ/kz9zu8idyQauz481FfhbpoLjT5k.dom.jsonp?sha256=VsNeZHr6LvuimAEGNXawhlQRgzC4RuoL8a9-FcMmj7M
Preview:	pendo.receiveDomStructureJson("CBsqh2yXG6dsq7VO9JHTxSmCJPg", "hG-mSoZF8JaZzkhqDmFhA1VVaMQ", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-ed05aa46:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-hG-mSoZF8JaZzkhqDmFhA1VVaMQ","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18794
Entropy (8bit):	6.719589606480986
Encrypted:	false
SSDEEP:	384:81QWb8E9VFhFx8j7a/CgJmQWqk9tla5fj:8KzE/FOiPJa93Y
MD5:	59298E3AB67712ACC18099DD884A9AF5
SHA1:	20595148D39501E3A23200AF359F5D936A650A77
SHA-256:	A57C466CC9E17813FE2FA5CC364F1C2C216C4F0C45526C17DC74F656F077FE70
SHA-512:	50369164C45DA2B5E3323ABB12AA0D4BBACC62BAE9485D5A9020FF8263A9AD26E09842CAE4203EBFD6CB40B9449CB3E6DB4AE6443119DD505319F90E9B4A85B1
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/4ef1a859ca4b4ddc94fb3037e36456aa?v=d619a895
Preview:	.PNG........IHDR.............R:W...,bcaBX..,bjumb....jumdc2pa.........8.q.c2pa...,<jumb...Gjumdc2ma.........8.q.urn:uuid:a20ec2d5-1b60-47db-aa08-6690ee05dd45.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexFhttp://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.,ndnamenjumbf manifestcalgfsha256dhashX ..BZ.h.]k$P.9No..\|...@..Z..ku0cpadH............jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated Imageidc:formatiimage/pngjinstanceIDx,xmp:iid:409584a4-8c11-4882-a76b-8df25666bfadoclaim_generatorx6Adobe_Illustrator/28.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_info..dnameqAdobe Illustratorgversiond28.0.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX .f.j..\|`..9...#A..]+...F."d.+

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 25900, version 1.0
Category:	downloaded
Size (bytes):	25900
Entropy (8bit):	7.989719019974502
Encrypted:	false
SSDEEP:	768:MxpG6Gr0HaRRkeLsNf+e2TLddq37azDprdE:MxpGj06Y2giGOBdE
MD5:	8C2D773AF6BBE3D92EA240122DDCD194
SHA1:	64E1ACB13F4714F71B315F0BAB556D093107C5D1
SHA-256:	99C3BE2A0EB1736419E732E5674274384595E0FF9CE517CCEDDF5425C7DADAA2
SHA-512:	6158F324DA1EF7DD0EBD00BE6D63E0D834A98265F64E1AC33AAFC6C41A7C0CF958254C8B4CBCD3B8514D0769500A331A5A4C2F5C2B42EA3EFD26626B67506337
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/e8ba57/00000000000000003b9b2038/27/l?fvd=n5&primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&v=3
Preview:	wOF2OTTO..e,..........d............................)?DYNA..?GDYN.i.......`..4.6.$..d....J. .....H.8..t....>.......^..MU...~..?..........._....R.T.....p:[..GE..i.c^..N.`"[.B..d..W.......;g..P..u.=...S.4)&...lK..d......v......u4s:......Q.."....ZY...x.N..i.. ..zg.y.cv......+.'Z...v...cS...R.@.../E.XK .,w.=.x....)...bP{{L...q..J...&.$..^.$OD`b.>.0.v."%5`0q.Q.0gjO....t)..<n...[..B{.U......S...DM>;v.z.oj.f$.1-.....?..A...Z.k..d..J4.G.M.n`..>...\...Y. ..$,b.+.'...T..s..\|:}.;.I.R.<...eJ.d)9..+h....\|.?.".....^.KJJr.' .:..a...e.......<l...f...z....N.a..(.U......d...Q.....-.L,.VA...U.4E..@U..K..eL5].Ac.(...........S%.o.\|cZ>..n..O...X@...Xm.4.c.^8..Xi.0.s.w.U.~-._...2..6.[.......m...YZ...N......6........$..@%..5.......z.p..IX..`'...P.w.1...X.kb..}q..@....Mx....,...?..*K....QW.E}i...Q4.&..r(O.i-m..t...E.F%t...k...g5Y...`C.D6.e.B..ma...v..........5..G.Y..I~.?......Sr.(.v,..:.c).rB."..C...Y,=......3Zv.....f.)O..k..i5...rWr../....m..!..~.v....

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1013 x 979, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	285998
Entropy (8bit):	7.983717171124716
Encrypted:	false
SSDEEP:	6144:FY2cdYj0eQeoGvCSZD+Lp38Q4mb4kDLe6qjfD5kqIR7:1cYjpiuE4mIZZE
MD5:	D535E20B70DDC0C5C608EAA5269B93FF
SHA1:	A907E5A6799C3CE705C46B12C8CCFDD0A26E797E
SHA-256:	9761A0EAA3D22ADCDE9EBA32E0FBF3C2D7C3223A7ED220DE80C4DF451BEF6E11
SHA-512:	374F68F819A28073AB222E600DC112AD16EFB0389E0D0D2B9D9F5C1DB08276FAF429FC7E7D22880552D36A08E75766A7F658C6717EF359C888BA531BC3BBD742
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/56afca39b49f4d2cbd39cc7efa7fa0f4?v=34b2edca&t=w1920hq
Preview:	.PNG........IHDR..............N).....pHYs.........n.u>.. .IDATx.....E...Y.$'...a_.DAD....DD....z.^..\.W..PQ..O........B......B..o'g_f.{.z......z.e<..O83.U....=....b.\..........Py.G...........(..z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B.............z.........B............

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (688)
Category:	downloaded
Size (bytes):	3091008
Entropy (8bit):	5.363201348664648
Encrypted:	false
SSDEEP:	49152:mJGGrjOhGnHzaljC7mj7CtGH3mo7fqVD46Tigk1yjuUzDTVGsRoGz48Q5boe8cPQ:p7fqu/+0dxAvbV3Dj/JQt7xAFFv9B0C
MD5:	866EB6A3DDDDC9A56621C5A7D4630CFD
SHA1:	ADB356B0E0300030934E5FCBE7E1CFDC387CAAA4
SHA-256:	BB148D4A0C9BC3F5AB13715C16FEA3CE08F0F9B263F3815C90A7EEFE4EE10B56
SHA-512:	7FA3FA82FB28C2658EEF63E3794C6E6E64A6773F304D349A77A403FDA9F0C5703D338DA69415DFAA07F9F124628059822D6C51BB2F92388C9E4D2EA39B264B2C
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/s/sfsites/l/%7B%22mode%22%3A%22PROD%22%2C%22cac%22%3A0%2C%22app%22%3A%22siteforce%3AcommunityApp%22%2C%22serializationVersion%22%3A%221-250.8.3-6.4.5-b%22%2C%22parts%22%3A%22f%22%2C%22loaded%22%3A%7B%22APPLICATION%40markup%3A%2F%2Fsiteforce%3AcommunityApp%22%3A%224aRXFMeJBEoyEhCBFKHHSA%22%7D%2C%22dns%22%3A%22c%22%2C%22ls%22%3A1%2C%22lrmc%22%3A%22-386269907%22%7D/app.js?2=
Preview:	"undefined"===typeof Aura&&(Aura={});Aura.bootstrap\|\|(Aura.bootstrap={});Aura.frameworkJsReady\|\|(Aura.ApplicationDefs={cmpExporter:{},libExporter:{}},$A={componentService:{addComponent:function(a,b){Aura.ApplicationDefs.cmpExporter[a]=b},addLibraryExporter:function(a,b){Aura.ApplicationDefs.libExporter[a]=b},initEventDefs:function(a){Aura.ApplicationDefs.eventDefs=a},initLibraryDefs:function(a){Aura.ApplicationDefs.libraryDefs=a},initControllerDefs:function(a){Aura.ApplicationDefs.controllerDefs=a},initModuleDefs:function(a){Aura.ApplicationDefs.moduleDefs=a}}});.$A.componentService.addLibraryExporter("js://force.sfdcAjaxLibrary.Ajax",function(){/*$A.componentService.addLibraryInclude("js://force.sfdcAjaxLibrary.Ajax",[],function(){var g=["while(1);\n","while(1);\n".replace("\n","")];return{parseWithCSRF:function(d){if(!$A.util.isString(d))return null;a:{for(var a=0,b=g.length;a<b;a++){var e=g[a];if(0===d.indexOf(e)){d=d.slice(e.length);break a}}$A.assert(!1,"CSRF protect string not ad

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 512x302, components 3
Category:	dropped
Size (bytes):	21437
Entropy (8bit):	7.788540007546444
Encrypted:	false
SSDEEP:	384:hYNg7VildNTzpkmtK/Efs/8v25LCYJ3wfw0I+zXpZid:hYyBMqmtK8tv2JCYJV+zXrid
MD5:	613DEC9C5CC2E7C6EC2C9087D92463D8
SHA1:	42C3737F39292007FFEFABE0B5B609CDCA4FAE25
SHA-256:	CB9A9322E5E3BCA6CA0BE893656212B26D000206574CF2EBB629C1A5E9D1994D
SHA-512:	96E7EAC20DEAA3C2E07F1B983C6550F6908AF0E1EAD8718AB52DA5EC25F4221B6573488302ED9C6379266025BD6F3EC199CAEF749945C3A05CF3CABD660D017F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17327
Entropy (8bit):	6.949559841048331
Encrypted:	false
SSDEEP:	384:pTYcwQWb8E9VFqFx8j7a6bnDwRmkUqGNrWgFZTfNT/ee:FdpzEkFOi6bDim5hNrnNL5
MD5:	CCB64730A8775CAE638DC3A4E31FCAD0
SHA1:	A876A75F2746B7A4B4E657429F7FA9C220CC6DC4
SHA-256:	404AC724103BFF7B5274D9A18BAA9AD2D7AE1F38DAB75E321D1724513DE1BD97
SHA-512:	D148901AE8838A1282606ECC15C4F2600647ACA01D92E207C180525A6424BE824E1263874B0616BB7FD62AD532023B79BCCE660E9D6772092E7E83834AEB42DD
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/b6c2916537114887a5ba7800de8d6ede?v=78059a5e
Preview:	.PNG........IHDR.............R:W...,ocaBX..,ojumb....jumdc2pa.........8.q.c2pa...,Ijumb...Gjumdc2ma.........8.q.urn:uuid:76447592-656b-4004-a0f4-d3ae737ac1e3.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexShttp://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.,{dnamenjumbf manifestcalgfsha256dhashX `fu6O.....4Q1b.j.=E..k..57....#.cpadH............jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated imageidc:formatiimage/pngjinstanceIDx,xmp.iid:0d00bdb8-543c-4cb3-b032-0d95db9b1b25oclaim_generatorx6Adobe_Photoshop/25.1.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_info..dnameoAdobe Photoshopgversionf25.1.0.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX Ji.....A0x.$...1:.

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22096), with no line terminators
Category:	dropped
Size (bytes):	22096
Entropy (8bit):	5.1556985111456
Encrypted:	false
SSDEEP:	384:BX0ZDdRzUjTFCa4oj2AlF8RrLPrGH/u2d2Cw25f80m92Nfx0K2Z2F2I02Kft0PEM:KZDdpUjwaPSA4gHMAZesNW4kacLi
MD5:	4EDDEEC95AFDA969B3D1B2FB970C1EB1
SHA1:	DA4C64223B6FF380F03AE2506DF526C22A9103D9
SHA-256:	42E2DD427DD9F9D45367C880C68289114B7DE56373FF8BDC664EA0FA3CE77880
SHA-512:	2D431F9BDB08263AB0BC0A596F13E35A136318DA42190EC08712FB1CF963A82EC56FD04231084C876F57853F5930E25F65B1F9D451BDDF140134C7C05F89A0C4
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var t={228:t=>{var n=Object.prototype.hasOwnProperty,e="~";function r(){}function o(t,n,e){this.fn=t,this.context=n,this.once=e\|\|!1}function i(t,n,r,i,c){if("function"!=typeof r)throw new TypeError("The listener must be a function");var u=new o(r,i\|\|t,c),a=e?e+n:n;return t._events[a]?t._events[a].fn?t._events[a]=[t._events[a],u]:t._events[a].push(u):(t._events[a]=u,t._eventsCount++),t}function c(t,n){0==--t._eventsCount?t._events=new r:delete t._events[n]}function u(){this._events=new r,this._eventsCount=0}Object.create&&(r.prototype=Object.create(null),(new r).__proto__\|\|(e=!1)),u.prototype.eventNames=function(){var t,r,o=[];if(0===this._eventsCount)return o;for(r in t=this._events)n.call(t,r)&&o.push(e?r.slice(1):r);return Object.getOwnPropertySymbols?o.concat(Object.getOwnPropertySymbols(t)):o},u.prototype.listeners=function(t){var n=e?e+t:t,r=this._events[n];if(!r)return[];if(r.fn)return[r.fn];for(var o=0,i=r.length,c=new Array(i);o<i;o++)c[o]=r[o].fn;return c},u

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (582)
Category:	downloaded
Size (bytes):	1567
Entropy (8bit):	5.6217286907645265
Encrypted:	false
SSDEEP:	24:hMiRO9R5hrM+D/oIvPfSJz6pLg5hOSs80rW1qU2ar8G9P4XWwCaBO:NO3rMmziy+C8jqnawG9AXWf
MD5:	725E1B0DC330D6DEE8933B70F2260560
SHA1:	202C212F7DCDA73C0426AD4641BF075EBA78CB0F
SHA-256:	763868DADF5EB3DF30B6F7B321D5A4AFF36A30C47559E2C9D143BC3AFD77D49D
SHA-512:	ECF2324B8CDE16864783B89898CD90370F903DB6043D59F5C767E0609004EB4D84A1B064236D85509C2DEC21E2875E17DFE66F8540D8AFF1BA0B563F9DB4943B
Malicious:	false
Reputation:	low
URL:	https://9488543.fls.doubleclick.net/activityi;dc_pre=COnXz8D3s4cDFaZCHgIdDnoO7w;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=326790021.1721420608;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=0k3db3j&ct=0:1lntxdf&fmt=3"/> Google Code for GL_Mimecast-MainSite_Audience_Sitewide_PageLoad Conversion Page -->.<script type="text/javascript">./* <![CDATA[ /.var google_conversion_id = 729758044;.var google_conversion_label = "oNKJCMuPktYBENzy_NsC";.var google_remarketing_only = false;.var google_allow_ad_personalization_signals = false;./ */.</script>.<script type="text/javascript" src="//www.googleadservices.com/pagead/conversion.js">.</script>.<noscript>.<div style="display:inline;">.<img height="1" width="1" style="border-style:none;" alt="" src="//www.googleadservices.com/pagead/conversion/729758044/?label=oNKJCMuPktYBENzy_NsC&guid=ON&script=0&npa=1"/>.</div>.</noscript><img

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1826)
Category:	dropped
Size (bytes):	230373
Entropy (8bit):	5.527029424158137
Encrypted:	false
SSDEEP:	3072:mMICuKurL5pQlXfpJhX0LZOwSxl9kLEibn8JuoIxxa4BbwJQNeS6U:Hp2L/QlxJ4YwScdk4BbwJQN5V
MD5:	177E97EE3AA9C55B9394B37654CEAA7C
SHA1:	D1736E4677620BC3A27271ED8F045630AABDBB61
SHA-256:	D9EC356308240419B6CB8FB4ED767D86527AFEE40616C6383F699DE2F99AE5D5
SHA-512:	397215946A1B705FD07D7D402B472FBC61A0EC97A6CC9F819E7C691676A09F54052D604A901989A15BDD78ACB2F8F9CFC9D82573EBDB8E9446FAC7CCDDA955FF
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-857000071","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};..var productSettings = {. "AW-857000071":{"preAutoPii":true}.};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7986), with no line terminators
Category:	dropped
Size (bytes):	7986
Entropy (8bit):	4.72878058120256
Encrypted:	false
SSDEEP:	192:3SPqiXbVLxjv+SgTIabSgTId6rwbVExjczSgTI56SgTId6MqMVlxjH2TSgTIwcSx:3fPnm
MD5:	255D94D55A2C45518FD51E8366761ECD
SHA1:	1128485D4B50D5EE41F5205E0986564F706CB21B
SHA-256:	1A094C0894193DDF738DFDB1321100B6A966C5D3C609235B9C4C1BE0E86B92B5
SHA-512:	8A56598ED038846914A6DD6E8C7209BB402DECF3571EFAE9F9D281787A814A41439F89E844919D8D23DD0184DB077216ADF25B1C51D60695E9AF3A5EE0019296
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("6y43deqNFEx9Ff5sXYTjU-SilF4", "QkqhAKtgLtOd0qtyIj9snnm9BcI", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-d553d6bb:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-QkqhAKtgLtOd0qtyIj9snnm9BcI","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8497), with no line terminators
Category:	dropped
Size (bytes):	8497
Entropy (8bit):	4.716380817567596
Encrypted:	false
SSDEEP:	192:3GPqiwbVLxjPWSgTI59SgTId6j/SgTI9jObVExjEcSgTIwCSgTId6+eMVlxjwEST:3o9nG
MD5:	5A450B9731B9922ADF201A802A0440E8
SHA1:	933F73BBC89DC906AECF8F3515F85BA682E34F99
SHA-256:	56C35E647AFA2EFBA29801063576B08654118330B846EA0BF1AF7E15C3268FB3
SHA-512:	B82006BF3C7175F6DCE68981C7954F3D0C004F484EA4F141859DC94C069CD9530A1E2E9058F4CE83DCF48CC2A4624993A666E204A53925E5E0590A98944C523A
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("CBsqh2yXG6dsq7VO9JHTxSmCJPg", "hG-mSoZF8JaZzkhqDmFhA1VVaMQ", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-ed05aa46:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-hG-mSoZF8JaZzkhqDmFhA1VVaMQ","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=COnXz8D3s4cDFaZCHgIdDnoO7w;src=9488543;type=audie0;cat=gl_mi0;ord=2936519596697;npa=0;auiddc=*;u1=undefined;u2=undefined;u3=undefined;ps=1;pcor=2131391307;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe47h0v9190624996z876373427za201zb76373427;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fwww.mimecast.com%2Fcustomers%2Fsupport%2Fcontact-support%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	4.907579519544426
Encrypted:	false
SSDEEP:	24:2dk1WNYkIJKi3BR03BRA0KU7CXhdZUOwvZVxHe53NjiyiswTuRI0WJxUS+76Pv2:c0V9JKKBRQBRAy76TPk+53nGuRI0+GFj
MD5:	A62609651CCC128711341D61FBAB76F6
SHA1:	2D94392C62462E608A30FECB5370BB9B531E0BE7
SHA-256:	897197A91F9FE641F3C30A886E2EB3A0040DC076C7D0A3314F74AFD774ED4B16
SHA-512:	4685C8A8C4FA089740E4A864EA6F56E410143446279422429327015193F1B07BD2108866BFC815B413D5675EE6F378E742BBC8D4B23249C43C0856B07E12ED1A
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/d0b858c3a1444fa29fc6e22f39022a86?v=60b50f99
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #010041;. stroke-width: 0px;. }. </style>. </defs>. <g id="Updated_Icons_Outline_Retention_Management" data-name="Updated_Icons_Outline_Retention Management">. <g>. <g>. <polygon class="cls-1" points="48.97 58.13 33.88 49.06 36.53 44.68 48.97 52.12 61.4 44.68 64.05 49.06 48.97 58.13"/>. <path class="cls-1" d="m65.17,65.47h-32.72v-24.46h32.61v24.46h.1Zm-27.62-5.1h22.42v-14.27h-22.42v14.27Z"/>. </g>. <g>. <path class="cls-1" d="m47.85,83c-5.81,0-11.41-1.63-16.41-4.79-7.03-4.38-11.82-11.31-13.66-19.36-1.83-7.95-.41-16.31,3.97-23.24,3.67-5.71,8.87-10.09,15.19-12.43l1.83,4.79c-5.3,2.04-9.68,5.61-12.74,10.4-3.67,5.81-4.89,12.74-3.36,19.47,1.63,6.73,5.71,12.43,11.52,16.1,12.03,7.64,28.03,3.97,35.67-8.05,3.67-5.81,4.89-12.74,3.36-19.47-1.53-6.73-5.61-12.43-

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (40178)
Category:	dropped
Size (bytes):	40271
Entropy (8bit):	5.263646067369121
Encrypted:	false
SSDEEP:	768:FlNgP+7cZmOdOYLzz6w+XbC8YS8gmgQLIfaLQbQXoC0rKZa0WD5KGWL/DdlFFW7A:PiP+qmOdOun6w+XbC8YS8glQLIfaLQby
MD5:	5EFE108209B67CDEB1A74EC43A924C6B
SHA1:	489FD339461A1EE83B668987501D244E7418ACAA
SHA-256:	C826F748FDD98851E0808B3AE0145F7297A149F281989B60365BE2F219557318
SHA-512:	EE0A395E425AF66631F2608DEFF3A758748E0FA10A45E0282E4FF4C8EA41697DCF4A9151220429550A9F84ED810F95BD5317EFBE4B71B9B7A31DD5A49EAB8DA7
Malicious:	false
Reputation:	low
Preview:	/! For license information please see sharedVendor.48f94c21b16af0164137.js.LICENSE.txt /."use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[470],{8595:(t,e,n)=>{function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}n.d(e,{tv:()=>qe});var o="(prefers-reduced-motion: reduce)",r={CREATED:1,MOUNTED:2,IDLE:3,MOVING:4,SCROLLING:5,DRAGGING:6,DESTROYED:7};function s(t){t.length=0}function u(t,e,n){return Array.prototype.slice.call(t,e,n)}function a(t){return t.bind.apply(t,[null].concat(u(arguments,1)))}var c=setTimeout,l=function(){};function d(t){return requestAnimationFrame(t)}function f(t,e){return typeof e===t}function h(t){return!y(t)&&f("object",t)}var p=Array.isArray,v=a(f,"function"),m=a(f,"string"),g=a(f,"undefined");function y(t){return null===t}function _(t){try{return t instanceof(t.ownerDocument.defaultView\|\|window).HTMLElement}catch(t){retu

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5986
Entropy (8bit):	7.93873507504443
Encrypted:	false
SSDEEP:	96:RV0gSPJtoAfEyi+5wS946JFI7eb7ilA4wjjXo5IurkyDKa+vvGf2PGr9GdXUpv7D:T0gaJtoUEoD46JoePiijjXo55LDKa0Gj
MD5:	985C638DC0CE64E6551B9EBCDB4D7FEE
SHA1:	543E737E35543D5019BADEEA6B8983B65A7D10BC
SHA-256:	AF9611D0927BD6824434B1E2B62A0F1E984D83462AA343DB55B9534396B9B842
SHA-512:	88A5099BB637F9F902B4F89ED986D0F99D1324041359F6759B3C85FF71B6BBE6687263956EEA50E049989023048C75C61EE520CAD5AE29A56E01847A9251D12A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R:W.....pHYs...#...#.x.?v....IDATx..]=p..y..Vb:..\|.....J..p...DB......'.p` ;..H...@ ......E@....U.....e.KtsU...z..ho.?..tO......%bf0....J...N..~\..eY..R...i..N.RE....D..p...'.P)..;.s`>}`f..`7..d~!$r..,..9.O_D...(...h.o.L`.!......4..,m.0.X0.....w..B".i..<..4...].TZk\|.Z@H..8.J.G...EM(\|...B..2'.:B].B..!._\|..f.a@.#..Rg.C..Y..,K(.!.\|.F...C...'.q8.0..A.....G.)+..e..G\|.?(..Ns"S.$..."'2%M..,....C....$..<.P(.....%..`.....G..SC....7T"(.....gB ..)...\|j6.$...0xI.(M.c.....Q..,.#.....Rj/..(I$....U):...$...JQ..!.qD.K.N.(.R;1E.6".. .&.n.c`"x.w...$t.. ?L..6..H.....!...,....Jr?.....X.-i..k.(......8..m0. ....r!T.......!.`..s#.fD V/F...\...I$..t."v....DB A.D.F"!. .".!..H..S....CtN.$..Q....0}...../`..JQ.......y.....~).<..K...(.b..J.L.......z.....F.w...?.{5....s&..}T..A".@......FM........s5......F.......6GB..(..f.(.y. .....y\..-@.......V..p9$o$J5.wy...c..S..`.=\|...P......B.....e......6.YG....o}+..@./..L!..3..x.....vw.S.....(.P..n

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 354, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	24452
Entropy (8bit):	7.978044771934917
Encrypted:	false
SSDEEP:	384:vuEZKhtrmuvHREX1WiqUZMyduWeBnBLWo+YWWVMK+eAl7ngd1qux2hQmkej1I0FP:mEZKhtFvxEdqIMRDBBWoll3A7Jux6BSs
MD5:	CA332883777F3A0E403061A31B48E930
SHA1:	262272E5B4C42348FC436EE74A75E737DCFAE83D
SHA-256:	6AD269FBBFF5488466E440CB38C9513B223D19E99CDAD9DA406B271DD8B4CE4A
SHA-512:	04222739C04A60AED08F376F4E84B3D2FC62DF757CAB3D4AE34A99057271AC47DC0CD79F43A27E18D0CA8C49C1F30FB740E7975520BD77B0B9E427FE25BAE17C
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/servlet/rtaImage?eid=ka0Us0000002yWL&feoid=00N3l00000FQXUa&refid=0EM3l000002SRcr
Preview:	.PNG........IHDR...R...b.....+.......sRGB.........pHYs...t...t..f.x.._)IDATx^...T...w./.K.TPPQPDDQQ..E..4.^.Dc.S.X.`D.X.....@...(V$...........,l........7o.......r...s.....<yr.>.."...oK......@@V.3.8C.P...V..c.=F.u.o....T...(..P......m.........E..!.l..\...(...P....^.x..-.....l.2;.;w>....=..].f.....................o.y......l..G.y..'@[.H.h./........{g."-\..{.w..W......;..{.7.\|s.m.m.!C ....}..W..p...?..._..Pu.=.\|......_.[.!..XE.5!......X..>.l.....9...=.Fs.....r..%C...@bl/E.k......?...}.g.p....r.3.<SWW'......#F.'.\|....;...^.....O...\|v...K..~...s.y.Q).../.\|...R..?....s........B.D....w..._...g.F.7o...W.\|.....?.......8..#..d;........).b.9.~.i.M.<..%...[.x..fj2E -.$..+W.,((.n......=....'D...i.........k.z.)>..?....s..p..[o........\|6r..l:v.a.x.y._....c..b...@..LQ........I..M..d.._.z.!.........r......s...Y...o..o.....`...........oS.{...x...q..EEE.\.......o....!.d.#/....fj2E -.$...P....O<q..G...P.p..g.}........0..T>....Cuu5K.{..}{...

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://app.pendo.io/data/guide.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1721420554473&v=2.239.0_prod
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.634869050005584
Encrypted:	false
SSDEEP:	24576:9iyzf8+HvF9dg5JSAyErJoyxd+6ShFbwMz+MYCcfZjA:9iyzfXd45JSBYd+6KXz+RCw9A
MD5:	88A8E8BC06BB3F7C99E2A5D0E2C54ACE
SHA1:	6E715F16BCEDBD81334872821F75EE2E24A247E8
SHA-256:	98FFE119B5CAA956E2DB636376418780EAEEB69FBF19EC9C11168DDB0997D286
SHA-512:	DD56E68711BAE20B6173CA12FEAB815E94C124C8CADBE60FC60259D13FF1C6A89697C5272A6A9EE7EF2C287E312B6E726FA88024C2754D0A7670F578924F9D76
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/75013efacc6a4fe5b9de645b642dfa78?v=0e57c20b:2f7c35be5c86b3:0
Preview:	....ftypmp42....mp42mp41..6,moov...lmvhd.........._...s.................................................@.................................!.trak...\tkhd..................k.................................................@........8.....$edts....elst..........k...........!@mdia... mdhd..........u0..#........@hdlr........vide.............Mainconcept Video Media Handler.. .minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ...... estbl....stsd............avc1...........................8.H...H.........AVC Coding............................,avcC.d.....'d..VP....f. @...(.<.........stts...........W.......(stsc.......................<...........pstsz...........W..L....,...>...............M...j...?.......,...........!...........Z..........$......."....Y..*....;..5_......6.......2.......N.......:....u..6d..............<.......3...............;....K..3X......2.......2........t......=&...O..3....}.......... ............}..!....

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5986
Entropy (8bit):	7.93873507504443
Encrypted:	false
SSDEEP:	96:RV0gSPJtoAfEyi+5wS946JFI7eb7ilA4wjjXo5IurkyDKa+vvGf2PGr9GdXUpv7D:T0gaJtoUEoD46JoePiijjXo55LDKa0Gj
MD5:	985C638DC0CE64E6551B9EBCDB4D7FEE
SHA1:	543E737E35543D5019BADEEA6B8983B65A7D10BC
SHA-256:	AF9611D0927BD6824434B1E2B62A0F1E984D83462AA343DB55B9534396B9B842
SHA-512:	88A5099BB637F9F902B4F89ED986D0F99D1324041359F6759B3C85FF71B6BBE6687263956EEA50E049989023048C75C61EE520CAD5AE29A56E01847A9251D12A
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/cfbe227215634da29c9efe4570f8f9a1?v=75a0021e&t=w1920hq
Preview:	.PNG........IHDR.............R:W.....pHYs...#...#.x.?v....IDATx..]=p..y..Vb:..\|.....J..p...DB......'.p` ;..H...@ ......E@....U.....e.KtsU...z..ho.?..tO......%bf0....J...N..~\..eY..R...i..N.RE....D..p...'.P)..;.s`>}`f..`7..d~!$r..,..9.O_D...(...h.o.L`.!......4..,m.0.X0.....w..B".i..<..4...].TZk\|.Z@H..8.J.G...EM(\|...B..2'.:B].B..!._\|..f.a@.#..Rg.C..Y..,K(.!.\|.F...C...'.q8.0..A.....G.)+..e..G\|.?(..Ns"S.$..."'2%M..,....C....$..<.P(.....%..`.....G..SC....7T"(.....gB ..)...\|j6.$...0xI.(M.c.....Q..,.#.....Rj/..(I$....U):...$...JQ..!.qD.K.N.(.R;1E.6".. .&.n.c`"x.w...$t.. ?L..6..H.....!...,....Jr?.....X.-i..k.(......8..m0. ....r!T.......!.`..s#.fD V/F...\...I$..t."v....DB A.D.F"!. .".!..H..S....CtN.$..Q....0}...../`..JQ.......y.....~).<..K...(.b..J.L.......z.....F.w...?.{5....s&..}T..A".@......FM........s5......F.......6GB..(..f.(.y. .....y\..-@.......V..p9$o$J5.wy...c..S..`.=\|...P......B.....e......6.YG....o}+..@./..L!..3..x.....vw.S.....(.P..n

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12263
Entropy (8bit):	4.188468496963155
Encrypted:	false
SSDEEP:	192:AJ4U45WFYWxwu/wRRdmfsZeQ0glAc2hqIa2GfE2AcXQ32N1v2RdIOSd3nR+0ItxR:F5WBmu/wtxZeQRlqhqIa2eE2zK2iR+1s
MD5:	995954DE866C31290D4F005A62C766DB
SHA1:	9ADED847E2CE68B30D2BF653AFCEF7C610DE5E7A
SHA-256:	027AD7395E3E4E247C016973AEC3C8B6A8DF4646CD7B6B7862FD6AD22A0105F4
SHA-512:	63D431C03A2D76DA40C257DAD74268FB8CA3F1635C78B2B618AA711C60EB7D458B3649E4A094FEEB0B37A29E3267961D893DF11FD64997A3B8D159BA6E0C8BFC
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/9bd89e511d2b44ccaeb12199e8897000?v=411770ce&t=w1920hq
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. fill-rule: evenodd;. stroke-width: 0px;. }. </style>. </defs>. <g id="_0" data-name=" 0">. <g id="_42253856" data-name=" 42253856">. <path class="cls-1" d="M242.9,46.68c-.65-1.09-1.84-1.17-2.32-1.19h-74.8c-2.12,0-3.83.65-5.09,1.92-.91.91-1.53,2.1-1.86,3.53,0,.03-.09.33-.73.33h-14.78c-.64,0-.73-.3-.73-.33-.32-1.43-.95-2.62-1.86-3.53-1.27-1.28-2.98-1.92-5.09-1.92H60.81c-.48.02-1.67.1-2.32,1.19-.31.53-.54,1.42.13,2.67,0,.01,1.37,2.29,1.37,2.29.56.92,1.2,1.26,2.54,1.35.02,0,.64.07,1.08.83l1.4,2.47c.29.57.99,1.89,3.35,2.21.04,0,.73.08,1.11.81,0,0,1.72,3.05,1.72,3.05.5.98,1.2,1.34,2.48,1.74,0,0,31.28,9.24,31.28,9.24,1.06.32,1.5,1.52,1.5,1.52.75,1.94,1.72,3.54,6.6,5.02,0,0,25.59,7.03,25.59,7.03.31.1,3.24,1,5.45-1.14,0,0,5.99-5.75,6-5.76,0,0,.25-.26.59-.26h0c.34,0,.59.25.59

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	554615
Entropy (8bit):	5.415518569657629
Encrypted:	false
SSDEEP:	12288:qc0xlugsQN2rsQV0nLZv0eAa93zxQJ8oyktl8bld1jkZAVMMtTROip5UB/HHDpTf:EN2rsQV0nLHj9l5UB/HHDp/Cru
MD5:	933EC95714C587A3CA3CC4B5A1EE3089
SHA1:	304602E89540F1E1E64B6E5D0DDA6F6BF9F562E6
SHA-256:	771701649CF472EA141EA9429571274128E3D192E6FDC22DA6811F55E436681E
SHA-512:	A9B7BDCE32918EF6CC56CD364333448BEE71A5AC9CE71333BBEEB9B4AF072B5099EFC63C1876C4D8A0AFDDEB047571F09439B9D47F9A316636AD2D7FFA8566CF
Malicious:	false
Reputation:	low
Preview:	{"actions":[{"state":"SUCCESS","returnValue":{"componentDef":{"descriptor":"layout://siteforce-generatedpage-73baec4e-1ebd-4970-b69d-f23d7befed73.c749"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"f4466bda-936e-4ad2-837f-3d4967eb4bfc","themeLayoutType":"customTemplate","params":{"viewid":"73baec4e-1ebd-4970-b69d-f23d7befed73","view_uddid":"","entity_name":"","audience_name":"","urlName":"","picasso_id":"","routeId":"","recordId":""},"includeLayout":true}},"version":"61.0"},"error":[],"components":[{"componentDef":{"descriptor":"layout://siteforce-generatedpage-73baec4e-1ebd-4970-b69d-f23d7befed73.c749"},"original":"markup://siteforce:pageLoader","creationPath":"/[0]","attributes":{"values":{"pageLoadType":"STANDARD_PAGE_CONTENT","viewId":"f4466bda-936e-4ad2-837f-3d4967eb4bfc","themeLayoutType":"customTemplate","params":{"viewid":"73baec4e-1ebd-4970-b69d-f23d7befed73","view_uddid":"","entity_

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb250YWluZXIiPjxkaXYgY2xhc3M9Im90LXNkay1yb3ciPjxkaXYgaWQ9Im9uZXRydXN0LWdyb3VwLWNvbnRhaW5lciIgY2xhc3M9Im90LXNkay1laWdodCBvdC1zZGstY29sdW1ucyI+PGRpdiBjbGFzcz0iYmFubmVyX2xvZ28iPjwvZGl2PjxkaXYgaWQ9Im9uZXRydXN0LXBvbGljeSI+PGgyIGlkPSJvbmV0cnVzdC1wb2xpY3ktdGl0bGUiPlRpdGxlPC9oMj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHRpb248L3A+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBpZD0ib25ldHJ1c3QtYnV0dG9uLWdyb3VwLXBhcmVudCIgY2xhc3M9Im90LXNkay10aHJlZSBvdC1zZGstY29sdW1ucyI+PGRpdiBpZD0ib25ldHJ1c3QtYnV0dG9uLWdyb3VwIj48YnV0dG

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6105), with no line terminators
Category:	downloaded
Size (bytes):	6105
Entropy (8bit):	5.238378421291859
Encrypted:	false
SSDEEP:	96:+EZXcOEW5zT8xq8dJbmgMHByoFvvkU/zOv3qBQvSboMt+ssGV0aOGstBvp:kW5z/cmJBy4zOv3qSKBL2aO/
MD5:	D74CC4825C8E333B2116DA3FCC649DB1
SHA1:	B48D09A14C1CD6333F1D2D811675B771F2A38A00
SHA-256:	4A007AF67F716C30C8848AB0AD0BFAAB8A5FCF3E36DEDF918B59C9429D522440
SHA-512:	FBAD39A642A7AF5167B8F1AB37510B83817CD90E19C3286CA6B76A1CC8C383E45216C1C8F8A03A10916C21960FF625F67A059017ABD5834F17B2BC9E41CCB4C8
Malicious:	false
Reputation:	low
URL:	https://scout-cdn.salesloft.com/sl.js
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var o=n[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var n={};e.m=t,e.c=n,e.i=function(t){return t},e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=5)}([function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var i={get:function(t){for(var e=t+"=",n=decodeURIComponent(document.cookie),i=n.split(";"),o=0;o<i.length;o++){var u=i[o].trim();if(0==u.indexOf(e))return u.substring(e.length,u.length)}return null},set:function(t,e,n){var i=new Date;i.setTime(i.getTime()+24n60601e3);var o="expires="+i.toUTCString();document.cookie=t+"="+e+";"+o+";path=/"}};e.default=i},function(t,e,n){"use strict";function i(t,e){var n=new XMLHttpRequest;n.on

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5543
Entropy (8bit):	7.941725705331511
Encrypted:	false
SSDEEP:	96:jy74SgQPpSuVNHVXxPZhZmXStsJBtb2zrbZAZquwz0hDnjGyChP:jyy2fXxPDZmXt2zrbZ6qTWnq7hP
MD5:	AB47CD17F75409AA2A02E0C307CDBC6B
SHA1:	F1C23723DD18A6F73AAFBD99E85476BAA73FA72C
SHA-256:	7ED1D49FE4945E4F5C4ECEACB3AB5AF5BBBC1D507DB06766E93AD1077BF6249C
SHA-512:	99B0BF6BCD50B2C3FD7CE811ACAB60BAF6886713305F5F5B65E61F21B85717717184BBB187D50933E500621A04C08EE3B6DB2823878F007BAD807AF640483E18
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/a9f12990a7a64a1f9628ab3ca508a6fa?v=49d01bf6&t=w1920hq
Preview:	.PNG........IHDR.............R:W.....pHYs...#...#.x.?v...YIDATx..=p\I..U...$o3....l.$.%B..D.....6`#..G..J.x......$.m..Ul.r.g.}.\W......f<...}..=....T.w5.h..}>...J.......B..1C..`.?m6\|.X)U..h.G.N.(.H.R.\|.~...).......[D...Q$.1.V....TB.eb-..<.Z..fB8"...1.&...KS7L...\.gVT.......5.X...f....D...g.."....UJ...$'(\|..o1".....A]..z...c..f.`B....R..C..h..c`i.....k.f......t......}$$Na.J.....1....:i...NJ.S."..tNU.....1...X..J.S.".....R.@k..^v..S.<.}.z.....:_S.`.y..z!.".P)uc.9..^..L.....w..>Q.a-"c.S....2RJ.q.~`)".>.Qq.J.D$.'k..Ub..g#"..^J.N.TJ.G.2xk..}.y.Z.......].h&.k....1.V..{GVDrpX&VH8.%.&,..9..,.M8..[.D...P6'.B4.(...L ...E.\..).X#..#..V..4!..za..\Q9..]D" ....m.-.^E$..r.Ro"................U..9....a_Y;....Tb.B0@rO.h.....!.9...,..y.....9..%........suq.y...0..:>..".........O.y6...J...........?........{........?....hD....h.{.z.JR.Y....W.`..................w.......Y..gHw.g..g..r}.......:%... ".ig.....`.;.mg..+..DB..8..q...kibR[....l.\|O=..A.Y...{.*...]..T

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28437), with CRLF line terminators
Category:	downloaded
Size (bytes):	143843
Entropy (8bit):	6.006576575650856
Encrypted:	false
SSDEEP:	3072:oAND8HqPDEKJ84xnDouJMinC0KHjLjlTKQjo6pHZOHgktwHlTEybT4N:TEK5xnDou6injKDL3jjpHZhktSTXQN
MD5:	3A58E114ACD94629B0FF70C349926442
SHA1:	CEC8C651DC5DFF2652DC254E62D16AB65DAF039D
SHA-256:	C6CAD9FCD5784E19BE54689ABFC2427B2988FE50EB2623F4B3AE5B9F3405B423
SHA-512:	FE92DEC5F98CBEA52C85CD5B957E5FEFB1E6DA1CDE050663220BCC5074721C906A7942C51E7B9332ECC66BDAC97E099A22F338FD3777D8B1B3156C246FA74E06
Malicious:	false
Reputation:	low
URL:	https://community.mimecast.com/s/sfsites/runtimedownload/fonts.css?lastMod=1688233401000&brandSet=774c7290-70ad-435a-896e-5352360ebe8b
Preview:	@font-face {.. font-family:'Open Sans';.. font-style:normal;.. font-weight:700;.. src: local('OpenSans-Bold'), url(data:application/x-font-woff;base64,d09GRgABAAAAAFMYABIAAAAAjugAAQABAAAAAAAAAAAAAAAAAAAAAAAAAABHREVGAAABlAAAABYAAAAWABAA1kdQT1MAAAGsAAAADAAAAAwAFQAKR1NVQgAAAbgAAAAMAAAADAAVAApPUy8yAAABxAAAAGAAAABgonWhGGNtYXAAAAIkAAAAkAAAALyNxJDjY3Z0IAAAArQAAABdAAAAqhMtGpRmcGdtAAADFAAABKgAAAfgu3OkdWdhc3AAAAe8AAAADAAAAAwACAAbZ2x5ZgAAB8gAADgQAABW0jDrdFxoZWFkAAA/2AAAADYAAAA2/P/KsmhoZWEAAEAQAAAAHwAAACQOKQeBaG10eAAAQDAAAAH8AAADUL2pTAtrZXJuAABCLAAAChIAAB6Qo+uk42xvY2EAAExAAAABrgAAAa4ueRcKbWF4cAAATfAAAAAgAAAAIAJhAh9uYW1lAABOEAAAAqIAAAYGMvCgJXBvc3QAAFC0AAABdwAAAfdUzL6gcHJlcAAAUiwAAADrAAAA+MgJ/GsAAQAAAAwAAAAAAAAAAgABAAAA1QABAAAAAQAAAAoACgAKAAAAAQAAAAoACgAKAAAAAwUPArwABQAIBZoFMwAAAR8FmgUzAAAD0QBmAfwIAgILCAYDBQQCAgTgAALvQAAgWwAAACgAAAAAMUFTQwAgACD//QYf/hQAhAiNAlggAAGfAAAAAAReBbYAAAAgAAN4AWNgYGBkYAZiBgYeBhaGDUBag0EByOJg8GDwZKhjOM1wnuE/oyFjMNMxpltMdxREFKQU5BSUFKwUXBRKFNb8/w/UoQBU6cWwgOEMwwWgyiCoSmEFC

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	242308
Entropy (8bit):	5.541181616361663
Encrypted:	false
SSDEEP:	3072:7VICuKurL5pQlXfpJzX0LrOwSxl9kLEiLn8JuoIxxa4BbwJQNeK6U:Rp2L/QlxJySwSYdk4BbwJQNlV
MD5:	92CF50F526EA95B2D54102AB7A82873D
SHA1:	D83C0A17900058079C3124F59887261378A8067C
SHA-256:	00D0BD3AD25C04F2E9F7B73724746B0EBE5820065D75444EB7D2CFABC404A241
SHA-512:	719392D09F9C4C0A51BF37ED6EA56027249FB6127E5E8C0256E3BDE425273EBF78F66D6FE4C4D26A2EC3A9F5821361996863507AD04A1D18C1C9CF1E77A47050
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-11113837502&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":2,"vtp_instanceDestinationId":"AW-11113837502","tag_id":8},{"function":"__ccd_pre_auto_pii","priority":1,"vtp_instanceDestinationId":"AW-11113837502","tag_id":7},{"function":"__rep","vtp_containerId":"AW-11113837502","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_ads_last","priority":0,"vtp_instanceDestinationId":"AW-11113837502","tag_id":6}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	460324
Entropy (8bit):	5.359560445520623
Encrypted:	false
SSDEEP:	6144:Uab9rWTxFBzE7qfzU21A986ysLMNDqus8mdRzAe+i9t9CCgs:UiwTxFBzE7qfTA78mmKB/
MD5:	2E56B303A79FC9FAE9FEECC549AE4221
SHA1:	B16B17616C34619512D2D677ADE88D1D8BCC8C2F
SHA-256:	DC750F921CF29A7897435F868856C4C63E22F7FD66AC456A72CED5F6ECA584E7
SHA-512:	E6CFD31F5BF5876517A445A18A1D4C07D431D07F9903205934FF2C23AB8E1F69E714DBCFE7872F5DC08BDFE7DB6111B4C26151A54E7BE09ACA77A97DF2AF5094
Malicious:	false
Reputation:	low
Preview:	/** . * onetrust-banner-sdk. * v202405.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4861), with no line terminators
Category:	dropped
Size (bytes):	4862
Entropy (8bit):	4.893806239001046
Encrypted:	false
SSDEEP:	96:3NZxm9r8ORFQ5IM7MQ5vg1VtDK9lzHOSix507Fli8BUbZ22o:3rxm9rZaWM7JS1Vt29laf3qlQ922o
MD5:	80EDF9CD99FDB7178493BEE1FA666B36
SHA1:	54ABE77B13CBE6E1B5F2111894E30B8445987072
SHA-256:	A82C54AF99B3BA94F8876D4146E2E9841D949565ADEBCCBF674684977CFA056F
SHA-512:	90C9679616954515EC7B3B6416C1B5A41A2B79B527625A1EA6EEE6232FE4FB8DB53891A64B516196905075F78BD4B1608548C3AE98E2AA5FCA8506FD077BE2D8
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("yyTjAbf0U6P4FyCht9PDC37PECc@sn9p0ljv8dushqgktXFohVVCLNU", "wNNiK8f0SEITG_a7n9-tBCaxh-s", {"props":{"id":"pendo-g-wNNiK8f0SEITG_a7n9-tBCaxh-s","data-layout":"IntegrationModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-eb261316::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-eb261316::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	dropped
Size (bytes):	627805
Entropy (8bit):	5.463417363802722
Encrypted:	false
SSDEEP:	12288:J9Sou8nDdmp5esAvoiIhlN1bld1jkZAGpAGYwdYJJOGmOiB0oe8:jznDdWRlN+AGYwdYJJOGQ
MD5:	8E3CAEFE8F16F133E9D1F7A38C1DE48E
SHA1:	7BF4D409923400305EF4836B7A6D164C888CF5F3
SHA-256:	CC646405DEED66DCF7932170EF8AA8CC7981780722C55835EE4F91FDD626DD1F
SHA-512:	4F785DBBBC773A4CC8C9F152C89D8DAF16A7C4C1EA15DB87BF636910106B179D4E13CED7D897B4E63BFCDBDEC9270B23E359B6565E26CDC74C333416F9706735
Malicious:	false
Reputation:	low
Preview:	window.Aura \|\| (window.Aura = {});.window.Aura.bootstrap \|\| (window.Aura.bootstrap = {});.window.Aura.appBootstrap = {"data":{"app":{"componentDef":{"descriptor":"markup://siteforce:communityApp"},"creationPath":"/[0]","attributes":{"values":{"schema":"Published","authenticated":false,"ac":"","formFactor":"LARGE","brandingSetId":"774c7290-70ad-435a-896e-5352360ebe8b","uds":false,"language":"en_US","viewType":"Published","pageId":"e34eeddd-05a4-4255-b40f-64fcb4a6703f","themeLayoutType":"customTemplate","priv_themeLayoutReady":true,"isHybrid":false,"includeInstrumentation":true,"publishedChangelistNum":749}}},"components":[{"componentDef":{"descriptor":"markup://siteforce:baseApp"},"creationPath":"/[0]/$","model":{"appConfigData":{"allLanguages":[],"isHybridApp":false,"activeLanguage":"en_US","cmsSettings":{"isEnabled":"true","isPersonalizationEnabled":"true"},"cmsConnections":[]},"googleAnalyticsAnonymizeIpEnabled":true,"googleAnalyticsCustomDimensions":{},"googleAnalyticsDeveloperID"

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8575), with no line terminators
Category:	downloaded
Size (bytes):	8575
Entropy (8bit):	4.7268204848216335
Encrypted:	false
SSDEEP:	192:33FPqiZbVLxjzwSgTIabSgTId6XrbVExjWvSgTIwISgTId6m8SgTI9mwMVlxj3dr:3iknD
MD5:	3EFF36AE531C66A565D37DF3FD0146D3
SHA1:	ABB0F91E26393CCE0C756082CA434310E9B2D5AE
SHA-256:	4277321CB06067CAB91EFC1FEF91B15CE91D79FC37DDB6933BA7849085C4806E
SHA-512:	3AB88A990E65DF8B4DC86581366F5BC8448E2B7F0B1E242EF3171A18430BBAEFD80FD384054C2623AB67FFC7EEF535899A10FA6CCFD2DF2280A5D5612782132F
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/7lo-wMtsik3XgBq3SnM4gDiphK0/O7fo65xagzGRHr0FmErK1rvPY64/q7D5HiY5PM4MdWCCykNDEOmy1a4.dom.jsonp?sha256=QncyHLBgZ8q5Hvwf75GxXOkdefw33baTO6eEkIXEgG4
Preview:	pendo.receiveDomStructureJson("7lo-wMtsik3XgBq3SnM4gDiphK0", "O7fo65xagzGRHr0FmErK1rvPY64", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-fb0429ba:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-O7fo65xagzGRHr0FmErK1rvPY64","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	4.977295932644795
Encrypted:	false
SSDEEP:	24:2dk1WNxIJKk0Tfyqu+fab/jbyaCXXrwYquhpbhgDDdAmq5k:c0DJKkyfju2aXulwYquhpbhWRAmWk
MD5:	C54B78CB4748205DA0A5517362A3B8EC
SHA1:	FBE70B4CE0C46A1486B7942A47E62D918DACCC1E
SHA-256:	7244B42C1D95614E6E69A590AF36308FBD0F9EECD1FFC569057FD707A9C5F348
SHA-512:	B65464FE53C5BC631A2602F18E9AAB1F34B9D7614DA828EEAE45B68BE7C6D7E9F2C52FD716AEC227E8D077D98CF3A6A31C2BFCC6592B7AF97A013771EBEADD0A
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/946d853722194c86bdae8da05e63158a?v=dda04a96
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g id="_2020_Icon_CXI" data-name="2020_Icon_CXI">. <g>. <path class="cls-1" d="m72.68,69.99v2.95h-11.34c-1.22-4.21-5.11-7.29-9.7-7.29s-8.48,3.08-9.7,7.29h-11.34v-2.95h-5.63v10.83h5.63v-2.26h11.34c1.22,4.21,5.11,7.29,9.7,7.29s8.48-3.08,9.7-7.29h11.34v2.26h5.63v-10.83h-5.63Zm-16.56,5.76c0,1.06-.38,2.04-1,2.81-.82,1.01-2.07,1.67-3.48,1.67s-2.66-.65-3.48-1.67c-.62-.78-1-1.76-1-2.81s.38-2.04,1-2.81c.82-1.01,2.07-1.67,3.48-1.67s2.66.65,3.48,1.67c.62.78,1,1.76,1,2.81Z"/>. <path class="cls-1" d="m49.38,61.29h5.68l10.61-9.35h11.59V14.15H24.98v39.6h24.4v7.54Zm-18.78-13.16v-28.35h41.03v26.53h-8.09l-8.54,7.52v-5.69h-24.4Z"/>. <path class="cls-1" d="m51.9,24.83c-3.16,0-5.73,2.56-5.73,5.73,0,2.27,1.32,4.22,3.23,5.15v7.16h5v-7.16c1.91-.

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	200914
Entropy (8bit):	5.193196659430929
Encrypted:	false
SSDEEP:	1536:gnFF+CvrpB/xBjnbrdEfJiiFPUDknkXknk/knkABgM2fcvwuSlYR26efc57B:OFACjzlLknkXknk/knkNfYI66Q7B
MD5:	0E3738DCE9B18269C4B8AF27CE6CD8BF
SHA1:	FCF3BCF3BEADC69368F95F29339B840A74D4EE56
SHA-256:	90972CB4BA2AFB32701B9809C3E0962572B6F46EC0833EA1868FE20D99EAB400
SHA-512:	B786B3FFD92DA1E488C44A962373D6E4D94756D7E5DD8980A94CEDD7B534E12F6B3C9B5BADE9E3E11FCDE18AA4A1E2CDB50BDD38CE617B8C951ACD3A6E8DB3DB
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/018fac0d-762b-7e6f-a747-f58a088acc36/en.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7791), with no line terminators
Category:	downloaded
Size (bytes):	7791
Entropy (8bit):	4.740831449725961
Encrypted:	false
SSDEEP:	192:3bsPqiWMOnxjsSXAKLXAt6E2HOnxjmhJXApb/XAt6LUCfOnxjZS1XAgaXAt6wEs8:3s8n9
MD5:	9FD26042A4F3720A30F3F2ED60A50208
SHA1:	FA432C356F04E720B65DFFE34BDF49DC92F794B0
SHA-256:	62D936C2CB4E04CCD14F393B3C46C66FF5294CD720BF57EF0156D20C6A3094BE
SHA-512:	8EF3AC9F3D7263A9D19C675AAFFFD51E81E8C35A71984C80AC28C0A0B41B2AC043C8368BD01B29C16C83455443C835B9E98EA30862DFEA1B230DACE6392ECAE6
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/OPkqLMy3FaepdWPrxPXCcdkM8YA/Ve3VGdrYmPoczlsK6_2oaiVSO0c/-kMsNW8E5yC2Xf_jS99J3JL3lLA.dom.jsonp?sha256=Ytk2wstOBMzRTzk7PEbGb_UpTNcgv1fvAVbSDGowlL4
Preview:	pendo.receiveDomStructureJson("OPkqLMy3FaepdWPrxPXCcdkM8YA", "Ve3VGdrYmPoczlsK6_2oaiVSO0c", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-7099f668:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-Ve3VGdrYmPoczlsK6_2oaiVSO0c","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7791), with no line terminators
Category:	dropped
Size (bytes):	7791
Entropy (8bit):	4.740831449725961
Encrypted:	false
SSDEEP:	192:3bsPqiWMOnxjsSXAKLXAt6E2HOnxjmhJXApb/XAt6LUCfOnxjZS1XAgaXAt6wEs8:3s8n9
MD5:	9FD26042A4F3720A30F3F2ED60A50208
SHA1:	FA432C356F04E720B65DFFE34BDF49DC92F794B0
SHA-256:	62D936C2CB4E04CCD14F393B3C46C66FF5294CD720BF57EF0156D20C6A3094BE
SHA-512:	8EF3AC9F3D7263A9D19C675AAFFFD51E81E8C35A71984C80AC28C0A0B41B2AC043C8368BD01B29C16C83455443C835B9E98EA30862DFEA1B230DACE6392ECAE6
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("OPkqLMy3FaepdWPrxPXCcdkM8YA", "Ve3VGdrYmPoczlsK6_2oaiVSO0c", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-7099f668:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-Ve3VGdrYmPoczlsK6_2oaiVSO0c","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550), with no line terminators
Category:	downloaded
Size (bytes):	550
Entropy (8bit):	5.1593080604958494
Encrypted:	false
SSDEEP:	12:+dThTB6RFsyKLWRF5Ee6YFOf1KZgFOJa4gj+4OCJ4Mz1KVS+s/tB:iThTBOkiRFsYA14w+4ON1St
MD5:	39FE049DE5A5C8058A2A085711AD81E1
SHA1:	2ED7B1DEDE6D9BC575785E19CE6FFCCB2529B943
SHA-256:	7D7A0668DD7CF951F67F2A40D5CB5381DF908ADA68DEFA5BB3CB165EDD791C8F
SHA-512:	90D414309BDBCC2B2ACC7A1FA957F7048F6546B3977D44100472679E04D0CD826B032343E3FD5CDF0E0062A7D1AE7B604C625DDC8BB2FC0B635B60587927B6F4
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/shared.d65d42466ad2647993ec.js
Preview:	"use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[712],{9917:(e,a,r)=>{r.d(a,{Z:()=>t});const t=new class{pushEvent(e){const a=e;a.eventLabel=this.replaceEventLabelParameters(a.eventLabel),window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push(a)}replaceEventLabelParameters(e){return e.replace(/{currentPageUrl}/g,document.URL).replace(/{referralPath}/g,document.referrer\|\|"Not Available")}pushEventGA4(e){window.dataLayer=window.dataLayer\|\|[],window.dataLayer.push(e)}}},1385:(e,a,r)=>{r(9917)}},e=>{e(e.s=1385)}]);

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9993), with no line terminators
Category:	downloaded
Size (bytes):	9994
Entropy (8bit):	4.88052724795239
Encrypted:	false
SSDEEP:	192:3X1GmkrAMqaWM7JS1Ct29lafwWHQVTK7kpzdLq+1pLrlVXLpVEGhhGdEsMLXxFjl:3X1Ds7WQ2kKjp8oD
MD5:	CE57F775E9B8B93C0B7ACF14CE55E4DA
SHA1:	2EECA68A929A65E6C23B4306579232F070F83A0B
SHA-256:	7EDB256461CD2277C3DAC240A59820133B69D74E0176FDEFAEA63AEEA065612A
SHA-512:	250E5BB4F87C8451FF1EEE44EE3E82A8301D977B715E4F5FD4D561854D861677CE7476B1CC86F97E295E079504817001A8A22EE0AB772222D89AA670A6DB7EFA
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/15p-yJX8ecYNaarLsYBwSeHKaRE/CHS-ojsxsX_MnoPhtRe0TKQLBvQ/LuymipKaZebCO0MGV5Iy8HD4Ogs.dom.jsonp?sha256=ftslZGHNInfD2sJApZggEztp104Bdv3vrqY67qBlYSo
Preview:	pendo.receiveDomStructureJson("15p-yJX8ecYNaarLsYBwSeHKaRE", "CHS-ojsxsX_MnoPhtRe0TKQLBvQ", {"props":{"id":"pendo-g-CHS-ojsxsX_MnoPhtRe0TKQLBvQ","data-layout":"GuideListModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-10089919::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-10089919::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-b04f9b94:hover","styles":{"co

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 209 x 209, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3471
Entropy (8bit):	7.815274748339315
Encrypted:	false
SSDEEP:	96:HSbvgyROVeJnW7fOzH1Nfp/a7bzkqQrmNNgP:HScCnW72fta7bg7mEP
MD5:	9DA532E701D8563E517FD0D059608BCC
SHA1:	8025CF2E1C767F7F658AAAA568EC14EF7F05FDBF
SHA-256:	4BB1BCC2288EB53FA7CD7118655023DEB8F96F891CFFEAF993EA0EFED0F81273
SHA-512:	B5D872097A88D02068239C492AE1D9F70AC5869875FA8B2441246A4BAE655A317DD0D0A8FB6FFDAF0031EF28F8F76B43B5F267D043D00FA08C83DC532BDF3E82
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R:W.....pHYs................AIDATx..=lV...?..rT.)C.U26.#.`#. U.8. C.....Y..2!5m:d(,0./D.J..R#...\....2..........__.1~_..<..{......~.}..y>.s.3..CG.2.pej......... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#....".0.... ".#..'...<.\|6...7~...W...........{..{.1...d..e.......y6\|...'1=.....%[.s.Q................6..K-N..-.....e..% ........y(.....F. ...}.l6:~..._..)oz..'....Z^/...P.<b............4.......:...M].?.h...x.:z8.u.R+..GI............Y..+=\|.B..J.OD2B..>.oy.'.....O..OY..<.....=".2...dLU.&..<......T+:.F.Ogc.T.C(....J.".M@B.<\|[I^D2.=..u.W....y..'z...T.....:.&i....ok7@.[......\|100.?.....D.".!.iy.k.~.D......F..s!.@..V...s.-..^.U..4..+..../.b.....z5..ThHND..C...'.[.j.i...E....-.\|..-..5G....{.=..^[6c.+q?ws.[...$.....g.x..UV.."d......k.V.[a\H..2.2..P..3h..h.]t.D..9...iM.!....S3f..)2X~...H.>:(..o..e..F.Ogm ..H.....{....#...`....wP..o..q..&.2..._..5....T..

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	4.907579519544426
Encrypted:	false
SSDEEP:	24:2dk1WNYkIJKi3BR03BRA0KU7CXhdZUOwvZVxHe53NjiyiswTuRI0WJxUS+76Pv2:c0V9JKKBRQBRAy76TPk+53nGuRI0+GFj
MD5:	A62609651CCC128711341D61FBAB76F6
SHA1:	2D94392C62462E608A30FECB5370BB9B531E0BE7
SHA-256:	897197A91F9FE641F3C30A886E2EB3A0040DC076C7D0A3314F74AFD774ED4B16
SHA-512:	4685C8A8C4FA089740E4A864EA6F56E410143446279422429327015193F1B07BD2108866BFC815B413D5675EE6F378E742BBC8D4B23249C43C0856B07E12ED1A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #010041;. stroke-width: 0px;. }. </style>. </defs>. <g id="Updated_Icons_Outline_Retention_Management" data-name="Updated_Icons_Outline_Retention Management">. <g>. <g>. <polygon class="cls-1" points="48.97 58.13 33.88 49.06 36.53 44.68 48.97 52.12 61.4 44.68 64.05 49.06 48.97 58.13"/>. <path class="cls-1" d="m65.17,65.47h-32.72v-24.46h32.61v24.46h.1Zm-27.62-5.1h22.42v-14.27h-22.42v14.27Z"/>. </g>. <g>. <path class="cls-1" d="m47.85,83c-5.81,0-11.41-1.63-16.41-4.79-7.03-4.38-11.82-11.31-13.66-19.36-1.83-7.95-.41-16.31,3.97-23.24,3.67-5.71,8.87-10.09,15.19-12.43l1.83,4.79c-5.3,2.04-9.68,5.61-12.74,10.4-3.67,5.81-4.89,12.74-3.36,19.47,1.63,6.73,5.71,12.43,11.52,16.1,12.03,7.64,28.03,3.97,35.67-8.05,3.67-5.81,4.89-12.74,3.36-19.47-1.53-6.73-5.61-12.43-

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.07391321234758
Encrypted:	false
SSDEEP:	3:YQZPNVUxXLWFOKaY:YQx+bOT
MD5:	8C11E15DB0F3E1EA036EDBA78ABF1151
SHA1:	72F74F85AA08C65E9927B8D53916A7C45A102D44
SHA-256:	AA011ED383CB780028A85CAAA0DDA67DCE19B0F4BC596F4F708D1857015C1362
SHA-512:	985C2D0148E254CA3386C955DB8F18C02639F156D0FF565BADA0CF91E52A691C504FAEA3A109F9D7CDB4A9C1F6CF48B343EEEEC5803941AE56599411388E4B9A
Malicious:	false
Reputation:	low
URL:	https://scout.salesloft.com/r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDA2Nzh9.2NKabo6_Rtun4zVLh_7mjY9vQitxlKkLRQrpE2z-Zc8
Preview:	{"url":"https://scout.us2.salesloft.com"}

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.6464393446710153
Encrypted:	false
SSDEEP:	3:P8iUiCQm:EiUiCQm
MD5:	D2E61F6827D8B10F14F87FF8BEE62ED6
SHA1:	3B09457372F998DF935D48F192747B007AA76B24
SHA-256:	41B744FADDAD62E6057F29B5A168B01909A22A48AFCB749DCCC094796CDA6988
SHA-512:	3BA0326B8AE5754061B234B99E5BF2C1EAAF222C32CF18446B7B4E11CE53146DB66B6232247986E492C79DE3BF936947A917846FDDA1CC2DA4B8E8009491D311
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlXTvbQ_Eg4FxIFDVNVgbU=?alt=proto
Preview:	Cg0KCw1TVYG1GgQIZBgC

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4997
Entropy (8bit):	4.182725170581603
Encrypted:	false
SSDEEP:	96:cJkhd/ianm0MPh2g1tkycwigeJOP6pQWDuxpqt2day2ipBjxgQ/M+1Hc:cJkPnIh9tkycwigridDipqSr/U
MD5:	DF3EA858B32A1E76AE7C0E9E421D47A7
SHA1:	EA4494D2734D927EC145E5AC3A54F72D22297FCD
SHA-256:	2F23A24D48DE9E750A617E12BB656FE156EA11B1B6829962A8105AC2AFE3CBB0
SHA-512:	F60444E0782A4758B4F270E15832707F3C64F3044ECB86B220A5C1F9F9C22D08677B8747A5F252CC5253A7C4AFEB981EE1B2DBD5407C6763F8A27C45634D26D4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g id="g14278">. <path class="cls-1" d="M157.31,46.54c-3.47.74-6.22,3.98-6.22,7.64,0,.12.02.25.02.31,5.84,1.42,8.49,4.95,8.51,9.82.02,4.88-3.84,10.23-10.34,10.25-5.27.02-10.75-4.48-10.78-11.71-.02-4.78,2.56-9.37,5.85-12.1,3.21-2.66,7.62-4.37,11.61-4.38.45,0,.91.03,1.24.12-2.46-1.15-5.19-1.8-8.08-1.8-10.6,0-19.19,8.59-19.19,19.19s8.59,19.18,19.18,19.19c10.6,0,19.19-8.59,19.19-19.19,0-7.67-4.5-14.26-11-17.34Z"/>. <path id="polygon14260" class="cls-1" d="M99.96,90.99l3.66,9.29,3.54-9.29h3.66l-5.69,14h-3.14l-5.86-14h3.83Z"/>. <g id="g14270">. <path id="path14262" class="cls-1" d="M121.03,97.91c0-.58-.07-1.14-.21-1.66s-.34-.98-.61-1.36-.6-.68-.98-.9c-.39-.22-.84-.34-1.37-.34s-.98.11-1.37.34-.72.53-.98.9c-.27.38-.47.83-.61,1.36s-.2

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18343)
Category:	dropped
Size (bytes):	325580
Entropy (8bit):	5.5952188740019215
Encrypted:	false
SSDEEP:	6144:b4YGp2L/QlIzo5Jse9S6Hu0bwJQNjnvrhiiXiPQm:sYXtkJXV8/
MD5:	04DF5F48A98DE7C60828B99A8F40FD09
SHA1:	A38AF6F029A3D042FA86D6DE91B8CE0952995E62
SHA-256:	04F626259EBF5F18986A8FFF2F1AA66AE92C6D6608E6029D5157BB83F6243287
SHA-512:	5BC8B7C34957B752CE44D5BFDE844BE592D7FF0F9FE5D6EFDDC0947337A92D88EB125DBE1D6144CBA77C4D4005937FAC48BF252FB1F5B10CE019D075819E8254
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"56",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":40,"vtp_rules":["list","info\\.mimecast\\.com","integrations\\.mimecast\\.com","community\\.mimecast\\.com","www\\.mimecast\\.com","www\\.workprotected\\.com","status\\.mimecast\\.com","^getreprise\\.com$","^status\\.io$","^careers\\.mimecast\\.com$","^mimecast\\-prod\\-apigee\\-developer\\.apigee\\.io$"],"tag_id":139},{"function":"__ogt_ga_send",

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.235926350629033
Encrypted:	false
SSDEEP:	3:1St9QnYn:Ut9QYn
MD5:	B587EBF5C6192B95FB9D35C883045120
SHA1:	2ED6DB9C89C86DA2FE99C2F3780191E310FE7356
SHA-256:	AB044D657D00F397C5CE0886F79B3C568C0604EF630ED4B240800E193399BB01
SHA-512:	7BB1B81DA18CCEC10C0ABA8384AE3D4A7EEE7F9CF566D72E7EFABA0C42B06C0A320A59B0F2EF492728ED7D03F19CCB62D83BBC9262CF1A16A98646BBDE8594ED
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwl-qVRw1G3-FBIFDZrRdFASBQ0bpZ2H?alt=proto
Preview:	ChIKBw2a0XRQGgAKBw0bpZ2HGgA=

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3744
Entropy (8bit):	4.5850160413210705
Encrypted:	false
SSDEEP:	48:c0CZJKIChyBF7Wwr8Jo/bKTSqP8H8oX585HhQBF7aZjnVjolbLWYGH2O2hwsSXJI:cJhQS8OKPi8znpjnQL1UvoRScH
MD5:	F2A172AD91FBE9867FB051DD59BFE393
SHA1:	FBD4D7CCEC3F50AB13A17F7A7E843A80B3E39319
SHA-256:	022EC7741B1DD6D24EA57E1F7FC9D716E31A6CEEBB22D0D914341C8E7A17128F
SHA-512:	D74A3D133FB1C9152EDF8FD4AED7AE2128AE11F87C630FCD45781BF5EFA42BB049DD54E1B974A8ED6473AC391A425309D95482B00A01E50A4B5F5C38F88E3A03
Malicious:	false
Reputation:	low
URL:	https://assets.mimecast.com/api/public/content/671e06972e724c10abdefd7d9b4967f2?v=a7fbf3d3&t=w1920hq
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g id="g10">. <g id="g12">. <path id="path14" class="cls-1" d="M174.05,77.05c-.38-.07-1.64-.28-2-.35-1.99-.36-3.69-.83-3.69-2.83s1.8-2.52,4.05-2.52c3.34,0,6.27,1.51,6.6,1.68l1.83-4.83c-.7-.37-3.68-1.95-8.38-1.95s-9.55,2.26-9.55,7.87,3.59,6.64,7.05,7.24c.48.09,1.98.35,2.4.42,2.33.39,3.61,1.26,3.61,2.78s-1.82,2.84-4.56,2.84c-4.41,0-6.98-1.31-7.73-1.62l-2.03,4.72c.63.33,3.64,2.02,9.49,2.02s10.25-2.82,10.25-8.06c-.05-4.88-3.33-6.73-7.35-7.43"/>. <path id="path16" class="cls-1" d="M191.42,57.46l-5.39,2.98v6.31h-2.84v5.15h2.84v11.13c0,4.75,1.95,9.02,8.85,9.02h2.15v-5.16h-.81c-3.39,0-4.81-1.95-4.81-4.61v-10.39h6.18v-5.15h-6.18v-9.28"/>. <path id="path18" class="cls-1" d="M233.47,71.49c2.1,0,4.25.95,4.9,3.27l4.89-1.86c-1.37-4.84-

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	183811
Entropy (8bit):	5.357066855176081
Encrypted:	false
SSDEEP:	1536:lhhCt32OUV6/5MXTE454sNCABSBFaVOCP1J3eI8/BLSpG/SsTDru:l+t32aAYBFaVOo1JpkScTDru
MD5:	75B9C0355FC5ADDF3E2A8500278FCB19
SHA1:	31874B4A86B7FE91BA6AEA13B331AE0E0D765EA2
SHA-256:	C7B119A910B270295E9A66A163EDF444ED05BDF622423A738D875F4F30DD60E0
SHA-512:	57560D107F0C23A17228EED8CBD5FCD34FCD7F2EB9DB5B07948AAAFB04ED6AD796248DBA2D44E74F3F906C2F1021EFA2AA2CDBE6EF2372B1305E2CE101F05DC0
Malicious:	false
Reputation:	low
Preview:	var Demandbase=window.Demandbase\|\|{};!function(p){"use strict";var x=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var i=0,o=t.length,a;i<o;i++)!a&&i in t\|\|((a=a\|\|Array.prototype.slice.call(t,0,i))[i]=t[i]);return e.concat(a\|\|Array.prototype.slice.call(t))},i=this&&this.__extends\|\|(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])}),function(e,t){N(e,t);function n(){this.constructor=e}e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}),N,t=this&&this.__awaiter\|\|function(a,r,s,c){return new(s=s\|\|E)(function(e,t){function n(e){try{o(c.next(e))}catch(e){t(e)}}function i(e){try{o(c.throw(e))}catch(e){t(e)}}function o(t){t.done?e(t.value):new s(function(e){e(t.value)}).then(n,i)}o((c=c.apply(a,r\|\|[])).next())})},l=this&&this.__generator\|\|function(e,n){var i={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]},o,a,r,t,t={next:s

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6105), with no line terminators
Category:	dropped
Size (bytes):	6105
Entropy (8bit):	5.238378421291859
Encrypted:	false
SSDEEP:	96:+EZXcOEW5zT8xq8dJbmgMHByoFvvkU/zOv3qBQvSboMt+ssGV0aOGstBvp:kW5z/cmJBy4zOv3qSKBL2aO/
MD5:	D74CC4825C8E333B2116DA3FCC649DB1
SHA1:	B48D09A14C1CD6333F1D2D811675B771F2A38A00
SHA-256:	4A007AF67F716C30C8848AB0AD0BFAAB8A5FCF3E36DEDF918B59C9429D522440
SHA-512:	FBAD39A642A7AF5167B8F1AB37510B83817CD90E19C3286CA6B76A1CC8C383E45216C1C8F8A03A10916C21960FF625F67A059017ABD5834F17B2BC9E41CCB4C8
Malicious:	false
Reputation:	low
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var o=n[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var n={};e.m=t,e.c=n,e.i=function(t){return t},e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=5)}([function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var i={get:function(t){for(var e=t+"=",n=decodeURIComponent(document.cookie),i=n.split(";"),o=0;o<i.length;o++){var u=i[o].trim();if(0==u.indexOf(e))return u.substring(e.length,u.length)}return null},set:function(t,e,n){var i=new Date;i.setTime(i.getTime()+24n60601e3);var o="expires="+i.toUTCString();document.cookie=t+"="+e+";"+o+";path=/"}};e.default=i},function(t,e,n){"use strict";function i(t,e){var n=new XMLHttpRequest;n.on

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7984), with no line terminators
Category:	dropped
Size (bytes):	7984
Entropy (8bit):	4.739645034872339
Encrypted:	false
SSDEEP:	192:3Vlv2PqiJbVLxjXXSgTIavSgTId6PFbVExjzkSgTI5jSgTId6RpNMVlxjoDSgTIb:3LvNn0
MD5:	6CBC1B4D2A31CE0AC40951463921B1FF
SHA1:	DE60017E29EFC9329BB82609D4D861B2893E7193
SHA-256:	89901C04ADE117C77D30154A678BA7D0C85DC5772A4A8F1E3ED596E0E2F0AC28
SHA-512:	3281E3B9E199166125F9CA1CDEAC8AB8A6CCEA4C57804B4A08C228204ABAB4210E81E84938C4219623B4620D46F40EDF52B29E9660E4B0B0D6C4E70FED1FFF9A
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("7MsygD11dcxG1UJ9AhZqNEuZS-c", "70xG16IS90Y5-MDdgaW2zL5U6Y4", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-3a33f036:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-70xG16IS90Y5-MDdgaW2zL5U6Y4","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18842
Entropy (8bit):	5.348219501729691
Encrypted:	false
SSDEEP:	384:tCo8KggTA9HtdBprSOT98uYrIUnh6EvvPFC3F1TpAPV:tKKggTA/dPrSs8IUnpvMa
MD5:	28AAF6D3F47A0F00BA6584ADF3C8ED50
SHA1:	9ABD03DE596DEC2D5140CAEFC15F24FC75F146CF
SHA-256:	534D3E23568BAC4EF4DF71A1535F12D940A95A085149EDF427056DC993EC4272
SHA-512:	25DED250F37B8FC80FBEC16023DD03F53C636509C51B30DDBB659B81CB570348271431036D2F74C4A0E65BF59FFEC18003CD06B17F18C9743C8E9D58E285022E
Malicious:	false
Reputation:	low
URL:	https://freemanhealthsystem.login-us.mimecast.com/u/login/assets/languages/en.json?ver=1.11.0
Preview:	{.."$I18N_SPINNER_LOADING": "Loading...",.."PWD_RULES_CHECKER_LOWER_CASE": "Include at least one lowercase character (a-z)",.."PWD_RULES_CHECKER_MIN_CHR_AFTER": "characters",.."PWD_RULES_CHECKER_MIN_CHR_BEFORE": "Minimum",.."PWD_RULES_CHECKER_NUMBER": "Include at least one numeric character (0-9)",.."PWD_RULES_CHECKER_UPPER_CASE": "Include at least one uppercase character (A-Z)",.."PWD_RULES_CHECKER_PASSWORDS_DONT_MATCH": "New Password and Confirm Password must match",.."PWD_RULES_CHECKER_PASSWORDS_MATCH": "New Password and Confirm Password must be the same",.."PWD_RULES_CHECKER_PASSWORDS_SAME_AS_CURRENT": "Current and new password can not be similar",.."PWD_RULES_CHECKER_SPECIAL_CHAR": "Include at least one non-alphanumeric ( !@#$..)",.."$I18N_ERR_USER_PREFERENCE_FETCH_HISTORY": "Sorry, we.re unable to load your history. Please try again later. If the problem persists, contact your service delivery team.",.."$I18N_ERR_USER_PREFERENCE_SAVE_HISTORY": "Sorry, we.re unable to save ite

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3962
Entropy (8bit):	4.958947607208349
Encrypted:	false
SSDEEP:	96:T4vjJmWBHW/4PXgCo2tTyNcXQdE1pWT1CnFQEqe:cvjJtG4PzoIlXQdg69e
MD5:	E4D8E279508E8DA958D975686D97A7EC
SHA1:	9E94ABD705113924B11AD9C20D7B7BE224DE426E
SHA-256:	478933873A22DFDFF5100961891C06EDBD0CE63A37AF62950CB523AB2F05B3B5
SHA-512:	75AE86F07549E4E00D8C02C03B6EC5663F8B20429627ABDBEB129049A045870E32E2F1D38C88D8489C7E6F5E33E9B2CB961FE1E557A09FDF7E05073D1579C3EC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: none;. }.. .cls-1, .cls-2, .cls-3 {. stroke-width: 0px;. }.. .cls-4 {. mask: url(#mask);. }.. .cls-2 {. fill: url(#linear-gradient);. }.. .cls-5 {. fill: #fff;. }.. .cls-6 {. clip-path: url(#clippath-1);. }.. .cls-7 {. opacity: .4;. }.. .cls-3 {. fill: url(#linear-gradient-2);. }. </style>. <clipPath id="clippath-1">. <path class="cls-1" d="M198.35,58.46l-3.41,7.68c-.49.85-1.33,1.45-2.3,1.62l-6.82.96c-.94.17-1.75.76-2.2,1.6-.28.69,3.12-7.37,3.12-7.37,2.05-4.93,5.3-5.41,7.68-5.37,1.34.05,2.65.34,3.87.9M168.76,57.88c-1.29-.36-2.62-.55-3.95-.59-4.22,0-6.55,1.54-8.99,4.18l-11.58,12.65c.62.19,1.26.24,1.9.14l9.29-1.3c1.27-.19,2.43-.79,

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55937), with CRLF line terminators
Category:	downloaded
Size (bytes):	181458
Entropy (8bit):	5.622553391032701
Encrypted:	false
SSDEEP:	1536:8Yk759BO63LZX7GrRWayRhs54dywnX1NIaRXNi0x/iQSZdBBHC/XEybN53NbDRsQ:ivO63LZrGrRWayXnopSyy
MD5:	0EE9451CE9CA8CFB6B0D7450DD000DCE
SHA1:	FAD4F977CD699821636E1A847FB8BF4FDB7B91FF
SHA-256:	486A78737472297E52734895C37608869E68224C45633B2461EB95782067003B
SHA-512:	38E55E8D19CD23475D3E059E9A380063A401CE7B2A3CA2F24DB0924CB87A7300A1C30AD8290FBFD47ABCF71C50088F017E8270B763CC2A87DCD65FEAA6A952D3
Malicious:	false
Reputation:	low
URL:	https://cdn.mouseflow.com/projects/e24f7e3a-5c9e-4ded-b913-3026146c2cf7.js
Preview:	window._mfq = window._mfq \|\| [];..window.mouseflowEnableCssRecording = true;....//Form submit success workaround..var formId = document.querySelector("#mktoForm_11119");..if(document.location.href.indexOf("/analyst-reports/") > -1 && formId){..formId.onsubmit = function() {..window._mfq = window._mfq \|\| [];..window._mfq.push(["formSubmitSuccess", formId]);..}..};....//Form submit success workaround..var formId = document.querySelector("#mktoForm_11119");..if(document.location.href.indexOf("/ebooks/") > -1 && formId){..formId.onsubmit = function() {..window._mfq = window._mfq \|\| [];..window._mfq.push(["formSubmitSuccess", formId]);..}..};....//Form submit success workaround..var formId = document.querySelector("#mktoForm_5957");..if(document.location.href.indexOf("/get-a-quote") > -1 && formId){..formId.onsubmit = function() {..window._mfq = window._mfq \|\| [];..window._mfq.push(["formSubmitSuccess", formId]);..}..};window.mouseflowAutoStart = false;..if (typeof mfRecord === 'undefined')

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	87352
Entropy (8bit):	5.780406730778942
Encrypted:	false
SSDEEP:	1536:Cu+QjdWOxzNTJ70eTFCwHLfqwHLfaBBZSU:QsFHTvT89
MD5:	A415940113C5688BC17C10790BE98E02
SHA1:	D459E3FF6583FC7F41FEB9F0930E524FB74DF83D
SHA-256:	9D2C1CB978C52F3E687D7A3EA318AD9AD47F9EA17DB9482BC48500D1C73DE43C
SHA-512:	19483E68E2D909C63760ACDCB70AC47D0DB972C680B9002C20F2A79600EF24715BA6608041B3530E79AECE98C281455935ECDC2F906B17EC1D90F61E9171DC5A
Malicious:	false
Reputation:	low
URL:	https://app.pendo.io/data/guide.js/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?id=7&jzb=eJx9ktmOq0YQht-FSLk62Cxm8UijI2ywsVmNGWzmBrWhWQYaDN1gIJp3P5xEinKVu6qv_lqk-v-ihgIXpOlOCfVGRa5mq07kR9OcPvO2M4kfUj-ovquWYk7IE7-t12kHIQJ1DkFFcjxhAtGqarKipnu8QgWCMcBkFTdo3a__5uufGQHvGMZ9B_8kZf3Or1iJS8uttqnFavoSH9C6CeyOgFjUm1CzL0Sfhi9J4rJQa1ugRGMtumYeiw2rCKMnj2F44zVjznvh_KXIlStL8yTp03brg01vsYFiJxtaeZw5gTZ7eNVie1faYf0Qey2Y_MTDK5MF8BAL6DNwwojunbSR1SD745-DfyKIMcjgO7Sf9hdizdesfHjD1hy6dnPW2bPDXPFlKnzVx5-GMu7RViRc0iL7iJLCjZLgcNSmiJ1qvofyRrMmQ9MDcDrAuroKupjIyOU4835m7wJtJB66W1Wy7dS2pafiznCgLaXRTDIGR72QRsYtgM5IaB4Je1j2ovIJ8D6MlIJle5jjqLHMoGUuLO-WRx57zzQrsuJ8V4170DDRHA9JPBrHwotfG9-ifS-_WF5mph_OM9arUXt5h6uKztaplIuaN5yT8HlKj7sDs1NL7eaNUuxwY_s6ey_0yFXdmr39Q_C4w-A9QsDpSdvJ-YdcDGCk_VDYh7Vq58rTOM3H2wPZbrSzy9xFmh-lzTwq0mWcLpl2s3JJH5Ctlm0dyhZ_TaSeTXb3ihizOkitNbLsiRddy_Rxxe1fiwsRJCABBFBv_5r2d1j8j3ErUGf98shFAevo40p9_6BAHDd9TZbWJXmCDtZE-S9aVvzWs9s1I605htsscwbY4aKpF8ytOH67YqJn1yTU9_cvaOQXEA&v=2.239.0_prod&ct=1721420554471
Preview:	pendo.guidesPayload({"guides":[{"createdByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"createdAt":1706622695776,"lastUpdatedByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"lastUpdatedAt":1706624478551,"appId":-323232,"id":"4uuEt3uKX9wbyIODIz8a17xBxvE","name":"LHN Enhancements GA 30/01/2024","state":"public","emailState":"","launchMethod":"launcher","isMultiStep":false,"isTraining":false,"attributes":{"dates":{"en-US":"Jan 30, 2024"},"device":{"type":"all"},"isAnnouncement":true,"priority":1422,"sharedServiceVersion":"4.8.31","type":"building-block"},"audienceUiHint":{"filters":[]},"authoredLanguage":"en-US","recurrence":0,"recurrenceEligibilityWindow":0,"resetAt":0,"publishedAt":1706624478551,"publishedEver":true,"currentFirstEligibleToBeSeenAt":0,"showsAfter":1706654700000,"isTopLevel":false,"isModule":false,"editorType":"visualDesignStudio","dependentMetadata":[],"autoCreateFeedback":fa

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (6598)
Category:	downloaded
Size (bytes):	10871
Entropy (8bit):	5.17110530548231
Encrypted:	false
SSDEEP:	96:X6y1iSLnTOYHjjAJbrmHln26bhqTkzuqc8teaJARM1FUr16GCbi71+0jlKAZSlK9:X6ykIpEnmJqNXaKRM1FOI3xdly1gdFO
MD5:	2C9BE078A704FCD270C1873C5DE3EEFE
SHA1:	5B94B76B58CEC330424DFCA823409E62523C0B97
SHA-256:	F998F2A38636FB230DCF2ED79677465BFAD0F0F1F8AD60ADF4DF663A4A42FA55
SHA-512:	A41DB5AB277E0FFEFCACCFF686A22813010057B47B9D11CF7F550FE6817D3001F3B79470EE996C387F8487374B87496A49B7BF229B738128A9A57AE339D37ED4
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/EWuuX_o4U-xRldBOqT-LYFc69fQ@sn9p0ljv8dushqgktXFohVVCLNU/Imtq1OAS7QR5--1wWyrbg1YVU2c/W5S3a1jOwzBCTfyoI0CeYlI8C5c.guide.js?sha256=-Zjyo4Y2-yMNzy7XlndGW_rQ8PH4rWCt9N9mOkpC-lU
Preview:	pendo.guideContent('EWuuX_o4U-xRldBOqT-LYFc69fQ@sn9p0ljv8dushqgktXFohVVCLNU','Imtq1OAS7QR5--1wWyrbg1YVU2c',"<ol class=\"_pendo-text-list-ordered\" style=\"overflow: hidden auto; height: 330px; float: none; vertical-align: baseline; padding: 0px 16px 0px; border-width: 0px; border-style: solid; border-color: rgb(218, 220, 229); margin: 0px; list-style-position: inherit;\">\n ---L1 Dropdowns------->\n<ul id=\"myUL\">\n <li><span class=\"caret\">Email Security</span>\n\t <ul class=\"nested\">\n\t\t\t <li><a class=link target=\"_blank\" href=\"https://community.mimecast.com/s/knowledge-hub-email-security-cg\">Email Security Cloud Gateway</a></li>\n\t\t\t <li><a class=link target=\"_blank\" href=\"https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-attachment-protect-configuration\">Attachment Protect</a></li>\n\t\t\t\t\t<li><a class=link target=\"_blank\" href=\"https://community.mimecast.com/s/article/email-security-cloud-gateway-ttp-i

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 25900, version 1.0
Category:	downloaded
Size (bytes):	25900
Entropy (8bit):	7.989719019974502
Encrypted:	false
SSDEEP:	768:MxpG6Gr0HaRRkeLsNf+e2TLddq37azDprdE:MxpGj06Y2giGOBdE
MD5:	8C2D773AF6BBE3D92EA240122DDCD194
SHA1:	64E1ACB13F4714F71B315F0BAB556D093107C5D1
SHA-256:	99C3BE2A0EB1736419E732E5674274384595E0FF9CE517CCEDDF5425C7DADAA2
SHA-512:	6158F324DA1EF7DD0EBD00BE6D63E0D834A98265F64E1AC33AAFC6C41A7C0CF958254C8B4CBCD3B8514D0769500A331A5A4C2F5C2B42EA3EFD26626B67506337
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/e8ba57/00000000000000003b9b2038/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n5&v=3
Preview:	wOF2OTTO..e,..........d............................)?DYNA..?GDYN.i.......`..4.6.$..d....J. .....H.8..t....>.......^..MU...~..?..........._....R.T.....p:[..GE..i.c^..N.`"[.B..d..W.......;g..P..u.=...S.4)&...lK..d......v......u4s:......Q.."....ZY...x.N..i.. ..zg.y.cv......+.'Z...v...cS...R.@.../E.XK .,w.=.x....)...bP{{L...q..J...&.$..^.$OD`b.>.0.v."%5`0q.Q.0gjO....t)..<n...[..B{.U......S...DM>;v.z.oj.f$.1-.....?..A...Z.k..d..J4.G.M.n`..>...\...Y. ..$,b.+.'...T..s..\|:}.;.I.R.<...eJ.d)9..+h....\|.?.".....^.KJJr.' .:..a...e.......<l...f...z....N.a..(.U......d...Q.....-.L,.VA...U.4E..@U..K..eL5].Ac.(...........S%.o.\|cZ>..n..O...X@...Xm.4.c.^8..Xi.0.s.w.U.~-._...2..6.[.......m...YZ...N......6........$..@%..5.......z.p..IX..`'...P.w.1...X.kb..}q..@....Mx....,...?..*K....QW.E}i...Q4.&..r(O.i-m..t...E.F%t...k...g5Y...`C.D6.e.B..ma...v..........5..G.Y..I~.?......Sr.(.v,..:.c).rB."..C...Y,=......3Zv.....f.)O..k..i5...rWr../....m..!..~.v....

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2990
Entropy (8bit):	4.564727480348835
Encrypted:	false
SSDEEP:	48:c0CuJKZkFF5gcOb7eg9PCKKHghYRdk4KQUkEiqnprkLoX30a:jJmA5gcu19PCKSedlZzH0a
MD5:	B888584C3FB05C3B034414DC5AB57C15
SHA1:	375E984DCFDB3406D823C83F692B5E6C118B679B
SHA-256:	8B4A1CAD258C3BBBFFD6F7E92887F64692FBFA2D33E23F97D9C28026A2C20190
SHA-512:	F6C797ECBFA7796B5EF8AB57C9F651E8A6522EB0E99105B8A156C190F11F821C011CE63243A0CACC2C6152594DD5B6EBEC01811D77DBEBEF592D511B45DDB2C3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill-rule: evenodd;. }.. .cls-1, .cls-2 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <g>. <path class="cls-1" d="M78.91,67.01c-2.98,0-5.53,1.06-7.65,2.76v-2.34h-7.23v27.42h7.44v-17.43c1.06-1.49,3.61-3.4,6.8-3.4,1.06,0,2.13.21,2.98.43v-7.01c-.85-.21-1.7-.43-2.34-.43"/>. <path class="cls-1" d="M14.94,86.34c1.91,1.7,4.89,2.76,7.44,2.76,1.91,0,3.61-1.06,3.61-2.34,0-4.25-13.39-2.76-13.39-11.48,0-5.31,5.1-8.5,10.41-8.5,3.61,0,7.44,1.28,9.35,2.76l-3.4,5.31c-1.49-.85-3.19-1.91-5.31-1.91s-3.61.85-3.61,2.34c0,3.61,13.39,2.13,13.39,11.69,0,5.31-5.1,8.5-10.84,8.5-3.83,0-7.86-1.28-11.05-3.61l3.4-5.53Z"/>. <path class="cls-1" d="M60.85,80.82c0-7.65-5.31-14.03-12.96-14.03-8.08,0-13.39,6.8-13.39,14.24,0,8.71,6.16,14.24,14.24,14.24,4.25,0,8.5-1.7,11.26-4.89l-4.25-4.25c-1.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2878), with no line terminators
Category:	downloaded
Size (bytes):	2880
Entropy (8bit):	5.2417615524757375
Encrypted:	false
SSDEEP:	48:JvHc4P5G+5XCUkVX1RW0GT9XLQRS2puZYGnTEit4W8Ib97GW/o:JvHnGbDV/W0KraGYdWbbBGWQ
MD5:	BA9457B4EE74A7DBF13AEF7685AED34B
SHA1:	00D1AF4F5776400F1D09C7F11EB5B49D9B410AF6
SHA-256:	D7945DA26154582BD6C5EA68C47A9A01DCC3F8925804CD34810082FDBC29408B
SHA-512:	8828D51B2D89CE681F0B324EE8B204FDF5B41B4D90E5E8EFD522FE2BCBA583962358CE94B3DAC305D0C1848CA5CAE9D84997CA9BE06FB8EC64FAC8320B1FC432
Malicious:	false
Reputation:	low
URL:	https://cdn.bttrack.com/universal/45424
Preview:	(function(){"use strict";var n=window.document,u=function(){return Array.prototype.forEach?function(n,t){return n.forEach(t)}:function(n,t){for(var r=n.length,i=0;i<r;i+=1)t(n[i],i)}}(),e=function(n,t){var i=[];return u(n,function(n){i.push(t(n))}),i},o=function(n){return n.toLocaleLowerCase()},s=function(n){var t=n.indexOf("//");return t>=0?n.substring(t+2):n},h=function(n){return n.endsWith("/")},v=function(n){return window.decodeURIComponent(n.replace(/%(?![0-9a-f]{2})/gi,"%25"))},i=function(){var t=window.location.href;return n.currentScript&&n.currentScript.dataset.url&&(t=v(n.currentScript.dataset.url)),t=o(t),s(t)}(),r=function(){return i.includes("bt-debug")?function(n){window.console.log("Bidtellect Universal Pixel . "+n.toString())}:function(){}}(),y=function(n,t){n=s(o(n));switch(t){case 2:return i.startsWith(n);case 3:return i.includes(n);case 4:return new RegExp(n).test(i);default:return h(i)&&!h(n)&&(n+="/"),i===n}},f=function(t){return n.createElement(t)},t=function(n,

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 1678x373, components 3
Category:	dropped
Size (bytes):	18683
Entropy (8bit):	7.541319419214933
Encrypted:	false
SSDEEP:	384:1/Al2vMg9AA2ISNdpvoKENU+YgpiLxOPHE2dfH0i:1/X2ISNdpvorNloNO7D
MD5:	46E86EC507138EE0D310EFD9C49E15CD
SHA1:	AE7A072AFA93674240C56F145EF54FDE638A480A
SHA-256:	C8A71F222B2FAC5A67876F7BAD88F35475424B92C18C7977853FA6CF91486A1A
SHA-512:	A400A58632191819F4BCEAE6464141D454226D10C18E51FCD5C249DBF4C7BCAD47A2A5EC12B4194D76A0A23DF2BBE083867FAE42CA4EAA8E3EFCC14A6D12FAEC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....8Photoshop 3.0.8BIM........8BIM.%..................B~...C....................................................................C.......................................................................u...."........................................M.........................!2"1A..BQRaqr...356Sbs...#........C..%c...$dt4DT..................................$.....................1!2..A."QBaq.............?..#Lx..o.W."9a+.....8.4...^.-OZ./s...V.....S.K..>s....:..ydU..d........."z..wE..~..\|.K.....=?....z......Ir....V.l_..ok.d.........h@....tU...4.b.$.,.Y.D....V.e.......o#...}.\|..........{e...(.........o..+.../.x:.'...<i.........\|..1+\|9.{].......z....Y..0..d.W.G.LsB..(...g^....P..... X.<....qeb4.+.4.j..O,....."4. .....7\|..............................i..d.i.Wz...N...7..8....%^.......":V.k...>.zp......p...f............}G........x..e. ......^....h....{.=...k.X.\|.z.w...cZ....8...0......f.8.......c{.6..sS.~...<^.i1....R\|.....U......c.NI.y..

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	183811
Entropy (8bit):	5.357066855176081
Encrypted:	false
SSDEEP:	1536:lhhCt32OUV6/5MXTE454sNCABSBFaVOCP1J3eI8/BLSpG/SsTDru:l+t32aAYBFaVOo1JpkScTDru
MD5:	75B9C0355FC5ADDF3E2A8500278FCB19
SHA1:	31874B4A86B7FE91BA6AEA13B331AE0E0D765EA2
SHA-256:	C7B119A910B270295E9A66A163EDF444ED05BDF622423A738D875F4F30DD60E0
SHA-512:	57560D107F0C23A17228EED8CBD5FCD34FCD7F2EB9DB5B07948AAAFB04ED6AD796248DBA2D44E74F3F906C2F1021EFA2AA2CDBE6EF2372B1305E2CE101F05DC0
Malicious:	false
Reputation:	low
URL:	https://tag.demandbase.com/d6f8cbc5.min.js
Preview:	var Demandbase=window.Demandbase\|\|{};!function(p){"use strict";var x=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var i=0,o=t.length,a;i<o;i++)!a&&i in t\|\|((a=a\|\|Array.prototype.slice.call(t,0,i))[i]=t[i]);return e.concat(a\|\|Array.prototype.slice.call(t))},i=this&&this.__extends\|\|(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])}),function(e,t){N(e,t);function n(){this.constructor=e}e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}),N,t=this&&this.__awaiter\|\|function(a,r,s,c){return new(s=s\|\|E)(function(e,t){function n(e){try{o(c.next(e))}catch(e){t(e)}}function i(e){try{o(c.throw(e))}catch(e){t(e)}}function o(t){t.done?e(t.value):new s(function(e){e(t.value)}).then(n,i)}o((c=c.apply(a,r\|\|[])).next())})},l=this&&this.__generator\|\|function(e,n){var i={label:0,sent:function(){if(1&r[0])throw r[1];return r[1]},trys:[],ops:[]},o,a,r,t,t={next:s

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1826)
Category:	dropped
Size (bytes):	199545
Entropy (8bit):	5.5329916229220775
Encrypted:	false
SSDEEP:	3072:LxICuKurL5pQlXB6O0LkOlSxl9kLEiyo9BHp4BbwJQNeMiKe:1p2L/QlRYDlSY4BbwJQN4x
MD5:	2D67CA21B09735AEAB51779F32FBECDB
SHA1:	6E8778C8115AB0753978E8FE1C26C4EABAB1DFF4
SHA-256:	76DB60E2BE83D75816839384D1C8D75A887FF7CEAEEDF4DFD316FB1E1786EF31
SHA-512:	D43D2847323CFCD521B83515F6E76255D6C4BA1D7139D2AEF23A62235553B2DBF5F01355D961244631C3DDA5779084688FA28CA7141087EB99CC2DD1C4DEEDF7
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (5583), with no line terminators
Category:	dropped
Size (bytes):	5584
Entropy (8bit):	4.884236002437424
Encrypted:	false
SSDEEP:	96:3jZ75m3hr/MOXQ5IM7MQ5vgJ0tDKDzHOSj38ST406DUuHpYUA45XGIqwVpxM:3175m3hrAWM7JSJ0t2DaST40SpJB5XGN
MD5:	AFDAC86597A88D414642BBD3CCA47AFB
SHA1:	14EB5ABF084A0CB2C59A17716A7833D049F06373
SHA-256:	6CB52B343D39DEEDE7DD3406912CADA0C33C30AE6731BBE700A503B6207D1D79
SHA-512:	88943E13B2AA5F80F020C771FF961C4D67928FA6535AB9FA9BC55810C279BDECAEF3457998B42D72428554759A0CA41F41A64C9CDBE9CEFA6FD6DEA7795CC804
Malicious:	false
Reputation:	low
Preview:	pendo.receiveDomStructureJson("RzkonpIMqVMMtrBxUvCVyAV9okM@sn9p0ljv8dushqgktXFohVVCLNU", "B8yz6G72MbDkDBsTovOHQl5kTPA", {"props":{"id":"pendo-g-B8yz6G72MbDkDBsTovOHQl5kTPA","data-layout":"AnnouncementsModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-224c80e4::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-224c80e4::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-gui

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2616), with no line terminators
Category:	dropped
Size (bytes):	2616
Entropy (8bit):	5.854388806069226
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08UkGfxXWAplkwUG9QA6:aJd6SUtJfNrVlCWWWdtqjZYkKze
MD5:	A9FE4B69022A4C59D79E867FC66991FF
SHA1:	ABEC85905E3139D03E48CEA9501B053043B34B1D
SHA-256:	E4D3A991C4165AA5A0D4FCCD286CB964F4289949EFA7BD8F8545F00644C595FB
SHA-512:	FF4E4397267E23532128AF77E0C900C2F771F9F97D1637606B4028F6A8CCFBBD7C136C8D0A14B1B506ED4423E413C1BAC90510F9C570889D872BCA018170ECC9
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Reputation:	low
Preview:	...........................

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 492 x 290, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	181031
Entropy (8bit):	7.988245953732625
Encrypted:	false
SSDEEP:	3072:3AoU9Co9QuR1WbpScT5JixAqhyEZ3GoO8IWCQlFuqQOotAGzdXUvLBZ:QoU9Co9h8j3YNwEZ3GiCQDQdKedXY/
MD5:	3482B778E4BBB16CFA6E07A404BFCC1E
SHA1:	475345D2B6C428195EC77A03971B8D53D718B644
SHA-256:	BF637FE53BC7AA785CF61CB99C9EE40539AC682E6441A2ECADEB25DA6314CE21
SHA-512:	14618FD73B4B14DDBD2C4D9BECF469DCBAC5A0AADFE9BDDFBF8EA065644923BAA25C768606FD67918D916888CBA4F43E3F9BA2F11075480E059264F4B188B04A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......".......v.....gAMA......a....KiCCPsRGB IEC61966-2.1..H..SgTS..=...BK...KoR.. RB..Ti........@...."....q....."..A...y.(..(6T....}..7o....9g..}>.F`.D....dJ....<6..'w..T ...@.-.................m@..n....8..P.....$......B....2r.2..2...t...%..[.....j..;e.O..v.$....(S*.@..@&.......X......`.(..s....`....`....).d....`...S......GE...3.(...x.W\!.S...d..T.n!...\].x.87C.P........ee......3...FvD.....9;.:;.8.:\|...........?........E..............e..../.....B.._......T.B.fg...k+..m.._......_.....................2..r<[&..q.?......wL..'..b.P.GK..i....$.I...H.........k.`.~..B[P..... ..%....w......1...w..0....h....................4P.6h.>....#..;x...P..8X.BH.L.C.,.UP.%...B..Z..F8.-p.........<.^...0.o`.A.2.DX.6b..".#.Ef!~H0...!.H."E..Rd5R..#U.^....9..E.!=.=...F~C>...@..j..\...B...h....G...h%Z..B.......>G.0....3.l0...B.x,..c.b......6.....b#.{..."....;!.0. $,",'..........B.a...$....nD>1..B.%..+.u.c...[.......!..\H..8R.i......D:C.!....d.6..A.%...r.y;...

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2530
Entropy (8bit):	4.520304769367354
Encrypted:	false
SSDEEP:	48:c0V9JKKBvO6NFhdTXolORbVDuqzYqhdLBfSwTDSVR9NxdltkN8zOjxd0fr:9Jp1rhdbvR0qsqrLByRlviyzEG
MD5:	F9F6C932B371C69F6C09B2A25349D1FD
SHA1:	910BB80182054FB4BC7EBE8B03D5FF57D41E290B
SHA-256:	8BD944A0301B3904BE67C405BA0CDD0DE0E086994E1B1BC1F7C81F283EC4C47D
SHA-512:	C7A242A9B945E405A5C1C9904D5D06DA4C4A9605912443AD44CDA528B117511880E0F8D82F8EFCA61A8EF1B7ACF524789317974F8437AC08734B293139EDC916
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100">. <defs>. <style>. .cls-1 {. fill: #010041;. stroke-width: 0px;. }. </style>. </defs>. <g id="Updated_Icons_Outline_Users">. <g>. <path class="cls-1" d="m30.93,52.76c-5.42,0-9.9-4.48-9.9-9.9s4.48-9.9,9.9-9.9,9.9,4.48,9.9,9.9-4.36,9.9-9.9,9.9Zm0-13.78c-2.24,0-4.01,1.77-4.01,4.01s1.77,4.01,4.01,4.01,4.01-1.77,4.01-4.01-1.77-4.01-4.01-4.01Z"/>. <path class="cls-1" d="m44.54,54.44c-.59-.82-1.18-1.53-1.88-2.24-1.18-1.18-2.47-2.24-4.01-3.06-2.36-1.3-4.95-2-7.89-2s-5.54.71-7.89,2c-4.95,2.83-8.36,8.25-8.36,14.49v2.94h25.33c1.18-3.77,3.3-7.07,6.24-9.54-.47-.82-.94-1.77-1.53-2.59Zm-23.74,6.24c1.3-4.48,5.42-7.66,10.13-7.66,3.06,0,5.77,1.3,7.66,3.3.71.71,1.3,1.53,1.77,2.47.35.59.59,1.18.71,1.88,0,0-20.26,0-20.26,0Z"/>. </g>. <g>. <g>. <path class="cls-1" d="m58.73,26.94c-6.36,0-11.54,5.18-11.54,11.66,0,

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3816
Entropy (8bit):	4.669796403431544
Encrypted:	false
SSDEEP:	96:cJ5mIYk9OKI3m+TeQ4+w5iE5x2iQyim28LFayhDq6vbsd8TSMa+AaPnsWF2DxP:cJ0e9bI3maGpt2gjXe8TKGFkP
MD5:	921C6930E7DC6FBE13DAA24CBB6C923A
SHA1:	DC77EA0BDE29F8C598761EBD93FC78688E31681B
SHA-256:	A4349C5C1A20853454239CC6AFF126640C11338AC20D73F54571C35B06496D4C
SHA-512:	5ECE1354DE67D81862AF0D3FB1BD97951A1AC2706D17A7CBFAC2681C6CDB61DB47996274025B893FFC3B7CBD50AC9F62081C8965568A464C9EADC7CF9B4E51E2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150">. <defs>. <style>. .cls-1 {. fill: #fff;. stroke-width: 0px;. }. </style>. </defs>. <path class="cls-1" d="M57.97,41.56v54.84h16.25v-42.66l-16.25-12.16h0Z"/>. <path class="cls-1" d="M51.4,46.48v50.03h3.37v-52.58l-3.37,2.55Z"/>. <path class="cls-1" d="M44.82,96.22h3.37v-47.64l-3.37,2.41v45.23Z"/>. <path class="cls-1" d="M38.66,96.22h3.37v-42.83l-3.37,2.57v40.27Z"/>. <path class="cls-1" d="M77.29,66.21v30.31h16.26v-18.12l-16.26-12.18h0Z"/>. <path class="cls-1" d="M32.08,70.74v25.49h3.37v-27.9l-3.37,2.41h0Z"/>. <path class="cls-1" d="M25.5,96.22h3.37v-23.08l-3.37,2.41v20.69h0Z"/>. <path class="cls-1" d="M19.33,96.22h3.37v-18.28l-3.37,2.57v15.72h0Z"/>. <path class="cls-1" d="M135.25,71.98c-4.82,0-7.88-2.73-7.88-8.01v-10.26h4.02v10.26c0,2.89,1.45,4.49,4.02,4.49s3.86-1.6,3.86-4.49v-10.26h4.02v10.1c0,5.61-3.22,8.17-8.05,

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	5.41896986078548
Encrypted:	false
SSDEEP:	12:TMHdPEi/nzVJ/KYf3n6WcOLgHuOaqQGV5PKM:2dsATLf3wNRQGV5R
MD5:	3A22347B12B3419C8E0B7796B335D7B6
SHA1:	0F13CE70C3C8AD1C52CD20D0788D793B38B0F94E
SHA-256:	3666CBFE873D55D617ADC3DAD7FA3158E50AD07AA89F2B0AEDC26A154EAC5924
SHA-512:	DFE313CF8E632C0CB53881AB758659CA22392CF93EC32F65D74DEDD54B576734E51BF5CFA4202E4128EA218F12F524AD01E9BD79DBAB090CED7E29EDC731C0D9
Malicious:	false
Reputation:	low
URL:	https://www.mimecast.com/dist/2fabfab087ce242c96a0.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 21.4 13.4" style="enable-background:new 0 0 21.4 13.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#0F103E;}.</style>.<path class="st0" d="M13.3,12l1.4,1.4l6.7-6.7L14.7,0l-1.4,1.4l4.3,4.3H0v2h17.6L13.3,12z"/>.</svg>.

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	208060
Entropy (8bit):	5.071133372628038
Encrypted:	false
SSDEEP:	1536:XQG/wgYFnomp7A3R335JcIQOu7dxDU99caB06e9hJSltpsOwWY0wZ9kMcDU+:gR+3RQIQOu4g/eltpGWYDCMAU+
MD5:	F692AC8003E8F0614F6BB1499F05C016
SHA1:	2EF9E0DDFAE17B12B709C842AA17AC2390AFE128
SHA-256:	E6B779A8581AAAD1DA9C19B1A4402BDD5525167C6703D1BE6EDB698C9907F079
SHA-512:	9633D9D80C50E41C01F9889A12017F20AE64FB83A6F9777F967176BB1C786112CAB28C992D2F59B4CFAF0C525FC00BDF22F829A7E4F162D95E361DB199313A76
Malicious:	false
Reputation:	low
Preview:	"use strict";angular.module("messageFormatter.directive",[]).directive("mcMessageFormatter",["$translate","$sanitize","$injector","$window","$location",function(n,s,l,o,i){return{restrict:"A",templateUrl:"components/message-formatter/message-formatter.tpl.html",scope:{mcmessageFormatter:"<mcMessageFormatter"},link:function(n){var e=[],a={TEXT:"MC-TEXT",ANCHOR:"MC-ANCHOR",ADCON:"MC-ADCON",KB:"MC-KB",STRONG:"MC-STRONG",ITALIC:"MC-ITALIC",ACTION:"MC-ACTION",NEWLINE:"MC-NEWLINE"};angular.forEach(n.mcmessageFormatter.split(/\[\[\|\]\]/g).filter(Boolean),function(n){var n=n.split("\|"),t={};1===n.length?n[0]===a.NEWLINE?t.type=n[0]:_.isEmpty(n[0])\|\|(t.type=a.TEXT,t.text=n[0]):t=_.pickBy({type:n[0],text:n[1],location:-1<_.indexOf([a.ANCHOR,a.ADCON,a.KB],n[0])?s(n[2]):n[2]&&angular.fromJson(n[2]).state&&angular.fromJson(n[2]).state+"("+angular.fromJson(n[2]).params+")"},_.identity),e.push(t)}),n.mcTagType=a,n.mcProcessedKey=e,n.openAdcon=function(n){{var t,e;l.has("applicationSwitcherService")?(

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24822), with no line terminators
Category:	downloaded
Size (bytes):	24822
Entropy (8bit):	4.792614630155596
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:JlpuJ
MD5:	F5EBACB2CAF0A00CD5395B0869DBE17D
SHA1:	06F7CD5E0E6E31688B1E9D8FB631B8EAE2042C19
SHA-256:	C52550189AD7A781A37919AF639C2D6A786821AAD8B982DAA6A54AF46817B8FA
SHA-512:	E8B90E9C6B5078E7DC93121AF552B17B4D6E891D2B04BDD511634A2116A3E4F45AAA5CC147070123A8CD98B2E2E03B2B17FFD28878DCA468126A4E39E363856B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202405.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7986), with no line terminators
Category:	downloaded
Size (bytes):	7986
Entropy (8bit):	4.72878058120256
Encrypted:	false
SSDEEP:	192:3SPqiXbVLxjv+SgTIabSgTId6rwbVExjczSgTI56SgTId6MqMVlxjH2TSgTIwcSx:3fPnm
MD5:	255D94D55A2C45518FD51E8366761ECD
SHA1:	1128485D4B50D5EE41F5205E0986564F706CB21B
SHA-256:	1A094C0894193DDF738DFDB1321100B6A966C5D3C609235B9C4C1BE0E86B92B5
SHA-512:	8A56598ED038846914A6DD6E8C7209BB402DECF3571EFAE9F9D281787A814A41439F89E844919D8D23DD0184DB077216ADF25B1C51D60695E9AF3A5EE0019296
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/6y43deqNFEx9Ff5sXYTjU-SilF4/QkqhAKtgLtOd0qtyIj9snnm9BcI/EShIXUtQ1e5B9SBeCYZWT3Bsshs.dom.jsonp?sha256=GglMCJQZPd9zjf2xMhEAtqlmxdPGCSNbnEwb4OhrkrU
Preview:	pendo.receiveDomStructureJson("6y43deqNFEx9Ff5sXYTjU-SilF4", "QkqhAKtgLtOd0qtyIj9snnm9BcI", {"props":{"id":"pendo-base","data-layout":"announcementBlank","class":"_pendo-step-container","style":{}},"type":"div","children":[{"css":[{"selector":"#pendo-link-d553d6bb:hover","styles":{"color":"#1976D2","font-weight":400,"text-decoration":"underline"}},{"selector":"div:focus","styles":{"outline":"none"}},{"selector":"button:focus","styles":{"outline":"none"}}],"type":"style","props":{"type":"text/css","scoped":"scoped"}},{"props":{"id":"pendo-g-QkqhAKtgLtOd0qtyIj9snnm9BcI","style":{"position":"relative","left":"initial","right":"initial","z-index":300000,"float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size"},"type":"div","children":[{"props":{"tabindex":"-1","id":"pendo-guide-container","style":{"-ms-filter":"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#FFFFFFFF,endColorstr=#FFFFFFFF)","filter":"progid:DXImageTransform

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.2130920840468065
Encrypted:	false
SSDEEP:	24:Dt4An1AoZ9AnnP49AnqQTsJbAnRpkoY+VYzjgtTeneofK5gP+eBBkZlB4BRJXP8q:D+A1As9AQ9AqQYJbAJEjaRjiTRBCZe
MD5:	D801E9936920D12430A41C6621827EDB
SHA1:	A2AB5AA117B8475F21908751E0EFF6D25D862EED
SHA-256:	5A2D85276F3BB00A21502841E1591699056969A7066B92A9ECEDF9820872DBF3
SHA-512:	5D6FF6CD6139FAE1F2FE6FF2BD2EDF053AB3C71738C5F11EF4BBEDA527ACD1F5BBDD92BFB0740DBB06DA9E776198C6F24456598B20367EE78C9DD74B7647F04E
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/dP9u1Yj5gYondtURXeRiqcUqNWc@sn9p0ljv8dushqgktXFohVVCLNU/HSnzFk61g0hDIbg3_i1hMHRvVR0/oqtaoRe4R18hkIdR4O_20l2GLu0.guide.css?sha256=Wi2FJ287sAohUChB4VkWmQVpaacGa5Kp7O35gghy2_M
Preview:	#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 {. /* Style the links /. / Remove default bullets /. / Remove margins and padding from the parent ul /. / Style the caret/arrow /. / Style the caret/Text /. / Create the caret/arrow with a unicode, and style it /. / Rotate the caret/arrow icon when clicked on (using JavaScript) /. / Hide the nested list /. / Show the nested list when the user clicks on the caret/arrow (with JavaScript) */.}.#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 .link {. position: relative;. width: auto;. float: none;. vertical-align: baseline;. display: block;. color: #1976d2;. font-weight: 400;. padding: 0px;. line-height: 0.5;. text-align: left;. margin: 20px;. font-size: 18px;. letter-spacing: 0px;. text-transform: none;. white-space: pre-wrap;.}.#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 ul,.#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 #myUL {. list-style-type: none;.}.#pendo-g-HSnzFk61g0hDIbg3_i1hMHRvVR0 #myUL {. margin: 0;. padding: 0px 0px 0px;.}.#

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 2000, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7764695
Entropy (8bit):	7.980072466467024
Encrypted:	false
SSDEEP:	196608:rPhUe9WjAbcbCYfLoDBV4hazL3ly77zztptWuytGdX:rZU0WcIjyVxL3ly77zzUuSGV
MD5:	C8E5ADA44EA42B423FAA3F007876DB25
SHA1:	4E9D1B5854476E71F076AD5A6DA91D3CF05C4BE6
SHA-256:	961689275D20C9A47C1BFC51AC2437280426724F154CB272EE3B98A453E11923
SHA-512:	556D1A6812D9A5E092CF0AF464AF049724F0B3256729BE70072CAFE7D8A0C735E98A6157F83C7D11C1EEEECEAB7CA08CF6B7E548221EC1E330D354C9451D12CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............p.m...IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12421), with no line terminators
Category:	downloaded
Size (bytes):	12422
Entropy (8bit):	5.100140991325246
Encrypted:	false
SSDEEP:	192:30tmJrZWf/aWM7JS1/t29lafZqlQVTK7KHSbG0k2k2BA8pzDL3R1SLr6VXIGtVEZ:30ev7Wl2kFvqCYA8pGtoXE
MD5:	01CA7C0CDF758987E8B88D4FBDDCF27C
SHA1:	2BEF6ECCF1B3C61F010C03F1F579AD186A301E6D
SHA-256:	AEFC214BAE8A6500E426B53A770AD80CB05FA6FE689BA0E0A20FDE6180DC3A9C
SHA-512:	396F99BDA2F19088EB2465E0852A900F65650863925FBA49F902A499F3A431185710380D0729A87A2DD3418BF9E6C65A0B01BF69814C94F3F406F31BA009E458
Malicious:	false
Reputation:	low
URL:	https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/7SHTPNi_Xpm4UJSECcvOI9Ne9TM@sn9p0ljv8dushqgktXFohVVCLNU/WmvWv3yoJPY5zIiS-0_34FvCVEw/K-9uzPGzxh8BDAPx9XmtGGowHm0.dom.jsonp?sha256=rvwhS66KZQDkJrU6dwrYDLBfpv5om6Dgog_eYYDcOpw
Preview:	pendo.receiveDomStructureJson("7SHTPNi_Xpm4UJSECcvOI9Ne9TM@sn9p0ljv8dushqgktXFohVVCLNU", "WmvWv3yoJPY5zIiS-0_34FvCVEw", {"props":{"id":"pendo-g-WmvWv3yoJPY5zIiS-0_34FvCVEw","data-layout":"GuideListModule","style":{"position":"absolute","top":"0px","width":"400px","float":"none","vertical-align":"baseline","display":"block"},"class":"_pendo-step-container-size _pendo-resource-center-view-transitions"},"type":"div","children":[{"css":[{"selector":"#pendo-left-caret-df278a82::before","styles":{"content":"''","position":"absolute","top":"4px","right":"8px","border-right":"6px solid #6A6C75","border-top":"6px solid transparent","border-bottom":"6px solid transparent","border-right-color":"#666666"}},{"selector":"#pendo-left-caret-df278a82::after","styles":{"content":"''","position":"absolute","right":"7px","top":"5px","border-right":"5px solid #fff","border-top":"5px solid transparent","border-bottom":"5px solid transparent","border-right-color":"#FFFFFF"}},{"selector":"#pendo-close-guide-d

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11899
Entropy (8bit):	7.964220739239869
Encrypted:	false
SSDEEP:	192:cSYhWdI5xBAn+yUpfW4ORWm+MzzS28eRSN6H3VsqVH/cRmfoG59+NWfdMikkagTP:bPS7ajFBRj3VVVHkQfo6UN8D0gT+gTbr
MD5:	50DC9B2B82D344F6F96FA45F46891848
SHA1:	3B55D325E6FF025CEF97C2F727D7CB7327D40843
SHA-256:	209CA6E1B8C04B1EB2049A07F8564E1B102309B223E58DCE4F9D3594CB475C23
SHA-512:	3EE227DC6FE31EECF91992A9E1D9D12F39446BFBE352D413D1BF27A6E919D7458CDF09011A3F301339893C76DDF0943A19816F238F302C89CF6BD2A3D185AB07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,.....y}.u....pHYs.................sRGB.........gAMA......a.....IDATx...\|Te.....PBS$.".H@QT\.".Z..k[...]....p.]?W...V.b[A..F@@D ......J...&.......!...{g.......IH....c.!e..&SJ..%....i..."..OW_.......]..`...).....M.l....;.....H+.j...../..a.IM J.....1;..Q..$D......Z1.\|......\|!)..+...dd...,...q.(Y...1[.D,W..T....$-..."3]......p..3b.5~......3.e..\!I........J. N9B.#W=.U.6.Q...`y...D........nR.J.\|.$M.M/.SP.\Ox.e..@9.<.\.g..~(X.$$R.~..K...F.zELT..IRR0Q..`..j.s(Rn.T..y...V..".t.....@`...Y...+!...W...8ge.c.qu....jc..`..FSIDi..+.P......d.0.JVT.QF..=...q ..(..m...U.8LJ.....(X....5PU..1.KYJ..$..P...BE....q...O.r...m(T.JJ.k.(V..A.....D.=..P.....W.2Bh..kP.,B....'.g.iv...9........../.8M.g.j....._[.QU..\|..BHl.V.._\|.j..e...a.U....>U...?.&V.#.C@...1..c..M.......A.k..f.."El.......3...^o!$.(..0.JZ..M...R(X....T....}......E...a...W.=U..(o+.:..~.....*.)..e..(.\IL...M...>.V..7I.J.OR._.@1\|yB."....<.\.$)F....).)C..5..o..p.`.C.oD..J..").N....u...L...)!

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 19, 2024 22:22:29.823544979 CEST	192.168.2.5	1.1.1.1	0x2805	Standard query (0)	protect-us.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:29.823728085 CEST	192.168.2.5	1.1.1.1	0xcde2	Standard query (0)	protect-us.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:30.529321909 CEST	192.168.2.5	1.1.1.1	0xcae2	Standard query (0)	freemanhealthsystem.login-us.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:30.529484987 CEST	192.168.2.5	1.1.1.1	0xeeb6	Standard query (0)	freemanhealthsystem.login-us.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:32.396207094 CEST	192.168.2.5	1.1.1.1	0x5a94	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:32.396584988 CEST	192.168.2.5	1.1.1.1	0x8ed3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:33.299096107 CEST	192.168.2.5	1.1.1.1	0x8bdf	Standard query (0)	static.srcspot.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:33.299529076 CEST	192.168.2.5	1.1.1.1	0xdbe0	Standard query (0)	static.srcspot.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:34.071381092 CEST	192.168.2.5	1.1.1.1	0xb8a0	Standard query (0)	cdn.pendo.io	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.071652889 CEST	192.168.2.5	1.1.1.1	0x9462	Standard query (0)	cdn.pendo.io	65	IN (0x0001)	false
Jul 19, 2024 22:22:34.167778969 CEST	192.168.2.5	1.1.1.1	0x3dfe	Standard query (0)	freemanhealthsystem.login-us.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.168068886 CEST	192.168.2.5	1.1.1.1	0xa341	Standard query (0)	freemanhealthsystem.login-us.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:34.855995893 CEST	192.168.2.5	1.1.1.1	0xe77f	Standard query (0)	static.srcspot.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.856379032 CEST	192.168.2.5	1.1.1.1	0xd03b	Standard query (0)	static.srcspot.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:35.448170900 CEST	192.168.2.5	1.1.1.1	0xbf6f	Standard query (0)	app.pendo.io	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:35.448743105 CEST	192.168.2.5	1.1.1.1	0x1c52	Standard query (0)	app.pendo.io	65	IN (0x0001)	false
Jul 19, 2024 22:22:35.461555004 CEST	192.168.2.5	1.1.1.1	0x929e	Standard query (0)	cdn.pendo.io	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:35.461852074 CEST	192.168.2.5	1.1.1.1	0x5b8d	Standard query (0)	cdn.pendo.io	65	IN (0x0001)	false
Jul 19, 2024 22:22:37.481229067 CEST	192.168.2.5	1.1.1.1	0xe9d	Standard query (0)	app.pendo.io	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:37.481460094 CEST	192.168.2.5	1.1.1.1	0x5123	Standard query (0)	app.pendo.io	65	IN (0x0001)	false
Jul 19, 2024 22:22:43.128180981 CEST	192.168.2.5	1.1.1.1	0x989d	Standard query (0)	www.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:43.128607988 CEST	192.168.2.5	1.1.1.1	0xa6fb	Standard query (0)	www.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:44.043122053 CEST	192.168.2.5	1.1.1.1	0x74c3	Standard query (0)	www.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:44.043365002 CEST	192.168.2.5	1.1.1.1	0xcd9a	Standard query (0)	www.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:45.845344067 CEST	192.168.2.5	1.1.1.1	0xb091	Standard query (0)	assets.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:45.845973969 CEST	192.168.2.5	1.1.1.1	0xee9e	Standard query (0)	assets.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:46.638271093 CEST	192.168.2.5	1.1.1.1	0x3c9e	Standard query (0)	assets.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:46.638417006 CEST	192.168.2.5	1.1.1.1	0xb8b3	Standard query (0)	assets.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:46.812653065 CEST	192.168.2.5	1.1.1.1	0xb31e	Standard query (0)	www.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:46.813002110 CEST	192.168.2.5	1.1.1.1	0x3897	Standard query (0)	www.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:47.387567043 CEST	192.168.2.5	1.1.1.1	0xf652	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:47.387989998 CEST	192.168.2.5	1.1.1.1	0xdbf0	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Jul 19, 2024 22:22:51.425086975 CEST	192.168.2.5	1.1.1.1	0xdd18	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.425255060 CEST	192.168.2.5	1.1.1.1	0x1c2d	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Jul 19, 2024 22:22:51.426114082 CEST	192.168.2.5	1.1.1.1	0x940c	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.426377058 CEST	192.168.2.5	1.1.1.1	0xed21	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:52.206727982 CEST	192.168.2.5	1.1.1.1	0x5069	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.207420111 CEST	192.168.2.5	1.1.1.1	0xfb29	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Jul 19, 2024 22:22:52.685571909 CEST	192.168.2.5	1.1.1.1	0xd261	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.685949087 CEST	192.168.2.5	1.1.1.1	0x197a	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:52.831792116 CEST	192.168.2.5	1.1.1.1	0xc499	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.831922054 CEST	192.168.2.5	1.1.1.1	0xb2cd	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:53.534955978 CEST	192.168.2.5	1.1.1.1	0x60d0	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:53.535367966 CEST	192.168.2.5	1.1.1.1	0x8f55	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jul 19, 2024 22:22:57.462412119 CEST	192.168.2.5	1.1.1.1	0xcc3a	Standard query (0)	community.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:57.462932110 CEST	192.168.2.5	1.1.1.1	0x8eab	Standard query (0)	community.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:06.300280094 CEST	192.168.2.5	1.1.1.1	0x4155	Standard query (0)	community.mimecast.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:06.300430059 CEST	192.168.2.5	1.1.1.1	0x3b5a	Standard query (0)	community.mimecast.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:12.189904928 CEST	192.168.2.5	1.1.1.1	0xfaf5	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:12.190409899 CEST	192.168.2.5	1.1.1.1	0xbeb7	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:13.984977007 CEST	192.168.2.5	1.1.1.1	0x6bdd	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:13.985390902 CEST	192.168.2.5	1.1.1.1	0xfa79	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:14.000226021 CEST	192.168.2.5	1.1.1.1	0x431f	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.000477076 CEST	192.168.2.5	1.1.1.1	0xab2d	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:14.018779039 CEST	192.168.2.5	1.1.1.1	0xeebf	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.019022942 CEST	192.168.2.5	1.1.1.1	0x9354	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:14.144524097 CEST	192.168.2.5	1.1.1.1	0x155b	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.144726992 CEST	192.168.2.5	1.1.1.1	0x3f1b	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:14.146620035 CEST	192.168.2.5	1.1.1.1	0x3a28	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.147016048 CEST	192.168.2.5	1.1.1.1	0xfb2c	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:15.142277002 CEST	192.168.2.5	1.1.1.1	0x51e3	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:15.142390966 CEST	192.168.2.5	1.1.1.1	0x66a4	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.365849018 CEST	192.168.2.5	1.1.1.1	0x5bea	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.365982056 CEST	192.168.2.5	1.1.1.1	0x95db	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.366405964 CEST	192.168.2.5	1.1.1.1	0x86c4	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.366558075 CEST	192.168.2.5	1.1.1.1	0xb9a0	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.367326975 CEST	192.168.2.5	1.1.1.1	0x67ad	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.367532969 CEST	192.168.2.5	1.1.1.1	0x26ea	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.368262053 CEST	192.168.2.5	1.1.1.1	0x687	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.368390083 CEST	192.168.2.5	1.1.1.1	0x40ef	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.368771076 CEST	192.168.2.5	1.1.1.1	0xec31	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.369092941 CEST	192.168.2.5	1.1.1.1	0xbd0f	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.382412910 CEST	192.168.2.5	1.1.1.1	0xef71	Standard query (0)	scout-cdn.salesloft.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.382534981 CEST	192.168.2.5	1.1.1.1	0x4c5c	Standard query (0)	scout-cdn.salesloft.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.985150099 CEST	192.168.2.5	1.1.1.1	0xab92	Standard query (0)	pixel.byspotify.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.985150099 CEST	192.168.2.5	1.1.1.1	0x25b4	Standard query (0)	pixel.byspotify.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.987967968 CEST	192.168.2.5	1.1.1.1	0xb168	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.988600016 CEST	192.168.2.5	1.1.1.1	0x1d76	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:29.991802931 CEST	192.168.2.5	1.1.1.1	0xdab0	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.991955042 CEST	192.168.2.5	1.1.1.1	0xa091	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.024770021 CEST	192.168.2.5	1.1.1.1	0x31b9	Standard query (0)	cdn.bttrack.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.024770021 CEST	192.168.2.5	1.1.1.1	0xba30	Standard query (0)	cdn.bttrack.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.026639938 CEST	192.168.2.5	1.1.1.1	0xfc25	Standard query (0)	scout.salesloft.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.026870966 CEST	192.168.2.5	1.1.1.1	0xa004	Standard query (0)	scout.salesloft.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.028403997 CEST	192.168.2.5	1.1.1.1	0x19e7	Standard query (0)	scout-cdn.salesloft.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.028675079 CEST	192.168.2.5	1.1.1.1	0xa02e	Standard query (0)	scout-cdn.salesloft.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.159678936 CEST	192.168.2.5	1.1.1.1	0xa0a8	Standard query (0)	s.ml-attr.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.159948111 CEST	192.168.2.5	1.1.1.1	0x399c	Standard query (0)	s.ml-attr.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.253329039 CEST	192.168.2.5	1.1.1.1	0x8f18	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.253468990 CEST	192.168.2.5	1.1.1.1	0x3513	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.262737989 CEST	192.168.2.5	1.1.1.1	0x69a4	Standard query (0)	cdn.mouseflow.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.264107943 CEST	192.168.2.5	1.1.1.1	0x16c4	Standard query (0)	cdn.mouseflow.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.329051018 CEST	192.168.2.5	1.1.1.1	0xf6b0	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.329051018 CEST	192.168.2.5	1.1.1.1	0x7fa1	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.331983089 CEST	192.168.2.5	1.1.1.1	0x41a0	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.331984043 CEST	192.168.2.5	1.1.1.1	0x1a3	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.896409988 CEST	192.168.2.5	1.1.1.1	0xc50f	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.896883011 CEST	192.168.2.5	1.1.1.1	0x50c8	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.918639898 CEST	192.168.2.5	1.1.1.1	0x33db	Standard query (0)	d2i34c80a0ftze.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.918768883 CEST	192.168.2.5	1.1.1.1	0xf12e	Standard query (0)	d2i34c80a0ftze.cloudfront.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.987833023 CEST	192.168.2.5	1.1.1.1	0xae11	Standard query (0)	9488543.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.988003969 CEST	192.168.2.5	1.1.1.1	0x2c89	Standard query (0)	9488543.fls.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.990688086 CEST	192.168.2.5	1.1.1.1	0x9324	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.991211891 CEST	192.168.2.5	1.1.1.1	0x43df	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:30.992033958 CEST	192.168.2.5	1.1.1.1	0x586b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.992398024 CEST	192.168.2.5	1.1.1.1	0x4bbb	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.058068991 CEST	192.168.2.5	1.1.1.1	0x2df6	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.058412075 CEST	192.168.2.5	1.1.1.1	0xd04e	Standard query (0)	t.co	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.100500107 CEST	192.168.2.5	1.1.1.1	0xb0ea	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.100651979 CEST	192.168.2.5	1.1.1.1	0x61df	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.107095957 CEST	192.168.2.5	1.1.1.1	0xb15	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.107238054 CEST	192.168.2.5	1.1.1.1	0x60bf	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.119486094 CEST	192.168.2.5	1.1.1.1	0xd3d3	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.119843960 CEST	192.168.2.5	1.1.1.1	0x12e6	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.132519007 CEST	192.168.2.5	1.1.1.1	0x60c5	Standard query (0)	pixels.spotify.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.132699966 CEST	192.168.2.5	1.1.1.1	0xd2e6	Standard query (0)	pixels.spotify.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.137527943 CEST	192.168.2.5	1.1.1.1	0x6018	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.137679100 CEST	192.168.2.5	1.1.1.1	0x717d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.257143021 CEST	192.168.2.5	1.1.1.1	0x6773	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.257285118 CEST	192.168.2.5	1.1.1.1	0xfa77	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.259810925 CEST	192.168.2.5	1.1.1.1	0x1b05	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.260137081 CEST	192.168.2.5	1.1.1.1	0x1c42	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.284972906 CEST	192.168.2.5	1.1.1.1	0x1576	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.285110950 CEST	192.168.2.5	1.1.1.1	0xc8c8	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.288395882 CEST	192.168.2.5	1.1.1.1	0x4143	Standard query (0)	scout.salesloft.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.288566113 CEST	192.168.2.5	1.1.1.1	0x1522	Standard query (0)	scout.salesloft.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.290786982 CEST	192.168.2.5	1.1.1.1	0xf411	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.290939093 CEST	192.168.2.5	1.1.1.1	0x3c7d	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.293093920 CEST	192.168.2.5	1.1.1.1	0xf4ea	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.293250084 CEST	192.168.2.5	1.1.1.1	0xae49	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.296205044 CEST	192.168.2.5	1.1.1.1	0x6203	Standard query (0)	pixel.byspotify.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.296333075 CEST	192.168.2.5	1.1.1.1	0x6a91	Standard query (0)	pixel.byspotify.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.404788971 CEST	192.168.2.5	1.1.1.1	0x8e15	Standard query (0)	cdn.bttrack.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.405060053 CEST	192.168.2.5	1.1.1.1	0xb0d3	Standard query (0)	cdn.bttrack.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.731232882 CEST	192.168.2.5	1.1.1.1	0x5134	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.731497049 CEST	192.168.2.5	1.1.1.1	0x8a18	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.813615084 CEST	192.168.2.5	1.1.1.1	0xc7c5	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.814011097 CEST	192.168.2.5	1.1.1.1	0x5350	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.815426111 CEST	192.168.2.5	1.1.1.1	0x8011	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.815426111 CEST	192.168.2.5	1.1.1.1	0x4f0b	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.835217953 CEST	192.168.2.5	1.1.1.1	0xe012	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.835217953 CEST	192.168.2.5	1.1.1.1	0xafbc	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:31.881514072 CEST	192.168.2.5	1.1.1.1	0x4b4d	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.881812096 CEST	192.168.2.5	1.1.1.1	0x6257	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.039942980 CEST	192.168.2.5	1.1.1.1	0x162c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.040457010 CEST	192.168.2.5	1.1.1.1	0xe8b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.052898884 CEST	192.168.2.5	1.1.1.1	0x2b06	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.053245068 CEST	192.168.2.5	1.1.1.1	0x6dab	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.061481953 CEST	192.168.2.5	1.1.1.1	0xe59b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.061705112 CEST	192.168.2.5	1.1.1.1	0xb943	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.110799074 CEST	192.168.2.5	1.1.1.1	0xfc	Standard query (0)	d2i34c80a0ftze.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.111006975 CEST	192.168.2.5	1.1.1.1	0xcaf4	Standard query (0)	d2i34c80a0ftze.cloudfront.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.115494967 CEST	192.168.2.5	1.1.1.1	0xde4f	Standard query (0)	336-tau-594.mktoresp.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.115495920 CEST	192.168.2.5	1.1.1.1	0x94af	Standard query (0)	336-tau-594.mktoresp.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.116489887 CEST	192.168.2.5	1.1.1.1	0x963c	Standard query (0)	st.fullcircleinsights.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.116489887 CEST	192.168.2.5	1.1.1.1	0x17c4	Standard query (0)	st.fullcircleinsights.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.120784998 CEST	192.168.2.5	1.1.1.1	0xf638	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.120956898 CEST	192.168.2.5	1.1.1.1	0x49d9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.147496939 CEST	192.168.2.5	1.1.1.1	0x82c	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.147741079 CEST	192.168.2.5	1.1.1.1	0x5ea3	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.239687920 CEST	192.168.2.5	1.1.1.1	0xb151	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.239687920 CEST	192.168.2.5	1.1.1.1	0x9984	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.353593111 CEST	192.168.2.5	1.1.1.1	0xacef	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.353593111 CEST	192.168.2.5	1.1.1.1	0x8b34	Standard query (0)	t.co	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.374631882 CEST	192.168.2.5	1.1.1.1	0x5954	Standard query (0)	pixels.spotify.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.375754118 CEST	192.168.2.5	1.1.1.1	0x94c5	Standard query (0)	pixels.spotify.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.416436911 CEST	192.168.2.5	1.1.1.1	0xb072	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.416595936 CEST	192.168.2.5	1.1.1.1	0xbd61	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.682782888 CEST	192.168.2.5	1.1.1.1	0xaf30	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.682941914 CEST	192.168.2.5	1.1.1.1	0x6a83	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.959522963 CEST	192.168.2.5	1.1.1.1	0xa5ad	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.959774017 CEST	192.168.2.5	1.1.1.1	0xb00b	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Jul 19, 2024 22:23:32.969324112 CEST	192.168.2.5	1.1.1.1	0xc944	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.969453096 CEST	192.168.2.5	1.1.1.1	0xd1af	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.060722113 CEST	192.168.2.5	1.1.1.1	0x8ef4	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.060846090 CEST	192.168.2.5	1.1.1.1	0x1689	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.089485884 CEST	192.168.2.5	1.1.1.1	0x9fe9	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.089898109 CEST	192.168.2.5	1.1.1.1	0x30a7	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.124444962 CEST	192.168.2.5	1.1.1.1	0xff61	Standard query (0)	attr.ml-api.io	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.124577999 CEST	192.168.2.5	1.1.1.1	0x9e0	Standard query (0)	attr.ml-api.io	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.188019037 CEST	192.168.2.5	1.1.1.1	0x67dd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.188154936 CEST	192.168.2.5	1.1.1.1	0xc15d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.411422968 CEST	192.168.2.5	1.1.1.1	0xf66c	Standard query (0)	o2.mouseflow.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.412266970 CEST	192.168.2.5	1.1.1.1	0x36c3	Standard query (0)	o2.mouseflow.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.517164946 CEST	192.168.2.5	1.1.1.1	0x1fcd	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.517388105 CEST	192.168.2.5	1.1.1.1	0x1ed3	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.707966089 CEST	192.168.2.5	1.1.1.1	0x153f	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.708281994 CEST	192.168.2.5	1.1.1.1	0x68a4	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.709089994 CEST	192.168.2.5	1.1.1.1	0x1cab	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.709255934 CEST	192.168.2.5	1.1.1.1	0xa50c	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:33.977417946 CEST	192.168.2.5	1.1.1.1	0x381d	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.977885008 CEST	192.168.2.5	1.1.1.1	0xc63e	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:34.623358965 CEST	192.168.2.5	1.1.1.1	0x11e6	Standard query (0)	o2.mouseflow.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:34.623359919 CEST	192.168.2.5	1.1.1.1	0x94d4	Standard query (0)	o2.mouseflow.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.625173092 CEST	192.168.2.5	1.1.1.1	0xafeb	Standard query (0)	attr.ml-api.io	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.625320911 CEST	192.168.2.5	1.1.1.1	0x2c97	Standard query (0)	attr.ml-api.io	65	IN (0x0001)	false
Jul 19, 2024 22:23:34.976644993 CEST	192.168.2.5	1.1.1.1	0x4962	Standard query (0)	st.fullcircleinsights.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.976895094 CEST	192.168.2.5	1.1.1.1	0x759e	Standard query (0)	st.fullcircleinsights.com	65	IN (0x0001)	false
Jul 19, 2024 22:23:35.022557974 CEST	192.168.2.5	1.1.1.1	0x4fe2	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.022751093 CEST	192.168.2.5	1.1.1.1	0x29a7	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jul 19, 2024 22:23:35.119611979 CEST	192.168.2.5	1.1.1.1	0x2fbd	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.122726917 CEST	192.168.2.5	1.1.1.1	0xa554	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:35.749593019 CEST	192.168.2.5	1.1.1.1	0xf08a	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.749798059 CEST	192.168.2.5	1.1.1.1	0xf585	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jul 19, 2024 22:23:36.042463064 CEST	192.168.2.5	1.1.1.1	0x68b0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:36.042702913 CEST	192.168.2.5	1.1.1.1	0xf8b0	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 19, 2024 22:22:29.832206964 CEST	1.1.1.1	192.168.2.5	0x2805	No error (0)	protect-us.mimecast.com		207.211.31.113	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:29.832206964 CEST	1.1.1.1	192.168.2.5	0x2805	No error (0)	protect-us.mimecast.com		207.211.31.64	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:29.832206964 CEST	1.1.1.1	192.168.2.5	0x2805	No error (0)	protect-us.mimecast.com		205.139.111.113	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:29.832206964 CEST	1.1.1.1	192.168.2.5	0x2805	No error (0)	protect-us.mimecast.com		205.139.111.12	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:29.832206964 CEST	1.1.1.1	192.168.2.5	0x2805	No error (0)	protect-us.mimecast.com		207.211.31.106	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:29.832206964 CEST	1.1.1.1	192.168.2.5	0x2805	No error (0)	protect-us.mimecast.com		205.139.111.117	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:30.554282904 CEST	1.1.1.1	192.168.2.5	0xcae2	No error (0)	freemanhealthsystem.login-us.mimecast.com		207.211.31.108	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:30.554282904 CEST	1.1.1.1	192.168.2.5	0xcae2	No error (0)	freemanhealthsystem.login-us.mimecast.com		207.211.31.121	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:30.554282904 CEST	1.1.1.1	192.168.2.5	0xcae2	No error (0)	freemanhealthsystem.login-us.mimecast.com		205.139.110.121	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:30.554282904 CEST	1.1.1.1	192.168.2.5	0xcae2	No error (0)	freemanhealthsystem.login-us.mimecast.com		207.211.31.115	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:30.554282904 CEST	1.1.1.1	192.168.2.5	0xcae2	No error (0)	freemanhealthsystem.login-us.mimecast.com		205.139.110.112	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:30.554282904 CEST	1.1.1.1	192.168.2.5	0xcae2	No error (0)	freemanhealthsystem.login-us.mimecast.com		205.139.110.115	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:32.405766010 CEST	1.1.1.1	192.168.2.5	0x5a94	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:32.405807018 CEST	1.1.1.1	192.168.2.5	0x8ed3	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 19, 2024 22:22:33.718305111 CEST	1.1.1.1	192.168.2.5	0x8bdf	No error (0)	static.srcspot.com		35.190.8.230	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.082179070 CEST	1.1.1.1	192.168.2.5	0xb8a0	No error (0)	cdn.pendo.io		34.36.213.229	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.192442894 CEST	1.1.1.1	192.168.2.5	0x3dfe	No error (0)	freemanhealthsystem.login-us.mimecast.com		207.211.31.115	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.192442894 CEST	1.1.1.1	192.168.2.5	0x3dfe	No error (0)	freemanhealthsystem.login-us.mimecast.com		207.211.31.108	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.192442894 CEST	1.1.1.1	192.168.2.5	0x3dfe	No error (0)	freemanhealthsystem.login-us.mimecast.com		205.139.110.121	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.192442894 CEST	1.1.1.1	192.168.2.5	0x3dfe	No error (0)	freemanhealthsystem.login-us.mimecast.com		207.211.31.121	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.192442894 CEST	1.1.1.1	192.168.2.5	0x3dfe	No error (0)	freemanhealthsystem.login-us.mimecast.com		205.139.110.112	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.192442894 CEST	1.1.1.1	192.168.2.5	0x3dfe	No error (0)	freemanhealthsystem.login-us.mimecast.com		205.139.110.115	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:34.864577055 CEST	1.1.1.1	192.168.2.5	0xe77f	No error (0)	static.srcspot.com		35.190.8.230	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:35.461447001 CEST	1.1.1.1	192.168.2.5	0xbf6f	No error (0)	app.pendo.io		34.107.204.85	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:35.478456974 CEST	1.1.1.1	192.168.2.5	0x929e	No error (0)	cdn.pendo.io		34.36.213.229	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:37.488595009 CEST	1.1.1.1	192.168.2.5	0xe9d	No error (0)	app.pendo.io		34.107.204.85	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:43.171051025 CEST	1.1.1.1	192.168.2.5	0xa6fb	No error (0)	www.mimecast.com	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:43.171051025 CEST	1.1.1.1	192.168.2.5	0xa6fb	No error (0)	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:43.178845882 CEST	1.1.1.1	192.168.2.5	0x989d	No error (0)	www.mimecast.com	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:43.178845882 CEST	1.1.1.1	192.168.2.5	0x989d	No error (0)	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:43.178845882 CEST	1.1.1.1	192.168.2.5	0x989d	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:43.178845882 CEST	1.1.1.1	192.168.2.5	0x989d	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:44.050860882 CEST	1.1.1.1	192.168.2.5	0x74c3	No error (0)	www.mimecast.com	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:44.050860882 CEST	1.1.1.1	192.168.2.5	0x74c3	No error (0)	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:44.050860882 CEST	1.1.1.1	192.168.2.5	0x74c3	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:44.050860882 CEST	1.1.1.1	192.168.2.5	0x74c3	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:44.090533018 CEST	1.1.1.1	192.168.2.5	0xcd9a	No error (0)	www.mimecast.com	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:44.090533018 CEST	1.1.1.1	192.168.2.5	0xcd9a	No error (0)	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:45.890642881 CEST	1.1.1.1	192.168.2.5	0xee9e	No error (0)	assets.mimecast.com	mct-p-001-delivery.sitecorecontenthub.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:45.890642881 CEST	1.1.1.1	192.168.2.5	0xee9e	No error (0)	mct-p-001-delivery.sitecorecontenthub.cloud			65	IN (0x0001)	false
Jul 19, 2024 22:22:45.972563982 CEST	1.1.1.1	192.168.2.5	0xb091	No error (0)	assets.mimecast.com	mct-p-001-delivery.sitecorecontenthub.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:45.972563982 CEST	1.1.1.1	192.168.2.5	0xb091	No error (0)	mct-p-001-delivery.sitecorecontenthub.cloud		104.18.39.66	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:45.972563982 CEST	1.1.1.1	192.168.2.5	0xb091	No error (0)	mct-p-001-delivery.sitecorecontenthub.cloud		172.64.148.190	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:46.650558949 CEST	1.1.1.1	192.168.2.5	0x3c9e	No error (0)	assets.mimecast.com	mct-p-001-delivery.sitecorecontenthub.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:46.650558949 CEST	1.1.1.1	192.168.2.5	0x3c9e	No error (0)	mct-p-001-delivery.sitecorecontenthub.cloud		104.18.39.66	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:46.650558949 CEST	1.1.1.1	192.168.2.5	0x3c9e	No error (0)	mct-p-001-delivery.sitecorecontenthub.cloud		172.64.148.190	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:46.684336901 CEST	1.1.1.1	192.168.2.5	0xb8b3	No error (0)	assets.mimecast.com	mct-p-001-delivery.sitecorecontenthub.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:46.684336901 CEST	1.1.1.1	192.168.2.5	0xb8b3	No error (0)	mct-p-001-delivery.sitecorecontenthub.cloud			65	IN (0x0001)	false
Jul 19, 2024 22:22:46.853379965 CEST	1.1.1.1	192.168.2.5	0xb31e	No error (0)	www.mimecast.com	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:46.853379965 CEST	1.1.1.1	192.168.2.5	0xb31e	No error (0)	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:46.853379965 CEST	1.1.1.1	192.168.2.5	0xb31e	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:46.853379965 CEST	1.1.1.1	192.168.2.5	0xb31e	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:46.875217915 CEST	1.1.1.1	192.168.2.5	0x3897	No error (0)	www.mimecast.com	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:46.875217915 CEST	1.1.1.1	192.168.2.5	0x3897	No error (0)	mc-7031c099-5948-40b8-8d4c-4177-headless-fd1.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:47.395359039 CEST	1.1.1.1	192.168.2.5	0xdbf0	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:47.396559954 CEST	1.1.1.1	192.168.2.5	0xf652	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:51.432934999 CEST	1.1.1.1	192.168.2.5	0x1c2d	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Jul 19, 2024 22:22:51.433037043 CEST	1.1.1.1	192.168.2.5	0xdd18	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.433037043 CEST	1.1.1.1	192.168.2.5	0xdd18	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.433315992 CEST	1.1.1.1	192.168.2.5	0x940c	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.433315992 CEST	1.1.1.1	192.168.2.5	0x940c	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.433315992 CEST	1.1.1.1	192.168.2.5	0x940c	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.433315992 CEST	1.1.1.1	192.168.2.5	0x940c	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.433315992 CEST	1.1.1.1	192.168.2.5	0x940c	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:51.433537006 CEST	1.1.1.1	192.168.2.5	0xed21	No error (0)	unpkg.com			65	IN (0x0001)	false
Jul 19, 2024 22:22:52.215648890 CEST	1.1.1.1	192.168.2.5	0x5069	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.215648890 CEST	1.1.1.1	192.168.2.5	0x5069	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.215703011 CEST	1.1.1.1	192.168.2.5	0xfb29	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Jul 19, 2024 22:22:52.693397999 CEST	1.1.1.1	192.168.2.5	0xd261	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.693397999 CEST	1.1.1.1	192.168.2.5	0xd261	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.693397999 CEST	1.1.1.1	192.168.2.5	0xd261	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.693397999 CEST	1.1.1.1	192.168.2.5	0xd261	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.693397999 CEST	1.1.1.1	192.168.2.5	0xd261	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.693416119 CEST	1.1.1.1	192.168.2.5	0x197a	No error (0)	unpkg.com			65	IN (0x0001)	false
Jul 19, 2024 22:22:52.840744019 CEST	1.1.1.1	192.168.2.5	0xb2cd	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Jul 19, 2024 22:22:52.840852022 CEST	1.1.1.1	192.168.2.5	0xc499	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:52.840852022 CEST	1.1.1.1	192.168.2.5	0xc499	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:53.542668104 CEST	1.1.1.1	192.168.2.5	0x60d0	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:53.542668104 CEST	1.1.1.1	192.168.2.5	0x60d0	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:53.542747021 CEST	1.1.1.1	192.168.2.5	0x8f55	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Jul 19, 2024 22:22:57.491640091 CEST	1.1.1.1	192.168.2.5	0x8eab	No error (0)	community.mimecast.com	community.mimecast.com.00d1n000001dmvpuao.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:57.491640091 CEST	1.1.1.1	192.168.2.5	0x8eab	No error (0)	community.mimecast.com.00d1n000001dmvpuao.live.siteforce.com	h.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:57.491640091 CEST	1.1.1.1	192.168.2.5	0x8eab	No error (0)	h.edge2.salesforce.com	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:57.526885986 CEST	1.1.1.1	192.168.2.5	0xcc3a	No error (0)	community.mimecast.com	community.mimecast.com.00d1n000001dmvpuao.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:57.526885986 CEST	1.1.1.1	192.168.2.5	0xcc3a	No error (0)	community.mimecast.com.00d1n000001dmvpuao.live.siteforce.com	h.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:57.526885986 CEST	1.1.1.1	192.168.2.5	0xcc3a	No error (0)	h.edge2.salesforce.com	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:22:57.526885986 CEST	1.1.1.1	192.168.2.5	0xcc3a	No error (0)	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		35.158.127.51	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:57.526885986 CEST	1.1.1.1	192.168.2.5	0xcc3a	No error (0)	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		35.158.127.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:22:57.526885986 CEST	1.1.1.1	192.168.2.5	0xcc3a	No error (0)	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		35.158.127.53	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:06.335525990 CEST	1.1.1.1	192.168.2.5	0x3b5a	No error (0)	community.mimecast.com	community.mimecast.com.00d1n000001dmvpuao.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:06.335525990 CEST	1.1.1.1	192.168.2.5	0x3b5a	No error (0)	community.mimecast.com.00d1n000001dmvpuao.live.siteforce.com	h.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:06.335525990 CEST	1.1.1.1	192.168.2.5	0x3b5a	No error (0)	h.edge2.salesforce.com	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:06.347253084 CEST	1.1.1.1	192.168.2.5	0x4155	No error (0)	community.mimecast.com	community.mimecast.com.00d1n000001dmvpuao.live.siteforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:06.347253084 CEST	1.1.1.1	192.168.2.5	0x4155	No error (0)	community.mimecast.com.00d1n000001dmvpuao.live.siteforce.com	h.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:06.347253084 CEST	1.1.1.1	192.168.2.5	0x4155	No error (0)	h.edge2.salesforce.com	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:06.347253084 CEST	1.1.1.1	192.168.2.5	0x4155	No error (0)	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		35.158.127.51	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:06.347253084 CEST	1.1.1.1	192.168.2.5	0x4155	No error (0)	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		35.158.127.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:06.347253084 CEST	1.1.1.1	192.168.2.5	0x4155	No error (0)	st1.edge.sfdc-yzvdd4.edge2.salesforce.com		35.158.127.53	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:12.336647987 CEST	1.1.1.1	192.168.2.5	0xfaf5	No error (0)	tag.demandbase.com		143.204.9.21	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:12.336647987 CEST	1.1.1.1	192.168.2.5	0xfaf5	No error (0)	tag.demandbase.com		143.204.9.26	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:12.336647987 CEST	1.1.1.1	192.168.2.5	0xfaf5	No error (0)	tag.demandbase.com		143.204.9.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:12.336647987 CEST	1.1.1.1	192.168.2.5	0xfaf5	No error (0)	tag.demandbase.com		143.204.9.105	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:13.993556023 CEST	1.1.1.1	192.168.2.5	0x6bdd	No error (0)	api.company-target.com		13.32.110.120	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:13.993556023 CEST	1.1.1.1	192.168.2.5	0x6bdd	No error (0)	api.company-target.com		13.32.110.72	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:13.993556023 CEST	1.1.1.1	192.168.2.5	0x6bdd	No error (0)	api.company-target.com		13.32.110.23	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:13.993556023 CEST	1.1.1.1	192.168.2.5	0x6bdd	No error (0)	api.company-target.com		13.32.110.87	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.007832050 CEST	1.1.1.1	192.168.2.5	0x431f	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.027116060 CEST	1.1.1.1	192.168.2.5	0xeebf	No error (0)	tag.demandbase.com		143.204.9.105	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.027116060 CEST	1.1.1.1	192.168.2.5	0xeebf	No error (0)	tag.demandbase.com		143.204.9.21	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.027116060 CEST	1.1.1.1	192.168.2.5	0xeebf	No error (0)	tag.demandbase.com		143.204.9.26	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.027116060 CEST	1.1.1.1	192.168.2.5	0xeebf	No error (0)	tag.demandbase.com		143.204.9.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.152540922 CEST	1.1.1.1	192.168.2.5	0x3f1b	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:14.152961969 CEST	1.1.1.1	192.168.2.5	0x155b	No error (0)	analytics.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.153434038 CEST	1.1.1.1	192.168.2.5	0x3a28	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.153434038 CEST	1.1.1.1	192.168.2.5	0x3a28	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.153434038 CEST	1.1.1.1	192.168.2.5	0x3a28	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:14.153434038 CEST	1.1.1.1	192.168.2.5	0x3a28	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:15.150203943 CEST	1.1.1.1	192.168.2.5	0x51e3	No error (0)	api.company-target.com		13.227.219.42	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:15.150203943 CEST	1.1.1.1	192.168.2.5	0x51e3	No error (0)	api.company-target.com		13.227.219.127	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:15.150203943 CEST	1.1.1.1	192.168.2.5	0x51e3	No error (0)	api.company-target.com		13.227.219.102	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:15.150203943 CEST	1.1.1.1	192.168.2.5	0x51e3	No error (0)	api.company-target.com		13.227.219.83	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.374541998 CEST	1.1.1.1	192.168.2.5	0x95db	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.375144958 CEST	1.1.1.1	192.168.2.5	0x86c4	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.375715017 CEST	1.1.1.1	192.168.2.5	0x67ad	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.375715017 CEST	1.1.1.1	192.168.2.5	0x67ad	No error (0)	platform.twitter.map.fastly.net		146.75.120.157	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.376132011 CEST	1.1.1.1	192.168.2.5	0x26ea	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.376693964 CEST	1.1.1.1	192.168.2.5	0x5bea	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.376708984 CEST	1.1.1.1	192.168.2.5	0x687	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.376708984 CEST	1.1.1.1	192.168.2.5	0x687	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.376708984 CEST	1.1.1.1	192.168.2.5	0x687	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.376708984 CEST	1.1.1.1	192.168.2.5	0x687	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.376708984 CEST	1.1.1.1	192.168.2.5	0x687	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.377240896 CEST	1.1.1.1	192.168.2.5	0xb9a0	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.378074884 CEST	1.1.1.1	192.168.2.5	0xec31	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.378590107 CEST	1.1.1.1	192.168.2.5	0xbd0f	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.379528046 CEST	1.1.1.1	192.168.2.5	0x40ef	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.391266108 CEST	1.1.1.1	192.168.2.5	0x4c5c	No error (0)	scout-cdn.salesloft.com	scout-cdn.salesloft.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.391788960 CEST	1.1.1.1	192.168.2.5	0xef71	No error (0)	scout-cdn.salesloft.com	scout-cdn.salesloft.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.993912935 CEST	1.1.1.1	192.168.2.5	0x25b4	No error (0)	pixel.byspotify.com		34.117.162.98	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.995683908 CEST	1.1.1.1	192.168.2.5	0xb168	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.995683908 CEST	1.1.1.1	192.168.2.5	0xb168	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.995683908 CEST	1.1.1.1	192.168.2.5	0xb168	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.995683908 CEST	1.1.1.1	192.168.2.5	0xb168	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.995683908 CEST	1.1.1.1	192.168.2.5	0xb168	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.996632099 CEST	1.1.1.1	192.168.2.5	0x1d76	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.999324083 CEST	1.1.1.1	192.168.2.5	0xdab0	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:29.999324083 CEST	1.1.1.1	192.168.2.5	0xdab0	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.999324083 CEST	1.1.1.1	192.168.2.5	0xdab0	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.999324083 CEST	1.1.1.1	192.168.2.5	0xdab0	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:29.999324083 CEST	1.1.1.1	192.168.2.5	0xdab0	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.000693083 CEST	1.1.1.1	192.168.2.5	0xa091	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.034559011 CEST	1.1.1.1	192.168.2.5	0xfc25	No error (0)	scout.salesloft.com	scout.us1.salesloft.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.034559011 CEST	1.1.1.1	192.168.2.5	0xfc25	No error (0)	scout.us1.salesloft.com		52.70.247.33	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.034559011 CEST	1.1.1.1	192.168.2.5	0xfc25	No error (0)	scout.us1.salesloft.com		54.147.88.235	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.034559011 CEST	1.1.1.1	192.168.2.5	0xfc25	No error (0)	scout.us1.salesloft.com		54.158.232.70	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.035562038 CEST	1.1.1.1	192.168.2.5	0x31b9	No error (0)	cdn.bttrack.com	cdn.bttrack.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.035576105 CEST	1.1.1.1	192.168.2.5	0xba30	No error (0)	cdn.bttrack.com	cdn.bttrack.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.036039114 CEST	1.1.1.1	192.168.2.5	0x19e7	No error (0)	scout-cdn.salesloft.com	scout-cdn.salesloft.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.036448956 CEST	1.1.1.1	192.168.2.5	0xa02e	No error (0)	scout-cdn.salesloft.com	scout-cdn.salesloft.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.037604094 CEST	1.1.1.1	192.168.2.5	0xa004	No error (0)	scout.salesloft.com	scout.us1.salesloft.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.180540085 CEST	1.1.1.1	192.168.2.5	0x399c	No error (0)	s.ml-attr.com	s.ml-attr.com.pxlsrv.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.181202888 CEST	1.1.1.1	192.168.2.5	0xa0a8	No error (0)	s.ml-attr.com	s.ml-attr.com.pxlsrv.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.181202888 CEST	1.1.1.1	192.168.2.5	0xa0a8	No error (0)	s.ml-attr.com.pxlsrv.net		68.67.153.60	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.262224913 CEST	1.1.1.1	192.168.2.5	0x8f18	No error (0)	di.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.270819902 CEST	1.1.1.1	192.168.2.5	0x69a4	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.272360086 CEST	1.1.1.1	192.168.2.5	0x16c4	No error (0)	cdn.mouseflow.com	cdn.mouseflow.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.336942911 CEST	1.1.1.1	192.168.2.5	0xf6b0	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.336942911 CEST	1.1.1.1	192.168.2.5	0xf6b0	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.336942911 CEST	1.1.1.1	192.168.2.5	0xf6b0	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.336942911 CEST	1.1.1.1	192.168.2.5	0xf6b0	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.336942911 CEST	1.1.1.1	192.168.2.5	0xf6b0	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.336982965 CEST	1.1.1.1	192.168.2.5	0x7fa1	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.339507103 CEST	1.1.1.1	192.168.2.5	0x41a0	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.341142893 CEST	1.1.1.1	192.168.2.5	0x1a3	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.905386925 CEST	1.1.1.1	192.168.2.5	0xc50f	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.905386925 CEST	1.1.1.1	192.168.2.5	0xc50f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.907573938 CEST	1.1.1.1	192.168.2.5	0x50c8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.907573938 CEST	1.1.1.1	192.168.2.5	0x50c8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:30.931559086 CEST	1.1.1.1	192.168.2.5	0x33db	No error (0)	d2i34c80a0ftze.cloudfront.net		3.165.206.35	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.931559086 CEST	1.1.1.1	192.168.2.5	0x33db	No error (0)	d2i34c80a0ftze.cloudfront.net		3.165.206.100	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.931559086 CEST	1.1.1.1	192.168.2.5	0x33db	No error (0)	d2i34c80a0ftze.cloudfront.net		3.165.206.96	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.931559086 CEST	1.1.1.1	192.168.2.5	0x33db	No error (0)	d2i34c80a0ftze.cloudfront.net		3.165.206.31	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.997663975 CEST	1.1.1.1	192.168.2.5	0x9324	No error (0)	td.doubleclick.net		172.217.23.98	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.998820066 CEST	1.1.1.1	192.168.2.5	0x586b	No error (0)	ad.doubleclick.net		142.250.181.230	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:30.999811888 CEST	1.1.1.1	192.168.2.5	0x4bbb	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jul 19, 2024 22:23:31.008605003 CEST	1.1.1.1	192.168.2.5	0xae11	No error (0)	9488543.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.008605003 CEST	1.1.1.1	192.168.2.5	0xae11	No error (0)	dart.l.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.013308048 CEST	1.1.1.1	192.168.2.5	0x2c89	No error (0)	9488543.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.065385103 CEST	1.1.1.1	192.168.2.5	0x2df6	No error (0)	t.co		93.184.221.165	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.110153913 CEST	1.1.1.1	192.168.2.5	0xb0ea	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.110153913 CEST	1.1.1.1	192.168.2.5	0xb0ea	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.114164114 CEST	1.1.1.1	192.168.2.5	0x60bf	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.114164114 CEST	1.1.1.1	192.168.2.5	0x60bf	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.115036964 CEST	1.1.1.1	192.168.2.5	0xb15	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.115036964 CEST	1.1.1.1	192.168.2.5	0xb15	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.115036964 CEST	1.1.1.1	192.168.2.5	0xb15	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.126852989 CEST	1.1.1.1	192.168.2.5	0xd3d3	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.126852989 CEST	1.1.1.1	192.168.2.5	0xd3d3	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.126852989 CEST	1.1.1.1	192.168.2.5	0xd3d3	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.126852989 CEST	1.1.1.1	192.168.2.5	0xd3d3	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.126852989 CEST	1.1.1.1	192.168.2.5	0xd3d3	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.126852989 CEST	1.1.1.1	192.168.2.5	0xd3d3	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.126852989 CEST	1.1.1.1	192.168.2.5	0xd3d3	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.126852989 CEST	1.1.1.1	192.168.2.5	0xd3d3	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.131083965 CEST	1.1.1.1	192.168.2.5	0x61df	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.140614986 CEST	1.1.1.1	192.168.2.5	0xd2e6	No error (0)	pixels.spotify.com	edge-web.dual-gslb.spotify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.140757084 CEST	1.1.1.1	192.168.2.5	0x60c5	No error (0)	pixels.spotify.com	edge-web.dual-gslb.spotify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.140757084 CEST	1.1.1.1	192.168.2.5	0x60c5	No error (0)	edge-web.dual-gslb.spotify.com		35.186.224.24	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.145169973 CEST	1.1.1.1	192.168.2.5	0x717d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 19, 2024 22:23:31.145416021 CEST	1.1.1.1	192.168.2.5	0x6018	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.264023066 CEST	1.1.1.1	192.168.2.5	0x6773	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.264765024 CEST	1.1.1.1	192.168.2.5	0xfa77	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.268085003 CEST	1.1.1.1	192.168.2.5	0x1c42	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.268095016 CEST	1.1.1.1	192.168.2.5	0x1b05	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.268095016 CEST	1.1.1.1	192.168.2.5	0x1b05	No error (0)	platform.twitter.map.fastly.net		146.75.120.157	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.292931080 CEST	1.1.1.1	192.168.2.5	0x1576	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.292931080 CEST	1.1.1.1	192.168.2.5	0x1576	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.292931080 CEST	1.1.1.1	192.168.2.5	0x1576	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.292931080 CEST	1.1.1.1	192.168.2.5	0x1576	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.292931080 CEST	1.1.1.1	192.168.2.5	0x1576	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.294495106 CEST	1.1.1.1	192.168.2.5	0xc8c8	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.296533108 CEST	1.1.1.1	192.168.2.5	0x4143	No error (0)	scout.salesloft.com	scout.us1.salesloft.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.296533108 CEST	1.1.1.1	192.168.2.5	0x4143	No error (0)	scout.us1.salesloft.com		54.158.232.70	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.296533108 CEST	1.1.1.1	192.168.2.5	0x4143	No error (0)	scout.us1.salesloft.com		52.70.247.33	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.296533108 CEST	1.1.1.1	192.168.2.5	0x4143	No error (0)	scout.us1.salesloft.com		54.147.88.235	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.296545982 CEST	1.1.1.1	192.168.2.5	0x1522	No error (0)	scout.salesloft.com	scout.us1.salesloft.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.298222065 CEST	1.1.1.1	192.168.2.5	0xf411	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.298222065 CEST	1.1.1.1	192.168.2.5	0xf411	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.298222065 CEST	1.1.1.1	192.168.2.5	0xf411	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.298222065 CEST	1.1.1.1	192.168.2.5	0xf411	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.298222065 CEST	1.1.1.1	192.168.2.5	0xf411	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.298502922 CEST	1.1.1.1	192.168.2.5	0x3c7d	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.300107002 CEST	1.1.1.1	192.168.2.5	0xf4ea	No error (0)	di.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.304289103 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	pixel.byspotify.com		34.117.162.98	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.414850950 CEST	1.1.1.1	192.168.2.5	0xb0d3	No error (0)	cdn.bttrack.com	cdn.bttrack.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.416083097 CEST	1.1.1.1	192.168.2.5	0x8e15	No error (0)	cdn.bttrack.com	cdn.bttrack.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.743648052 CEST	1.1.1.1	192.168.2.5	0x5134	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.743648052 CEST	1.1.1.1	192.168.2.5	0x5134	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.745009899 CEST	1.1.1.1	192.168.2.5	0x8a18	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.745009899 CEST	1.1.1.1	192.168.2.5	0x8a18	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.821175098 CEST	1.1.1.1	192.168.2.5	0xc7c5	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.821175098 CEST	1.1.1.1	192.168.2.5	0xc7c5	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.821413994 CEST	1.1.1.1	192.168.2.5	0x5350	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.3.44.213	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.203.244.84	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.210.24.199	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.89.34.43	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.224.109.222	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.213.50.156	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.37.252	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.822887897 CEST	1.1.1.1	192.168.2.5	0x8011	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.93.158.104	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.823250055 CEST	1.1.1.1	192.168.2.5	0x4f0b	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.842655897 CEST	1.1.1.1	192.168.2.5	0xafbc	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.842900991 CEST	1.1.1.1	192.168.2.5	0xe012	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.888873100 CEST	1.1.1.1	192.168.2.5	0x4b4d	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.888873100 CEST	1.1.1.1	192.168.2.5	0x4b4d	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.888873100 CEST	1.1.1.1	192.168.2.5	0x4b4d	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:31.889503002 CEST	1.1.1.1	192.168.2.5	0x6257	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:31.889503002 CEST	1.1.1.1	192.168.2.5	0x6257	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.048584938 CEST	1.1.1.1	192.168.2.5	0x162c	No error (0)	ad.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.048868895 CEST	1.1.1.1	192.168.2.5	0xe8b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jul 19, 2024 22:23:32.060364008 CEST	1.1.1.1	192.168.2.5	0x2b06	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.060364008 CEST	1.1.1.1	192.168.2.5	0x2b06	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.060364008 CEST	1.1.1.1	192.168.2.5	0x2b06	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.069480896 CEST	1.1.1.1	192.168.2.5	0xe59b	No error (0)	ad.doubleclick.net		142.250.186.70	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.073002100 CEST	1.1.1.1	192.168.2.5	0xb943	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jul 19, 2024 22:23:32.121615887 CEST	1.1.1.1	192.168.2.5	0xfc	No error (0)	d2i34c80a0ftze.cloudfront.net		18.239.94.80	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.121615887 CEST	1.1.1.1	192.168.2.5	0xfc	No error (0)	d2i34c80a0ftze.cloudfront.net		18.239.94.30	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.121615887 CEST	1.1.1.1	192.168.2.5	0xfc	No error (0)	d2i34c80a0ftze.cloudfront.net		18.239.94.90	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.121615887 CEST	1.1.1.1	192.168.2.5	0xfc	No error (0)	d2i34c80a0ftze.cloudfront.net		18.239.94.10	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.128148079 CEST	1.1.1.1	192.168.2.5	0xf638	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.129030943 CEST	1.1.1.1	192.168.2.5	0x49d9	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 19, 2024 22:23:32.129733086 CEST	1.1.1.1	192.168.2.5	0x17c4	No error (0)	st.fullcircleinsights.com	aws-st.fullcircleinsights.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.129733086 CEST	1.1.1.1	192.168.2.5	0x17c4	No error (0)	aws-st.fullcircleinsights.com	d87k89vas8kdl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.133538961 CEST	1.1.1.1	192.168.2.5	0x963c	No error (0)	st.fullcircleinsights.com	aws-st.fullcircleinsights.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.133538961 CEST	1.1.1.1	192.168.2.5	0x963c	No error (0)	aws-st.fullcircleinsights.com	d87k89vas8kdl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.133538961 CEST	1.1.1.1	192.168.2.5	0x963c	No error (0)	d87k89vas8kdl.cloudfront.net		52.222.169.27	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.133538961 CEST	1.1.1.1	192.168.2.5	0x963c	No error (0)	d87k89vas8kdl.cloudfront.net		52.222.169.98	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.133538961 CEST	1.1.1.1	192.168.2.5	0x963c	No error (0)	d87k89vas8kdl.cloudfront.net		52.222.169.37	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.133538961 CEST	1.1.1.1	192.168.2.5	0x963c	No error (0)	d87k89vas8kdl.cloudfront.net		52.222.169.11	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.156425953 CEST	1.1.1.1	192.168.2.5	0x82c	No error (0)	tag-logger.demandbase.com		18.239.18.49	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.156425953 CEST	1.1.1.1	192.168.2.5	0x82c	No error (0)	tag-logger.demandbase.com		18.239.18.53	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.156425953 CEST	1.1.1.1	192.168.2.5	0x82c	No error (0)	tag-logger.demandbase.com		18.239.18.15	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.156425953 CEST	1.1.1.1	192.168.2.5	0x82c	No error (0)	tag-logger.demandbase.com		18.239.18.62	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.209431887 CEST	1.1.1.1	192.168.2.5	0x94af	No error (0)	336-tau-594.mktoresp.com		134.213.193.62	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.246934891 CEST	1.1.1.1	192.168.2.5	0xb151	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.246952057 CEST	1.1.1.1	192.168.2.5	0x9984	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 19, 2024 22:23:32.360728979 CEST	1.1.1.1	192.168.2.5	0xacef	No error (0)	t.co		93.184.221.165	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.383099079 CEST	1.1.1.1	192.168.2.5	0x5954	No error (0)	pixels.spotify.com	edge-web.dual-gslb.spotify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.383099079 CEST	1.1.1.1	192.168.2.5	0x5954	No error (0)	edge-web.dual-gslb.spotify.com		35.186.224.24	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.384033918 CEST	1.1.1.1	192.168.2.5	0x94c5	No error (0)	pixels.spotify.com	edge-web.dual-gslb.spotify.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.423748016 CEST	1.1.1.1	192.168.2.5	0xb072	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.423748016 CEST	1.1.1.1	192.168.2.5	0xb072	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.424751997 CEST	1.1.1.1	192.168.2.5	0xbd61	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.424751997 CEST	1.1.1.1	192.168.2.5	0xbd61	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.690992117 CEST	1.1.1.1	192.168.2.5	0x6a83	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.214.204.165	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.203.244.84	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.210.24.199	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.213.50.156	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.87.43.236	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.4.154.75	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.20.37.252	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.691011906 CEST	1.1.1.1	192.168.2.5	0xaf30	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.227.43.248	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.966841936 CEST	1.1.1.1	192.168.2.5	0xa5ad	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.966841936 CEST	1.1.1.1	192.168.2.5	0xa5ad	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.966841936 CEST	1.1.1.1	192.168.2.5	0xa5ad	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.966841936 CEST	1.1.1.1	192.168.2.5	0xa5ad	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.976155996 CEST	1.1.1.1	192.168.2.5	0xc944	No error (0)	adservice.google.com		172.217.16.194	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:32.976913929 CEST	1.1.1.1	192.168.2.5	0xd1af	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jul 19, 2024 22:23:33.067863941 CEST	1.1.1.1	192.168.2.5	0x8ef4	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:33.068470955 CEST	1.1.1.1	192.168.2.5	0x1689	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:33.096566916 CEST	1.1.1.1	192.168.2.5	0x30a7	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jul 19, 2024 22:23:33.097173929 CEST	1.1.1.1	192.168.2.5	0x9fe9	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.097173929 CEST	1.1.1.1	192.168.2.5	0x9fe9	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.133105040 CEST	1.1.1.1	192.168.2.5	0xff61	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:33.133105040 CEST	1.1.1.1	192.168.2.5	0xff61	No error (0)	d2qlomkzr3gd97.cloudfront.net		65.9.66.54	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.133105040 CEST	1.1.1.1	192.168.2.5	0xff61	No error (0)	d2qlomkzr3gd97.cloudfront.net		65.9.66.49	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.133105040 CEST	1.1.1.1	192.168.2.5	0xff61	No error (0)	d2qlomkzr3gd97.cloudfront.net		65.9.66.67	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.133105040 CEST	1.1.1.1	192.168.2.5	0xff61	No error (0)	d2qlomkzr3gd97.cloudfront.net		65.9.66.5	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.151396990 CEST	1.1.1.1	192.168.2.5	0x9e0	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:33.195807934 CEST	1.1.1.1	192.168.2.5	0x67dd	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.195826054 CEST	1.1.1.1	192.168.2.5	0xc15d	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 19, 2024 22:23:33.419017076 CEST	1.1.1.1	192.168.2.5	0xf66c	No error (0)	o2.mouseflow.com		185.17.186.161	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.419017076 CEST	1.1.1.1	192.168.2.5	0xf66c	No error (0)	o2.mouseflow.com		185.17.186.162	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.526851892 CEST	1.1.1.1	192.168.2.5	0x1fcd	No error (0)	tag-logger.demandbase.com		18.239.18.15	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.526851892 CEST	1.1.1.1	192.168.2.5	0x1fcd	No error (0)	tag-logger.demandbase.com		18.239.18.53	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.526851892 CEST	1.1.1.1	192.168.2.5	0x1fcd	No error (0)	tag-logger.demandbase.com		18.239.18.62	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.526851892 CEST	1.1.1.1	192.168.2.5	0x1fcd	No error (0)	tag-logger.demandbase.com		18.239.18.49	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.714884043 CEST	1.1.1.1	192.168.2.5	0x153f	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.714884043 CEST	1.1.1.1	192.168.2.5	0x153f	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.714884043 CEST	1.1.1.1	192.168.2.5	0x153f	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.716694117 CEST	1.1.1.1	192.168.2.5	0x1cab	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.984864950 CEST	1.1.1.1	192.168.2.5	0x381d	No error (0)	adservice.google.com		172.217.16.194	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:33.984927893 CEST	1.1.1.1	192.168.2.5	0xc63e	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jul 19, 2024 22:23:34.632323027 CEST	1.1.1.1	192.168.2.5	0x94d4	No error (0)	o2.mouseflow.com		185.17.186.162	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.632323027 CEST	1.1.1.1	192.168.2.5	0x94d4	No error (0)	o2.mouseflow.com		185.17.186.161	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.638195992 CEST	1.1.1.1	192.168.2.5	0x2c97	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:34.649568081 CEST	1.1.1.1	192.168.2.5	0xafeb	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:34.649568081 CEST	1.1.1.1	192.168.2.5	0xafeb	No error (0)	d2qlomkzr3gd97.cloudfront.net		65.9.66.49	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.649568081 CEST	1.1.1.1	192.168.2.5	0xafeb	No error (0)	d2qlomkzr3gd97.cloudfront.net		65.9.66.54	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.649568081 CEST	1.1.1.1	192.168.2.5	0xafeb	No error (0)	d2qlomkzr3gd97.cloudfront.net		65.9.66.5	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.649568081 CEST	1.1.1.1	192.168.2.5	0xafeb	No error (0)	d2qlomkzr3gd97.cloudfront.net		65.9.66.67	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.990274906 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	st.fullcircleinsights.com	aws-st.fullcircleinsights.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:34.990274906 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	aws-st.fullcircleinsights.com	d87k89vas8kdl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:34.994020939 CEST	1.1.1.1	192.168.2.5	0x4962	No error (0)	st.fullcircleinsights.com	aws-st.fullcircleinsights.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:34.994020939 CEST	1.1.1.1	192.168.2.5	0x4962	No error (0)	aws-st.fullcircleinsights.com	d87k89vas8kdl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 19, 2024 22:23:34.994020939 CEST	1.1.1.1	192.168.2.5	0x4962	No error (0)	d87k89vas8kdl.cloudfront.net		108.138.217.18	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.994020939 CEST	1.1.1.1	192.168.2.5	0x4962	No error (0)	d87k89vas8kdl.cloudfront.net		108.138.217.110	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.994020939 CEST	1.1.1.1	192.168.2.5	0x4962	No error (0)	d87k89vas8kdl.cloudfront.net		108.138.217.100	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:34.994020939 CEST	1.1.1.1	192.168.2.5	0x4962	No error (0)	d87k89vas8kdl.cloudfront.net		108.138.217.59	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.029830933 CEST	1.1.1.1	192.168.2.5	0x4fe2	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.029830933 CEST	1.1.1.1	192.168.2.5	0x4fe2	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.029830933 CEST	1.1.1.1	192.168.2.5	0x4fe2	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.029830933 CEST	1.1.1.1	192.168.2.5	0x4fe2	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.126702070 CEST	1.1.1.1	192.168.2.5	0x2fbd	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:35.129883051 CEST	1.1.1.1	192.168.2.5	0xa554	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 19, 2024 22:23:35.759093046 CEST	1.1.1.1	192.168.2.5	0xf08a	No error (0)	cm.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Jul 19, 2024 22:23:36.051194906 CEST	1.1.1.1	192.168.2.5	0xf8b0	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 19, 2024 22:23:36.051258087 CEST	1.1.1.1	192.168.2.5	0x68b0	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49823	13.107.246.60	80	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 19, 2024 22:22:43.196799040 CEST	431	OUT	GET / HTTP/1.1 Host: www.mimecast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 19, 2024 22:22:43.673482895 CEST	281	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 19 Jul 2024 20:22:43 GMT Content-Type: text/html Content-Length: 0 Connection: keep-alive Location: https://www.mimecast.com/ x-azure-ref: 20240719T202243Z-15b94bb6ff9f5mm5tsn3hmp5q40000000as000000000b9bs X-Cache: CONFIG_NOCACHE
Jul 19, 2024 22:23:25.095977068 CEST	967	OUT	GET /Customers/Support/Contact-support/ HTTP/1.1 Host: www.mimecast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.569721609.1721420591; _gat_gtag_UA_1898620_6=1; _ga=GA1.1.1288554902.1721420591; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Jul+19+2024+16%3A23%3A22+GMT-0400+(Eastern+Daylight+Time)&version=202405.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=263a48b1-0c06-4076-b111-9c969f6c6588&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=C0001%3A1%2CC0002%3A1%2CC0003%3A1%2CC0004%3A1&AwaitingReconsent=false; _ga_2RRJFGC554=GS1.1.1721420593.1.1.1721420603.50.0.0
Jul 19, 2024 22:23:25.226155996 CEST	315	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 19 Jul 2024 20:23:25 GMT Content-Type: text/html Content-Length: 0 Connection: keep-alive Location: https://www.mimecast.com/Customers/Support/Contact-support/ x-azure-ref: 20240719T202325Z-15b94bb6ff9f5mm5tsn3hmp5q40000000as000000000bb78 X-Cache: CONFIG_NOCACHE

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49714	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:19 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-07-19 20:22:19 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-19 20:22:20 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Jul 2024 20:21:19 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C504_BL2 x-ms-request-id: 658b26b2-161d-4535-a7fd-ca407465b578 PPServer: PPV: 30 H: BL02EPF00027B62 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Jul 2024 20:22:19 GMT Connection: close Content-Length: 11390
2024-07-19 20:22:20 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49715	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:21 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-07-19 20:22:21 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-19 20:22:22 UTC	654	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Jul 2024 20:21:21 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30275.14 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C504_BL2 x-ms-request-id: 846a2a41-c56e-46da-a825-90bfc751edcf PPServer: PPV: 30 H: BL02EPF0001D70D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Jul 2024 20:22:21 GMT Connection: close Content-Length: 11390
2024-07-19 20:22:22 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49717	40.126.32.72	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:23 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4694 Host: login.live.com
2024-07-19 20:22:23 UTC	4694	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-19 20:22:23 UTC	657	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Jul 2024 20:21:23 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=5&213=280810&215=0&315=1&215=0&315=1&214=30&288=16.0.30275.14 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C504_BL2 x-ms-request-id: 1c9c7d66-b415-4567-aa4b-59d503ca636e PPServer: PPV: 30 H: BL02EPF0001D70C V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Jul 2024 20:22:22 GMT Connection: close Content-Length: 10901
2024-07-19 20:22:23 UTC	10901	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49718	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:26 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-07-19 20:22:26 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-19 20:22:26 UTC	568	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Jul 2024 20:21:26 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C555_BL2 x-ms-request-id: 6112cf54-a3a4-4bce-9e66-7b4956cfde45 PPServer: PPV: 30 H: BL02EPF0001D9F2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Jul 2024 20:22:25 GMT Connection: close Content-Length: 1919
2024-07-19 20:22:26 UTC	1919	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49720	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 5a 58 79 54 35 5a 7a 6e 39 6b 6d 4d 51 4d 44 6c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 39 32 62 64 61 39 31 63 65 33 37 35 64 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ZXyT5Zzn9kmMQMDl.1Context: 7b92bda91ce375d1
2024-07-19 20:22:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-19 20:22:26 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 5a 58 79 54 35 5a 7a 6e 39 6b 6d 4d 51 4d 44 6c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 39 32 62 64 61 39 31 63 65 33 37 35 64 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 6b 45 75 64 4c 4c 72 42 4b 6b 34 70 59 36 31 2b 77 37 76 53 48 7a 67 61 70 6b 70 38 69 48 64 64 38 77 4c 37 58 4a 56 45 49 2b 56 63 6d 52 67 78 4d 70 71 77 59 50 49 48 75 33 68 6e 69 43 64 50 43 66 4b 56 67 56 33 79 7a 35 39 6e 4f 58 44 61 52 4e 7a 56 71 4a 50 55 58 32 4f 58 6c 39 55 46 32 66 2b 34 46 77 59 36 4c 58 63 2f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: ZXyT5Zzn9kmMQMDl.2Context: 7b92bda91ce375d1<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARkEudLLrBKk4pY61+w7vSHzgapkp8iHdd8wL7XJVEI+VcmRgxMpqwYPIHu3hniCdPCfKVgV3yz59nOXDaRNzVqJPUX2OXl9UF2f+4FwY6LXc/
2024-07-19 20:22:26 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 5a 58 79 54 35 5a 7a 6e 39 6b 6d 4d 51 4d 44 6c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 39 32 62 64 61 39 31 63 65 33 37 35 64 31 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: ZXyT5Zzn9kmMQMDl.3Context: 7b92bda91ce375d1
2024-07-19 20:22:27 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-19 20:22:27 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 31 64 67 71 69 2b 2f 44 6a 55 57 52 6a 4b 51 67 2f 50 6e 77 69 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 1dgqi+/DjUWRjKQg/PnwiQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49721	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:28 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-07-19 20:22:28 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-19 20:22:29 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Jul 2024 20:21:28 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C504_SN1 x-ms-request-id: 406a3fbe-c46e-45da-9126-e9b4a13eebb3 PPServer: PPV: 30 H: SN1PEPF0002F0F0 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Jul 2024 20:22:28 GMT Connection: close Content-Length: 11390
2024-07-19 20:22:29 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49722	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:29 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 71 4d 70 49 45 30 57 56 33 30 65 48 6f 2b 35 75 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 37 39 30 64 31 33 62 32 39 38 64 37 30 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: qMpIE0WV30eHo+5u.1Context: b9790d13b298d70a
2024-07-19 20:22:29 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-19 20:22:29 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 71 4d 70 49 45 30 57 56 33 30 65 48 6f 2b 35 75 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 37 39 30 64 31 33 62 32 39 38 64 37 30 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 6b 45 75 64 4c 4c 72 42 4b 6b 34 70 59 36 31 2b 77 37 76 53 48 7a 67 61 70 6b 70 38 69 48 64 64 38 77 4c 37 58 4a 56 45 49 2b 56 63 6d 52 67 78 4d 70 71 77 59 50 49 48 75 33 68 6e 69 43 64 50 43 66 4b 56 67 56 33 79 7a 35 39 6e 4f 58 44 61 52 4e 7a 56 71 4a 50 55 58 32 4f 58 6c 39 55 46 32 66 2b 34 46 77 59 36 4c 58 63 2f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: qMpIE0WV30eHo+5u.2Context: b9790d13b298d70a<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARkEudLLrBKk4pY61+w7vSHzgapkp8iHdd8wL7XJVEI+VcmRgxMpqwYPIHu3hniCdPCfKVgV3yz59nOXDaRNzVqJPUX2OXl9UF2f+4FwY6LXc/
2024-07-19 20:22:29 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 71 4d 70 49 45 30 57 56 33 30 65 48 6f 2b 35 75 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 39 37 39 30 64 31 33 62 32 39 38 64 37 30 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: qMpIE0WV30eHo+5u.3Context: b9790d13b298d70a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-19 20:22:29 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-19 20:22:29 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 7a 78 34 54 73 6d 67 31 30 65 4c 57 75 47 45 2b 4d 74 78 69 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +zx4Tsmg10eLWuGE+MtxiQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49728	20.190.159.75	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:29 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-07-19 20:22:29 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-19 20:22:30 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Jul 2024 20:21:30 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C504_SN1 x-ms-request-id: 6cc8caf7-b75c-4222-ab33-d5f566f99c7a PPServer: PPV: 30 H: SN1PEPF0002F057 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Jul 2024 20:22:29 GMT Connection: close Content-Length: 11390
2024-07-19 20:22:30 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49729	207.211.31.113	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:30 UTC	690	OUT	GET /s/wFHoCqxrAnt7V914iZaD1v HTTP/1.1 Host: protect-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:30 UTC	835	IN	HTTP/1.1 307 Temporary Redirect Date: Fri, 19 Jul 2024 20:22:30 GMT Content-Length: 0 Connection: close Location: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg#/login?message=eNpNjm1LwzAURv9Lvrq4JH1JO0SsQyiTDTsZKAxCm96t2dqmNGmdiP_dVFGEy_1yn3ue84EMyKEHVaIFenlS5H6d8mP22LXJ1X5-KdRmXMld9rDqq-yiX02aqk7xLdg0s_u5f_KWVeOxt-3m5Ceku6AZasCY_Ai11uehs_oMLVq0Q13PkG3sRpfgigiJXDKXVo0_zcvdcxKGiRcw4TM-TRhQMRgLfUOpcHlxEwRFSDmJMIk8in3KOI5ZIfGBF0BDkEWRx7cO2xqwJRwmbhDHMzRCb5R2FvRbYa2Hdqr8hU8ivax-TY5CYnDNhApKIzGWbmNP_BNkhPmET_fozxA7QxyQgEWMh7HvmNDkqnY8M3Sd7u1dBXltKzDv7qMx11I36PMLTsl2Cw Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49731	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:31 UTC	861	OUT	GET /u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:31 UTC	345	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:31 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:31 UTC	16039	IN	Data Raw: 32 65 64 35 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 6e 67 2d 61 70 70 22 20 6e 67 2d 61 70 70 3d 22 61 70 70 4c 6f 67 69 6e 22 20 6e 67 2d 63 6c 6f 61 6b 3d 22 22 20 63 6c 61 73 73 3d 22 6e 67 2d 63 6c 6f 61 6b 20 61 6e 69 6d 61 74 65 2d 6f 6e 2d 65 6e 74 65 72 2d 61 6c 74 22 20 6e 67 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 41 70 70 4c 6f 67 69 6e 43 6f 6e 74 72 6f 6c 6c 65 72 20 61 73 20 61 70 70 43 74 72 6c 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: 2ed5<!DOCTYPE html><html lang="en" id="ng-app" ng-app="appLogin" ng-cloak="" class="ng-cloak animate-on-enter-alt" ng-controller="AppLoginController as appCtrl"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compati
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 63 6f 6e 2d 73 61 76 65 2d 66 69 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 30 32 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 70 65 6e 2d 66 69 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 30 33 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 65 76 65 6c 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 30 34 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 70 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 30 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 30 36 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 Data Ascii: con-save-file:before { content: "\e202";}.glyphicon-open-file:before { content: "\e203";}.glyphicon-level-up:before { content: "\e204";}.glyphicon-copy:before { content: "\e205";}.glyphicon-paste:before { content: "\e206";}.glyphicon-a
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 2d 73 6d 2d 37 2c 20 2e 63 6f 6c 2d 73 6d 2d 38 2c 20 2e 63 6f 6c 2d 73 6d 2d 39 2c 20 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 20 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 20 2e 63 6f 6c 2d 73 6d 2d 31 32 20 7b 0a 20 20 0d 0a 33 30 30 30 0d 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 32 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 31 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 39 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 7d 0a 20 20 Data Ascii: -sm-7, .col-sm-8, .col-sm-9, .col-sm-10, .col-sm-11, .col-sm-12 { 3000 float: left; } .col-sm-12 { width: 100%; } .col-sm-11 { width: 91.66666667%; } .col-sm-10 { width: 83.33333333%; } .col-sm-9 { width: 75%; }
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 68 2c 0a 20 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 68 2c 0a 20 20 2e 74 61 62 6c 65 2d 72 65 0d 0a 33 30 30 30 0d 0a 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 68 2c 0a 20 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 64 2c 0a 20 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 2c 0a 20 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 3e 20 2e 74 61 62 6c 65 20 3e Data Ascii: table > thead > tr > th, .table-responsive > .table > tbody > tr > th, .table-re3000sponsive > .table > tfoot > tr > th, .table-responsive > .table > thead > tr > td, .table-responsive > .table > tbody > tr > td, .table-responsive > .table >
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 20 6c 61 62 65 6c 2c 0a 20 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 7d 0a 20 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 0a 20 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 7d 0a 20 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 Data Ascii: label, .form-inline .checkbox label { padding-left: 0; } .form-inline .radio input[type="radio"], .form-inline .checkbox input[type="checkbox"] { position: relative; margin-left: 0; } .form-inline .has-feedback .form-control-feedb
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 7d 0a 2e 62 74 6e 2d 73 6d 2c 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 73 6d 20 3e 20 2e 62 74 6e 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 7d 0a 2e 62 74 6e 2d 78 73 2c 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 78 73 20 3e 20 2e 62 74 6e 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 20 35 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 7d 0a 2e 62 74 Data Ascii: order-radius: 6px;}.btn-sm,.btn-group-sm > .btn { padding: 5px 10px; font-size: 12px; line-height: 1.5; border-radius: 6px;}.btn-xs,.btn-group-xs > .btn { padding: 1px 5px; font-size: 12px; line-height: 1.5; border-radius: 6px;}.bt
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 6e 61 76 2d 74 61 62 73 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 6c 69 20 3e 20 61 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 42 32 42 32 42 32 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 0d 0a 32 30 30 30 0d 0a 69 75 73 3a 20 36 70 78 20 36 70 78 20 30 20 30 3b 0a 20 20 7d 0a 20 20 2e 6e 61 76 2d 74 61 62 73 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 2c 0a 20 20 2e 6e 61 76 2d 74 61 62 73 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 2e 61 63 74 69 76 65 20 3e 20 61 3a 68 6f 76 65 72 2c 0a 20 20 2e 6e 61 76 2d 74 61 62 73 2d 6a 75 73 74 69 66 69 65 64 20 3e 20 2e 61 63 74 69 Data Ascii: }@media (min-width: 768px) { .nav-tabs-justified > li > a { border-bottom: 1px solid #B2B2B2; border-rad2000ius: 6px 6px 0 0; } .nav-tabs-justified > .active > a, .nav-tabs-justified > .active > a:hover, .nav-tabs-justified > .acti
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 23 66 66 66 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 6c 61 62 65 6c 3a 65 6d 70 74 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 74 6e 20 2e 6c 61 62 65 6c 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 74 6f 70 3a 20 2d 31 70 0d 0a 32 30 30 30 0d 0a 78 3b 0a 7d 0a 2e 6c 61 62 65 6c 2d 64 65 66 61 75 6c 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 37 30 37 30 37 30 3b 0a 7d 0a 2e 6c 61 62 65 6c 2d 64 65 66 61 75 6c 74 5b 68 72 65 66 5d 3a 68 6f 76 65 72 2c 0a 2e 6c 61 62 65 6c 2d 64 65 66 61 75 6c 74 5b 68 72 65 66 5d 3a 66 6f 63 75 73 20 7b 0a 20 20 62 61 63 Data Ascii: #fff; text-decoration: none; cursor: pointer;}.label:empty { display: none;}.btn .label { position: relative; top: -1p2000x;}.label-default { background-color: #707070;}.label-default[href]:hover,.label-default[href]:focus { bac
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 2c 0a 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 63 37 36 33 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 30 65 39 63 36 3b 0a 7d 0a 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 0d 0a 32 30 30 30 0d 0a 2c 0a 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 0a 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 Data Ascii: a.list-group-item-success:hover,a.list-group-item-success:focus { color: #3c763d; background-color: #d0e9c6;}a.list-group-item-success.active2000,a.list-group-item-success.active:hover,a.list-group-item-success.active:focus { color: #fff;
2024-07-19 20:22:31 UTC	16384	IN	Data Raw: 62 6f 64 79 20 2b 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2c 0a 2e 70 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 20 2b 20 2e 70 61 6e 65 6c 2d 62 6f 64 79 2c 0a 2e 70 61 6e 65 6c 20 3e 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 20 2b 20 2e 70 61 6e 65 6c 2d 62 6f 64 79 2c 0a 2e 6d 63 2d 73 65 6c 65 63 74 61 62 6c 65 2d 6c 69 73 74 2d 74 72 65 65 20 3e 20 2e 70 61 6e 65 6c 2d 62 6f 64 79 20 2b 20 2e 74 61 62 6c 65 2c 0a 2e 6d 63 2d 73 65 6c 65 63 74 61 62 6c 65 2d 6c 0d 0a 32 30 30 30 0d 0a 69 73 74 2d 74 72 65 65 20 3e 20 2e 70 61 6e 65 6c 2d 62 6f 64 79 20 2b 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2c 0a 2e 6d 63 2d 73 65 6c 65 63 74 61 62 6c 65 2d 6c 69 73 74 2d 74 72 65 65 20 3e 20 2e 74 61 62 6c 65 20 2b 20 2e 70 61 Data Ascii: body + .table-responsive,.panel > .table + .panel-body,.panel > .table-responsive + .panel-body,.mc-selectable-list-tree > .panel-body + .table,.mc-selectable-l2000ist-tree > .panel-body + .table-responsive,.mc-selectable-list-tree > .table + .pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49736	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:32 UTC	789	OUT	GET /u/assets/entypo/font/entypo.css HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:33 UTC	427	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:32 GMT Content-Type: text/css Content-Length: 17305 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Sat, 26 Oct 1985 13:15:00 GMT ETag: W/"iu7Y1ytLs9Aiu7YoxIyBGk" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:33 UTC	15957	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 65 6e 74 79 70 6f 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 65 6e 74 79 70 6f 2e 65 6f 74 3f 36 30 38 35 39 38 34 34 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 65 6e 74 79 70 6f 2e 65 6f 74 3f 36 30 38 35 39 38 34 34 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 65 6e 74 79 70 6f 2e 77 6f 66 66 3f 36 30 38 35 39 38 34 34 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 65 6e 74 79 70 6f 2e 74 74 66 3f 36 30 38 35 39 38 34 34 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 Data Ascii: @font-face { font-family: 'entypo'; src: url('entypo.eot?60859844'); src: url('entypo.eot?60859844#iefix') format('embedded-opentype'), url('entypo.woff?60859844') format('woff'), url('entypo.ttf?60859844') format('truetype'), u
2024-07-19 20:22:33 UTC	1348	IN	Data Raw: 69 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 30 34 27 3b 20 7d 20 2f 2a 20 27 ee a4 84 27 20 2a 2f 0a 2e 69 63 6f 6e 2d 72 69 67 68 74 2d 64 69 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 30 35 27 3b 20 7d 20 2f 2a 20 27 ee a4 85 27 20 2a 2f 0a 2e 69 63 6f 6e 2d 75 70 2d 64 69 72 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 30 36 27 3b 20 7d 20 2f 2a 20 27 ee a4 86 27 20 2a 2f 0a 2e 69 63 6f 6e 2d 64 6f 77 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 30 37 27 3b 20 7d 20 2f 2a 20 27 ee a4 87 27 20 2a 2f 0a 2e 69 63 6f 6e 2d 6c 65 66 74 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 39 30 38 27 3b 20 Data Ascii: ir:before { content: '\e904'; } /* '' /.icon-right-dir:before { content: '\e905'; } / '' /.icon-up-dir:before { content: '\e906'; } / '' /.icon-down-bold:before { content: '\e907'; } / '' */.icon-left-bold:before { content: '\e908';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49735	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:32 UTC	800	OUT	GET /u/assets/font-awesome/css/font-awesome.css HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:32 UTC	427	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:32 GMT Content-Type: text/css Content-Length: 28747 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Tue, 27 Jan 2015 18:59:08 GMT ETag: W/"jDekKzI7s3gjDelYB75M1M" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:32 UTC	15957	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 33 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 0a Data Ascii: /! Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) // FONT PATH * -------------------------- */@font-face { font-family: 'FontAwesome';
2024-07-19 20:22:33 UTC	12790	IN	Data Raw: 66 61 2d 74 65 72 6d 69 6e 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 30 22 3b 0a 7d 0a 2e 66 61 2d 63 6f 64 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 31 22 3b 0a 7d 0a 2e 66 61 2d 6d 61 69 6c 2d 72 65 70 6c 79 2d 61 6c 6c 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 72 65 70 6c 79 2d 61 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 32 22 3b 0a 7d 0a 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 2c 0a 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 6f 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 32 33 22 3b 0a Data Ascii: fa-terminal:before { content: "\f120";}.fa-code:before { content: "\f121";}.fa-mail-reply-all:before,.fa-reply-all:before { content: "\f122";}.fa-star-half-empty:before,.fa-star-half-full:before,.fa-star-half-o:before { content: "\f123";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49734	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:32 UTC	804	OUT	GET /u/assets/mimecast-icons/css/mimecast-icons.css HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:33 UTC	426	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:32 GMT Content-Type: text/css Content-Length: 9828 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Sat, 26 Oct 1985 13:15:00 GMT ETag: W/"FrvmNEkmejsFrvmQHBfqH8" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:33 UTC	9828	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6d 69 6d 65 63 61 73 74 2d 69 63 6f 6e 73 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 6d 69 6d 65 63 61 73 74 2d 69 63 6f 6e 73 2e 65 6f 74 3f 38 38 38 37 30 34 38 34 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 6d 69 6d 65 63 61 73 74 2d 69 63 6f 6e 73 2e 65 6f 74 3f 38 38 38 37 30 34 38 34 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 6d 69 6d 65 63 61 73 74 2d 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 38 38 38 37 30 34 38 34 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 Data Ascii: @font-face { font-family: 'mimecast-icons'; src: url('../font/mimecast-icons.eot?88870484'); src: url('../font/mimecast-icons.eot?88870484#iefix') format('embedded-opentype'), url('../font/mimecast-icons.woff2?88870484') format('woff2'),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49739	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:32 UTC	803	OUT	GET /u/login/cache.11b6bb90c259f8ed592f58f8b212170a.login-lib.js HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:32 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:32 GMT Content-Type: application/javascript Content-Length: 880950 Connection: close Cache-Control: max-age=20160 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Wed, 10 Jul 2024 00:27:08 GMT ETag: W/"V2Ijgu9/SQ0V2IiEnV7V1s" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:32 UTC	15912	IN	Data Raw: 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 28 65 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 Data Ascii: if(!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?w
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 28 61 5b 45 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 5f 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 70 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 3b 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 70 26 26 61 3d 3d 3d 65 29 7b 69 5b 68 5d 3d 5b 5f 2c 73 2c 70 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 21 31 3d 3d 3d 28 70 3d 66 3f 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 45 5d 7c 7c 28 61 5b 45 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d Data Ascii: (a[E]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===_&&r[1])&&r[2],a=s&&c.childNodes[s];a=++s&&a&&a[l]\|\|(p=s=0)\|\|u.pop();)if(1===a.nodeType&&++p&&a===e){i[h]=[_,s,p];break}}else if(!1===(p=f?s=(r=(i=(o=(a=e)[E]\|\|(a[E]={}))[a.uniqueID]\|\|(o[a.uniqueID]
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 6c 65 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 63 65 2c 64 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 43 2e 65 78 70 61 6e 64 6f 2b 66 65 2e 75 69 64 2b 2b 7d 66 65 2e 75 69 64 3d 31 2c 66 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 76 28 65 29 26 26 28 65 2e 6e Data Ascii: nction $(e){return e.replace(le,"ms-").replace(ce,de)}function v(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType}function fe(){this.expando=C.expando+fe.uid++}fe.uid=1,fe.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},v(e)&&(e.n
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 41 28 65 29 2c 61 3d 61 7c 7c 41 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 6a 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 6a 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 41 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 78 65 28 61 2c 21 64 26 26 41 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 43 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 76 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 62 2e 65 78 70 61 6e 64 6f 5d 29 7b Data Ascii: ;if(t)if(n)for(o=o\|\|A(e),a=a\|\|A(c),r=0,i=o.length;r<i;r++)je(o[r],a[r]);else je(e,c);return 0<(a=A(c,"script")).length&&xe(a,!d&&A(e,"script")),c},cleanData:function(e){for(var t,n,r,i=C.event.special,o=0;void 0!==(n=e[o]);o++)if(v(n)){if(t=n[b.expando]){
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 43 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 6e 2b 22 22 29 2c 6e 29 3a 21 28 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 29 26 26 6e 75 6c 6c 3d 3d 28 72 3d 43 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 74 29 29 3f 76 6f 69 64 20 30 3a 72 29 7d 2c 61 74 74 72 48 6f 6f 6b 73 3a 7b 74 79 70 65 3a 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 69 66 28 21 67 2e 72 61 64 69 6f 56 61 6c 75 65 26 26 22 72 61 64 69 6f 22 3d 3d 3d 74 26 26 75 28 65 2c 22 69 Data Ascii: ll===n?void C.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):!(i&&"get"in i&&null!==(r=i.get(e,t)))&&null==(r=C.find.attr(e,t))?void 0:r)},attrHooks:{type:{set:function(e,t){var n;if(!g.radioValue&&"radio"===t&&u(e,"i
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 72 2e 73 74 61 74 75 73 3f 74 28 30 2c 22 65 72 72 6f 72 22 29 3a 74 28 72 2e 73 74 61 74 75 73 2c 72 2e 73 74 61 74 75 73 54 65 78 74 29 3a 74 28 47 74 5b 72 2e 73 74 61 74 75 73 5d 7c 7c 72 2e 73 74 61 74 75 73 2c 72 2e 73 74 61 74 75 73 54 65 78 74 2c 22 74 65 78 74 22 21 3d 3d 28 72 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 7c 7c 22 74 65 78 74 22 29 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3f 7b 62 69 6e 61 72 79 3a 72 2e 72 65 73 70 6f 6e 73 65 7d 3a 7b 74 65 78 74 3a 72 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 7d 2c 72 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 29 29 7d 7d 2c 72 2e 6f 6e 6c 6f 61 64 3d 6f 28 29 2c 61 Data Ascii: "number"!=typeof r.status?t(0,"error"):t(r.status,r.statusText):t(Gt[r.status]\|\|r.status,r.statusText,"text"!==(r.responseType\|\|"text")\|\|"string"!=typeof r.responseText?{binary:r.response}:{text:r.responseText},r.getAllResponseHeaders()))}},r.onload=o(),a
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 74 75 72 6e 2d 31 7d 2c 72 28 22 4d 22 2c 5b 22 4d 4d 22 2c 32 5d 2c 22 4d 6f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 6e 74 68 28 29 2b 31 7d 29 2c 72 28 22 4d 4d 4d 22 2c 30 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 6d 6f 6e 74 68 73 53 68 6f 72 74 28 74 68 69 73 2c 65 29 7d 29 2c 72 28 22 4d 4d 4d 4d 22 2c 30 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 6d 6f 6e 74 68 73 28 74 68 69 73 2c 65 29 7d 29 2c 79 28 22 4d 22 2c 6e 2c 67 29 2c 79 28 22 4d 4d 22 2c 6e 2c 74 29 2c 79 28 22 4d 4d 4d 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e Data Ascii: turn-1},r("M",["MM",2],"Mo",function(){return this.month()+1}),r("MMM",0,0,function(e){return this.localeData().monthsShort(this,e)}),r("MMMM",0,0,function(e){return this.localeData().months(this,e)}),y("M",n,g),y("MM",n,t),y("MMM",function(e,t){return t.
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 5b 22 2d 22 2c 30 2c 30 5d 29 5b 31 5d 2b 77 28 65 5b 32 5d 29 29 3f 30 3a 22 2b 22 3d 3d 3d 65 5b 30 5d 3f 74 3a 2d 74 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 74 2e 5f 69 73 55 54 43 3f 28 74 3d 74 2e 63 6c 6f 6e 65 28 29 2c 6e 3d 28 63 28 65 29 7c 7c 6a 28 65 29 3f 65 3a 46 28 65 29 29 2e 76 61 6c 75 65 4f 66 28 29 2d 74 2e 76 61 6c 75 65 4f 66 28 29 2c 74 2e 5f 64 2e 73 65 74 54 69 6d 65 28 74 2e 5f 64 2e 76 61 6c 75 65 4f 66 28 29 2b 6e 29 2c 70 2e 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 2c 21 31 29 2c 74 29 3a 46 28 65 29 2e 6c 6f 63 61 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 74 28 65 29 7b 72 65 74 75 72 6e 2d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 5f 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f Data Ascii: ["-",0,0])[1]+w(e[2]))?0:"+"===e[0]?t:-t}function Bt(e,t){var n;return t._isUTC?(t=t.clone(),n=(c(e)\|\|j(e)?e:F(e)).valueOf()-t.valueOf(),t._d.setTime(t._d.valueOf()+n),p.updateOffset(t,!1),t):F(e).local()}function Ut(e){return-Math.round(e._d.getTimezoneO
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 28 65 3d 6a 74 28 44 65 2c 65 29 29 29 72 65 74 75 72 6e 20 74 68 69 73 7d 65 6c 73 65 20 4d 61 74 68 2e 61 62 73 28 65 29 3c 31 36 26 26 21 6e 26 26 28 65 2a 3d 36 30 29 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 5f 69 73 55 54 43 26 26 74 26 26 28 72 3d 55 74 28 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 6f 66 66 73 65 74 3d 65 2c 74 68 69 73 2e 5f 69 73 55 54 43 3d 21 30 2c 6e 75 6c 6c 21 3d 72 26 26 74 68 69 73 2e 61 64 64 28 72 2c 22 6d 22 29 2c 69 21 3d 3d 65 26 26 28 21 74 7c 7c 74 68 69 73 2e 5f 63 68 61 6e 67 65 49 6e 50 72 6f 67 72 65 73 73 3f 47 74 28 74 68 69 73 2c 49 28 65 2d 69 2c 22 6d 22 29 2c 31 2c 21 31 29 3a 74 68 69 73 2e 5f 63 68 61 6e 67 65 49 6e 50 72 6f 67 72 65 73 73 7c 7c 28 74 68 69 73 2e 5f 63 68 61 6e 67 65 49 6e Data Ascii: null===(e=jt(De,e)))return this}else Math.abs(e)<16&&!n&&(e*=60);return!this._isUTC&&t&&(r=Ut(this)),this._offset=e,this._isUTC=!0,null!=r&&this.add(r,"m"),i!==e&&(!t\|\|this._changeInProgress?Gt(this,I(e-i,"m"),1,!1):this._changeInProgress\|\|(this._changeIn
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 54 69 6d 65 54 68 72 65 73 68 6f 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 45 6e 5b 65 5d 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 3f 45 6e 5b 65 5d 3a 28 45 6e 5b 65 5d 3d 74 2c 22 73 22 3d 3d 3d 65 26 26 28 45 6e 2e 73 73 3d 74 2d 31 29 2c 21 30 29 29 7d 2c 70 2e 63 61 6c 65 6e 64 61 72 46 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 3d 65 2e 64 69 66 66 28 74 2c 22 64 61 79 73 22 2c 21 30 29 29 3c 2d 36 3f 22 73 61 6d 65 45 6c 73 65 22 3a 65 3c 2d 31 3f 22 6c 61 73 74 57 65 65 6b 22 3a 65 3c 30 3f 22 6c 61 73 74 44 61 79 22 3a 65 3c 31 3f 22 73 61 6d 65 44 61 79 22 3a 65 3c 32 3f 22 6e 65 78 74 44 61 79 22 3a 65 3c 37 3f 22 6e 65 78 74 57 65 65 6b 22 3a 22 73 Data Ascii: TimeThreshold=function(e,t){return void 0!==En[e]&&(void 0===t?En[e]:(En[e]=t,"s"===e&&(En.ss=t-1),!0))},p.calendarFormat=function(e,t){return(e=e.diff(t,"days",!0))<-6?"sameElse":e<-1?"lastWeek":e<0?"lastDay":e<1?"sameDay":e<2?"nextDay":e<7?"nextWeek":"s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49738	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:32 UTC	799	OUT	GET /u/login/cache.f692ac8003e8f0614f6bb1499f05c016.login.js HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:32 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:32 GMT Content-Type: application/javascript Content-Length: 208060 Connection: close Cache-Control: max-age=20160 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Wed, 10 Jul 2024 00:27:08 GMT ETag: W/"w/Uco7lTLOUw/UdMyNZbzk" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:32 UTC	15912	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 6d 65 73 73 61 67 65 46 6f 72 6d 61 74 74 65 72 2e 64 69 72 65 63 74 69 76 65 22 2c 5b 5d 29 2e 64 69 72 65 63 74 69 76 65 28 22 6d 63 4d 65 73 73 61 67 65 46 6f 72 6d 61 74 74 65 72 22 2c 5b 22 24 74 72 61 6e 73 6c 61 74 65 22 2c 22 24 73 61 6e 69 74 69 7a 65 22 2c 22 24 69 6e 6a 65 63 74 6f 72 22 2c 22 24 77 69 6e 64 6f 77 22 2c 22 24 6c 6f 63 61 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 6c 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 7b 72 65 73 74 72 69 63 74 3a 22 41 22 2c 74 65 6d 70 6c 61 74 65 55 72 6c 3a 22 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 73 73 61 67 65 2d 66 6f 72 6d 61 74 74 65 72 2f 6d 65 73 73 61 67 65 2d 66 6f 72 6d 61 74 74 65 72 2e 74 70 6c Data Ascii: "use strict";angular.module("messageFormatter.directive",[]).directive("mcMessageFormatter",["$translate","$sanitize","$injector","$window","$location",function(n,s,l,o,i){return{restrict:"A",templateUrl:"components/message-formatter/message-formatter.tpl
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 69 6e 67 2d 74 6f 70 20 73 65 70 65 72 61 74 6f 72 22 3e 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 74 6f 2d 6c 61 62 65 6c 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 44 41 54 45 5f 52 41 4e 47 45 5f 50 49 43 4b 45 52 5f 53 49 4d 50 4c 45 5f 4c 41 42 45 4c 5f 54 4f 22 3e 3c 2f 6c 61 62 65 6c 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 67 72 6f 75 70 20 65 6e 64 2d 64 61 74 65 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 64 61 74 65 72 61 6e 67 65 20 69 6e 70 75 74 2d 67 72 6f 75 70 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 Data Ascii: ing-top seperator"></div>\n\n <label class="to-label" translate="DATE_RANGE_PICKER_SIMPLE_LABEL_TO"></label>\n <div class="input-group end-date">\n <div class="input-daterange input-group">\n <input type="text" class="form-control"
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 69 6f 6e 2e 76 61 6c 69 64 2e 6c 65 6e 67 74 68 20 7c 7c 20 64 6f 6d 61 69 6e 73 4d 61 6e 61 67 65 72 42 75 6c 6b 41 64 64 43 74 72 6c 2e 62 75 6c 6b 44 6f 6d 61 69 6e 73 43 6f 6c 6c 65 63 74 69 6f 6e 2e 76 61 6c 69 64 2e 6c 65 6e 67 74 68 20 3e 20 35 30 22 20 6e 67 2d 69 66 3d 22 64 6f 6d 61 69 6e 73 4d 61 6e 61 67 65 72 42 75 6c 6b 41 64 64 43 74 72 6c 2e 73 65 63 6f 6e 64 53 74 65 70 22 3e 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 3c 2f 64 69 76 3e 27 29 7d 5d 29 2c 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 63 6f 6d 70 6f 6e 65 6e 74 73 2f 64 6f 6d 61 69 6e 73 2d 6d 61 6e 61 67 65 72 2f 6d 6f 64 61 6c 2f 77 69 7a 61 72 64 2d 73 74 65 70 73 2f 77 69 7a 61 72 64 2d 73 74 65 70 2d 30 31 2e 74 70 6c 2e 68 74 6d 6c 22 2c 5b 5d 29 2e 72 75 6e 28 5b 22 24 74 65 Data Ascii: ion.valid.length \|\| domainsManagerBulkAddCtrl.bulkDomainsCollection.valid.length > 50" ng-if="domainsManagerBulkAddCtrl.secondStep"></button>\n</div>')}]),angular.module("components/domains-manager/modal/wizard-steps/wizard-step-01.tpl.html",[]).run(["$te
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 6f 6e 28 6e 29 7b 6e 2e 70 75 74 28 22 63 6f 6d 70 6f 6e 65 6e 74 73 2f 69 6e 2d 61 70 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2f 69 6e 2d 61 70 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 74 70 6c 2e 68 74 6d 6c 22 2c 27 3c 64 69 76 20 69 64 3d 22 69 6e 2d 61 70 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 67 72 6f 77 6c 2d 63 6f 6e 74 61 69 6e 65 72 22 20 6e 67 2d 63 6c 61 73 73 3d 22 77 72 61 70 70 65 72 43 6c 61 73 73 65 73 28 29 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 22 20 6e 67 2d 72 65 70 65 61 74 3d 22 6d 65 73 73 61 67 65 20 69 6e 20 6d 65 73 73 61 67 65 73 22 20 6e 67 2d 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2e 73 65 76 65 72 69 74 79 22 3e 5c Data Ascii: on(n){n.put("components/in-app-notification/in-app-notification.tpl.html",'<div id="in-app-notification" class="growl-container" ng-class="wrapperClasses()">\n <div class="notification-item" ng-repeat="message in messages" ng-class="message.severity">\
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 3c 64 69 76 20 6d 63 2d 6e 6f 72 74 68 3d 22 32 32 22 20 6e 67 2d 69 66 3d 22 63 74 72 6c 2e 73 65 6c 65 63 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 3e 30 22 20 6e 67 2d 69 6e 63 6c 75 64 65 3d 22 5c 27 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 69 73 74 2d 64 65 74 61 69 6c 2f 6c 69 73 74 2f 74 6f 6f 6c 62 61 72 2f 6c 69 73 74 2d 74 6f 6f 6c 62 61 72 2e 74 70 6c 2e 68 74 6d 6c 5c 27 22 3e 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 53 43 52 4f 4c 4c 41 42 4c 45 20 45 4d 41 49 4c 20 4c 49 53 54 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 6d 63 2d 63 65 6e 74 65 72 20 6e 67 2d 69 6e 63 6c 75 64 65 3d 22 5c 27 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 69 73 74 2d 64 65 74 61 69 6c 2f 6c 69 73 74 2f 6c 69 Data Ascii: <div mc-north="22" ng-if="ctrl.selectionOptions.length>0" ng-include="\'components/list-detail/list/toolbar/list-toolbar.tpl.html\'"></div>\n\n \x3c!-- SCROLLABLE EMAIL LIST--\x3e\n <div mc-center ng-include="\'components/list-detail/list/li
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 6e 2f 64 69 73 63 6c 61 69 6d 65 72 2f 64 69 73 63 6c 61 69 6d 65 72 2e 74 70 6c 2e 68 74 6d 6c 22 2c 5b 5d 29 2e 72 75 6e 28 5b 22 24 74 65 6d 70 6c 61 74 65 43 61 63 68 65 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 70 75 74 28 22 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 6f 67 69 6e 2f 64 69 73 63 6c 61 69 6d 65 72 2f 64 69 73 63 6c 61 69 6d 65 72 2e 74 70 6c 2e 68 74 6d 6c 22 2c 27 5c 78 33 63 21 2d 2d 20 3c 68 34 20 63 6c 61 73 73 3d 22 6e 6f 2d 6d 61 72 67 69 6e 2d 74 6f 70 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 7b 7b 61 70 70 43 74 72 6c 2e 63 75 72 72 65 6e 74 4c 6f 67 69 6e 43 6f 6e 66 2e 64 69 73 63 6c 61 69 6d 65 72 54 69 74 6c 65 7d 7d 22 20 6e 67 2d 69 66 3d 22 21 61 70 70 43 74 72 6c 2e 62 72 61 6e 64 69 6e 67 2e 64 69 73 63 6c 61 69 6d 65 72 Data Ascii: n/disclaimer/disclaimer.tpl.html",[]).run(["$templateCache",function(n){n.put("components/login/disclaimer/disclaimer.tpl.html",'\x3c!-- <h4 class="no-margin-top" translate="{{appCtrl.currentLoginConf.disclaimerTitle}}" ng-if="!appCtrl.branding.disclaimer
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 61 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 63 75 72 73 6f 72 2d 70 6f 69 6e 74 65 72 22 20 6e 67 2d 63 6c 69 63 6b 3d 22 69 73 43 6f 6c 6c 61 70 73 65 64 20 3d 20 21 69 73 43 6f 6c 6c 61 70 73 65 64 22 3e 3c 73 70 61 6e 20 74 72 61 6e 73 6c 61 74 65 3d 22 4f 54 50 5f 48 45 4c 50 5f 4d 4f 44 41 4c 5f 53 54 45 50 31 5f 44 45 53 43 5f 4c 49 4e 4b 22 3e 3c 2f 73 70 61 6e 3e 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 22 20 6e 67 2d 63 6c 61 73 73 3d 22 69 73 43 6f 6c 6c 61 70 73 65 64 20 3f 20 5c 27 66 61 2d 61 6e 67 6c 65 2d 75 70 5c 27 20 3a 20 5c 27 66 61 2d 61 6e 67 6c 65 2d 64 6f 77 6e 5c 27 22 3e 3c 2f 69 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 Data Ascii: an>\n <a class="cursor-pointer" ng-click="isCollapsed = !isCollapsed"><span translate="OTP_HELP_MODAL_STEP1_DESC_LINK"></span> <i class="fa" ng-class="isCollapsed ? \'fa-angle-up\' : \'fa-angle-down\'"></i></a>\n </p>\n
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 74 65 72 3d 22 74 72 75 65 22 3e 3c 2f 73 70 69 6e 6e 65 72 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 5c 6e 3c 64 69 76 20 6e 67 2d 69 66 3d 22 21 6d 6f 64 61 6c 41 63 63 6f 75 6e 74 53 75 70 70 6f 72 74 43 74 72 6c 2e 69 73 4c 6f 61 64 69 6e 67 22 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 62 6f 64 79 20 6d 63 2d 61 63 63 6f 75 6e 74 2d 73 75 70 70 6f 72 74 2d 73 65 72 76 69 63 65 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 61 62 6c 65 20 63 6c 61 73 73 Data Ascii: ter="true"></spinner>\n</div>\n\n<div ng-if="!modalAccountSupportCtrl.isLoading" class="modal-body mc-account-support-service">\n <div class="container-fluid">\n <div class="row">\n <div class="col-md-6">\n <table class
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 69 6e 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 42 6f 78 49 63 6f 6e 43 6c 61 73 73 7d 7d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3d 22 7b 7b 20 66 65 65 64 62 61 63 6b 43 74 72 6c 2e 69 6e 6c 69 6e 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 42 6f 78 54 69 74 6c 65 20 7c 20 74 72 61 6e 73 6c 61 74 65 20 7d 7d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 69 73 2d 76 69 73 69 62 6c 65 3d 22 66 65 65 64 62 61 63 6b 43 74 72 6c 2e 69 6e 6c 69 6e 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 42 6f 78 56 69 73 69 62 69 6c 69 74 79 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 68 69 64 65 2d 63 6c 6f 73 65 2d 62 75 74 74 6f Data Ascii: ineNotificationOptions.messageBoxIconClass}}"\n title="{{ feedbackCtrl.inlineNotificationOptions.messageBoxTitle \| translate }}"\n is-visible="feedbackCtrl.inlineNotificationOptions.messageBoxVisibility"\n hide-close-butto
2024-07-19 20:22:33 UTC	16384	IN	Data Raw: 73 61 76 65 50 72 65 66 65 72 65 6e 63 65 73 28 29 22 20 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 64 65 66 61 75 6c 74 22 20 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 6c 61 74 65 3d 22 24 49 31 38 4e 5f 43 4f 4d 4d 4f 4e 5f 42 54 4e 5f 43 41 4e 43 45 4c 22 20 6e 67 2d 63 6c 69 63 6b 3d 22 24 63 6c 6f 73 65 28 29 22 3e 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 5c 6e 3c 2f 64 69 76 3e 5c 6e 27 29 7d 5d 29 Data Ascii: savePreferences()" data-dismiss="modal" aria-hidden="true"></button>\n <button type="submit" class="btn btn-default" data-dismiss="modal" aria-hidden="true"\n translate="$I18N_COMMON_BTN_CANCEL" ng-click="$close()"></button>\n\n</div>\n')}])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49743	35.190.8.230	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	558	OUT	GET /libs/galindo.js HTTP/1.1 Host: static.srcspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://freemanhealthsystem.login-us.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:34 UTC	791	IN	HTTP/1.1 200 OK x-goog-generation: 1713784659645084 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 45159 Content-Encoding: gzip x-goog-hash: crc32c=nLzygQ== x-goog-hash: md5=tCZOysAJGM6cOpenAEVWZg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 45159 X-GUploader-UploadID: ACJd0NoAef9BxdqE0E6aFPJhQv76sXMExWiaS_WOFPmVZx0MGLNdDt-r3KYCNxnIzicJnRhzzO4 Server: UploadServer Date: Fri, 19 Jul 2024 20:10:39 GMT Expires: Fri, 19 Jul 2024 20:25:39 GMT Cache-Control: no-transform, public, max-age=900 Age: 715 Last-Modified: Mon, 22 Apr 2024 11:17:39 GMT ETag: "b4264ecac00918ce9c3a97a700455666" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-19 20:22:34 UTC	599	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 74 bd 6b 93 aa 5a ba 26 fa 57 f6 97 bd 67 ad ce 75 22 35 05 25 bb 7a 76 47 8a 77 54 10 4c 87 5a 51 d1 01 0c 10 44 44 11 11 dd b1 fb b7 9f f7 32 72 55 c7 89 38 1f aa d6 34 d3 84 c1 18 ef e5 79 de 1b b5 5f fe db ff 6e 35 9d ae d1 ea 7c 6a e1 ef 7f fc 12 2b 19 2e aa 24 74 8d 6c fa eb cf 5f c2 dd cb 71 5e ac fd 7d 0b 3e dd cc 22 14 bd 7b 79 16 f0 a1 59 ec a5 35 73 6e f8 ad 55 de 12 4e 13 ae 8c ec 0e 1f eb f9 28 b4 8d 6c 2e 56 26 7c 3a 1a d9 43 ac 3a 72 91 17 05 7e d7 96 72 9a 17 bd 22 c0 2b 8a ae 75 33 f3 e2 5b f4 2c fc a4 b5 3e ee 79 b6 7a f9 f0 61 14 cc 4f 7e 5e 38 f0 cf c7 ac fd 2d b4 65 b8 c2 fb 5e bd 22 ba 18 d9 28 cc b3 5c 74 4d 5a e4 4c 7a 1d 37 9c 7a d9 89 ae b9 0f a7 61 22 a7 66 c6 b7 d0 9d e2 f6 2e 17 f8 c7 26 ac 62 e0 Data Ascii: tkZ&Wgu"5%zvGwTLZQDD2rU84y_n5\|j+.$tl_q^}>"{yY5snUN(l.V&\|:C:r~r"+u3[,>yzaO~^8-e^"(\tMZLz7za"f.&b
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: a8 a7 f8 34 8d 91 0d 85 66 e6 15 2f e2 12 2e b6 97 70 69 64 03 fc 93 59 eb 18 d2 b9 8b ee 38 af 8d ac 3e e0 fd ce 5e 51 0b fd 24 5d b3 a8 71 ad 5b ed 4b 68 89 1c e3 15 9e f5 28 f4 a4 7e 80 7f 16 20 0d 70 58 d3 82 1e b6 7b 7e 64 ad f8 1d bf d2 7a 0f a7 fb 79 9b 56 22 9c da cc da 43 da ba ae 26 6f 79 d6 13 7c 7e 5a 15 7a 46 51 09 b7 91 4b 5c a8 19 8d a4 67 16 11 6d 73 01 92 1c 34 c6 04 4f 6d 3f 78 e5 09 2d d2 79 97 5e bc 94 0b 23 fb a4 87 d1 a6 c2 b5 a5 d0 f0 98 9b fb 08 14 63 8b 22 73 2d eb d5 c1 2b 76 28 cf 28 c2 66 36 0d 7c 92 d1 ac 8f 62 0c e2 3e a0 15 6c d0 12 f8 0f 33 1b 93 fe c3 a6 6a ae 1c 7b 24 12 c3 e0 d3 0f cd a2 47 0b 6f ed af 66 f6 21 5c dc dd 6c 09 eb dc a7 33 5a 41 12 7e 9b d9 0c 17 e6 e0 1d 5e e2 35 4c cd 82 a4 48 6f 3f 86 22 91 2c e1 ce dd Data Ascii: 4f/.pidY8>^Q$]q[Kh(~ pX{~dzyV"C&oy\|~ZzFQK\gms4Om?x-y^#c"s-+v((f6\|b>l3j{$Gof!\l3ZA~^5LHo?",
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: de d1 b6 92 2c af bc 4c 38 b3 d0 31 b2 2d 9e c9 f5 7e 43 e8 ed b2 d5 76 4e 00 6c 1f 01 6b 5b 12 82 51 3a a4 79 46 ba aa 25 e1 b4 5c a2 35 66 95 f8 f4 fb d7 4a 2a 0b 65 cf c0 de 0f 94 40 eb de ba ef 65 8b 21 3f de 08 ff e4 76 0a c9 3a f4 2c 1f 40 ed 9a ad e3 70 17 c4 80 35 43 b2 5d cf c3 78 17 1f c8 5e af 9e 2f d1 6b f0 e6 88 5c 1e 53 d3 05 90 2b 6d 3e 6d 6f 2c 56 4d e8 e4 59 f6 8b dc e6 18 dc e6 1b 49 82 ef b7 6d 34 1f 96 b2 e4 5f c2 d9 36 0c 6b 44 b7 fd 76 de 35 bc 21 97 20 9a 23 c5 98 e1 f7 ca 0f 6b 0d ba 48 14 45 9b df 5f a5 94 2b fc 92 ef 15 e6 a9 6d 1d 58 58 fb 7e 6d d0 01 38 1d 10 96 ec 8c b8 8e e0 65 73 ab 93 22 62 d1 71 11 89 0d 71 05 74 22 42 0b 46 61 2b 20 9d eb dd ef 77 03 85 8f b6 a4 77 74 2e 7b e0 0b be da 65 10 dd 0a 90 30 f2 88 78 3c ae 07 Data Ascii: ,L81-~CvNlk[Q:yF%\5fJ*e@e!?v:,@p5C]x^/k\S+m>mo,VMYIm4_6kDv5! #kHE_+mXX~m8es"bqqt"BFa+ wwt.{e0x<
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 24 c3 76 12 ce 6f e5 90 7e d7 91 56 02 f2 09 16 87 96 ef 6c c0 d0 ef d8 d1 bd ee b0 da e9 f1 41 8f 32 d0 e1 8a 16 db e3 30 b6 cf 21 6d fc d0 c8 de e0 9e ef 2f d6 c5 bb 2f ec f4 83 83 5d 60 01 af 12 b0 f3 93 25 6d 1b 8d aa 8b 22 44 3a 9c 8f 0d 06 9e 96 e7 8b b5 d9 9f 32 73 3f f7 8e b3 9e 9c e2 c3 a5 6d ab 8a 2b fc db 63 d3 93 f6 d5 c4 07 7b 80 37 f3 76 5b e6 51 f5 b1 9c 6d 54 98 6d 15 6b a2 37 59 c1 f2 a2 87 99 29 de 09 0e d8 7a 2e 5e e8 fb 62 f0 de 40 4f 5b 0c c1 fb ed 4e 38 41 2f b6 6a b1 45 90 9e b5 47 c3 89 21 89 eb 2d 88 0b 25 91 ee 3d 87 ed 00 df 47 07 01 2e 71 de b9 00 69 e5 03 ec d9 e7 21 70 11 38 3b 3c 96 0f 58 8a 91 39 1c d7 49 f7 e9 e8 a9 24 d3 7f 27 ab ac 82 83 ab 25 b8 d7 6c 29 ec 3e fb aa 63 d9 ca e3 90 77 05 0c 52 0b 16 06 f4 9a 76 2c fa a6 Data Ascii: $vo~VlA20!m//]`%m"D:2s?m+c{7v[QmTmk7Y)z.^b@O[N8A/jEG!-%=G.qi!p8;<X9I$'%l)>cwRv,
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: b4 bd b0 9f 67 05 92 dd eb 17 18 18 90 3c 76 a3 7d b0 1f 80 09 c1 73 72 a8 4f 7f 69 c1 bd e4 cc 59 94 a4 66 06 58 1c ef 04 0e 7a 01 5e a2 a7 82 56 7a ba 87 9f f7 15 ac 87 07 59 d6 18 49 e4 34 01 46 6f 3e 2a f4 be b4 2a 70 48 53 23 bb 5e 3d ca a0 e1 51 ac 25 25 1c 58 30 e7 ed 6c ef 32 a3 a8 63 6d fe 65 50 bc 33 01 40 d7 f7 0a 9b fd 21 dc b9 2d ba f3 1e c5 03 c3 3c 9b c3 c5 7e e2 67 6e 34 47 da b2 52 27 6d 57 78 e9 15 de 95 e4 b4 d9 cd 27 20 1b b5 3a 95 75 a7 0a 17 0a c1 6a 6b d4 89 e8 ca a6 01 fe ee 76 42 53 d9 66 09 91 b3 96 8b 21 7a d4 27 df f7 d2 64 c6 f4 b6 13 7a f5 cb 8b f1 66 e6 ed 1c a3 90 72 5e 4b c3 4c 8a 65 0a 0d 6f 5b 01 de 88 40 da fa 7c f1 a7 0c 13 1d 54 bd 02 99 2b 10 f0 26 79 f1 84 67 3c 4b de 84 e3 68 34 96 1c fe 07 83 32 00 26 8b d9 f8 29 Data Ascii: g<v}srOiYfXz^VzYI4Fo>**pHS#^=Q%%X0l2cmeP3@!-<~gn4GR'mWx' :ujkvBSf!z'dzfr^KLeo[@\|T+&yg<Kh42&)
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 46 76 33 d9 8d eb 63 a0 c1 0b 85 8a c0 e2 cc 9a 04 d3 0d 26 df 0c 80 ed 09 3f a2 e8 99 f7 2a f4 6e 6d fc 0d 32 b7 f5 4c a7 08 44 af 5d c7 e2 a2 84 c2 35 3c 2c 73 80 c7 42 67 31 2c 5b 2f c4 f3 53 5c e9 61 6c 1c c5 6a cf 4c 1f ec 2d c0 f7 d6 85 2d 1d d8 bc 0b aa d9 cc 50 89 e3 6b 0b 36 25 b4 72 ca c3 e5 b3 ad f0 0f ec 7d c7 16 15 55 b0 a8 06 6d a0 aa be 59 b2 e5 4c c1 07 15 0a c9 db e9 16 dd 1d 2c 83 01 90 99 0b 77 0f 92 53 60 00 3c cf c1 4b 6b 14 fd c0 8f 35 18 93 11 42 77 ae 17 73 ec 35 65 45 bd 8c b3 b7 fe 58 ac f4 2f 65 09 bb ed 89 df 94 28 6d 71 18 5d 87 3e ab dd f3 80 61 6c 66 f7 81 00 be de f0 62 53 03 54 a0 66 f6 7d 0b 8e 45 b4 60 2d 3a 6e 52 31 e2 94 e0 69 f7 69 07 4b 26 e5 be 95 a0 ed 27 88 78 b8 69 db b8 54 31 91 42 74 2b 39 65 87 2b ba e5 ee 20 Data Ascii: Fv3c&?*nm2LD]5<,sBg1,[/S\aljL--Pk6%r}UmYL,wS`<Kk5Bws5eEX/e(mq]>alfbSTf}E`-:nR1iiK&'xiT1Bt+9e+
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 05 d8 7e 33 e0 7e e4 6f 47 73 89 41 8f 16 6b 29 fa 82 35 90 0d 34 81 14 37 97 08 4f 9c 41 7e c1 a4 32 c6 47 8c c2 fb 97 43 48 aa 72 12 28 12 dd b3 1e 07 7a 60 5c f6 3d ee a1 ee bf 71 1c 5d 68 93 f0 39 de 33 6c 24 13 88 c5 b7 58 ae c7 56 e3 fa 10 76 ed 28 f2 00 4f 05 f8 7b 8d c1 0c 72 d4 b0 6f 00 7a 5f 2b 9f c3 a6 1b 00 f1 c7 26 a1 f3 df fb 22 2b a9 4a 2d 2f 9e 20 03 21 47 7d bb 69 d0 60 e6 87 b4 6e d4 ae c2 e5 64 8b 91 cb c3 d6 4e d0 d6 30 6f b2 2f 72 85 da 9d 2b 0b 8b 95 30 c0 7a b4 8e 22 c4 5a ab 2f ec b6 aa 8a 80 6d d5 84 bd c7 32 73 84 21 af 0f 17 19 ce 27 6f da 33 2f 5c 80 72 23 2e 92 28 6b e0 19 65 1b 45 fc d5 3a 85 e3 d9 27 a2 05 33 86 f3 96 ed 8b 32 e6 8b 65 1f a1 31 ab 53 cb 03 2a 97 fd c4 fe 2d 17 0c d7 54 65 91 75 6b 84 c4 51 d9 26 3b fa 10 ce Data Ascii: ~3~oGsAk)547OA~2GCHr(z`\=q]h93l$XVv(O{roz_+&"+J-/ !G}i`ndN0o/r+0z"Z/m2s!'o3/\r#.(keE:'32e1S*-TeukQ&;
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: ac 8b 04 98 51 bd c5 83 ba 8f 07 2d 0c c9 71 02 c2 05 8e 9f 50 04 84 6a dd 1c 19 4e 80 9a 62 47 25 6d 3c d8 d8 c9 6d f9 c9 c5 c4 91 8d 4e 7f c5 59 f8 41 d3 20 64 d9 97 6c cf 29 67 6b 9f d9 29 03 76 8f 2e ad 9c c8 45 af fd 1c 96 2a ec 16 6c 7d 13 73 0b 94 30 4b c6 4e f7 18 b1 08 3b fd b3 18 b1 91 6b b6 71 86 59 7a 62 1d c9 dd 3b 1d 4a b6 c7 ef 60 90 da 73 36 6b ba 5f 88 55 1d 71 59 d8 00 68 bb e8 6e fb 3e 9f ba f6 06 c4 eb a3 4f f9 ff f9 52 4e fd 9c 53 eb 7b ac f2 4f 31 e8 45 7e 11 76 6c 3f f4 b2 46 81 5d 2d 85 87 7e 6e 58 8b 6e 5e f1 0d 57 6c b3 98 ea 86 b8 81 30 0e d8 4f 02 79 cd 8b 2b 15 62 73 84 cb 1e 61 44 76 aa 1a fa 56 62 4f 69 6a 53 f9 14 60 08 a5 8b f1 26 d6 91 b2 0b 26 d9 61 6b 95 06 c6 d0 df 73 84 d9 ef 82 8f cf 38 90 fe 02 d0 3d c1 b0 82 cb 05 Data Ascii: Q-qPjNbG%m<mNYA dl)gk)v.E*l}s0KN;kqYzb;J`s6k_UqYhn>ORNS{O1E~vl?F]-~nXn^Wl0Oy+bsaDvVbOijS`&&aks8=
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 74 5b d4 e1 85 87 92 97 d1 fe 40 03 10 12 df bb d2 34 0b a2 b1 26 f8 3f 20 73 04 29 4e 71 e9 46 5b e6 8a 9b 70 16 76 70 38 00 03 62 03 bc be f6 17 83 d6 44 64 00 2a a0 3c 77 04 d2 50 60 43 85 cd 35 e1 da 60 40 65 f8 ec f5 b4 12 80 76 ca 9e f7 24 c4 d3 df a1 4c e4 46 71 38 4e 29 b9 00 9a 6a 63 fc dd 55 89 2f d7 e8 20 6a 01 24 4e 75 76 dd 0a b7 a7 46 e2 49 95 f3 a0 17 8f 62 57 b3 f7 4f 31 5c ad 8a 24 5e 13 4f c3 0e 23 42 cd 5f 0d 95 d3 ee 39 9c 01 9a fa 85 dd f6 2a e7 b1 32 f4 18 2b 63 56 ec 88 35 0c 62 21 ca e1 2a 7f 2a bb 1b 5f 02 b2 0d ce bb 5c b5 b0 d5 8f 52 93 a5 b4 ad d3 94 8b 95 74 7d 04 1c 96 23 90 17 df 74 ee 33 72 a4 d7 c1 16 3b 37 b9 f5 b0 e7 7c 5f ae 3d 76 51 77 03 cb d3 d7 71 aa 62 07 2f 00 34 57 8a 06 49 69 61 95 25 d7 82 36 51 83 09 2a 97 42 Data Ascii: t[@4&? s)NqF[pvp8bDd<wP`C5`@ev$LFq8N)jcU/ j$NuvFIbWO1\$^O#B_92+cV5b!*_\Rt}#t3r;7\|_=vQwqb/4WIia%6QB
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: a5 c4 11 51 06 ed ba a4 ae 77 d5 82 08 0a da 34 38 e2 84 2a 0b b0 cd d0 f6 a7 5c 07 09 cc a8 3c 82 8e d0 25 fd 10 a5 d3 f5 a8 5b 4a f4 bc af a1 89 d1 4f 4d 69 ed b7 ac dd 13 3f ac 69 06 39 b8 1d ae 15 eb 11 f5 d0 8f 3f 5d 76 1d 0c e7 1e 50 17 3d ce 0b ba 72 5c 09 9e f4 44 79 64 03 13 d1 64 65 6f 60 df 03 a3 c8 ee dc 61 dd 01 d8 dc e6 d6 ab 4e 38 c7 74 a0 97 71 b0 b2 2f 27 4b d2 6b 3a 4b 47 22 f2 0c 31 29 49 24 22 eb 6c e4 f8 f6 c4 5b 80 89 ee 45 18 ff 27 7e fc d5 b9 20 6f fe fc e9 18 10 38 b9 6d dc ff e1 70 93 ed a0 3c 29 86 52 61 f8 1f dc 3f 97 9e 5f f0 91 0e 67 a6 ab d8 16 0e ae b8 e1 cc cf 61 de c8 f1 be 45 a1 2c 80 9c 40 40 57 6a 1c d1 6a 13 da e1 06 4b 00 a6 ec 15 c0 77 59 5d d5 1d 0d f8 e4 8e 95 cb e4 dc 23 ff 7e 16 ab 77 1e f4 80 21 e0 65 7b 29 61 Data Ascii: Qw48*\<%[JOMi?i9?]vP=r\Dyddeo`aN8tq/'Kk:KG"1)I$"l[E'~ o8mp<)Ra?_gaE,@@WjjKwY]#~w!e{)a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-19 20:22:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=244040 Date: Fri, 19 Jul 2024 20:22:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49742	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6c 35 44 69 4f 46 78 30 50 55 61 4b 65 77 58 6f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 36 34 62 66 34 35 37 32 35 61 65 62 64 31 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: l5DiOFx0PUaKewXo.1Context: 864bf45725aebd12
2024-07-19 20:22:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-19 20:22:34 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6c 35 44 69 4f 46 78 30 50 55 61 4b 65 77 58 6f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 36 34 62 66 34 35 37 32 35 61 65 62 64 31 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 6b 45 75 64 4c 4c 72 42 4b 6b 34 70 59 36 31 2b 77 37 76 53 48 7a 67 61 70 6b 70 38 69 48 64 64 38 77 4c 37 58 4a 56 45 49 2b 56 63 6d 52 67 78 4d 70 71 77 59 50 49 48 75 33 68 6e 69 43 64 50 43 66 4b 56 67 56 33 79 7a 35 39 6e 4f 58 44 61 52 4e 7a 56 71 4a 50 55 58 32 4f 58 6c 39 55 46 32 66 2b 34 46 77 59 36 4c 58 63 2f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: l5DiOFx0PUaKewXo.2Context: 864bf45725aebd12<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARkEudLLrBKk4pY61+w7vSHzgapkp8iHdd8wL7XJVEI+VcmRgxMpqwYPIHu3hniCdPCfKVgV3yz59nOXDaRNzVqJPUX2OXl9UF2f+4FwY6LXc/
2024-07-19 20:22:34 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6c 35 44 69 4f 46 78 30 50 55 61 4b 65 77 58 6f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 36 34 62 66 34 35 37 32 35 61 65 62 64 31 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: l5DiOFx0PUaKewXo.3Context: 864bf45725aebd12<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-19 20:22:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-19 20:22:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 48 45 6a 5a 74 6b 61 30 6b 43 30 79 79 64 6a 51 31 38 34 32 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: jHEjZtka0kC0yydjQ1842w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49748	34.36.213.229	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	595	OUT	GET /agent/static/0600cd7b-e6b2-4ba9-4249-ab1342c3631b/pendo.js HTTP/1.1 Host: cdn.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://freemanhealthsystem.login-us.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:34 UTC	955	IN	HTTP/1.1 200 OK x-goog-generation: 1721330226627065 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 164778 x-goog-hash: crc32c=jqZp9Q== x-goog-hash: md5=JRilXhC5lIE4JX6ggTMybQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: ACJd0Npb6aTu1XCDrezs-BYwB1v4BmDWFWwezPqSKfWxhEdl4bIsqk2Gq2gAKg0dxXJFXuTIvmo Server: UploadServer Date: Fri, 19 Jul 2024 20:22:34 GMT Last-Modified: Thu, 18 Jul 2024 19:17:06 GMT ETag: W/"2518a55e10b9948138257ea08133326d" Content-Type: application/javascript; charset=utf-8 Vary: Accept-Encoding Age: 0 Cache-Control: public,max-age=450 Strict-Transport-Security: max-age=63072000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-19 20:22:34 UTC	435	IN	Data Raw: 38 30 30 30 0d 0a 2f 2f 20 50 65 6e 64 6f 20 41 67 65 6e 74 20 57 72 61 70 70 65 72 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 64 6f 2e 69 6f 2c 20 49 6e 63 2e 0a 2f 2f 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 20 20 20 20 70 72 6f 64 75 63 74 69 6f 6e 0a 2f 2f 20 41 67 65 6e 74 20 56 65 72 73 69 6f 6e 3a 20 20 32 2e 32 33 39 2e 30 0a 2f 2f 20 49 6e 73 74 61 6c 6c 65 64 3a 20 20 20 20 20 20 32 30 32 34 2d 30 37 2d 31 38 54 31 39 3a 31 37 3a 30 35 5a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 50 65 6e 64 6f 43 6f 6e 66 69 67 29 20 7b 0a 2f 2a 0a 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 61 67 65 6e 74 2e 70 65 6e 64 6f 2e 69 6f 2f 6c 69 63 65 6e 73 65 73 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 52 62 2c 4c 62 2c 6b 62 29 7b 21 66 75 Data Ascii: 8000// Pendo Agent Wrapper// Copyright 2024 Pendo.io, Inc.// Environment: production// Agent Version: 2.239.0// Installed: 2024-07-18T19:17:05Z(function (PendoConfig) {/@license https://agent.pendo.io/licenses/!function(Rb,Lb,kb){!fu
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 54 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 29 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6f 3d 65 7c 7c 30 2c 61 3d 28 74 3c 30 3f 72 2b 74 3a 74 7c 7c 72 29 2d 28 6f 3d 30 3c 3d 6f 3f 6f 3a 72 2b 6f 29 3b 69 66 28 30 3c 61 29 69 66 28 69 3d 6e 65 77 20 41 72 72 61 79 28 61 29 2c 74 68 69 73 2e 63 68 61 72 41 74 29 66 6f 72 28 6e 3d 30 3b 6e 3c 61 3b 6e 2b 2b 29 69 5b 6e 5d 3d 74 68 69 73 2e 63 68 61 72 41 74 28 6f 2b 6e 29 3b 65 6c 73 65 20 66 6f 72 28 6e 3d 30 3b 6e 3c 61 3b 6e 2b 2b 29 69 5b 6e 5d 3d 74 68 69 73 5b 6f 2b 6e 5d 3b 72 65 74 75 72 6e 20 69 7d 7d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 7c 7c 28 53 74 Data Ascii: toString.call(this))return T.call(this,e,t);var n,i=[],r=this.length,o=e\|\|0,a=(t<0?r+t:t\|\|r)-(o=0<=o?o:r+o);if(0<a)if(i=new Array(a),this.charAt)for(n=0;n<a;n++)i[n]=this.charAt(o+n);else for(n=0;n<a;n++)i[n]=this[o+n];return i}}String.prototype.trim\|\|(St
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 28 21 30 29 2e 75 70 64 61 74 65 28 65 29 5b 74 5d 28 29 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 28 22 68 65 78 22 29 3b 28 74 3d 69 3f 63 28 74 29 3a 74 29 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 7d 2c 74 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 72 65 61 74 65 28 29 2e 75 70 64 61 74 65 28 65 29 7d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 2b 2b 65 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 74 5b 6e 5d 3d 61 28 6e 29 7d 72 65 74 75 72 6e 20 74 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 Data Ascii: ){return function(e){return new l(!0).update(e)[t]()}},d=function(){var t=a("hex");(t=i?c(t):t).create=function(){return new l},t.update=function(e){return t.create().update(e)};for(var e=0;e<r.length;++e){var n=r[e];t[n]=a(n)}return t},c=function(t){var
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 6e 3e 3e 32 5d 7c 3d 28 31 39 32 7c 74 3e 3e 36 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 3a 28 74 3c 35 35 32 39 36 7c 7c 35 37 33 34 34 3c 3d 74 3f 61 5b 6e 3e 3e 32 5d 7c 3d 28 32 32 34 7c 74 3e 3e 31 32 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 3a 28 74 3d 36 35 35 33 36 2b 28 28 31 30 32 33 26 74 29 3c 3c 31 30 7c 31 30 32 33 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 72 29 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 32 34 30 7c 74 3e 3e 31 38 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 74 3e 3e 31 32 26 36 33 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 74 3e 3e 36 26 36 33 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 36 33 26 74 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 Data Ascii: n>>2]\|=(192\|t>>6)<<u[3&n++]:(t<55296\|\|57344<=t?a[n>>2]\|=(224\|t>>12)<<u[3&n++]:(t=65536+((1023&t)<<10\|1023&e.charCodeAt(++r)),a[n>>2]\|=(240\|t>>18)<<u[3&n++],a[n>>2]\|=(128\|t>>12&63)<<u[3&n++]),a[n>>2]\|=(128\|t>>6&63)<<u[3&n++]),a[n>>2]\|=(128\|63&t)<<u[3&n++])
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 3d 28 65 3d 28 6e 3d 28 65 3d 28 69 3d 28 65 3d 28 72 3d 28 65 3d 28 6f 3d 28 65 3d 74 3c 3c 35 7c 74 3e 3e 3e 32 37 29 2b 28 6e 5e 69 5e 72 29 2b 6f 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 5d 3c 3c 30 29 3c 3c 35 7c 6f 3e 3e 3e 32 37 29 2b 28 74 5e 28 6e 3d 6e 3c 3c 33 30 7c 6e 3e 3e 3e 32 29 5e 69 29 2b 72 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 31 5d 3c 3c 30 29 3c 3c 35 7c 72 3e 3e 3e 32 37 29 2b 28 6f 5e 28 74 3d 74 3c 3c 33 30 7c 74 3e 3e 3e 32 29 5e 6e 29 2b 69 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 32 5d 3c 3c 30 29 3c 3c 35 7c 69 3e 3e 3e 32 37 29 2b 28 72 5e 28 6f 3d 6f 3c 3c 33 30 7c 6f 3e 3e 3e 32 29 5e 74 29 2b 6e 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 33 5d 3c 3c 30 29 3c 3c 35 7c 6e 3e 3e 3e 32 37 29 2b 28 69 Data Ascii: =(e=(n=(e=(i=(e=(r=(e=(o=(e=t<<5\|t>>>27)+(n^i^r)+o+1859775393+a[s]<<0)<<5\|o>>>27)+(t^(n=n<<30\|n>>>2)^i)+r+1859775393+a[s+1]<<0)<<5\|r>>>27)+(o^(t=t<<30\|t>>>2)^n)+i+1859775393+a[s+2]<<0)<<5\|i>>>27)+(r^(o=o<<30\|o>>>2)^t)+n+1859775393+a[s+3]<<0)<<5\|n>>>27)+(i
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 26 31 35 5d 2b 6f 5b 6e 3e 3e 32 34 26 31 35 5d 2b 6f 5b 6e 3e 3e 32 30 26 31 35 5d 2b 6f 5b 6e 3e 3e 31 36 26 31 35 5d 2b 6f 5b 6e 3e 3e 31 32 26 31 35 5d 2b 6f 5b 6e 3e 3e 38 26 31 35 5d 2b 6f 5b 6e 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 6e 5d 2b 6f 5b 69 3e 3e 32 38 26 31 35 5d 2b 6f 5b 69 3e 3e 32 34 26 31 35 5d 2b 6f 5b 69 3e 3e 32 30 26 31 35 5d 2b 6f 5b 69 3e 3e 31 36 26 31 35 5d 2b 6f 5b 69 3e 3e 31 32 26 31 35 5d 2b 6f 5b 69 3e 3e 38 26 31 35 5d 2b 6f 5b 69 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 69 5d 2b 6f 5b 72 3e 3e 32 38 26 31 35 5d 2b 6f 5b 72 3e 3e 32 34 26 31 35 5d 2b 6f 5b 72 3e 3e 32 30 26 31 35 5d 2b 6f 5b 72 3e 3e 31 36 26 31 35 5d 2b 6f 5b 72 3e 3e 31 32 26 31 35 5d 2b 6f 5b 72 3e 3e 38 26 31 35 5d 2b 6f 5b 72 3e 3e 34 26 31 35 5d 2b Data Ascii: &15]+o[n>>24&15]+o[n>>20&15]+o[n>>16&15]+o[n>>12&15]+o[n>>8&15]+o[n>>4&15]+o[15&n]+o[i>>28&15]+o[i>>24&15]+o[i>>20&15]+o[i>>16&15]+o[i>>12&15]+o[i>>8&15]+o[i>>4&15]+o[15&i]+o[r>>28&15]+o[r>>24&15]+o[r>>20&15]+o[r>>16&15]+o[r>>12&15]+o[r>>8&15]+o[r>>4&15]+
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 75 72 6e 21 50 28 65 29 26 26 21 4e 28 65 29 26 26 42 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 50 28 65 29 26 26 4d 28 65 29 26 26 74 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 5b 5d 29 3b 66 6f 72 28 76 61 72 20 74 3d 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 5b 5c 77 5c 2d 2e 5d 2a 63 64 6e 5b 5c 77 5c 2d 2e 5d 2a 5c 2e 28 70 65 6e 64 6f 2d 64 65 76 5c 2e 63 6f 6d 7c 70 65 6e 64 6f 5c 2e 69 6f 29 5c 2f 61 67 65 6e 74 5c 2f 73 74 61 74 69 63 5c 2f 28 5b 5c 77 5d 7b 38 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 5d 7b 31 32 7d 7c 50 45 4e 44 4f 5f 41 50 49 5f 4b 45 59 29 5c 2f 70 65 6e 64 6f 5c 2e 6a 73 24 2f 67 2c 6e 3d 30 3b 6e 3c Data Ascii: urn!P(e)&&!N(e)&&B(e)}function D(e,t){return!P(e)&&M(e)&&t}function G(e){void 0===e&&(e=[]);for(var t=/^https:\/\/[\w\-.]cdn[\w\-.]\.(pendo-dev\.com\|pendo\.io)\/agent\/static\/([\w]{8}-[\w]{4}-[\w]{4}-[\w]{4}-[\w]{12}\|PENDO_API_KEY)\/pendo\.js$/g,n=0;n<
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 66 28 44 28 65 2c 6e 29 29 7b 65 3d 55 28 65 2c 21 31 2c 6e 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 4a 28 74 29 2c 63 65 28 65 29 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 74 2c 6e 29 7c 7c 75 65 28 65 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 4c 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 65 3d 28 74 5b 22 61 73 79 6e 63 22 5d 3d 21 30 2c 74 2e 73 72 63 3d 78 65 28 29 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 65 29 2c 4c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 29 3b 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 Data Ascii: f(D(e,n)){e=U(e,!1,n);if(e)return J(t),ce(e),!0}return!1}function de(e,t,n){return V(e,t,n)\|\|ue(e,t,n)}function ce(e){var t=Lb.createElement("script"),e=(t["async"]=!0,t.src=xe().createScriptURL(e),Lb.getElementsByTagName("script")[0]);e&&e.parentNode?e.p
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 70 6f 77 28 32 2c 35 33 29 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 28 72 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 6e 75 6c 6c 3d 3d 6f 3f 72 2e 6c 65 6e 67 74 68 2d 31 3a 2b 6f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 4d 61 74 68 2e 6d 61 78 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 6f 2c 30 29 2c 74 3d 41 72 72 61 79 28 65 29 2c 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 6f 5d 3b 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 74 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 72 Data Ascii: Math.pow(2,53)-1;function c(r,o){return o=null==o?r.length-1:+o,function(){for(var e=Math.max(arguments.length-o,0),t=Array(e),n=0;n<e;n++)t[n]=arguments[n+o];switch(o){case 0:return r.call(this,t);case 1:return r.call(this,arguments[0],t);case 2:return r
2024-07-19 20:22:34 UTC	1390	IN	Data Raw: 3d 56 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 74 5d 7d 7d 76 61 72 20 6d 3d 63 65 28 22 62 79 74 65 4c 65 6e 67 74 68 22 29 2c 6c 65 3d 64 65 28 6d 29 2c 66 65 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 28 49 7c 55 69 29 6e 74 28 38 7c 31 36 7c 33 32 29 7c 46 6c 6f 61 74 28 33 32 7c 36 34 29 7c 55 69 6e 74 38 43 6c 61 6d 70 65 64 7c 42 69 67 28 49 7c 55 69 29 6e 74 36 34 29 41 72 72 61 79 5c 5d 2f 3b 76 61 72 20 70 65 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6a 3f 6a 28 65 29 26 26 21 70 28 65 29 3a 6c 65 28 65 29 26 26 66 65 2e 74 65 73 74 28 6c 2e 63 61 6c 6c 28 65 29 29 7d 3a 75 65 28 21 31 29 2c Data Ascii: =V}}function ce(t){return function(e){return null==e?void 0:e[t]}}var m=ce("byteLength"),le=de(m),fe=/\[object ((I\|Ui)nt(8\|16\|32)\|Float(32\|64)\|Uint8Clamped\|Big(I\|Ui)nt64)Array\]/;var pe=t?function(e){return j?j(e)&&!p(e):le(e)&&fe.test(l.call(e))}:ue(!1),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49746	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	813	OUT	GET /u/login/assets/languages/en.json?ver=1.11.0 HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:34 UTC	435	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:34 GMT Content-Type: application/json Content-Length: 18842 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Wed, 10 Jul 2024 00:27:08 GMT ETag: W/"d8q2frXBnUcd8q37i/Iu70" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:34 UTC	15949	IN	Data Raw: 7b 0a 09 22 24 49 31 38 4e 5f 53 50 49 4e 4e 45 52 5f 4c 4f 41 44 49 4e 47 22 3a 20 22 4c 6f 61 64 69 6e 67 2e 2e 2e 22 2c 0a 09 22 50 57 44 5f 52 55 4c 45 53 5f 43 48 45 43 4b 45 52 5f 4c 4f 57 45 52 5f 43 41 53 45 22 3a 20 22 49 6e 63 6c 75 64 65 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6c 6f 77 65 72 63 61 73 65 20 63 68 61 72 61 63 74 65 72 20 28 61 2d 7a 29 22 2c 0a 09 22 50 57 44 5f 52 55 4c 45 53 5f 43 48 45 43 4b 45 52 5f 4d 49 4e 5f 43 48 52 5f 41 46 54 45 52 22 3a 20 22 63 68 61 72 61 63 74 65 72 73 22 2c 0a 09 22 50 57 44 5f 52 55 4c 45 53 5f 43 48 45 43 4b 45 52 5f 4d 49 4e 5f 43 48 52 5f 42 45 46 4f 52 45 22 3a 20 22 4d 69 6e 69 6d 75 6d 22 2c 0a 09 22 50 57 44 5f 52 55 4c 45 53 5f 43 48 45 43 4b 45 52 5f 4e 55 4d 42 45 52 22 3a 20 22 49 6e Data Ascii: {"$I18N_SPINNER_LOADING": "Loading...","PWD_RULES_CHECKER_LOWER_CASE": "Include at least one lowercase character (a-z)","PWD_RULES_CHECKER_MIN_CHR_AFTER": "characters","PWD_RULES_CHECKER_MIN_CHR_BEFORE": "Minimum","PWD_RULES_CHECKER_NUMBER": "In
2024-07-19 20:22:34 UTC	2893	IN	Data Raw: 6f 76 65 72 79 2c 20 63 6f 6d 70 6c 69 61 6e 63 65 2c 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 76 65 73 74 69 67 61 74 69 76 65 20 70 75 72 70 6f 73 65 73 2e 20 52 65 76 69 65 77 65 72 73 20 63 61 6e 20 6d 61 72 6b 20 63 61 73 65 20 6d 65 73 73 61 67 65 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 72 65 6c 65 76 61 6e 63 65 20 61 6e 64 20 70 72 69 76 69 6c 65 67 65 20 74 6f 20 69 64 65 6e 74 69 66 79 20 70 65 72 74 69 6e 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 79 20 63 61 6e 20 61 6c 73 6f 20 73 65 61 72 63 68 20 63 61 73 65 20 72 65 73 75 6c 74 73 2c 20 61 64 64 20 63 6f 6d 6d 65 6e 74 73 2c 20 61 6e 64 20 74 61 67 20 6d 65 73 73 61 67 65 73 2e 22 2c 0a 09 22 44 49 53 43 4c 41 49 4d 45 52 5f 54 49 54 4c 45 5f 4f 54 50 5f 53 54 41 4e 44 Data Ascii: overy, compliance, and other investigative purposes. Reviewers can mark case messages according to relevance and privilege to identify pertinent information. They can also search case results, add comments, and tag messages.","DISCLAIMER_TITLE_OTP_STAND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49745	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	793	OUT	GET /u/login/app-version.jsp HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:34 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:34 GMT Content-Type: text/html;charset=utf-8 Content-Length: 6 Connection: close Cache-Control: private, max-age=0, no-cache, no-store Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:34 UTC	6	IN	Data Raw: 31 2e 31 31 2e 30 Data Ascii: 1.11.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49747	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	1670	OUT	GET /u/rest/branding/get-branding-item/WKQ6McxzG4swkfOqOLSMVAeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoiU3RVdUV0cFQxUnozejI5ZiJ9.B0qOyoKogie6_0tKl7zF_Z-NM7pDP9kk.8GVGyjDi5jRGxfMq.wgH3wbn82zS0_OqwoiHBEpXp47uoxJqBWet8dPnSNx6WYGdy7BXDp6AOqGUx7UW57lzqt_N3LW74GfO3g2mRKp5b0zuRFFYUcVFgp2iH6su1lLYqeSgg3rhz_uzPlY7Wu3cWuNbYIcbs6wyVFpT9lUj7cr9wa0sHlLNBaCEQXu143WKTjmhMA3w9U_Mcg2FvrEuoyiR0ifqNdyLYUAmCMAI05SyKIlQbOYf7lvO6dEKAQircZ0dVmTuIcrG1vD62ZmHn-gE0Fb-lmuMJ3O9rPZxfEAGl9SMcHC62s2t_c5TgcxZZchaIqLCr6rmDXmDfLagDVnsqRdvdHg_tqoqaT8FT_iVlNZB8COtWXeWy3CK9y5s3dPgyXvr3jb1Y4O-uhxIwpqmjP8SXvSDXqvQy0MJdo4BWjsFNaS-2c72Vjqx9x6sdFrauZTvfHYQyeKseJJZ-Joue8pJQOyx3evKrw0Ed2IMVwEFqJNPh9HnFl_KytDO_qe18rcKpks9xGsFhvxu8eYW7r1B-GxITVALVPF0j_cOO_6T7hi9vS8-UROZmaACF52axuXvt5T_hW9_AV2S9E5UnzebhwiQKWzVV2qrAiRUs.L86csBQ1j7KqH7uRUAyd8Q?tkn=freemanhealthsystem HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:35 UTC	380	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:34 GMT Content-Type: image/png;charset=utf-8 Content-Length: 23736 Connection: close Cache-Control: max-age=1209600 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Encoding: UTF-8
2024-07-19 20:22:35 UTC	16004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 71 00 00 00 fa 08 06 00 00 00 ce 65 11 0a 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ed bd f9 93 24 e9 79 df f7 be 59 33 b3 0b 80 74 37 ff 82 e9 0d 6f 84 1d 3e 34 0d c7 12 20 77 83 9e 5e f1 58 80 38 a6 17 04 0f 11 24 a6 d7 20 05 81 20 38 35 ea 5d 00 02 01 4e 8f 78 03 68 4d 0d 21 92 3a 2c 4f b7 7c 88 b6 2c 6f 0f a9 20 b0 96 15 db 13 f2 62 71 2c b9 dd 06 83 26 e5 b5 b6 c7 32 c2 11 fe 45 d3 61 3b 04 62 bb f2 75 bc 99 cf 9b f9 e4 9b 6f 66 65 e5 55 99 59 df cf 44 4d 57 e5 55 79 55 e6 37 9f 53 2a a5 04 00 00 00 00 00 e8 17 1e 8e 17 00 00 00 00 40 ff 80 88 03 00 00 00 00 e8 21 10 71 00 00 00 00 00 3d 04 22 0e 00 00 00 00 a0 87 40 c4 01 00 00 00 00 f4 10 88 Data Ascii: PNGIHDRqepHYs&? IDATx$yY3t7o>4 w^X8$ 85]NxhM!:,O\|,o bq,&2Ea;buofeUYDMWUyU7S*@!q="@
2024-07-19 20:22:35 UTC	7732	IN	Data Raw: 70 89 b8 36 b6 6f a9 8b fe 1a 28 cb 7d e1 56 f9 5c 11 57 da 1a e7 12 6c c2 b2 08 85 9c 0a a1 36 d4 6f 96 17 70 5f fb e1 f7 6d 68 0b 9c 10 6a 25 ee 6e 20 dc 42 ce 8f e3 d6 a2 f5 f0 45 2c da 2c 41 c7 45 91 1f 64 a2 26 5f 89 e2 be f4 5d c2 4f c6 cf 25 96 47 d3 a4 93 1e 44 32 5e 8f 25 20 c4 b5 e4 98 80 13 22 6d a1 73 ed 7f 97 80 4b ac 8b d2 56 b8 65 6d 08 3e 54 ea 4a 50 81 88 0b 71 89 99 41 43 b1 56 4d d7 c1 2a 75 23 af ea 2a ec 7b e7 0a 43 4e cc 62 1f 44 dc 90 7e 53 0b 8f 8d cb 15 71 44 53 96 1a ed 4f 5e 57 bf 79 ad bc 80 7b c7 d3 5b c2 17 2f 2a b2 c0 89 48 58 c5 59 a2 c2 8e 3f 63 b1 6e 71 b6 a9 c9 16 75 c4 c5 4d e7 78 b1 d8 3a c1 dc b6 3e 2f 4f c2 12 28 92 25 43 e2 26 f9 7c 5b 12 35 e3 48 b8 a9 a9 d5 76 8b 0b 3c d6 d1 21 ce cc f5 93 c2 34 16 d3 b0 c2 0d 8c Data Ascii: p6o(}V\Wl6op_mhj%n BE,,AEd&_]O%GD2^% "msKVem>TJPqACVMu#{CNbD~SqDSO^Wy{[/*HXY?cnquMx:>/O(%C&\|[5Hv<!4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49749	207.211.31.115	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	420	OUT	GET /u/login/cache.f692ac8003e8f0614f6bb1499f05c016.login.js HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:35 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:34 GMT Content-Type: application/javascript Content-Length: 208060 Connection: close Cache-Control: max-age=20160 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Wed, 10 Jul 2024 00:27:08 GMT ETag: W/"kxnI9qqp1aokxnJZjCjlnY" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:35 UTC	15912	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 6d 65 73 73 61 67 65 46 6f 72 6d 61 74 74 65 72 2e 64 69 72 65 63 74 69 76 65 22 2c 5b 5d 29 2e 64 69 72 65 63 74 69 76 65 28 22 6d 63 4d 65 73 73 61 67 65 46 6f 72 6d 61 74 74 65 72 22 2c 5b 22 24 74 72 61 6e 73 6c 61 74 65 22 2c 22 24 73 61 6e 69 74 69 7a 65 22 2c 22 24 69 6e 6a 65 63 74 6f 72 22 2c 22 24 77 69 6e 64 6f 77 22 2c 22 24 6c 6f 63 61 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 6c 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 7b 72 65 73 74 72 69 63 74 3a 22 41 22 2c 74 65 6d 70 6c 61 74 65 55 72 6c 3a 22 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 65 73 73 61 67 65 2d 66 6f 72 6d 61 74 74 65 72 2f 6d 65 73 73 61 67 65 2d 66 6f 72 6d 61 74 74 65 72 2e 74 70 6c Data Ascii: "use strict";angular.module("messageFormatter.directive",[]).directive("mcMessageFormatter",["$translate","$sanitize","$injector","$window","$location",function(n,s,l,o,i){return{restrict:"A",templateUrl:"components/message-formatter/message-formatter.tpl
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 69 6e 67 2d 74 6f 70 20 73 65 70 65 72 61 74 6f 72 22 3e 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 74 6f 2d 6c 61 62 65 6c 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 44 41 54 45 5f 52 41 4e 47 45 5f 50 49 43 4b 45 52 5f 53 49 4d 50 4c 45 5f 4c 41 42 45 4c 5f 54 4f 22 3e 3c 2f 6c 61 62 65 6c 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 67 72 6f 75 70 20 65 6e 64 2d 64 61 74 65 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 64 61 74 65 72 61 6e 67 65 20 69 6e 70 75 74 2d 67 72 6f 75 70 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 Data Ascii: ing-top seperator"></div>\n\n <label class="to-label" translate="DATE_RANGE_PICKER_SIMPLE_LABEL_TO"></label>\n <div class="input-group end-date">\n <div class="input-daterange input-group">\n <input type="text" class="form-control"
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 69 6f 6e 2e 76 61 6c 69 64 2e 6c 65 6e 67 74 68 20 7c 7c 20 64 6f 6d 61 69 6e 73 4d 61 6e 61 67 65 72 42 75 6c 6b 41 64 64 43 74 72 6c 2e 62 75 6c 6b 44 6f 6d 61 69 6e 73 43 6f 6c 6c 65 63 74 69 6f 6e 2e 76 61 6c 69 64 2e 6c 65 6e 67 74 68 20 3e 20 35 30 22 20 6e 67 2d 69 66 3d 22 64 6f 6d 61 69 6e 73 4d 61 6e 61 67 65 72 42 75 6c 6b 41 64 64 43 74 72 6c 2e 73 65 63 6f 6e 64 53 74 65 70 22 3e 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 3c 2f 64 69 76 3e 27 29 7d 5d 29 2c 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 63 6f 6d 70 6f 6e 65 6e 74 73 2f 64 6f 6d 61 69 6e 73 2d 6d 61 6e 61 67 65 72 2f 6d 6f 64 61 6c 2f 77 69 7a 61 72 64 2d 73 74 65 70 73 2f 77 69 7a 61 72 64 2d 73 74 65 70 2d 30 31 2e 74 70 6c 2e 68 74 6d 6c 22 2c 5b 5d 29 2e 72 75 6e 28 5b 22 24 74 65 Data Ascii: ion.valid.length \|\| domainsManagerBulkAddCtrl.bulkDomainsCollection.valid.length > 50" ng-if="domainsManagerBulkAddCtrl.secondStep"></button>\n</div>')}]),angular.module("components/domains-manager/modal/wizard-steps/wizard-step-01.tpl.html",[]).run(["$te
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 6f 6e 28 6e 29 7b 6e 2e 70 75 74 28 22 63 6f 6d 70 6f 6e 65 6e 74 73 2f 69 6e 2d 61 70 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2f 69 6e 2d 61 70 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 74 70 6c 2e 68 74 6d 6c 22 2c 27 3c 64 69 76 20 69 64 3d 22 69 6e 2d 61 70 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 67 72 6f 77 6c 2d 63 6f 6e 74 61 69 6e 65 72 22 20 6e 67 2d 63 6c 61 73 73 3d 22 77 72 61 70 70 65 72 43 6c 61 73 73 65 73 28 29 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 22 20 6e 67 2d 72 65 70 65 61 74 3d 22 6d 65 73 73 61 67 65 20 69 6e 20 6d 65 73 73 61 67 65 73 22 20 6e 67 2d 63 6c 61 73 73 3d 22 6d 65 73 73 61 67 65 2e 73 65 76 65 72 69 74 79 22 3e 5c Data Ascii: on(n){n.put("components/in-app-notification/in-app-notification.tpl.html",'<div id="in-app-notification" class="growl-container" ng-class="wrapperClasses()">\n <div class="notification-item" ng-repeat="message in messages" ng-class="message.severity">\
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 3c 64 69 76 20 6d 63 2d 6e 6f 72 74 68 3d 22 32 32 22 20 6e 67 2d 69 66 3d 22 63 74 72 6c 2e 73 65 6c 65 63 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 3e 30 22 20 6e 67 2d 69 6e 63 6c 75 64 65 3d 22 5c 27 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 69 73 74 2d 64 65 74 61 69 6c 2f 6c 69 73 74 2f 74 6f 6f 6c 62 61 72 2f 6c 69 73 74 2d 74 6f 6f 6c 62 61 72 2e 74 70 6c 2e 68 74 6d 6c 5c 27 22 3e 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 53 43 52 4f 4c 4c 41 42 4c 45 20 45 4d 41 49 4c 20 4c 49 53 54 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 6d 63 2d 63 65 6e 74 65 72 20 6e 67 2d 69 6e 63 6c 75 64 65 3d 22 5c 27 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 69 73 74 2d 64 65 74 61 69 6c 2f 6c 69 73 74 2f 6c 69 Data Ascii: <div mc-north="22" ng-if="ctrl.selectionOptions.length>0" ng-include="\'components/list-detail/list/toolbar/list-toolbar.tpl.html\'"></div>\n\n \x3c!-- SCROLLABLE EMAIL LIST--\x3e\n <div mc-center ng-include="\'components/list-detail/list/li
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 6e 2f 64 69 73 63 6c 61 69 6d 65 72 2f 64 69 73 63 6c 61 69 6d 65 72 2e 74 70 6c 2e 68 74 6d 6c 22 2c 5b 5d 29 2e 72 75 6e 28 5b 22 24 74 65 6d 70 6c 61 74 65 43 61 63 68 65 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 70 75 74 28 22 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 6f 67 69 6e 2f 64 69 73 63 6c 61 69 6d 65 72 2f 64 69 73 63 6c 61 69 6d 65 72 2e 74 70 6c 2e 68 74 6d 6c 22 2c 27 5c 78 33 63 21 2d 2d 20 3c 68 34 20 63 6c 61 73 73 3d 22 6e 6f 2d 6d 61 72 67 69 6e 2d 74 6f 70 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 7b 7b 61 70 70 43 74 72 6c 2e 63 75 72 72 65 6e 74 4c 6f 67 69 6e 43 6f 6e 66 2e 64 69 73 63 6c 61 69 6d 65 72 54 69 74 6c 65 7d 7d 22 20 6e 67 2d 69 66 3d 22 21 61 70 70 43 74 72 6c 2e 62 72 61 6e 64 69 6e 67 2e 64 69 73 63 6c 61 69 6d 65 72 Data Ascii: n/disclaimer/disclaimer.tpl.html",[]).run(["$templateCache",function(n){n.put("components/login/disclaimer/disclaimer.tpl.html",'\x3c!-- <h4 class="no-margin-top" translate="{{appCtrl.currentLoginConf.disclaimerTitle}}" ng-if="!appCtrl.branding.disclaimer
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 61 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 63 75 72 73 6f 72 2d 70 6f 69 6e 74 65 72 22 20 6e 67 2d 63 6c 69 63 6b 3d 22 69 73 43 6f 6c 6c 61 70 73 65 64 20 3d 20 21 69 73 43 6f 6c 6c 61 70 73 65 64 22 3e 3c 73 70 61 6e 20 74 72 61 6e 73 6c 61 74 65 3d 22 4f 54 50 5f 48 45 4c 50 5f 4d 4f 44 41 4c 5f 53 54 45 50 31 5f 44 45 53 43 5f 4c 49 4e 4b 22 3e 3c 2f 73 70 61 6e 3e 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 22 20 6e 67 2d 63 6c 61 73 73 3d 22 69 73 43 6f 6c 6c 61 70 73 65 64 20 3f 20 5c 27 66 61 2d 61 6e 67 6c 65 2d 75 70 5c 27 20 3a 20 5c 27 66 61 2d 61 6e 67 6c 65 2d 64 6f 77 6e 5c 27 22 3e 3c 2f 69 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 Data Ascii: an>\n <a class="cursor-pointer" ng-click="isCollapsed = !isCollapsed"><span translate="OTP_HELP_MODAL_STEP1_DESC_LINK"></span> <i class="fa" ng-class="isCollapsed ? \'fa-angle-up\' : \'fa-angle-down\'"></i></a>\n </p>\n
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 74 65 72 3d 22 74 72 75 65 22 3e 3c 2f 73 70 69 6e 6e 65 72 3e 5c 6e 3c 2f 64 69 76 3e 5c 6e 5c 6e 3c 64 69 76 20 6e 67 2d 69 66 3d 22 21 6d 6f 64 61 6c 41 63 63 6f 75 6e 74 53 75 70 70 6f 72 74 43 74 72 6c 2e 69 73 4c 6f 61 64 69 6e 67 22 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 62 6f 64 79 20 6d 63 2d 61 63 63 6f 75 6e 74 2d 73 75 70 70 6f 72 74 2d 73 65 72 76 69 63 65 22 3e 5c 6e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 61 62 6c 65 20 63 6c 61 73 73 Data Ascii: ter="true"></spinner>\n</div>\n\n<div ng-if="!modalAccountSupportCtrl.isLoading" class="modal-body mc-account-support-service">\n <div class="container-fluid">\n <div class="row">\n <div class="col-md-6">\n <table class
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 69 6e 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 42 6f 78 49 63 6f 6e 43 6c 61 73 73 7d 7d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 69 74 6c 65 3d 22 7b 7b 20 66 65 65 64 62 61 63 6b 43 74 72 6c 2e 69 6e 6c 69 6e 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 42 6f 78 54 69 74 6c 65 20 7c 20 74 72 61 6e 73 6c 61 74 65 20 7d 7d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 69 73 2d 76 69 73 69 62 6c 65 3d 22 66 65 65 64 62 61 63 6b 43 74 72 6c 2e 69 6e 6c 69 6e 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4f 70 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 42 6f 78 56 69 73 69 62 69 6c 69 74 79 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 68 69 64 65 2d 63 6c 6f 73 65 2d 62 75 74 74 6f Data Ascii: ineNotificationOptions.messageBoxIconClass}}"\n title="{{ feedbackCtrl.inlineNotificationOptions.messageBoxTitle \| translate }}"\n is-visible="feedbackCtrl.inlineNotificationOptions.messageBoxVisibility"\n hide-close-butto
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 73 61 76 65 50 72 65 66 65 72 65 6e 63 65 73 28 29 22 20 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 64 65 66 61 75 6c 74 22 20 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 6c 61 74 65 3d 22 24 49 31 38 4e 5f 43 4f 4d 4d 4f 4e 5f 42 54 4e 5f 43 41 4e 43 45 4c 22 20 6e 67 2d 63 6c 69 63 6b 3d 22 24 63 6c 6f 73 65 28 29 22 3e 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 5c 6e 3c 2f 64 69 76 3e 5c 6e 27 29 7d 5d 29 Data Ascii: savePreferences()" data-dismiss="modal" aria-hidden="true"></button>\n <button type="submit" class="btn btn-default" data-dismiss="modal" aria-hidden="true"\n translate="$I18N_COMMON_BTN_CANCEL" ng-click="$close()"></button>\n\n</div>\n')}])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49750	207.211.31.115	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:34 UTC	424	OUT	GET /u/login/cache.11b6bb90c259f8ed592f58f8b212170a.login-lib.js HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:35 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:34 GMT Content-Type: application/javascript Content-Length: 880950 Connection: close Cache-Control: max-age=20160 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Wed, 10 Jul 2024 00:27:08 GMT ETag: W/"1NNxpRo27QU1NNwNYAy81M" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:35 UTC	15912	IN	Data Raw: 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 28 65 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 Data Ascii: if(!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?w
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 28 61 5b 45 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 5f 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 70 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 3b 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 70 26 26 61 3d 3d 3d 65 29 7b 69 5b 68 5d 3d 5b 5f 2c 73 2c 70 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 21 31 3d 3d 3d 28 70 3d 66 3f 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 45 5d 7c 7c 28 61 5b 45 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d Data Ascii: (a[E]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===_&&r[1])&&r[2],a=s&&c.childNodes[s];a=++s&&a&&a[l]\|\|(p=s=0)\|\|u.pop();)if(1===a.nodeType&&++p&&a===e){i[h]=[_,s,p];break}}else if(!1===(p=f?s=(r=(i=(o=(a=e)[E]\|\|(a[E]={}))[a.uniqueID]\|\|(o[a.uniqueID]
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 6c 65 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 63 65 2c 64 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 43 2e 65 78 70 61 6e 64 6f 2b 66 65 2e 75 69 64 2b 2b 7d 66 65 2e 75 69 64 3d 31 2c 66 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 76 28 65 29 26 26 28 65 2e 6e Data Ascii: nction $(e){return e.replace(le,"ms-").replace(ce,de)}function v(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType}function fe(){this.expando=C.expando+fe.uid++}fe.uid=1,fe.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},v(e)&&(e.n
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 41 28 65 29 2c 61 3d 61 7c 7c 41 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 6a 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 6a 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 41 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 78 65 28 61 2c 21 64 26 26 41 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 43 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 76 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 62 2e 65 78 70 61 6e 64 6f 5d 29 7b Data Ascii: ;if(t)if(n)for(o=o\|\|A(e),a=a\|\|A(c),r=0,i=o.length;r<i;r++)je(o[r],a[r]);else je(e,c);return 0<(a=A(c,"script")).length&&xe(a,!d&&A(e,"script")),c},cleanData:function(e){for(var t,n,r,i=C.event.special,o=0;void 0!==(n=e[o]);o++)if(v(n)){if(t=n[b.expando]){
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 43 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 6e 2b 22 22 29 2c 6e 29 3a 21 28 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 29 26 26 6e 75 6c 6c 3d 3d 28 72 3d 43 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 74 29 29 3f 76 6f 69 64 20 30 3a 72 29 7d 2c 61 74 74 72 48 6f 6f 6b 73 3a 7b 74 79 70 65 3a 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 69 66 28 21 67 2e 72 61 64 69 6f 56 61 6c 75 65 26 26 22 72 61 64 69 6f 22 3d 3d 3d 74 26 26 75 28 65 2c 22 69 Data Ascii: ll===n?void C.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):!(i&&"get"in i&&null!==(r=i.get(e,t)))&&null==(r=C.find.attr(e,t))?void 0:r)},attrHooks:{type:{set:function(e,t){var n;if(!g.radioValue&&"radio"===t&&u(e,"i
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 72 2e 73 74 61 74 75 73 3f 74 28 30 2c 22 65 72 72 6f 72 22 29 3a 74 28 72 2e 73 74 61 74 75 73 2c 72 2e 73 74 61 74 75 73 54 65 78 74 29 3a 74 28 47 74 5b 72 2e 73 74 61 74 75 73 5d 7c 7c 72 2e 73 74 61 74 75 73 2c 72 2e 73 74 61 74 75 73 54 65 78 74 2c 22 74 65 78 74 22 21 3d 3d 28 72 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 7c 7c 22 74 65 78 74 22 29 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 3f 7b 62 69 6e 61 72 79 3a 72 2e 72 65 73 70 6f 6e 73 65 7d 3a 7b 74 65 78 74 3a 72 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 7d 2c 72 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 29 29 7d 7d 2c 72 2e 6f 6e 6c 6f 61 64 3d 6f 28 29 2c 61 Data Ascii: "number"!=typeof r.status?t(0,"error"):t(r.status,r.statusText):t(Gt[r.status]\|\|r.status,r.statusText,"text"!==(r.responseType\|\|"text")\|\|"string"!=typeof r.responseText?{binary:r.response}:{text:r.responseText},r.getAllResponseHeaders()))}},r.onload=o(),a
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 74 75 72 6e 2d 31 7d 2c 72 28 22 4d 22 2c 5b 22 4d 4d 22 2c 32 5d 2c 22 4d 6f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 6e 74 68 28 29 2b 31 7d 29 2c 72 28 22 4d 4d 4d 22 2c 30 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 6d 6f 6e 74 68 73 53 68 6f 72 74 28 74 68 69 73 2c 65 29 7d 29 2c 72 28 22 4d 4d 4d 4d 22 2c 30 2c 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 6d 6f 6e 74 68 73 28 74 68 69 73 2c 65 29 7d 29 2c 79 28 22 4d 22 2c 6e 2c 67 29 2c 79 28 22 4d 4d 22 2c 6e 2c 74 29 2c 79 28 22 4d 4d 4d 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e Data Ascii: turn-1},r("M",["MM",2],"Mo",function(){return this.month()+1}),r("MMM",0,0,function(e){return this.localeData().monthsShort(this,e)}),r("MMMM",0,0,function(e){return this.localeData().months(this,e)}),y("M",n,g),y("MM",n,t),y("MMM",function(e,t){return t.
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 5b 22 2d 22 2c 30 2c 30 5d 29 5b 31 5d 2b 77 28 65 5b 32 5d 29 29 3f 30 3a 22 2b 22 3d 3d 3d 65 5b 30 5d 3f 74 3a 2d 74 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 74 2e 5f 69 73 55 54 43 3f 28 74 3d 74 2e 63 6c 6f 6e 65 28 29 2c 6e 3d 28 63 28 65 29 7c 7c 6a 28 65 29 3f 65 3a 46 28 65 29 29 2e 76 61 6c 75 65 4f 66 28 29 2d 74 2e 76 61 6c 75 65 4f 66 28 29 2c 74 2e 5f 64 2e 73 65 74 54 69 6d 65 28 74 2e 5f 64 2e 76 61 6c 75 65 4f 66 28 29 2b 6e 29 2c 70 2e 75 70 64 61 74 65 4f 66 66 73 65 74 28 74 2c 21 31 29 2c 74 29 3a 46 28 65 29 2e 6c 6f 63 61 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 74 28 65 29 7b 72 65 74 75 72 6e 2d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2e 5f 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f Data Ascii: ["-",0,0])[1]+w(e[2]))?0:"+"===e[0]?t:-t}function Bt(e,t){var n;return t._isUTC?(t=t.clone(),n=(c(e)\|\|j(e)?e:F(e)).valueOf()-t.valueOf(),t._d.setTime(t._d.valueOf()+n),p.updateOffset(t,!1),t):F(e).local()}function Ut(e){return-Math.round(e._d.getTimezoneO
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 28 65 3d 6a 74 28 44 65 2c 65 29 29 29 72 65 74 75 72 6e 20 74 68 69 73 7d 65 6c 73 65 20 4d 61 74 68 2e 61 62 73 28 65 29 3c 31 36 26 26 21 6e 26 26 28 65 2a 3d 36 30 29 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 5f 69 73 55 54 43 26 26 74 26 26 28 72 3d 55 74 28 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 6f 66 66 73 65 74 3d 65 2c 74 68 69 73 2e 5f 69 73 55 54 43 3d 21 30 2c 6e 75 6c 6c 21 3d 72 26 26 74 68 69 73 2e 61 64 64 28 72 2c 22 6d 22 29 2c 69 21 3d 3d 65 26 26 28 21 74 7c 7c 74 68 69 73 2e 5f 63 68 61 6e 67 65 49 6e 50 72 6f 67 72 65 73 73 3f 47 74 28 74 68 69 73 2c 49 28 65 2d 69 2c 22 6d 22 29 2c 31 2c 21 31 29 3a 74 68 69 73 2e 5f 63 68 61 6e 67 65 49 6e 50 72 6f 67 72 65 73 73 7c 7c 28 74 68 69 73 2e 5f 63 68 61 6e 67 65 49 6e Data Ascii: null===(e=jt(De,e)))return this}else Math.abs(e)<16&&!n&&(e*=60);return!this._isUTC&&t&&(r=Ut(this)),this._offset=e,this._isUTC=!0,null!=r&&this.add(r,"m"),i!==e&&(!t\|\|this._changeInProgress?Gt(this,I(e-i,"m"),1,!1):this._changeInProgress\|\|(this._changeIn
2024-07-19 20:22:35 UTC	16384	IN	Data Raw: 54 69 6d 65 54 68 72 65 73 68 6f 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 45 6e 5b 65 5d 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 3f 45 6e 5b 65 5d 3a 28 45 6e 5b 65 5d 3d 74 2c 22 73 22 3d 3d 3d 65 26 26 28 45 6e 2e 73 73 3d 74 2d 31 29 2c 21 30 29 29 7d 2c 70 2e 63 61 6c 65 6e 64 61 72 46 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 3d 65 2e 64 69 66 66 28 74 2c 22 64 61 79 73 22 2c 21 30 29 29 3c 2d 36 3f 22 73 61 6d 65 45 6c 73 65 22 3a 65 3c 2d 31 3f 22 6c 61 73 74 57 65 65 6b 22 3a 65 3c 30 3f 22 6c 61 73 74 44 61 79 22 3a 65 3c 31 3f 22 73 61 6d 65 44 61 79 22 3a 65 3c 32 3f 22 6e 65 78 74 44 61 79 22 3a 65 3c 37 3f 22 6e 65 78 74 57 65 65 6b 22 3a 22 73 Data Ascii: TimeThreshold=function(e,t){return void 0!==En[e]&&(void 0===t?En[e]:(En[e]=t,"s"===e&&(En.ss=t-1),!0))},p.calendarFormat=function(e,t){return(e=e.diff(t,"days",!0))<-6?"sameElse":e<-1?"lastWeek":e<0?"lastDay":e<1?"sameDay":e<2?"nextDay":e<7?"nextWeek":"s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49752	35.190.8.230	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:35 UTC	357	OUT	GET /libs/galindo.js HTTP/1.1 Host: static.srcspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:35 UTC	791	IN	HTTP/1.1 200 OK x-goog-generation: 1713784659645084 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 45159 Content-Encoding: gzip x-goog-hash: crc32c=nLzygQ== x-goog-hash: md5=tCZOysAJGM6cOpenAEVWZg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 45159 X-GUploader-UploadID: ACJd0NoAef9BxdqE0E6aFPJhQv76sXMExWiaS_WOFPmVZx0MGLNdDt-r3KYCNxnIzicJnRhzzO4 Server: UploadServer Date: Fri, 19 Jul 2024 20:10:39 GMT Expires: Fri, 19 Jul 2024 20:25:39 GMT Cache-Control: no-transform, public, max-age=900 Age: 716 Last-Modified: Mon, 22 Apr 2024 11:17:39 GMT ETag: "b4264ecac00918ce9c3a97a700455666" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-19 20:22:35 UTC	599	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 74 bd 6b 93 aa 5a ba 26 fa 57 f6 97 bd 67 ad ce 75 22 35 05 25 bb 7a 76 47 8a 77 54 10 4c 87 5a 51 d1 01 0c 10 44 44 11 11 dd b1 fb b7 9f f7 32 72 55 c7 89 38 1f aa d6 34 d3 84 c1 18 ef e5 79 de 1b b5 5f fe db ff 6e 35 9d ae d1 ea 7c 6a e1 ef 7f fc 12 2b 19 2e aa 24 74 8d 6c fa eb cf 5f c2 dd cb 71 5e ac fd 7d 0b 3e dd cc 22 14 bd 7b 79 16 f0 a1 59 ec a5 35 73 6e f8 ad 55 de 12 4e 13 ae 8c ec 0e 1f eb f9 28 b4 8d 6c 2e 56 26 7c 3a 1a d9 43 ac 3a 72 91 17 05 7e d7 96 72 9a 17 bd 22 c0 2b 8a ae 75 33 f3 e2 5b f4 2c fc a4 b5 3e ee 79 b6 7a f9 f0 61 14 cc 4f 7e 5e 38 f0 cf c7 ac fd 2d b4 65 b8 c2 fb 5e bd 22 ba 18 d9 28 cc b3 5c 74 4d 5a e4 4c 7a 1d 37 9c 7a d9 89 ae b9 0f a7 61 22 a7 66 c6 b7 d0 9d e2 f6 2e 17 f8 c7 26 ac 62 e0 Data Ascii: tkZ&Wgu"5%zvGwTLZQDD2rU84y_n5\|j+.$tl_q^}>"{yY5snUN(l.V&\|:C:r~r"+u3[,>yzaO~^8-e^"(\tMZLz7za"f.&b
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: a8 a7 f8 34 8d 91 0d 85 66 e6 15 2f e2 12 2e b6 97 70 69 64 03 fc 93 59 eb 18 d2 b9 8b ee 38 af 8d ac 3e e0 fd ce 5e 51 0b fd 24 5d b3 a8 71 ad 5b ed 4b 68 89 1c e3 15 9e f5 28 f4 a4 7e 80 7f 16 20 0d 70 58 d3 82 1e b6 7b 7e 64 ad f8 1d bf d2 7a 0f a7 fb 79 9b 56 22 9c da cc da 43 da ba ae 26 6f 79 d6 13 7c 7e 5a 15 7a 46 51 09 b7 91 4b 5c a8 19 8d a4 67 16 11 6d 73 01 92 1c 34 c6 04 4f 6d 3f 78 e5 09 2d d2 79 97 5e bc 94 0b 23 fb a4 87 d1 a6 c2 b5 a5 d0 f0 98 9b fb 08 14 63 8b 22 73 2d eb d5 c1 2b 76 28 cf 28 c2 66 36 0d 7c 92 d1 ac 8f 62 0c e2 3e a0 15 6c d0 12 f8 0f 33 1b 93 fe c3 a6 6a ae 1c 7b 24 12 c3 e0 d3 0f cd a2 47 0b 6f ed af 66 f6 21 5c dc dd 6c 09 eb dc a7 33 5a 41 12 7e 9b d9 0c 17 e6 e0 1d 5e e2 35 4c cd 82 a4 48 6f 3f 86 22 91 2c e1 ce dd Data Ascii: 4f/.pidY8>^Q$]q[Kh(~ pX{~dzyV"C&oy\|~ZzFQK\gms4Om?x-y^#c"s-+v((f6\|b>l3j{$Gof!\l3ZA~^5LHo?",
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: de d1 b6 92 2c af bc 4c 38 b3 d0 31 b2 2d 9e c9 f5 7e 43 e8 ed b2 d5 76 4e 00 6c 1f 01 6b 5b 12 82 51 3a a4 79 46 ba aa 25 e1 b4 5c a2 35 66 95 f8 f4 fb d7 4a 2a 0b 65 cf c0 de 0f 94 40 eb de ba ef 65 8b 21 3f de 08 ff e4 76 0a c9 3a f4 2c 1f 40 ed 9a ad e3 70 17 c4 80 35 43 b2 5d cf c3 78 17 1f c8 5e af 9e 2f d1 6b f0 e6 88 5c 1e 53 d3 05 90 2b 6d 3e 6d 6f 2c 56 4d e8 e4 59 f6 8b dc e6 18 dc e6 1b 49 82 ef b7 6d 34 1f 96 b2 e4 5f c2 d9 36 0c 6b 44 b7 fd 76 de 35 bc 21 97 20 9a 23 c5 98 e1 f7 ca 0f 6b 0d ba 48 14 45 9b df 5f a5 94 2b fc 92 ef 15 e6 a9 6d 1d 58 58 fb 7e 6d d0 01 38 1d 10 96 ec 8c b8 8e e0 65 73 ab 93 22 62 d1 71 11 89 0d 71 05 74 22 42 0b 46 61 2b 20 9d eb dd ef 77 03 85 8f b6 a4 77 74 2e 7b e0 0b be da 65 10 dd 0a 90 30 f2 88 78 3c ae 07 Data Ascii: ,L81-~CvNlk[Q:yF%\5fJ*e@e!?v:,@p5C]x^/k\S+m>mo,VMYIm4_6kDv5! #kHE_+mXX~m8es"bqqt"BFa+ wwt.{e0x<
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: 24 c3 76 12 ce 6f e5 90 7e d7 91 56 02 f2 09 16 87 96 ef 6c c0 d0 ef d8 d1 bd ee b0 da e9 f1 41 8f 32 d0 e1 8a 16 db e3 30 b6 cf 21 6d fc d0 c8 de e0 9e ef 2f d6 c5 bb 2f ec f4 83 83 5d 60 01 af 12 b0 f3 93 25 6d 1b 8d aa 8b 22 44 3a 9c 8f 0d 06 9e 96 e7 8b b5 d9 9f 32 73 3f f7 8e b3 9e 9c e2 c3 a5 6d ab 8a 2b fc db 63 d3 93 f6 d5 c4 07 7b 80 37 f3 76 5b e6 51 f5 b1 9c 6d 54 98 6d 15 6b a2 37 59 c1 f2 a2 87 99 29 de 09 0e d8 7a 2e 5e e8 fb 62 f0 de 40 4f 5b 0c c1 fb ed 4e 38 41 2f b6 6a b1 45 90 9e b5 47 c3 89 21 89 eb 2d 88 0b 25 91 ee 3d 87 ed 00 df 47 07 01 2e 71 de b9 00 69 e5 03 ec d9 e7 21 70 11 38 3b 3c 96 0f 58 8a 91 39 1c d7 49 f7 e9 e8 a9 24 d3 7f 27 ab ac 82 83 ab 25 b8 d7 6c 29 ec 3e fb aa 63 d9 ca e3 90 77 05 0c 52 0b 16 06 f4 9a 76 2c fa a6 Data Ascii: $vo~VlA20!m//]`%m"D:2s?m+c{7v[QmTmk7Y)z.^b@O[N8A/jEG!-%=G.qi!p8;<X9I$'%l)>cwRv,
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: b4 bd b0 9f 67 05 92 dd eb 17 18 18 90 3c 76 a3 7d b0 1f 80 09 c1 73 72 a8 4f 7f 69 c1 bd e4 cc 59 94 a4 66 06 58 1c ef 04 0e 7a 01 5e a2 a7 82 56 7a ba 87 9f f7 15 ac 87 07 59 d6 18 49 e4 34 01 46 6f 3e 2a f4 be b4 2a 70 48 53 23 bb 5e 3d ca a0 e1 51 ac 25 25 1c 58 30 e7 ed 6c ef 32 a3 a8 63 6d fe 65 50 bc 33 01 40 d7 f7 0a 9b fd 21 dc b9 2d ba f3 1e c5 03 c3 3c 9b c3 c5 7e e2 67 6e 34 47 da b2 52 27 6d 57 78 e9 15 de 95 e4 b4 d9 cd 27 20 1b b5 3a 95 75 a7 0a 17 0a c1 6a 6b d4 89 e8 ca a6 01 fe ee 76 42 53 d9 66 09 91 b3 96 8b 21 7a d4 27 df f7 d2 64 c6 f4 b6 13 7a f5 cb 8b f1 66 e6 ed 1c a3 90 72 5e 4b c3 4c 8a 65 0a 0d 6f 5b 01 de 88 40 da fa 7c f1 a7 0c 13 1d 54 bd 02 99 2b 10 f0 26 79 f1 84 67 3c 4b de 84 e3 68 34 96 1c fe 07 83 32 00 26 8b d9 f8 29 Data Ascii: g<v}srOiYfXz^VzYI4Fo>**pHS#^=Q%%X0l2cmeP3@!-<~gn4GR'mWx' :ujkvBSf!z'dzfr^KLeo[@\|T+&yg<Kh42&)
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: 46 76 33 d9 8d eb 63 a0 c1 0b 85 8a c0 e2 cc 9a 04 d3 0d 26 df 0c 80 ed 09 3f a2 e8 99 f7 2a f4 6e 6d fc 0d 32 b7 f5 4c a7 08 44 af 5d c7 e2 a2 84 c2 35 3c 2c 73 80 c7 42 67 31 2c 5b 2f c4 f3 53 5c e9 61 6c 1c c5 6a cf 4c 1f ec 2d c0 f7 d6 85 2d 1d d8 bc 0b aa d9 cc 50 89 e3 6b 0b 36 25 b4 72 ca c3 e5 b3 ad f0 0f ec 7d c7 16 15 55 b0 a8 06 6d a0 aa be 59 b2 e5 4c c1 07 15 0a c9 db e9 16 dd 1d 2c 83 01 90 99 0b 77 0f 92 53 60 00 3c cf c1 4b 6b 14 fd c0 8f 35 18 93 11 42 77 ae 17 73 ec 35 65 45 bd 8c b3 b7 fe 58 ac f4 2f 65 09 bb ed 89 df 94 28 6d 71 18 5d 87 3e ab dd f3 80 61 6c 66 f7 81 00 be de f0 62 53 03 54 a0 66 f6 7d 0b 8e 45 b4 60 2d 3a 6e 52 31 e2 94 e0 69 f7 69 07 4b 26 e5 be 95 a0 ed 27 88 78 b8 69 db b8 54 31 91 42 74 2b 39 65 87 2b ba e5 ee 20 Data Ascii: Fv3c&?*nm2LD]5<,sBg1,[/S\aljL--Pk6%r}UmYL,wS`<Kk5Bws5eEX/e(mq]>alfbSTf}E`-:nR1iiK&'xiT1Bt+9e+
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: 05 d8 7e 33 e0 7e e4 6f 47 73 89 41 8f 16 6b 29 fa 82 35 90 0d 34 81 14 37 97 08 4f 9c 41 7e c1 a4 32 c6 47 8c c2 fb 97 43 48 aa 72 12 28 12 dd b3 1e 07 7a 60 5c f6 3d ee a1 ee bf 71 1c 5d 68 93 f0 39 de 33 6c 24 13 88 c5 b7 58 ae c7 56 e3 fa 10 76 ed 28 f2 00 4f 05 f8 7b 8d c1 0c 72 d4 b0 6f 00 7a 5f 2b 9f c3 a6 1b 00 f1 c7 26 a1 f3 df fb 22 2b a9 4a 2d 2f 9e 20 03 21 47 7d bb 69 d0 60 e6 87 b4 6e d4 ae c2 e5 64 8b 91 cb c3 d6 4e d0 d6 30 6f b2 2f 72 85 da 9d 2b 0b 8b 95 30 c0 7a b4 8e 22 c4 5a ab 2f ec b6 aa 8a 80 6d d5 84 bd c7 32 73 84 21 af 0f 17 19 ce 27 6f da 33 2f 5c 80 72 23 2e 92 28 6b e0 19 65 1b 45 fc d5 3a 85 e3 d9 27 a2 05 33 86 f3 96 ed 8b 32 e6 8b 65 1f a1 31 ab 53 cb 03 2a 97 fd c4 fe 2d 17 0c d7 54 65 91 75 6b 84 c4 51 d9 26 3b fa 10 ce Data Ascii: ~3~oGsAk)547OA~2GCHr(z`\=q]h93l$XVv(O{roz_+&"+J-/ !G}i`ndN0o/r+0z"Z/m2s!'o3/\r#.(keE:'32e1S*-TeukQ&;
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: ac 8b 04 98 51 bd c5 83 ba 8f 07 2d 0c c9 71 02 c2 05 8e 9f 50 04 84 6a dd 1c 19 4e 80 9a 62 47 25 6d 3c d8 d8 c9 6d f9 c9 c5 c4 91 8d 4e 7f c5 59 f8 41 d3 20 64 d9 97 6c cf 29 67 6b 9f d9 29 03 76 8f 2e ad 9c c8 45 af fd 1c 96 2a ec 16 6c 7d 13 73 0b 94 30 4b c6 4e f7 18 b1 08 3b fd b3 18 b1 91 6b b6 71 86 59 7a 62 1d c9 dd 3b 1d 4a b6 c7 ef 60 90 da 73 36 6b ba 5f 88 55 1d 71 59 d8 00 68 bb e8 6e fb 3e 9f ba f6 06 c4 eb a3 4f f9 ff f9 52 4e fd 9c 53 eb 7b ac f2 4f 31 e8 45 7e 11 76 6c 3f f4 b2 46 81 5d 2d 85 87 7e 6e 58 8b 6e 5e f1 0d 57 6c b3 98 ea 86 b8 81 30 0e d8 4f 02 79 cd 8b 2b 15 62 73 84 cb 1e 61 44 76 aa 1a fa 56 62 4f 69 6a 53 f9 14 60 08 a5 8b f1 26 d6 91 b2 0b 26 d9 61 6b 95 06 c6 d0 df 73 84 d9 ef 82 8f cf 38 90 fe 02 d0 3d c1 b0 82 cb 05 Data Ascii: Q-qPjNbG%m<mNYA dl)gk)v.E*l}s0KN;kqYzb;J`s6k_UqYhn>ORNS{O1E~vl?F]-~nXn^Wl0Oy+bsaDvVbOijS`&&aks8=
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: 74 5b d4 e1 85 87 92 97 d1 fe 40 03 10 12 df bb d2 34 0b a2 b1 26 f8 3f 20 73 04 29 4e 71 e9 46 5b e6 8a 9b 70 16 76 70 38 00 03 62 03 bc be f6 17 83 d6 44 64 00 2a a0 3c 77 04 d2 50 60 43 85 cd 35 e1 da 60 40 65 f8 ec f5 b4 12 80 76 ca 9e f7 24 c4 d3 df a1 4c e4 46 71 38 4e 29 b9 00 9a 6a 63 fc dd 55 89 2f d7 e8 20 6a 01 24 4e 75 76 dd 0a b7 a7 46 e2 49 95 f3 a0 17 8f 62 57 b3 f7 4f 31 5c ad 8a 24 5e 13 4f c3 0e 23 42 cd 5f 0d 95 d3 ee 39 9c 01 9a fa 85 dd f6 2a e7 b1 32 f4 18 2b 63 56 ec 88 35 0c 62 21 ca e1 2a 7f 2a bb 1b 5f 02 b2 0d ce bb 5c b5 b0 d5 8f 52 93 a5 b4 ad d3 94 8b 95 74 7d 04 1c 96 23 90 17 df 74 ee 33 72 a4 d7 c1 16 3b 37 b9 f5 b0 e7 7c 5f ae 3d 76 51 77 03 cb d3 d7 71 aa 62 07 2f 00 34 57 8a 06 49 69 61 95 25 d7 82 36 51 83 09 2a 97 42 Data Ascii: t[@4&? s)NqF[pvp8bDd<wP`C5`@ev$LFq8N)jcU/ j$NuvFIbWO1\$^O#B_92+cV5b!*_\Rt}#t3r;7\|_=vQwqb/4WIia%6QB
2024-07-19 20:22:35 UTC	1390	IN	Data Raw: a5 c4 11 51 06 ed ba a4 ae 77 d5 82 08 0a da 34 38 e2 84 2a 0b b0 cd d0 f6 a7 5c 07 09 cc a8 3c 82 8e d0 25 fd 10 a5 d3 f5 a8 5b 4a f4 bc af a1 89 d1 4f 4d 69 ed b7 ac dd 13 3f ac 69 06 39 b8 1d ae 15 eb 11 f5 d0 8f 3f 5d 76 1d 0c e7 1e 50 17 3d ce 0b ba 72 5c 09 9e f4 44 79 64 03 13 d1 64 65 6f 60 df 03 a3 c8 ee dc 61 dd 01 d8 dc e6 d6 ab 4e 38 c7 74 a0 97 71 b0 b2 2f 27 4b d2 6b 3a 4b 47 22 f2 0c 31 29 49 24 22 eb 6c e4 f8 f6 c4 5b 80 89 ee 45 18 ff 27 7e fc d5 b9 20 6f fe fc e9 18 10 38 b9 6d dc ff e1 70 93 ed a0 3c 29 86 52 61 f8 1f dc 3f 97 9e 5f f0 91 0e 67 a6 ab d8 16 0e ae b8 e1 cc cf 61 de c8 f1 be 45 a1 2c 80 9c 40 40 57 6a 1c d1 6a 13 da e1 06 4b 00 a6 ec 15 c0 77 59 5d d5 1d 0d f8 e4 8e 95 cb e4 dc 23 ff 7e 16 ab 77 1e f4 80 21 e0 65 7b 29 61 Data Ascii: Qw48*\<%[JOMi?i9?]vP=r\Dyddeo`aN8tq/'Kk:KG"1)I$"l[E'~ o8mp<)Ra?_gaE,@@WjjKwY]#~w!e{)a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-19 20:22:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=244002 Date: Fri, 19 Jul 2024 20:22:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-19 20:22:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49754	207.211.31.115	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:35 UTC	388	OUT	GET /u/login/app-version.jsp HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:36 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:35 GMT Content-Type: text/html;charset=utf-8 Content-Length: 6 Connection: close Cache-Control: private, max-age=0, no-cache, no-store Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:36 UTC	6	IN	Data Raw: 31 2e 31 31 2e 30 Data Ascii: 1.11.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49755	207.211.31.115	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:35 UTC	408	OUT	GET /u/login/assets/languages/en.json?ver=1.11.0 HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:36 UTC	435	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:35 GMT Content-Type: application/json Content-Length: 18842 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Last-Modified: Wed, 10 Jul 2024 00:27:08 GMT ETag: W/"1fP0jD8QMBc1fP1HKUZFu0" Accept-Ranges: bytes Vary: Accept-Encoding, User-Agent
2024-07-19 20:22:36 UTC	15949	IN	Data Raw: 7b 0a 09 22 24 49 31 38 4e 5f 53 50 49 4e 4e 45 52 5f 4c 4f 41 44 49 4e 47 22 3a 20 22 4c 6f 61 64 69 6e 67 2e 2e 2e 22 2c 0a 09 22 50 57 44 5f 52 55 4c 45 53 5f 43 48 45 43 4b 45 52 5f 4c 4f 57 45 52 5f 43 41 53 45 22 3a 20 22 49 6e 63 6c 75 64 65 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6c 6f 77 65 72 63 61 73 65 20 63 68 61 72 61 63 74 65 72 20 28 61 2d 7a 29 22 2c 0a 09 22 50 57 44 5f 52 55 4c 45 53 5f 43 48 45 43 4b 45 52 5f 4d 49 4e 5f 43 48 52 5f 41 46 54 45 52 22 3a 20 22 63 68 61 72 61 63 74 65 72 73 22 2c 0a 09 22 50 57 44 5f 52 55 4c 45 53 5f 43 48 45 43 4b 45 52 5f 4d 49 4e 5f 43 48 52 5f 42 45 46 4f 52 45 22 3a 20 22 4d 69 6e 69 6d 75 6d 22 2c 0a 09 22 50 57 44 5f 52 55 4c 45 53 5f 43 48 45 43 4b 45 52 5f 4e 55 4d 42 45 52 22 3a 20 22 49 6e Data Ascii: {"$I18N_SPINNER_LOADING": "Loading...","PWD_RULES_CHECKER_LOWER_CASE": "Include at least one lowercase character (a-z)","PWD_RULES_CHECKER_MIN_CHR_AFTER": "characters","PWD_RULES_CHECKER_MIN_CHR_BEFORE": "Minimum","PWD_RULES_CHECKER_NUMBER": "In
2024-07-19 20:22:36 UTC	2893	IN	Data Raw: 6f 76 65 72 79 2c 20 63 6f 6d 70 6c 69 61 6e 63 65 2c 20 61 6e 64 20 6f 74 68 65 72 20 69 6e 76 65 73 74 69 67 61 74 69 76 65 20 70 75 72 70 6f 73 65 73 2e 20 52 65 76 69 65 77 65 72 73 20 63 61 6e 20 6d 61 72 6b 20 63 61 73 65 20 6d 65 73 73 61 67 65 73 20 61 63 63 6f 72 64 69 6e 67 20 74 6f 20 72 65 6c 65 76 61 6e 63 65 20 61 6e 64 20 70 72 69 76 69 6c 65 67 65 20 74 6f 20 69 64 65 6e 74 69 66 79 20 70 65 72 74 69 6e 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 65 79 20 63 61 6e 20 61 6c 73 6f 20 73 65 61 72 63 68 20 63 61 73 65 20 72 65 73 75 6c 74 73 2c 20 61 64 64 20 63 6f 6d 6d 65 6e 74 73 2c 20 61 6e 64 20 74 61 67 20 6d 65 73 73 61 67 65 73 2e 22 2c 0a 09 22 44 49 53 43 4c 41 49 4d 45 52 5f 54 49 54 4c 45 5f 4f 54 50 5f 53 54 41 4e 44 Data Ascii: overy, compliance, and other investigative purposes. Reviewers can mark case messages according to relevance and privilege to identify pertinent information. They can also search case results, add comments, and tag messages.","DISCLAIMER_TITLE_OTP_STAND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49756	207.211.31.115	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:35 UTC	1231	OUT	GET /u/rest/branding/get-branding-item/WKQ6McxzG4swkfOqOLSMVAeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoiU3RVdUV0cFQxUnozejI5ZiJ9.B0qOyoKogie6_0tKl7zF_Z-NM7pDP9kk.8GVGyjDi5jRGxfMq.wgH3wbn82zS0_OqwoiHBEpXp47uoxJqBWet8dPnSNx6WYGdy7BXDp6AOqGUx7UW57lzqt_N3LW74GfO3g2mRKp5b0zuRFFYUcVFgp2iH6su1lLYqeSgg3rhz_uzPlY7Wu3cWuNbYIcbs6wyVFpT9lUj7cr9wa0sHlLNBaCEQXu143WKTjmhMA3w9U_Mcg2FvrEuoyiR0ifqNdyLYUAmCMAI05SyKIlQbOYf7lvO6dEKAQircZ0dVmTuIcrG1vD62ZmHn-gE0Fb-lmuMJ3O9rPZxfEAGl9SMcHC62s2t_c5TgcxZZchaIqLCr6rmDXmDfLagDVnsqRdvdHg_tqoqaT8FT_iVlNZB8COtWXeWy3CK9y5s3dPgyXvr3jb1Y4O-uhxIwpqmjP8SXvSDXqvQy0MJdo4BWjsFNaS-2c72Vjqx9x6sdFrauZTvfHYQyeKseJJZ-Joue8pJQOyx3evKrw0Ed2IMVwEFqJNPh9HnFl_KytDO_qe18rcKpks9xGsFhvxu8eYW7r1B-GxITVALVPF0j_cOO_6T7hi9vS8-UROZmaACF52axuXvt5T_hW9_AV2S9E5UnzebhwiQKWzVV2qrAiRUs.L86csBQ1j7KqH7uRUAyd8Q?tkn=freemanhealthsystem HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:36 UTC	380	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:36 GMT Content-Type: image/png;charset=utf-8 Content-Length: 23736 Connection: close Cache-Control: max-age=1209600 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Encoding: UTF-8
2024-07-19 20:22:36 UTC	16004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 71 00 00 00 fa 08 06 00 00 00 ce 65 11 0a 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ed bd f9 93 24 e9 79 df f7 be 59 33 b3 0b 80 74 37 ff 82 e9 0d 6f 84 1d 3e 34 0d c7 12 20 77 83 9e 5e f1 58 80 38 a6 17 04 0f 11 24 a6 d7 20 05 81 20 38 35 ea 5d 00 02 01 4e 8f 78 03 68 4d 0d 21 92 3a 2c 4f b7 7c 88 b6 2c 6f 0f a9 20 b0 96 15 db 13 f2 62 71 2c b9 dd 06 83 26 e5 b5 b6 c7 32 c2 11 fe 45 d3 61 3b 04 62 bb f2 75 bc 99 cf 9b f9 e4 9b 6f 66 65 e5 55 99 59 df cf 44 4d 57 e5 55 79 55 e6 37 9f 53 2a a5 04 00 00 00 00 00 e8 17 1e 8e 17 00 00 00 00 40 ff 80 88 03 00 00 00 00 e8 21 10 71 00 00 00 00 00 3d 04 22 0e 00 00 00 00 a0 87 40 c4 01 00 00 00 00 f4 10 88 Data Ascii: PNGIHDRqepHYs&? IDATx$yY3t7o>4 w^X8$ 85]NxhM!:,O\|,o bq,&2Ea;buofeUYDMWUyU7S*@!q="@
2024-07-19 20:22:36 UTC	7732	IN	Data Raw: 70 89 b8 36 b6 6f a9 8b fe 1a 28 cb 7d e1 56 f9 5c 11 57 da 1a e7 12 6c c2 b2 08 85 9c 0a a1 36 d4 6f 96 17 70 5f fb e1 f7 6d 68 0b 9c 10 6a 25 ee 6e 20 dc 42 ce 8f e3 d6 a2 f5 f0 45 2c da 2c 41 c7 45 91 1f 64 a2 26 5f 89 e2 be f4 5d c2 4f c6 cf 25 96 47 d3 a4 93 1e 44 32 5e 8f 25 20 c4 b5 e4 98 80 13 22 6d a1 73 ed 7f 97 80 4b ac 8b d2 56 b8 65 6d 08 3e 54 ea 4a 50 81 88 0b 71 89 99 41 43 b1 56 4d d7 c1 2a 75 23 af ea 2a ec 7b e7 0a 43 4e cc 62 1f 44 dc 90 7e 53 0b 8f 8d cb 15 71 44 53 96 1a ed 4f 5e 57 bf 79 ad bc 80 7b c7 d3 5b c2 17 2f 2a b2 c0 89 48 58 c5 59 a2 c2 8e 3f 63 b1 6e 71 b6 a9 c9 16 75 c4 c5 4d e7 78 b1 d8 3a c1 dc b6 3e 2f 4f c2 12 28 92 25 43 e2 26 f9 7c 5b 12 35 e3 48 b8 a9 a9 d5 76 8b 0b 3c d6 d1 21 ce cc f5 93 c2 34 16 d3 b0 c2 0d 8c Data Ascii: p6o(}V\Wl6op_mhj%n BE,,AEd&_]O%GD2^% "msKVem>TJPqACVMu#{CNbD~SqDSO^Wy{[/*HXY?cnquMx:>/O(%C&\|[5Hv<!4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49761	34.36.213.229	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:35 UTC	394	OUT	GET /agent/static/0600cd7b-e6b2-4ba9-4249-ab1342c3631b/pendo.js HTTP/1.1 Host: cdn.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:36 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:36 GMT Last-Modified: Thu, 18 Jul 2024 19:17:06 GMT ETag: W/"2518a55e10b9948138257ea08133326d" Vary: Accept-Encoding x-goog-generation: 1721330226627065 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 164778 Content-Type: application/javascript; charset=utf-8 x-goog-hash: crc32c=jqZp9Q== x-goog-hash: md5=JRilXhC5lIE4JX6ggTMybQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: ACJd0Nq09Q8vYOsJd-XHf_YEdI_M8wjaTmXAbVY5MLxb9v0w3Wolf2UbvrZj_3tUOGs0fJ1f9Sc Server: UploadServer Cache-Control: public,max-age=450 Strict-Transport-Security: max-age=63072000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-19 20:22:36 UTC	443	IN	Data Raw: 38 30 30 30 0d 0a 2f 2f 20 50 65 6e 64 6f 20 41 67 65 6e 74 20 57 72 61 70 70 65 72 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 50 65 6e 64 6f 2e 69 6f 2c 20 49 6e 63 2e 0a 2f 2f 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 20 20 20 20 70 72 6f 64 75 63 74 69 6f 6e 0a 2f 2f 20 41 67 65 6e 74 20 56 65 72 73 69 6f 6e 3a 20 20 32 2e 32 33 39 2e 30 0a 2f 2f 20 49 6e 73 74 61 6c 6c 65 64 3a 20 20 20 20 20 20 32 30 32 34 2d 30 37 2d 31 38 54 31 39 3a 31 37 3a 30 35 5a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 50 65 6e 64 6f 43 6f 6e 66 69 67 29 20 7b 0a 2f 2a 0a 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 61 67 65 6e 74 2e 70 65 6e 64 6f 2e 69 6f 2f 6c 69 63 65 6e 73 65 73 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 52 62 2c 4c 62 2c 6b 62 29 7b 21 66 75 Data Ascii: 8000// Pendo Agent Wrapper// Copyright 2024 Pendo.io, Inc.// Environment: production// Agent Version: 2.239.0// Installed: 2024-07-18T19:17:05Z(function (PendoConfig) {/@license https://agent.pendo.io/licenses/!function(Rb,Lb,kb){!fu
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 54 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 29 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6f 3d 65 7c 7c 30 2c 61 3d 28 74 3c 30 3f 72 2b 74 3a 74 7c 7c 72 29 2d 28 6f 3d 30 3c 3d 6f 3f 6f 3a 72 2b 6f 29 3b 69 66 28 30 3c 61 29 69 66 28 69 3d 6e 65 77 20 41 72 72 61 79 28 61 29 2c 74 68 69 73 2e 63 68 61 72 41 74 29 66 6f 72 28 6e 3d 30 3b 6e 3c 61 3b 6e 2b 2b 29 69 5b 6e 5d 3d 74 68 69 73 2e 63 68 61 72 41 74 28 6f 2b 6e 29 3b 65 6c 73 65 20 66 6f 72 28 6e 3d 30 3b 6e 3c 61 3b 6e 2b 2b 29 69 5b 6e 5d 3d 74 68 69 73 5b 6f 2b 6e 5d 3b 72 65 74 75 72 6e 20 69 7d 7d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f Data Ascii: .call(this))return T.call(this,e,t);var n,i=[],r=this.length,o=e\|\|0,a=(t<0?r+t:t\|\|r)-(o=0<=o?o:r+o);if(0<a)if(i=new Array(a),this.charAt)for(n=0;n<a;n++)i[n]=this.charAt(o+n);else for(n=0;n<a;n++)i[n]=this[o+n];return i}}String.prototype.trim\|\|(String.pro
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 28 21 30 29 2e 75 70 64 61 74 65 28 65 29 5b 74 5d 28 29 7d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 28 22 68 65 78 22 29 3b 28 74 3d 69 3f 63 28 74 29 3a 74 29 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6c 7d 2c 74 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 72 65 61 74 65 28 29 2e 75 70 64 61 74 65 28 65 29 7d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 2b 2b 65 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 74 5b 6e 5d 3d 61 28 6e 29 7d 72 65 74 75 72 6e 20 74 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 76 61 6c 28 22 Data Ascii: function(e){return new l(!0).update(e)[t]()}},d=function(){var t=a("hex");(t=i?c(t):t).create=function(){return new l},t.update=function(e){return t.create().update(e)};for(var e=0;e<r.length;++e){var n=r[e];t[n]=a(n)}return t},c=function(t){var n=eval("
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 31 39 32 7c 74 3e 3e 36 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 3a 28 74 3c 35 35 32 39 36 7c 7c 35 37 33 34 34 3c 3d 74 3f 61 5b 6e 3e 3e 32 5d 7c 3d 28 32 32 34 7c 74 3e 3e 31 32 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 3a 28 74 3d 36 35 35 33 36 2b 28 28 31 30 32 33 26 74 29 3c 3c 31 30 7c 31 30 32 33 26 65 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 72 29 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 32 34 30 7c 74 3e 3e 31 38 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 74 3e 3e 31 32 26 36 33 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 74 3e 3e 36 26 36 33 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 2c 61 5b 6e 3e 3e 32 5d 7c 3d 28 31 32 38 7c 36 33 26 74 29 3c 3c 75 5b 33 26 6e 2b 2b 5d 29 3b 74 68 69 73 2e 6c 61 Data Ascii: 192\|t>>6)<<u[3&n++]:(t<55296\|\|57344<=t?a[n>>2]\|=(224\|t>>12)<<u[3&n++]:(t=65536+((1023&t)<<10\|1023&e.charCodeAt(++r)),a[n>>2]\|=(240\|t>>18)<<u[3&n++],a[n>>2]\|=(128\|t>>12&63)<<u[3&n++]),a[n>>2]\|=(128\|t>>6&63)<<u[3&n++]),a[n>>2]\|=(128\|63&t)<<u[3&n++]);this.la
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 65 3d 28 69 3d 28 65 3d 28 72 3d 28 65 3d 28 6f 3d 28 65 3d 74 3c 3c 35 7c 74 3e 3e 3e 32 37 29 2b 28 6e 5e 69 5e 72 29 2b 6f 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 5d 3c 3c 30 29 3c 3c 35 7c 6f 3e 3e 3e 32 37 29 2b 28 74 5e 28 6e 3d 6e 3c 3c 33 30 7c 6e 3e 3e 3e 32 29 5e 69 29 2b 72 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 31 5d 3c 3c 30 29 3c 3c 35 7c 72 3e 3e 3e 32 37 29 2b 28 6f 5e 28 74 3d 74 3c 3c 33 30 7c 74 3e 3e 3e 32 29 5e 6e 29 2b 69 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 32 5d 3c 3c 30 29 3c 3c 35 7c 69 3e 3e 3e 32 37 29 2b 28 72 5e 28 6f 3d 6f 3c 3c 33 30 7c 6f 3e 3e 3e 32 29 5e 74 29 2b 6e 2b 31 38 35 39 37 37 35 33 39 33 2b 61 5b 73 2b 33 5d 3c 3c 30 29 3c 3c 35 7c 6e 3e 3e 3e 32 37 29 2b 28 69 5e 28 72 3d 72 3c 3c 33 Data Ascii: e=(i=(e=(r=(e=(o=(e=t<<5\|t>>>27)+(n^i^r)+o+1859775393+a[s]<<0)<<5\|o>>>27)+(t^(n=n<<30\|n>>>2)^i)+r+1859775393+a[s+1]<<0)<<5\|r>>>27)+(o^(t=t<<30\|t>>>2)^n)+i+1859775393+a[s+2]<<0)<<5\|i>>>27)+(r^(o=o<<30\|o>>>2)^t)+n+1859775393+a[s+3]<<0)<<5\|n>>>27)+(i^(r=r<<3
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 3e 3e 32 34 26 31 35 5d 2b 6f 5b 6e 3e 3e 32 30 26 31 35 5d 2b 6f 5b 6e 3e 3e 31 36 26 31 35 5d 2b 6f 5b 6e 3e 3e 31 32 26 31 35 5d 2b 6f 5b 6e 3e 3e 38 26 31 35 5d 2b 6f 5b 6e 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 6e 5d 2b 6f 5b 69 3e 3e 32 38 26 31 35 5d 2b 6f 5b 69 3e 3e 32 34 26 31 35 5d 2b 6f 5b 69 3e 3e 32 30 26 31 35 5d 2b 6f 5b 69 3e 3e 31 36 26 31 35 5d 2b 6f 5b 69 3e 3e 31 32 26 31 35 5d 2b 6f 5b 69 3e 3e 38 26 31 35 5d 2b 6f 5b 69 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 69 5d 2b 6f 5b 72 3e 3e 32 38 26 31 35 5d 2b 6f 5b 72 3e 3e 32 34 26 31 35 5d 2b 6f 5b 72 3e 3e 32 30 26 31 35 5d 2b 6f 5b 72 3e 3e 31 36 26 31 35 5d 2b 6f 5b 72 3e 3e 31 32 26 31 35 5d 2b 6f 5b 72 3e 3e 38 26 31 35 5d 2b 6f 5b 72 3e 3e 34 26 31 35 5d 2b 6f 5b 31 35 26 72 5d 7d Data Ascii: >>24&15]+o[n>>20&15]+o[n>>16&15]+o[n>>12&15]+o[n>>8&15]+o[n>>4&15]+o[15&n]+o[i>>28&15]+o[i>>24&15]+o[i>>20&15]+o[i>>16&15]+o[i>>12&15]+o[i>>8&15]+o[i>>4&15]+o[15&i]+o[r>>28&15]+o[r>>24&15]+o[r>>20&15]+o[r>>16&15]+o[r>>12&15]+o[r>>8&15]+o[r>>4&15]+o[15&r]}
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 26 26 21 4e 28 65 29 26 26 42 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 50 28 65 29 26 26 4d 28 65 29 26 26 74 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 5b 5d 29 3b 66 6f 72 28 76 61 72 20 74 3d 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 5b 5c 77 5c 2d 2e 5d 2a 63 64 6e 5b 5c 77 5c 2d 2e 5d 2a 5c 2e 28 70 65 6e 64 6f 2d 64 65 76 5c 2e 63 6f 6d 7c 70 65 6e 64 6f 5c 2e 69 6f 29 5c 2f 61 67 65 6e 74 5c 2f 73 74 61 74 69 63 5c 2f 28 5b 5c 77 5d 7b 38 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 5d 7b 34 7d 2d 5b 5c 77 5d 7b 31 32 7d 7c 50 45 4e 44 4f 5f 41 50 49 5f 4b 45 59 29 5c 2f 70 65 6e 64 6f 5c 2e 6a 73 24 2f 67 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 Data Ascii: &&!N(e)&&B(e)}function D(e,t){return!P(e)&&M(e)&&t}function G(e){void 0===e&&(e=[]);for(var t=/^https:\/\/[\w\-.]cdn[\w\-.]\.(pendo-dev\.com\|pendo\.io)\/agent\/static\/([\w]{8}-[\w]{4}-[\w]{4}-[\w]{4}-[\w]{12}\|PENDO_API_KEY)\/pendo\.js$/g,n=0;n<e.length
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 29 7b 65 3d 55 28 65 2c 21 31 2c 6e 29 3b 69 66 28 65 29 72 65 74 75 72 6e 20 4a 28 74 29 2c 63 65 28 65 29 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 74 2c 6e 29 7c 7c 75 65 28 65 2c 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 4c 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 65 3d 28 74 5b 22 61 73 79 6e 63 22 5d 3d 21 30 2c 74 2e 73 72 63 3d 78 65 28 29 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 65 29 2c 4c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 29 3b 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: ){e=U(e,!1,n);if(e)return J(t),ce(e),!0}return!1}function de(e,t,n){return V(e,t,n)\|\|ue(e,t,n)}function ce(e){var t=Lb.createElement("script"),e=(t["async"]=!0,t.src=xe().createScriptURL(e),Lb.getElementsByTagName("script")[0]);e&&e.parentNode?e.parentNod
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 28 32 2c 35 33 29 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 28 72 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 6e 75 6c 6c 3d 3d 6f 3f 72 2e 6c 65 6e 67 74 68 2d 31 3a 2b 6f 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 4d 61 74 68 2e 6d 61 78 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 6f 2c 30 29 2c 74 3d 41 72 72 61 79 28 65 29 2c 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 6f 5d 3b 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 74 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 Data Ascii: (2,53)-1;function c(r,o){return o=null==o?r.length-1:+o,function(){for(var e=Math.max(arguments.length-o,0),t=Array(e),n=0;n<e;n++)t[n]=arguments[n+o];switch(o){case 0:return r.call(this,t);case 1:return r.call(this,arguments[0],t);case 2:return r.call(th
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 74 69 6f 6e 20 63 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 74 5d 7d 7d 76 61 72 20 6d 3d 63 65 28 22 62 79 74 65 4c 65 6e 67 74 68 22 29 2c 6c 65 3d 64 65 28 6d 29 2c 66 65 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 28 49 7c 55 69 29 6e 74 28 38 7c 31 36 7c 33 32 29 7c 46 6c 6f 61 74 28 33 32 7c 36 34 29 7c 55 69 6e 74 38 43 6c 61 6d 70 65 64 7c 42 69 67 28 49 7c 55 69 29 6e 74 36 34 29 41 72 72 61 79 5c 5d 2f 3b 76 61 72 20 70 65 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6a 3f 6a 28 65 29 26 26 21 70 28 65 29 3a 6c 65 28 65 29 26 26 66 65 2e 74 65 73 74 28 6c 2e 63 61 6c 6c 28 65 29 29 7d 3a 75 65 28 21 31 29 2c 76 3d 63 65 28 22 6c 65 Data Ascii: tion ce(t){return function(e){return null==e?void 0:e[t]}}var m=ce("byteLength"),le=de(m),fe=/\[object ((I\|Ui)nt(8\|16\|32)\|Float(32\|64)\|Uint8Clamped\|Big(I\|Ui)nt64)Array\]/;var pe=t?function(e){return j?j(e)&&!p(e):le(e)&&fe.test(l.call(e))}:ue(!1),v=ce("le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49757	207.211.31.108	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:36 UTC	1681	OUT	GET /u/rest/branding/get-branding-item/mOr8-D5nYFSsjtIb3j5v5AeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoielJWQXE5ZU5ld01PMmluNiJ9.lH7ehwfuTByHOlxfDxb4qHbYlgn9aW-Y.A_inabXja3k5bJWN.z0agCYdzHeQpqVSo5gev3AmVm5VQ53dSbD5_Bd98CmkUabQCHVywLtL8GCCr353yOQyspk9apmBX8OzqXhJj5i5qGuxZf-VtffU5d7Hxu2_ldU-8rF64Iu1M1y7sRaLAdTJGMTHKigKqhVssyqLiOShRUHpqt1l5cYdGzF9g6L8GpB3ZUZACXljZVyNUVElalv50_fFo5Y9Lqcg2iUo9VcizSiXE0mECYT6SwDob3TynM2Gi-kwI3Tdn9dZ_U9b6S2uvG5p7X4DzuqznYkeIpu5-Rr3GF988kjudVzc6l8QJVpMiYFeQmD_W8aPDNs-7KpDd4CBJUfZAhrhQ8WZHJNklxQusMFKqsqQsXyQ15mrc85LzM1pLZnkckhJtcrn2Cy4DZLz_1ro_67LfJj06Jn0HsdqLzI-8oe2fKakV-jlu0vXlNkwP7WUs2i2dWIuYhOoAXKSv_WjIB-G7PJzz8MG2bgQfDFN7y2Eolsq14nG7lZbcWOn8D0iH7mx2Z0UqHi-B41SQKG4N813wrxdnmWwiDRty6voa3fcoLmBilNH0yLzOD8OtBAfb6fAFx_epFsK1M8DJS2JVrXOQse4dAHvO1lbm3XJ0lbhK5t0.pa5yWBMuXeDlK8FRZtLAAA?tkn=freemanhealthsystem HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://freemanhealthsystem.login-us.mimecast.com/u/login/?gta=secure&tkn=3.172fk9E4n6lyj6beMW51Btac6HoYENQtHyvj772gYEqqaA_xn6PLhc6o1A5xR8xYYW3EKzhu5JjA8lP87zy7Hy99Ta4uM1VANd4-AbJ25-LueSEcNBkNYnb6uEVyTdRs.L1aeFc5mZVOY_-uOfo8DVg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:36 UTC	382	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:36 GMT Content-Type: image/x-icon;charset=utf-8 Content-Length: 4407 Connection: close Cache-Control: max-age=1209600 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Encoding: UTF-8
2024-07-19 20:22:36 UTC	4407	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 43 00 00 00 43 08 06 00 00 00 c7 ca b8 73 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 10 e9 49 44 41 54 78 9c ed 9c 5f 8c 5c 57 7d c7 7f bf 73 ef ec fa 1f d9 a9 84 fa 04 da b1 e4 be 55 da 11 72 04 f1 0a 79 8c a0 6e 68 15 3b 2d 25 40 01 4f 50 93 87 38 c4 e3 62 9b 28 b4 cd 5a 4d 4a 8a 10 5e d3 a0 a8 0f ad 37 2f 94 87 a0 ac 53 88 63 8a ca 5a aa 09 4e 5c b2 0b fd 27 e4 ca bb 2d e2 39 8b 88 62 cf dc 7b 7e d5 39 e7 77 ce 3d ff 66 bd c6 4e fa 92 23 5d cf 9d 7b 67 ee 9c f3 b9 df df 9f f3 3b 77 8d 44 04 ef 34 d3 c4 3b 1c 9a 56 26 47 de e6 86 8f 3d dd 05 80 36 00 bc 4e 7f f5 f0 f2 ff 6b 5f de 0e 33 c1 47 ff a6 03 00 3d 40 50 03 ef 02 a2 7a 9d 02 c4 e8 83 6e 6f 1d 00 96 f5 46 fa 75 89 Data Ascii: PNGIHDRCCspHYs.#.#x?vIDATx_\W}sUrynh;-%@OP8b(ZMJ^7/ScZN\'-9b{~9w=fN#]{g;wD4;V&G=6Nk_3G=@PznoFu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49759	34.107.204.85	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:36 UTC	1729	OUT	GET /data/ptm.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?v=2.239.0_prod&ct=1721420554468&jzb=eJztU1uPokgY_S9ssk-tcr3YSWeCgqJcVKRV3GxICcWlobhVgeBk_vvg9O5mn-ZtHzaZt_rO932nTqXO-eMrRYYKUq8UggRQL9StKe8YNj5J0YgyEsvwLC0IPC_QL1SX4pSUjZ-G44K_12x157v-8IiqpG5M4nojQdvkYzMhpMKvs1nUQIhAkUCQkwQPmEA0zcs4LSYtnqLxjgBgMg1KNGtnP_DZl5iANwyDtoG_k6x446ajiCiba3wh5sOHeIPWWWAWBASiXnqafSD60H1IEht7Wl0Dxe8LcW8mgVgyitA7cu95Z04zHkkrbD8UOd_L0mOQ9GE-dwHfWsxJsUN-oty2rDAxW3jUAnuR2V5xE1vtNLihg6cmA-AqEND1tPP8SbuLSlk9xb99Cv6CIMYghm_QruwPxJj3h_LudHOza2p-qzPbHX3EhyF1VRdfDaVforlI2LBG9hqF6d4PT6u1NvjMUHAtlHnNGgxNP4HNChb5UdDFUEZ7ljUvW-YiTIzQQRcrD-eNWteTIb3QLKgzqTfDmMZ-K0S-cT7BXU8mHBKWMGtF5Qrw0vOVlGFamGC_tMxTTR8Ybp-tOexUUZzG6faiGpdTSfuPoAuD3linTnDnXWviOsnBcmIzet9VgZ732t1ZHVW0tTaZnBacsdsI1020XqzohZppZ6eXgh3b1_etc0e3RNWth7O8CQ676pybB1g9rBs5eZfTDvQT1xOWXqHaiVIZm8f6fEP23l_YWbJHmutH5aNXpEM_HGLtbCWS3iFbzerCky3uGEotEy4uOTEeaifVVs8wG07cW6aLc3Z5H11YNWWFqdevf1v2efyZa3NQxO34i-MELPz3I_XthQJBULYFGVfHogINLIjybygE5DnPzGe0NGNplh95OtjgtCxGmJ2y3HxK-6OS8Mn2SeCC22aUUbR5_kKRz [TRUNCATED] Host: app.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://freemanhealthsystem.login-us.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:36 UTC	462	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: image/gif x-content-type-options: nosniff date: Fri, 19 Jul 2024 20:22:36 GMT Content-Length: 42 x-envoy-upstream-service-time: 79 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2024-07-19 20:22:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49760	34.107.204.85	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:36 UTC	1503	OUT	GET /data/guide.js/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?id=7&jzb=eJx9ktmOq0YQht-FSLk62Cxm8UijI2ywsVmNGWzmBrWhWQYaDN1gIJp3P5xEinKVu6qv_lqk-v-ihgIXpOlOCfVGRa5mq07kR9OcPvO2M4kfUj-ovquWYk7IE7-t12kHIQJ1DkFFcjxhAtGqarKipnu8QgWCMcBkFTdo3a__5uufGQHvGMZ9B_8kZf3Or1iJS8uttqnFavoSH9C6CeyOgFjUm1CzL0Sfhi9J4rJQa1ugRGMtumYeiw2rCKMnj2F44zVjznvh_KXIlStL8yTp03brg01vsYFiJxtaeZw5gTZ7eNVie1faYf0Qey2Y_MTDK5MF8BAL6DNwwojunbSR1SD745-DfyKIMcjgO7Sf9hdizdesfHjD1hy6dnPW2bPDXPFlKnzVx5-GMu7RViRc0iL7iJLCjZLgcNSmiJ1qvofyRrMmQ9MDcDrAuroKupjIyOU4835m7wJtJB66W1Wy7dS2pafiznCgLaXRTDIGR72QRsYtgM5IaB4Je1j2ovIJ8D6MlIJle5jjqLHMoGUuLO-WRx57zzQrsuJ8V4170DDRHA9JPBrHwotfG9-ifS-_WF5mph_OM9arUXt5h6uKztaplIuaN5yT8HlKj7sDs1NL7eaNUuxwY_s6ey_0yFXdmr39Q_C4w-A9QsDpSdvJ-YdcDGCk_VDYh7Vq58rTOM3H2wPZbrSzy9xFmh-lzTwq0mWcLpl2s3JJH5Ctlm0dyhZ_TaSeTXb3ihizOkitNbLsiRddy_Rxxe1fiwsRJCABBFBv_5r2d1j8j3ErUGf98shFAevo40p9_6BAHDd9TZbWJXmCDtZE-S9aVvzWs9s1I605htsscwbY4aKpF8ytOH67YqJn1yTU9_cvaOQXEA&v=2.239.0_prod&ct=1721420554471 HTTP/1.1 Host: app.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://freemanhealthsystem.login-us.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:36 UTC	483	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: application/javascript x-content-type-options: nosniff date: Fri, 19 Jul 2024 20:22:36 GMT x-envoy-upstream-service-time: 75 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 36 63 37 38 0d 0a 70 65 6e 64 6f 2e 67 75 69 64 65 73 50 61 79 6c 6f 61 64 28 7b 22 67 75 69 64 65 73 22 3a 5b 7b 22 63 72 65 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 68 61 73 4c 6f 67 67 65 64 49 6e 22 3a 66 61 6c 73 65 7d 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 37 30 36 36 32 32 36 39 35 37 37 36 2c 22 6c 61 73 74 55 70 64 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c Data Ascii: 6c78pendo.guidesPayload({"guides":[{"createdByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"createdAt":1706622695776,"lastUpdatedByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"",
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 6e 74 2f 34 75 75 45 74 33 75 4b 58 39 77 62 79 49 4f 44 49 7a 38 61 31 37 78 42 78 76 45 2f 61 48 4a 6c 46 68 39 61 36 52 72 32 78 56 33 35 57 64 68 73 6e 4a 53 59 39 74 49 2f 6b 74 55 6b 76 77 7a 64 79 67 7a 75 42 6b 47 72 58 35 50 6b 68 33 31 35 35 64 45 2e 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 2e 6a 73 6f 6e 22 2c 22 64 6f 6d 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 37 30 37 37 39 37 34 32 37 39 31 32 37 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 75 69 64 65 2d 63 6f 6e 74 65 6e 74 2f 34 75 75 45 74 33 75 4b 58 39 77 62 79 49 4f 44 49 7a 38 61 31 37 78 42 78 76 45 2f 61 48 4a 6c 46 68 39 61 36 52 72 32 78 56 33 35 57 64 68 73 6e 4a 53 59 39 74 49 2f 48 79 54 30 35 43 Data Ascii: nt/4uuEt3uKX9wbyIODIz8a17xBxvE/aHJlFh9a6Rr2xV35WdhsnJSY9tI/ktUkvwzdygzuBkGrX5Pkh3155dE.buildingBlocks.json","domUrl":"https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/4uuEt3uKX9wbyIODIz8a17xBxvE/aHJlFh9a6Rr2xV35WdhsnJSY9tI/HyT05C
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 72 76 69 63 65 56 65 72 73 69 6f 6e 22 3a 22 34 2e 38 2e 35 38 22 2c 22 74 79 70 65 22 3a 22 62 75 69 6c 64 69 6e 67 2d 62 6c 6f 63 6b 22 7d 2c 22 61 75 64 69 65 6e 63 65 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 7b 22 76 69 73 69 74 6f 72 73 22 3a 6e 75 6c 6c 7d 7d 2c 7b 22 65 76 61 6c 22 3a 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 6d 65 74 61 64 61 74 61 2e 61 75 74 6f 2e 61 63 63 6f 75 6e 74 69 64 73 22 7d 7d 2c 7b 22 75 6e 77 69 6e 64 22 3a 7b 22 66 69 65 6c 64 22 3a 22 61 63 63 6f 75 6e 74 49 64 22 2c 22 6b 65 65 70 45 6d 70 74 79 22 3a 74 72 75 65 7d 7d 2c 7b 22 73 65 6c 65 63 74 22 3a 7b 22 76 69 73 69 74 6f 72 49 64 22 3a 22 76 69 73 69 74 6f 72 49 64 22 7d 7d 5d 2c 22 61 75 64 69 65 6e 63 65 55 69 48 69 6e 74 22 3a 7b 22 66 69 6c 74 65 72 73 22 3a Data Ascii: rviceVersion":"4.8.58","type":"building-block"},"audience":[{"source":{"visitors":null}},{"eval":{"accountId":"metadata.auto.accountids"}},{"unwind":{"field":"accountId","keepEmpty":true}},{"select":{"visitorId":"visitorId"}}],"audienceUiHint":{"filters":
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 34 32 37 39 31 32 37 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 75 69 64 65 2d 63 6f 6e 74 65 6e 74 2f 36 79 34 33 64 65 71 4e 46 45 78 39 46 66 35 73 58 59 54 6a 55 2d 53 69 6c 46 34 2f 51 6b 71 68 41 4b 74 67 4c 74 4f 64 30 71 74 79 49 6a 39 73 6e 6e 6d 39 42 63 49 2f 45 53 68 49 58 55 74 51 31 65 35 42 39 53 42 65 43 59 5a 57 54 33 42 73 73 68 73 2e 64 6f 6d 2e 6a 73 6f 6e 70 3f 73 68 61 32 35 36 3d 47 67 6c 4d 43 4a 51 5a 50 64 39 7a 6a 66 32 78 4d 68 45 41 74 71 6c 6d 78 64 50 47 43 53 4e 62 6e 45 77 62 34 4f 68 72 6b 72 55 22 2c 22 72 61 6e 6b 22 3a 31 30 30 30 30 30 30 30 2c 22 61 64 76 61 6e 63 65 4d 65 74 68 6f 64 22 3a 22 62 75 74 74 6f 6e 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 69 73 41 75 74 6f Data Ascii: 427912704.storage.googleapis.com/guide-content/6y43deqNFEx9Ff5sXYTjU-SilF4/QkqhAKtgLtOd0qtyIj9snnm9BcI/EShIXUtQ1e5B9SBeCYZWT3Bsshs.dom.jsonp?sha256=GglMCJQZPd9zjf2xMhEAtqlmxdPGCSNbnEwb4OhrkrU","rank":10000000,"advanceMethod":"button","attributes":{"isAuto
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 49 64 22 3a 22 37 4d 73 79 67 44 31 31 64 63 78 47 31 55 4a 39 41 68 5a 71 4e 45 75 5a 53 2d 63 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 62 75 69 6c 64 69 6e 67 2d 62 6c 6f 63 6b 2d 67 75 69 64 65 22 2c 22 74 79 70 65 22 3a 22 62 75 69 6c 64 69 6e 67 2d 62 6c 6f 63 6b 22 2c 22 65 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 74 72 69 67 67 65 72 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 22 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 Data Ascii: Id":"7MsygD11dcxG1UJ9AhZqNEuZS-c","templateId":"building-block-guide","type":"building-block","elementPathRule":"","triggerElementPathRule":"","confirmationElementPathRule":"","contentType":"text/html; charset=utf-8","buildingBlocksUrl":"https://pendo-sta
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 65 22 3a 22 4e 65 77 20 51 52 20 43 6f 64 65 20 44 65 74 65 63 74 69 6f 6e 22 2c 22 73 74 61 74 65 22 3a 22 70 75 62 6c 69 63 22 2c 22 65 6d 61 69 6c 53 74 61 74 65 22 3a 22 22 2c 22 6c 61 75 6e 63 68 4d 65 74 68 6f 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 69 73 4d 75 6c 74 69 53 74 65 70 22 3a 66 61 6c 73 65 2c 22 69 73 54 72 61 69 6e 69 6e 67 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 61 74 65 73 22 3a 7b 22 65 6e 2d 55 53 22 3a 22 4a 61 6e 20 32 39 2c 20 32 30 32 34 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 74 79 70 65 22 3a 22 61 6c 6c 22 7d 2c 22 69 73 41 6e 6e 6f 75 6e 63 65 6d 65 6e 74 22 3a 74 72 75 65 2c 22 70 72 69 6f 72 69 74 79 22 3a 31 34 32 31 2c 22 73 68 61 72 65 64 53 65 72 76 69 63 65 56 65 72 73 69 6f 6e Data Ascii: e":"New QR Code Detection","state":"public","emailState":"","launchMethod":"launcher","isMultiStep":false,"isTraining":false,"attributes":{"dates":{"en-US":"Jan 29, 2024"},"device":{"type":"all"},"isAnnouncement":true,"priority":1421,"sharedServiceVersion
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 31 32 37 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 75 69 64 65 2d 63 6f 6e 74 65 6e 74 2f 37 6c 6f 2d 77 4d 74 73 69 6b 33 58 67 42 71 33 53 6e 4d 34 67 44 69 70 68 4b 30 2f 4f 37 66 6f 36 35 78 61 67 7a 47 52 48 72 30 46 6d 45 72 4b 31 72 76 50 59 36 34 2f 71 37 44 35 48 69 59 35 50 4d 34 4d 64 57 43 43 79 6b 4e 44 45 4f 6d 79 31 61 34 2e 64 6f 6d 2e 6a 73 6f 6e 70 3f 73 68 61 32 35 36 3d 51 6e 63 79 48 4c 42 67 5a 38 71 35 48 76 77 66 37 35 47 78 58 4f 6b 64 65 66 77 33 33 62 61 54 4f 36 65 45 6b 49 58 45 67 47 34 22 2c 22 72 61 6e 6b 22 3a 31 30 30 30 30 30 30 30 2c 22 61 64 76 61 6e 63 65 4d 65 74 68 6f 64 22 3a 22 62 75 74 74 6f 6e 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 69 73 41 75 74 6f 46 6f 63 75 Data Ascii: 12704.storage.googleapis.com/guide-content/7lo-wMtsik3XgBq3SnM4gDiphK0/O7fo65xagzGRHr0FmErK1rvPY64/q7D5HiY5PM4MdWCCykNDEOmy1a4.dom.jsonp?sha256=QncyHLBgZ8q5Hvwf75GxXOkdefw33baTO6eEkIXEgG4","rank":10000000,"advanceMethod":"button","attributes":{"isAutoFocu
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 4a 61 5a 7a 6b 68 71 44 6d 46 68 41 31 56 56 61 4d 51 22 2c 22 67 75 69 64 65 49 64 22 3a 22 43 42 73 71 68 32 79 58 47 36 64 73 71 37 56 4f 39 4a 48 54 78 53 6d 43 4a 50 67 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 62 75 69 6c 64 69 6e 67 2d 62 6c 6f 63 6b 2d 67 75 69 64 65 22 2c 22 74 79 70 65 22 3a 22 62 75 69 6c 64 69 6e 67 2d 62 6c 6f 63 6b 22 2c 22 65 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 74 72 69 67 67 65 72 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 50 61 74 68 52 75 6c 65 22 3a 22 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 22 62 75 69 6c 64 69 6e 67 42 6c 6f Data Ascii: JaZzkhqDmFhA1VVaMQ","guideId":"CBsqh2yXG6dsq7VO9JHTxSmCJPg","templateId":"building-block-guide","type":"building-block","elementPathRule":"","triggerElementPathRule":"","confirmationElementPathRule":"","contentType":"text/html; charset=utf-8","buildingBlo
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 5a 62 42 73 6f 37 49 6b 6c 47 43 69 72 4b 62 66 4c 48 77 67 22 2c 22 6e 61 6d 65 22 3a 22 41 54 5f 47 75 69 64 65 73 20 4c 69 67 68 74 62 6f 78 5f 41 54 20 42 75 6c 6c 68 6f 72 6e 5f 4d 61 79 20 32 31 22 2c 22 73 74 61 74 65 22 3a 22 70 75 62 6c 69 63 22 2c 22 65 6d 61 69 6c 53 74 61 74 65 22 3a 22 22 2c 22 6c 61 75 6e 63 68 4d 65 74 68 6f 64 22 3a 22 64 6f 6d 22 2c 22 69 73 4d 75 6c 74 69 53 74 65 70 22 3a 66 61 6c 73 65 2c 22 69 73 54 72 61 69 6e 69 6e 67 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 61 63 74 69 76 61 74 69 6f 6e 22 3a 7b 22 65 76 65 6e 74 22 3a 5b 22 63 6c 69 63 6b 22 5d 2c 22 69 6e 68 65 72 69 74 53 74 65 70 4f 6e 65 22 3a 74 72 75 65 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 23 63 6f 6d 6d 6f 6e 2d 6e 61 76 62 61 Data Ascii: ZbBso7IklGCirKbfLHwg","name":"AT_Guides Lightbox_AT Bullhorn_May 21","state":"public","emailState":"","launchMethod":"dom","isMultiStep":false,"isTraining":false,"attributes":{"activation":{"event":["click"],"inheritStepOne":true,"selector":"#common-navba
2024-07-19 20:22:36 UTC	1390	IN	Data Raw: 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2c 22 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 37 30 37 37 39 37 34 32 37 39 31 32 37 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 75 69 64 65 2d 63 6f 6e 74 65 6e 74 2f 46 6f 55 79 30 48 5a 5a 62 42 73 6f 37 49 6b 6c 47 43 69 72 4b 62 66 4c 48 77 67 2f 77 65 65 4b 5f 58 78 38 79 50 4f 78 37 7a 4c 70 38 7a 52 51 5f 66 61 53 5f 41 34 2f 49 58 32 6a 6d 2d 32 32 46 75 33 68 6d 52 6d 76 50 44 34 70 36 2d 61 69 53 74 73 2e 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 2e 6a 73 6f 6e 22 2c 22 64 6f 6d 55 72 6c 22 3a 22 68 Data Ascii: ","contentType":"text/html; charset=utf-8","buildingBlocksUrl":"https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/FoUy0HZZbBso7IklGCirKbfLHwg/weeK_Xx8yPOx7zLp8zRQ_faS_A4/IX2jm-22Fu3hmRmvPD4p6-aiSts.buildingBlocks.json","domUrl":"h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49758	34.107.204.85	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:36 UTC	713	OUT	GET /data/guide.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1721420554473&v=2.239.0_prod HTTP/1.1 Host: app.pendo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://freemanhealthsystem.login-us.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:36 UTC	461	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: image/gif x-content-type-options: nosniff date: Fri, 19 Jul 2024 20:22:36 GMT Content-Length: 42 x-envoy-upstream-service-time: 0 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2024-07-19 20:22:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49762	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:36 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 54 76 33 55 36 37 44 67 6d 30 71 74 46 73 51 4b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 36 64 30 64 37 34 36 36 64 64 34 62 31 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Tv3U67Dgm0qtFsQK.1Context: 886d0d7466dd4b1e
2024-07-19 20:22:36 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-19 20:22:37 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 54 76 33 55 36 37 44 67 6d 30 71 74 46 73 51 4b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 36 64 30 64 37 34 36 36 64 64 34 62 31 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 6b 45 75 64 4c 4c 72 42 4b 6b 34 70 59 36 31 2b 77 37 76 53 48 7a 67 61 70 6b 70 38 69 48 64 64 38 77 4c 37 58 4a 56 45 49 2b 56 63 6d 52 67 78 4d 70 71 77 59 50 49 48 75 33 68 6e 69 43 64 50 43 66 4b 56 67 56 33 79 7a 35 39 6e 4f 58 44 61 52 4e 7a 56 71 4a 50 55 58 32 4f 58 6c 39 55 46 32 66 2b 34 46 77 59 36 4c 58 63 2f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Tv3U67Dgm0qtFsQK.2Context: 886d0d7466dd4b1e<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARkEudLLrBKk4pY61+w7vSHzgapkp8iHdd8wL7XJVEI+VcmRgxMpqwYPIHu3hniCdPCfKVgV3yz59nOXDaRNzVqJPUX2OXl9UF2f+4FwY6LXc/
2024-07-19 20:22:37 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 54 76 33 55 36 37 44 67 6d 30 71 74 46 73 51 4b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 36 64 30 64 37 34 36 36 64 64 34 62 31 65 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: Tv3U67Dgm0qtFsQK.3Context: 886d0d7466dd4b1e
2024-07-19 20:22:37 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-19 20:22:37 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 4a 66 52 61 50 4e 62 35 55 61 56 4a 32 44 57 55 49 75 42 4b 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: CJfRaPNb5UaVJ2DWUIuBKw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49771	34.107.204.85	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:37 UTC	452	OUT	GET /data/guide.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?jzb=eJwFwIEIAAAAwDDQd3-N1QABFQC5&ct=1721420554473&v=2.239.0_prod HTTP/1.1 Host: app.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:38 UTC	461	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: image/gif x-content-type-options: nosniff date: Fri, 19 Jul 2024 20:22:38 GMT Content-Length: 42 x-envoy-upstream-service-time: 3 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2024-07-19 20:22:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49772	34.107.204.85	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:38 UTC	1468	OUT	GET /data/ptm.gif/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?v=2.239.0_prod&ct=1721420554468&jzb=eJztU1uPokgY_S9ssk-tcr3YSWeCgqJcVKRV3GxICcWlobhVgeBk_vvg9O5mn-ZtHzaZt_rO932nTqXO-eMrRYYKUq8UggRQL9StKe8YNj5J0YgyEsvwLC0IPC_QL1SX4pSUjZ-G44K_12x157v-8IiqpG5M4nojQdvkYzMhpMKvs1nUQIhAkUCQkwQPmEA0zcs4LSYtnqLxjgBgMg1KNGtnP_DZl5iANwyDtoG_k6x446ajiCiba3wh5sOHeIPWWWAWBASiXnqafSD60H1IEht7Wl0Dxe8LcW8mgVgyitA7cu95Z04zHkkrbD8UOd_L0mOQ9GE-dwHfWsxJsUN-oty2rDAxW3jUAnuR2V5xE1vtNLihg6cmA-AqEND1tPP8SbuLSlk9xb99Cv6CIMYghm_QruwPxJj3h_LudHOza2p-qzPbHX3EhyF1VRdfDaVforlI2LBG9hqF6d4PT6u1NvjMUHAtlHnNGgxNP4HNChb5UdDFUEZ7ljUvW-YiTIzQQRcrD-eNWteTIb3QLKgzqTfDmMZ-K0S-cT7BXU8mHBKWMGtF5Qrw0vOVlGFamGC_tMxTTR8Ybp-tOexUUZzG6faiGpdTSfuPoAuD3linTnDnXWviOsnBcmIzet9VgZ732t1ZHVW0tTaZnBacsdsI1020XqzohZppZ6eXgh3b1_etc0e3RNWth7O8CQ676pybB1g9rBs5eZfTDvQT1xOWXqHaiVIZm8f6fEP23l_YWbJHmutH5aNXpEM_HGLtbCWS3iFbzerCky3uGEotEy4uOTEeaifVVs8wG07cW6aLc3Z5H11YNWWFqdevf1v2efyZa3NQxO34i-MELPz3I_XthQJBULYFGVfHogINLIjybygE5DnPzGe0NGNplh95OtjgtCxGmJ2y3HxK-6OS8Mn2SeCC22aUUbR5_kKRz [TRUNCATED] Host: app.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:38 UTC	462	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: image/gif x-content-type-options: nosniff date: Fri, 19 Jul 2024 20:22:38 GMT Content-Length: 42 x-envoy-upstream-service-time: 87 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close
2024-07-19 20:22:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49773	34.107.204.85	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:38 UTC	1302	OUT	GET /data/guide.js/0600cd7b-e6b2-4ba9-4249-ab1342c3631b?id=7&jzb=eJx9ktmOq0YQht-FSLk62Cxm8UijI2ywsVmNGWzmBrWhWQYaDN1gIJp3P5xEinKVu6qv_lqk-v-ihgIXpOlOCfVGRa5mq07kR9OcPvO2M4kfUj-ovquWYk7IE7-t12kHIQJ1DkFFcjxhAtGqarKipnu8QgWCMcBkFTdo3a__5uufGQHvGMZ9B_8kZf3Or1iJS8uttqnFavoSH9C6CeyOgFjUm1CzL0Sfhi9J4rJQa1ugRGMtumYeiw2rCKMnj2F44zVjznvh_KXIlStL8yTp03brg01vsYFiJxtaeZw5gTZ7eNVie1faYf0Qey2Y_MTDK5MF8BAL6DNwwojunbSR1SD745-DfyKIMcjgO7Sf9hdizdesfHjD1hy6dnPW2bPDXPFlKnzVx5-GMu7RViRc0iL7iJLCjZLgcNSmiJ1qvofyRrMmQ9MDcDrAuroKupjIyOU4835m7wJtJB66W1Wy7dS2pafiznCgLaXRTDIGR72QRsYtgM5IaB4Je1j2ovIJ8D6MlIJle5jjqLHMoGUuLO-WRx57zzQrsuJ8V4170DDRHA9JPBrHwotfG9-ifS-_WF5mph_OM9arUXt5h6uKztaplIuaN5yT8HlKj7sDs1NL7eaNUuxwY_s6ey_0yFXdmr39Q_C4w-A9QsDpSdvJ-YdcDGCk_VDYh7Vq58rTOM3H2wPZbrSzy9xFmh-lzTwq0mWcLpl2s3JJH5Ctlm0dyhZ_TaSeTXb3ihizOkitNbLsiRddy_Rxxe1fiwsRJCABBFBv_5r2d1j8j3ErUGf98shFAevo40p9_6BAHDd9TZbWJXmCDtZE-S9aVvzWs9s1I605htsscwbY4aKpF8ytOH67YqJn1yTU9_cvaOQXEA&v=2.239.0_prod&ct=1721420554471 HTTP/1.1 Host: app.pendo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:38 UTC	483	IN	HTTP/1.1 200 OK access-control-allow-credentials: false access-control-allow-headers: * access-control-allow-methods: GET,POST access-control-allow-origin: * access-control-max-age: 600 content-type: application/javascript x-content-type-options: nosniff date: Fri, 19 Jul 2024 20:22:38 GMT x-envoy-upstream-service-time: 29 server: istio-envoy Via: 1.1 google Strict-Transport-Security: max-age=63072000 Alt-Svc: clear Connection: close Transfer-Encoding: chunked
2024-07-19 20:22:38 UTC	907	IN	Data Raw: 65 37 38 0d 0a 70 65 6e 64 6f 2e 67 75 69 64 65 73 50 61 79 6c 6f 61 64 28 7b 22 67 75 69 64 65 73 22 3a 5b 7b 22 63 72 65 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 68 61 73 4c 6f 67 67 65 64 49 6e 22 3a 66 61 6c 73 65 7d 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 37 30 36 36 32 32 36 39 35 37 37 36 2c 22 6c 61 73 74 55 70 64 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 Data Ascii: e78pendo.guidesPayload({"guides":[{"createdByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"createdAt":1706622695776,"lastUpdatedByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","
2024-07-19 20:22:38 UTC	1390	IN	Data Raw: 2c 22 69 73 4d 6f 64 75 6c 65 22 3a 66 61 6c 73 65 2c 22 65 64 69 74 6f 72 54 79 70 65 22 3a 22 76 69 73 75 61 6c 44 65 73 69 67 6e 53 74 75 64 69 6f 22 2c 22 64 65 70 65 6e 64 65 6e 74 4d 65 74 61 64 61 74 61 22 3a 5b 5d 2c 22 61 75 74 6f 43 72 65 61 74 65 46 65 65 64 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 73 74 65 70 73 22 3a 5b 7b 22 69 64 22 3a 22 61 48 4a 6c 46 68 39 61 36 52 72 32 78 56 33 35 57 64 68 73 6e 4a 53 59 39 74 49 22 2c 22 67 75 69 64 65 49 64 22 3a 22 34 75 75 45 74 33 75 4b 58 39 77 62 79 49 4f 44 49 7a 38 61 31 37 78 42 78 76 45 22 2c 22 74 65 6d 70 6c 61 74 65 49 64 22 3a 22 62 75 69 6c 64 69 6e 67 2d 62 6c 6f 63 6b 2d 67 75 69 64 65 22 2c 22 74 79 70 65 22 3a 22 62 75 69 6c 64 Data Ascii: ,"isModule":false,"editorType":"visualDesignStudio","dependentMetadata":[],"autoCreateFeedback":false,"language":"en-US","steps":[{"id":"aHJlFh9a6Rr2xV35WdhsnJSY9tI","guideId":"4uuEt3uKX9wbyIODIz8a17xBxvE","templateId":"building-block-guide","type":"build
2024-07-19 20:22:38 UTC	1390	IN	Data Raw: 6e 22 3a 66 61 6c 73 65 7d 2c 22 63 72 65 61 74 65 64 41 74 22 3a 31 37 31 35 36 30 38 31 38 39 34 33 35 2c 22 6c 61 73 74 55 70 64 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 68 61 73 4c 6f 67 67 65 64 49 6e 22 3a 66 61 6c 73 65 7d 2c 22 6c 61 73 74 55 70 64 61 74 65 64 41 74 22 3a 31 37 31 35 37 39 34 37 35 35 33 31 32 2c 22 61 70 70 49 64 22 3a 2d 33 32 33 32 33 32 2c 22 69 64 22 3a 22 36 79 34 33 64 65 71 4e 46 45 78 39 46 66 35 73 58 59 54 6a 55 2d 53 69 6c 46 34 22 2c 22 6e 61 6d 65 22 3a 22 41 70 70 53 77 69 74 63 68 65 72 20 52 65 74 69 72 65 6d 65 6e 74 Data Ascii: n":false},"createdAt":1715608189435,"lastUpdatedByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"lastUpdatedAt":1715794755312,"appId":-323232,"id":"6y43deqNFEx9Ff5sXYTjU-SilF4","name":"AppSwitcher Retirement
2024-07-19 20:22:38 UTC	24	IN	Data Raw: 3d 75 74 66 2d 38 22 2c 22 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 0d 0a Data Ascii: =utf-8","buildingBlock
2024-07-19 20:22:38 UTC	1390	IN	Data Raw: 33 32 30 30 0d 0a 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 37 30 37 37 39 37 34 32 37 39 31 32 37 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 75 69 64 65 2d 63 6f 6e 74 65 6e 74 2f 36 79 34 33 64 65 71 4e 46 45 78 39 46 66 35 73 58 59 54 6a 55 2d 53 69 6c 46 34 2f 51 6b 71 68 41 4b 74 67 4c 74 4f 64 30 71 74 79 49 6a 39 73 6e 6e 6d 39 42 63 49 2f 45 5a 4a 48 44 30 2d 4a 79 72 47 4e 4b 30 61 53 4b 4a 6b 44 4c 61 69 47 39 42 41 2e 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 2e 6a 73 6f 6e 22 2c 22 64 6f 6d 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 37 30 37 37 39 37 34 32 37 39 31 32 37 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 Data Ascii: 3200sUrl":"https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/6y43deqNFEx9Ff5sXYTjU-SilF4/QkqhAKtgLtOd0qtyIj9snnm9BcI/EZJHD0-JyrGNK0aSKJkDLaiG9BA.buildingBlocks.json","domUrl":"https://pendo-static-5707797427912704.storage.google
2024-07-19 20:22:38 UTC	1390	IN	Data Raw: 31 34 33 38 2c 22 73 68 61 72 65 64 53 65 72 76 69 63 65 56 65 72 73 69 6f 6e 22 3a 22 34 2e 38 2e 33 35 22 2c 22 74 79 70 65 22 3a 22 62 75 69 6c 64 69 6e 67 2d 62 6c 6f 63 6b 22 7d 2c 22 61 75 64 69 65 6e 63 65 55 69 48 69 6e 74 22 3a 7b 22 66 69 6c 74 65 72 73 22 3a 5b 5d 7d 2c 22 61 75 74 68 6f 72 65 64 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 63 75 72 72 65 6e 63 65 22 3a 30 2c 22 72 65 63 75 72 72 65 6e 63 65 45 6c 69 67 69 62 69 6c 69 74 79 57 69 6e 64 6f 77 22 3a 30 2c 22 72 65 73 65 74 41 74 22 3a 30 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 31 37 30 38 30 39 34 31 30 36 33 33 39 2c 22 70 75 62 6c 69 73 68 65 64 45 76 65 72 22 3a 74 72 75 65 2c 22 63 75 72 72 65 6e 74 46 69 72 73 74 45 6c 69 67 69 62 6c 65 54 6f 42 65 53 Data Ascii: 1438,"sharedServiceVersion":"4.8.35","type":"building-block"},"audienceUiHint":{"filters":[]},"authoredLanguage":"en-US","recurrence":0,"recurrenceEligibilityWindow":0,"resetAt":0,"publishedAt":1708094106339,"publishedEver":true,"currentFirstEligibleToBeS
2024-07-19 20:22:38 UTC	1390	IN	Data Raw: 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 69 73 41 75 74 6f 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 74 68 65 6d 65 49 64 22 3a 22 75 6e 74 68 65 6d 65 64 22 7d 2c 22 6c 61 73 74 55 70 64 61 74 65 64 41 74 22 3a 31 37 30 37 39 33 34 39 36 38 39 33 31 2c 22 72 65 73 65 74 41 74 22 3a 30 2c 22 68 69 64 65 43 72 65 64 69 74 73 22 3a 74 72 75 65 7d 5d 2c 22 67 75 69 64 65 44 69 73 6d 69 73 73 43 6f 75 6e 74 22 3a 30 7d 2c 7b 22 63 72 65 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 68 61 73 4c 6f 67 67 65 64 49 6e 22 3a 66 61 6c 73 65 7d 2c 22 63 72 65 61 74 65 64 Data Ascii: ,"attributes":{"isAutoFocus":true,"themeId":"unthemed"},"lastUpdatedAt":1707934968931,"resetAt":0,"hideCredits":true}],"guideDismissCount":0},{"createdByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","hasLoggedIn":false},"created
2024-07-19 20:22:38 UTC	1390	IN	Data Raw: 63 6b 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 37 30 37 37 39 37 34 32 37 39 31 32 37 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 75 69 64 65 2d 63 6f 6e 74 65 6e 74 2f 37 6c 6f 2d 77 4d 74 73 69 6b 33 58 67 42 71 33 53 6e 4d 34 67 44 69 70 68 4b 30 2f 4f 37 66 6f 36 35 78 61 67 7a 47 52 48 72 30 46 6d 45 72 4b 31 72 76 50 59 36 34 2f 6c 2d 69 6a 35 46 50 59 46 67 49 6a 65 54 63 6e 31 44 34 69 63 4a 4f 61 69 69 55 2e 62 75 69 6c 64 69 6e 67 42 6c 6f 63 6b 73 2e 6a 73 6f 6e 22 2c 22 64 6f 6d 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 65 6e 64 6f 2d 73 74 61 74 69 63 2d 35 37 30 37 37 39 37 34 32 37 39 31 32 37 30 34 2e 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 Data Ascii: cksUrl":"https://pendo-static-5707797427912704.storage.googleapis.com/guide-content/7lo-wMtsik3XgBq3SnM4gDiphK0/O7fo65xagzGRHr0FmErK1rvPY64/l-ij5FPYFgIjeTcn1D4icJOaiiU.buildingBlocks.json","domUrl":"https://pendo-static-5707797427912704.storage.googleapis
2024-07-19 20:22:38 UTC	1390	IN	Data Raw: 6e 63 65 6d 65 6e 74 22 3a 74 72 75 65 2c 22 70 72 69 6f 72 69 74 79 22 3a 31 32 30 34 2c 22 73 68 61 72 65 64 53 65 72 76 69 63 65 56 65 72 73 69 6f 6e 22 3a 22 34 2e 30 2e 33 32 22 2c 22 74 79 70 65 22 3a 22 62 75 69 6c 64 69 6e 67 2d 62 6c 6f 63 6b 22 7d 2c 22 61 75 64 69 65 6e 63 65 55 69 48 69 6e 74 22 3a 7b 22 66 69 6c 74 65 72 73 22 3a 5b 5d 7d 2c 22 61 75 74 68 6f 72 65 64 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 63 75 72 72 65 6e 63 65 22 3a 30 2c 22 72 65 63 75 72 72 65 6e 63 65 45 6c 69 67 69 62 69 6c 69 74 79 57 69 6e 64 6f 77 22 3a 30 2c 22 72 65 73 65 74 41 74 22 3a 30 2c 22 70 75 62 6c 69 73 68 65 64 41 74 22 3a 31 36 36 36 32 35 33 34 31 35 39 36 32 2c 22 70 75 62 6c 69 73 68 65 64 45 76 65 72 22 3a 66 61 6c 73 65 2c Data Ascii: ncement":true,"priority":1204,"sharedServiceVersion":"4.0.32","type":"building-block"},"audienceUiHint":{"filters":[]},"authoredLanguage":"en-US","recurrence":0,"recurrenceEligibilityWindow":0,"resetAt":0,"publishedAt":1666253415962,"publishedEver":false,
2024-07-19 20:22:38 UTC	1390	IN	Data Raw: 30 2c 22 61 64 76 61 6e 63 65 4d 65 74 68 6f 64 22 3a 22 62 75 74 74 6f 6e 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 69 73 41 75 74 6f 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 74 68 65 6d 65 49 64 22 3a 22 75 6e 74 68 65 6d 65 64 22 7d 2c 22 6c 61 73 74 55 70 64 61 74 65 64 41 74 22 3a 31 36 36 36 32 35 33 33 33 32 34 35 31 2c 22 72 65 73 65 74 41 74 22 3a 30 2c 22 68 69 64 65 43 72 65 64 69 74 73 22 3a 74 72 75 65 7d 5d 2c 22 67 75 69 64 65 44 69 73 6d 69 73 73 43 6f 75 6e 74 22 3a 30 7d 2c 7b 22 63 72 65 61 74 65 64 42 79 55 73 65 72 22 3a 7b 22 69 64 22 3a 22 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 22 2c 22 66 69 72 73 74 22 3a 22 22 2c 22 6c 61 73 74 22 3a 22 22 2c 22 72 6f 6c 65 22 3a 30 2c 22 75 73 65 72 54 79 70 65 22 3a 22 22 2c 22 68 61 Data Ascii: 0,"advanceMethod":"button","attributes":{"isAutoFocus":true,"themeId":"unthemed"},"lastUpdatedAt":1666253332451,"resetAt":0,"hideCredits":true}],"guideDismissCount":0},{"createdByUser":{"id":"","username":"","first":"","last":"","role":0,"userType":"","ha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49769	207.211.31.115	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:38 UTC	1242	OUT	GET /u/rest/branding/get-branding-item/mOr8-D5nYFSsjtIb3j5v5AeyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJjIjo2NTUzNiwicDJzIjoielJWQXE5ZU5ld01PMmluNiJ9.lH7ehwfuTByHOlxfDxb4qHbYlgn9aW-Y.A_inabXja3k5bJWN.z0agCYdzHeQpqVSo5gev3AmVm5VQ53dSbD5_Bd98CmkUabQCHVywLtL8GCCr353yOQyspk9apmBX8OzqXhJj5i5qGuxZf-VtffU5d7Hxu2_ldU-8rF64Iu1M1y7sRaLAdTJGMTHKigKqhVssyqLiOShRUHpqt1l5cYdGzF9g6L8GpB3ZUZACXljZVyNUVElalv50_fFo5Y9Lqcg2iUo9VcizSiXE0mECYT6SwDob3TynM2Gi-kwI3Tdn9dZ_U9b6S2uvG5p7X4DzuqznYkeIpu5-Rr3GF988kjudVzc6l8QJVpMiYFeQmD_W8aPDNs-7KpDd4CBJUfZAhrhQ8WZHJNklxQusMFKqsqQsXyQ15mrc85LzM1pLZnkckhJtcrn2Cy4DZLz_1ro_67LfJj06Jn0HsdqLzI-8oe2fKakV-jlu0vXlNkwP7WUs2i2dWIuYhOoAXKSv_WjIB-G7PJzz8MG2bgQfDFN7y2Eolsq14nG7lZbcWOn8D0iH7mx2Z0UqHi-B41SQKG4N813wrxdnmWwiDRty6voa3fcoLmBilNH0yLzOD8OtBAfb6fAFx_epFsK1M8DJS2JVrXOQse4dAHvO1lbm3XJ0lbhK5t0.pa5yWBMuXeDlK8FRZtLAAA?tkn=freemanhealthsystem HTTP/1.1 Host: freemanhealthsystem.login-us.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:38 UTC	382	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:38 GMT Content-Type: image/x-icon;charset=utf-8 Content-Length: 4407 Connection: close Cache-Control: max-age=1209600 Pragma: no-cache Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Encoding: UTF-8
2024-07-19 20:22:38 UTC	4407	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 43 00 00 00 43 08 06 00 00 00 c7 ca b8 73 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 10 e9 49 44 41 54 78 9c ed 9c 5f 8c 5c 57 7d c7 7f bf 73 ef ec fa 1f d9 a9 84 fa 04 da b1 e4 be 55 da 11 72 04 f1 0a 79 8c a0 6e 68 15 3b 2d 25 40 01 4f 50 93 87 38 c4 e3 62 9b 28 b4 cd 5a 4d 4a 8a 10 5e d3 a0 a8 0f ad 37 2f 94 87 a0 ac 53 88 63 8a ca 5a aa 09 4e 5c b2 0b fd 27 e4 ca bb 2d e2 39 8b 88 62 cf dc 7b 7e d5 39 e7 77 ce 3d ff 66 bd c6 4e fa 92 23 5d cf 9d 7b 67 ee 9c f3 b9 df df 9f f3 3b 77 8d 44 04 ef 34 d3 c4 3b 1c 9a 56 26 47 de e6 86 8f 3d dd 05 80 36 00 bc 4e 7f f5 f0 f2 ff 6b 5f de 0e 33 c1 47 ff a6 03 00 3d 40 50 03 ef 02 a2 7a 9d 02 c4 e8 83 6e 6f 1d 00 96 f5 46 fa 75 89 Data Ascii: PNGIHDRCCspHYs.#.#x?vIDATx_\W}sUrynh;-%@OP8b(ZMJ^7/ScZN\'-9b{~9w=fN#]{g;wD4;V&G=6Nk_3G=@PznoFu

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49821	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:43 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1721420531046&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-07-19 20:22:43 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-07-19 20:22:43 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-07-19 20:22:44 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D546EB697F364739810E9490DB25F23A Ref B: LAX311000108019 Ref C: 2024-07-19T20:22:44Z Date: Fri, 19 Jul 2024 20:22:44 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1721420564.306dd8eb

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49824	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:45 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 47 72 2f 4b 42 38 58 34 30 43 74 63 49 72 61 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 37 34 37 33 38 31 32 65 63 38 30 39 38 37 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BGr/KB8X40CtcIra.1Context: 57473812ec809873
2024-07-19 20:22:45 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-19 20:22:45 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 42 47 72 2f 4b 42 38 58 34 30 43 74 63 49 72 61 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 37 34 37 33 38 31 32 65 63 38 30 39 38 37 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 6b 45 75 64 4c 4c 72 42 4b 6b 34 70 59 36 31 2b 77 37 76 53 48 7a 67 61 70 6b 70 38 69 48 64 64 38 77 4c 37 58 4a 56 45 49 2b 56 63 6d 52 67 78 4d 70 71 77 59 50 49 48 75 33 68 6e 69 43 64 50 43 66 4b 56 67 56 33 79 7a 35 39 6e 4f 58 44 61 52 4e 7a 56 71 4a 50 55 58 32 4f 58 6c 39 55 46 32 66 2b 34 46 77 59 36 4c 58 63 2f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: BGr/KB8X40CtcIra.2Context: 57473812ec809873<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARkEudLLrBKk4pY61+w7vSHzgapkp8iHdd8wL7XJVEI+VcmRgxMpqwYPIHu3hniCdPCfKVgV3yz59nOXDaRNzVqJPUX2OXl9UF2f+4FwY6LXc/
2024-07-19 20:22:45 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 47 72 2f 4b 42 38 58 34 30 43 74 63 49 72 61 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 37 34 37 33 38 31 32 65 63 38 30 39 38 37 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: BGr/KB8X40CtcIra.3Context: 57473812ec809873<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-19 20:22:45 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-19 20:22:45 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 70 58 39 2b 6d 54 6a 6c 6b 53 53 56 56 4c 6a 37 62 30 51 67 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TpX9+mTjlkSSVVLj7b0Qgw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49825	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:45 UTC	639	OUT	GET / HTTP/1.1 Host: www.mimecast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:45 UTC	1138	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-store Set-Cookie: mimecast#lang=en; path=/; secure; SameSite=Strict Set-Cookie: ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; path=/; secure; HttpOnly; SameSite=Strict Set-Cookie: ARRAffinity=9711c419a659049fd2590cda84358b6b7fe4a165cdb6acbb6ef91d696e076af4;Path=/;HttpOnly;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.net Set-Cookie: ARRAffinitySameSite=9711c419a659049fd2590cda84358b6b7fe4a165cdb6acbb6ef91d696e076af4;Path=/;HttpOnly;SameSite=None;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.net Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202245Z-15b94bb6ff9wl9zja15kx3k24s0000000eh0000000004dmg X-Cache: CONFIG_NOCACHE
2024-07-19 20:22:45 UTC	15246	IN	Data Raw: 34 30 30 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0d 0a 20 20 20 20 0d 0a 3c 74 69 74 6c 65 3e 45 6d 61 69 6c 20 26 61 6d 70 3b 20 43 6f 6c 6c 61 62 6f 72 61 74 69 6f 6e 20 53 65 63 75 72 69 74 79 20 7c 20 4d 69 6d 65 63 61 73 74 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 Data Ascii: 4001<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /> <title>Email & Collaboration Security \| Mimecast</title> <meta na
2024-07-19 20:22:45 UTC	1147	IN	Data Raw: 73 73 65 73 73 6d 65 6e 74 20 26 61 6d 70 3b 20 73 63 6f 72 69 6e 67 2c 20 61 77 61 72 64 2d 77 69 6e 6e 69 6e 67 20 74 72 61 69 6e 69 6e 67 2c 20 61 6e 64 20 65 66 66 6f 72 74 6c 65 73 73 20 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 2e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 61 3e 0d 0a 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 6c 69 6e 6b 2d 6c 69 73 74 5f 5f 63 74 61 31 Data Ascii: ssessment & scoring, award-winning training, and effortless administration. </p> </div> </div> </div> </a></li> </ul> <div class="header-link-list__cta1
2024-07-19 20:22:45 UTC	16384	IN	Data Raw: 37 30 66 65 0d 0a 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 61 72 64 5f 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 49 6e 64 75 73 74 72 79 2d 6c 65 61 64 69 6e 67 20 74 68 72 65 61 74 20 70 72 6f 74 65 63 74 69 6f 6e 2c 20 73 75 70 65 72 63 68 61 72 67 65 64 20 62 79 20 41 49 3c 2f 70 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 63 61 72 64 5f 5f 63 74 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 63 74 61 2d 62 75 74 74 6f 6e 20 63 74 61 2d 62 75 74 74 6f 6e 2d 2d 74 65 72 74 69 61 72 79 20 6d 63 2d 61 6e 63 68 6f 72 22 20 68 72 65 66 3d 22 2f 61 69 2d 63 79 62 65 Data Ascii: 70fe <p class="header-card__description">Industry-leading threat protection, supercharged by AI</p> <div class="header-card__cta"> <a class="cta-button cta-button--tertiary mc-anchor" href="/ai-cybe
2024-07-19 20:22:45 UTC	12550	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 61 3e 0d 0a 3c 2f 6c 69 3e 0d 0a 0d 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 6c 69 6e 6b 20 20 22 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 6c 69 6e 6b 5f 5f 61 6e 63 68 6f 72 2d 66 72 61 6d 65 20 6d 63 2d 61 6e 63 68 6f 72 22 20 68 72 65 66 3d 22 2f 65 76 65 6e 74 73 2f 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 6c 69 6e 6b 5f 5f 66 72 61 6d 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: </p> </div> </div> </div> </a></li><li class="header-link "> <a class="header-link__anchor-frame mc-anchor" href="/events/"> <div class="header-link__frame">
2024-07-19 20:22:45 UTC	16384	IN	Data Raw: 35 30 30 30 0d 0a 2d 61 6e 63 68 6f 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6d 6d 75 6e 69 74 79 2e 6d 69 6d 65 63 61 73 74 2e 63 6f 6d 2f 73 2f 63 6f 6e 74 61 63 74 73 75 70 70 6f 72 74 3f 5f 67 61 3d 32 2e 31 38 36 37 31 36 32 30 30 2e 31 38 37 31 39 37 30 37 30 38 2e 31 36 33 33 31 30 32 39 32 39 2d 38 38 38 39 33 35 32 32 38 2e 31 36 32 33 32 34 35 35 35 39 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 53 75 70 70 6f 72 74 0d 0a 20 20 20 20 3c 2f 61 3e 0d 0a 3c 2f 6c 69 3e 0d 0a 0d 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 5f 5f 6e 61 76 2d 75 74 69 6c 69 74 79 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 Data Ascii: 5000-anchor" href="https://community.mimecast.com/s/contactsupport?_ga=2.186716200.1871970708.1633102929-888935228.1623245559" role="menuitem" tabindex="0"> Support </a></li><li class="header__nav-utility-item"> <a class="header
2024-07-19 20:22:45 UTC	4104	IN	Data Raw: 65 74 61 69 6c 73 20 64 61 74 61 2d 69 74 65 6d 3d 22 31 22 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 65 61 74 75 72 65 73 5f 5f 69 74 65 6d 20 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 75 6d 6d 61 72 79 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 65 61 74 75 72 65 73 5f 5f 73 75 6d 6d 61 72 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 65 61 74 75 72 65 73 5f 5f 73 75 6d 6d 61 72 79 2d 69 63 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 Data Ascii: etails data-item="1" class="product-features__item item"> <summary class="product-features__summary"> <div class="product-features__summary-icon"> <img src="https://ass
2024-07-19 20:22:45 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 20 53 65 63 75 72 69 74 79 20 41 77 61 72 65 6e 65 73 73 20 54 72 61 69 6e 69 6e 67 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 32 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 61 6e 67 6c 65 2d 64 6f 77 6e 20 70 72 6f 64 75 63 74 2d 66 65 61 74 75 72 65 73 5f 5f 73 75 6d 6d 61 72 79 2d 63 68 65 76 72 6f 6e 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 75 6d 6d 61 72 79 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 Data Ascii: 1000 Security Awareness Training </h2> <div class="fas fa-angle-down product-features__summary-chevron"></div> </summary> <div class="product
2024-07-19 20:22:45 UTC	16384	IN	Data Raw: 36 30 30 31 0d 0a 73 2e 6d 69 6d 65 63 61 73 74 2e 63 6f 6d 2f 61 70 69 2f 70 75 62 6c 69 63 2f 63 6f 6e 74 65 6e 74 2f 62 33 31 30 62 66 33 37 65 63 61 39 34 38 63 62 61 63 32 65 32 62 31 65 37 39 30 31 35 32 35 36 3f 76 3d 61 61 32 31 32 62 39 34 26 61 6d 70 3b 74 3d 77 34 38 30 68 71 20 34 38 30 77 2c 26 23 78 44 3b 26 23 78 41 3b 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 69 6d 65 63 61 73 74 2e 63 6f 6d 2f 61 70 69 2f 70 75 62 6c 69 63 2f 63 6f 6e 74 65 6e 74 2f 62 33 31 30 62 66 33 37 65 63 61 39 34 38 63 62 61 63 32 65 32 62 31 65 37 39 30 31 35 32 35 36 3f 76 3d 61 61 32 31 32 62 39 34 26 61 6d 70 3b 74 3d 77 33 32 30 68 71 20 33 32 30 77 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 Data Ascii: 6001s.mimecast.com/api/public/content/b310bf37eca948cbac2e2b1e79015256?v=aa212b94&t=w480hq 480w, https://assets.mimecast.com/api/public/content/b310bf37eca948cbac2e2b1e79015256?v=aa212b94&t=w320hq 320w" /> </div
2024-07-19 20:22:45 UTC	8201	IN	Data Raw: 76 3e 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 5f 5f 63 6f 6c 2d 69 6d 61 67 65 20 73 65 63 74 69 6f 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 5f 5f 72 69 67 68 74 2d 63 6f 6c 75 6d 6e 20 63 6f 6c 2d 6d 64 20 63 6f 6c 2d 6d 64 2d 36 20 6f 66 66 73 65 74 2d 6d 64 2d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: v> </div> </div> <div class="section-component__col-image section-component__right-column col-md col-md-6 offset-md-1"> <div class=
2024-07-19 20:22:45 UTC	11342	IN	Data Raw: 32 63 34 36 0d 0a 77 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 20 20 63 6f 6c 2d 6d 64 20 20 20 22 20 73 74 79 6c 65 3d 22 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 22 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 3c 69 6d 67 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 62 6c 6f 63 6b 5f 5f 69 6d 61 67 65 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6d 69 6d 65 63 61 73 74 2e 63 6f 6d 2f 61 70 69 2f 70 75 62 6c 69 63 2f 63 6f 6e 74 65 6e 74 2f 39 30 33 63 64 62 65 31 66 39 66 36 34 35 39 34 61 65 35 65 37 34 36 63 33 31 33 31 37 61 66 63 3f 76 3d 37 35 38 61 66 38 33 37 22 20 Data Ascii: 2c46w" /> </div></div><div class=" col-md " style=""> <div class="content-block"> <img class="content-block__image" src="https://assets.mimecast.com/api/public/content/903cdbe1f9f64594ae5e746c31317afc?v=758af837"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49833	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:46 UTC	640	OUT	GET /api/public/content/aac7c7d3363d4892b9f909aa59250d04?v=52228a06 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:46 UTC	618	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:46 GMT Content-Type: image/png Content-Length: 4234 Connection: close CF-Ray: 8a5d6cecfded179d-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 90 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-dark-2021.png; filename*=utf-8''logo-dark-2021.png ETag: "0x8DA778798ACF8DB" Last-Modified: Sat, 06 Aug 2022 08:42:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 85969 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:46 UTC	751	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 18 00 00 00 de 08 03 00 00 00 61 4f 9c 21 00 00 00 5a 50 4c 54 45 47 70 4c 00 00 3f 01 00 41 00 00 3e 00 00 3e 00 00 41 00 00 40 00 00 40 00 00 3e 00 00 41 01 00 41 00 00 3f 00 00 40 00 00 3e 00 00 40 00 00 40 00 00 3f 00 00 40 00 00 3f 00 00 41 00 00 3f 01 00 41 01 00 41 00 00 3f 00 00 01 00 00 3f 00 00 40 02 00 3f 00 00 3e 00 00 41 9c da ce fc 00 00 00 1e 74 52 4e 53 00 40 ff 20 41 df 9f be 10 cf bf 80 6f 30 90 4f 50 af 60 de a0 ef fe 70 01 61 ce 70 51 bf a0 0d ea 6d 00 00 0f c1 49 44 41 54 78 01 ec d4 b1 11 80 20 0c 00 c0 48 00 dd 7f 62 4b db 94 9c f9 1f e2 a3 87 6b 94 65 74 00 20 46 00 31 02 88 11 40 8c 00 62 04 10 23 80 18 01 c4 08 20 46 00 31 02 88 11 40 8c 00 62 04 10 e3 29 00 c4 08 20 46 00 Data Ascii: PNGIHDRaO!ZPLTEGpL?A>>A@@>AA?@>@@?@?A?AA??@?>AtRNS@ Ao0OP`papQmIDATx HbKket F1@b# F1@b) F
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 11 60 8b 06 e9 61 34 d3 7c f8 d1 a2 9d de 1a c8 a2 35 8c 0d a4 31 a4 ca 93 86 51 c8 f9 df 15 54 c1 fa c4 25 83 6d 2a a1 87 f1 f8 5d 28 14 ee 4e 05 f7 71 4a b6 1f c6 63 ff 4c ae 4a 9e 35 8c cf af eb fb c5 e5 51 72 e2 72 03 32 99 c0 46 a9 f4 30 9a a9 6b 21 39 09 f7 28 e4 c9 c2 48 3e c8 4e ff 77 27 08 e3 3a 72 91 d7 30 3a 60 25 13 b0 0e 7c 01 9b 95 7a 18 8f 8d 4e 3a fc 4a 89 9d 0c 3c 61 18 39 67 7c 9f 28 cf 1c c6 81 15 1f 61 fc 8d 55 80 f5 89 15 6c 57 e9 61 b4 2b f8 2e 7f f8 e9 80 5d 56 9e 32 8c 5c 6e f8 ae 5f 95 a7 0e a3 72 7e 5b 41 d5 ca 97 0c 00 89 0b d8 30 df c3 68 37 04 7c 47 18 1a b8 51 94 2b 4f 1a 46 2e 09 df 33 f1 4d 0f a3 2a 39 4f 00 d6 d2 78 18 e9 7b 18 0f 2a 63 18 78 a8 9a 0f ed 62 fb 61 e4 92 76 e8 e2 49 ae 31 86 f7 53 69 19 58 03 b0 46 be 80 4d Data Ascii: `a4\|51QT%m](NqJcLJ5Qrr2F0k!9(H>Nw':r0:`%\|zN:J<a9g\|(aUlWa+.]V2\n_r~[A0h7\|GQ+OF.3M9Ox{*cxbavI1SiXFM
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 46 60 3c 05 8c 83 4d af df 80 11 18 81 11 18 4f 00 a3 b7 8a 5a b7 01 23 30 02 23 30 3e 3d 8c 5b 63 35 75 f3 b0 6d 1b 30 02 23 30 02 e3 53 c3 f8 b0 da ae 53 ff 3e 6c e9 3e 02 23 30 02 63 f7 fa 89 7a 60 fc 41 a9 f4 72 c1 28 ab fd 5c d7 6e 7c 7f f1 db b6 01 23 30 02 e3 01 55 07 a3 5e 43 ef 5e 5e 5f fb be 1f db d4 1e d9 60 1c ec 57 6a ba f1 96 91 47 60 04 46 60 04 c6 6d 73 ef 7d 7b 0d 56 5f 36 18 b7 60 bf 5c c8 c2 23 30 02 23 30 02 e3 e6 d6 56 8f 52 7e 18 47 9b 5c 02 8f ee 93 3c 02 23 30 02 23 30 6e 2f 7d 63 bf 47 51 b9 f2 95 81 c7 f6 36 68 71 04 46 60 04 46 60 f4 6b 67 bf 53 51 32 9e 4b 2b 74 d4 e0 08 8c c0 08 8c c0 e8 fb 60 6d 39 30 4a 6f 77 a9 69 cd 06 8c c0 08 8c c0 58 10 8b 0a 18 bd dd ab e6 e6 36 60 04 46 60 fc 87 80 71 7b 69 ac 2d 0c c6 ad b3 79 53 dc Data Ascii: F`<MOZ#0#0>=[c5um0#0SS>l>#0cz`Ar(\n\|#0U^C^^_`WjG`F`ms}{V_6`\#0#0VR~G\<#0#0n/}cGQ6hqF`F`kgSQ2K+t`m90JowiX6`F`q{i-yS
2024-07-19 20:22:46 UTC	745	IN	Data Raw: 71 30 1a 60 fc 5d 51 7f d5 06 18 81 b1 58 18 7d a8 00 c6 b5 38 18 7d 00 46 e5 83 14 b7 00 8c c0 58 0d 8c 32 56 00 e3 31 0c b5 8a 61 03 c6 56 ff 2b 00 46 60 2c 17 46 53 01 8c 32 15 07 a3 01 46 ed d3 c2 3c 30 02 63 3d 30 4a 57 01 8c a6 38 18 a5 03 46 e5 bb 5a b6 0e 18 81 b1 1e 18 4d 05 30 4a 57 1c 8c 06 18 d3 97 5e 7e c8 00 23 30 d6 03 a3 74 15 c0 68 8a 83 51 3a 60 54 be dc 6f eb 80 11 18 eb 81 d1 54 00 a3 5c 8a 83 d1 00 a3 6e c2 28 62 80 11 18 eb 81 51 2e 15 c0 38 1c 00 63 ea b0 01 e3 9b f2 bd 5a c0 08 8c 15 c0 e8 42 f9 30 ca 78 00 8c 69 c3 06 8c d1 49 5a 3e 00 23 30 56 03 a3 ac 15 c0 e8 97 03 60 4c 19 36 60 8c bd a4 36 03 23 30 d6 03 a3 4c e5 c3 28 43 2c 0d 46 b9 00 a3 e2 44 5a 77 32 7d 3c 8c c0 08 8c 7e 29 1f 46 59 8b 83 d1 2d c0 a8 7c df a9 5f 80 11 18 Data Ascii: q0`]QX}8}FX2V1aV+F`,FS2F<0c=0JW8FZM0JW^~#0thQ:`ToT\n(bQ.8cZB0xiIZ>#0V`L6`6#0L(C,FDZw2}<~)FY-\|_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49834	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:46 UTC	640	OUT	GET /api/public/content/4ef1a859ca4b4ddc94fb3037e36456aa?v=d619a895 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:46 UTC	617	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:46 GMT Content-Type: image/png Content-Length: 18794 Connection: close CF-Ray: 8a5d6cecf8567c96-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 455 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icons_Google.png; filename*=utf-8''icons_Google.png ETag: "0x8DBDF506FC258A7" Last-Modified: Tue, 07 Nov 2023 05:14:36 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 125917 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:46 UTC	752	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 2c 62 63 61 42 58 00 00 2c 62 6a 75 6d 62 00 00 00 1e 6a 75 6d 64 63 32 70 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 00 00 00 2c 3c 6a 75 6d 62 00 00 00 47 6a 75 6d 64 63 32 6d 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 75 72 6e 3a 75 75 69 64 3a 61 32 30 65 63 32 64 35 2d 31 62 36 30 2d 34 37 64 62 2d 61 61 30 38 2d 36 36 39 30 65 65 30 35 64 64 34 35 00 00 00 01 a6 6a 75 6d 62 00 00 00 29 6a 75 6d 64 63 32 61 73 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 00 00 00 00 ca 6a 75 6d 62 00 00 00 26 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 63 74 69 6f 6e 73 00 00 00 Data Ascii: PNGIHDRR:W,bcaBX,bjumbjumdc2pa8qc2pa,<jumbGjumdc2ma8qurn:uuid:a20ec2d5-1b60-47db-aa08-6690ee05dd45jumb)jumdc2as8qc2pa.assertionsjumb&jumdcbor8qc2pa.actions
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 36 41 64 6f 62 65 5f 49 6c 6c 75 73 74 72 61 74 6f 72 2f 32 38 2e 30 20 61 64 6f 62 65 5f 63 32 70 61 2f 30 2e 37 2e 36 20 63 32 70 61 2d 72 73 2f 30 2e 32 35 2e 32 74 63 6c 61 69 6d 5f 67 65 6e 65 72 61 74 6f 72 5f 69 6e 66 6f 81 bf 64 6e 61 6d 65 71 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 67 76 65 72 73 69 6f 6e 64 32 38 2e 30 ff 69 73 69 67 6e 61 74 75 72 65 78 19 73 65 6c 66 23 6a 75 6d 62 66 3d 63 32 70 61 2e 73 69 67 6e 61 74 75 72 65 6a 61 73 73 65 72 74 69 6f 6e 73 82 a2 63 75 72 6c 78 27 73 65 6c 66 23 6a 75 6d 62 66 3d 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 2f 63 32 70 61 2e 61 63 74 69 6f 6e 73 64 68 61 73 68 58 20 eb ac 66 e1 6a 83 9f 7c 60 9c e9 39 f5 fe d6 23 41 82 a7 5d 2b c4 92 12 10 46 f4 22 64 d0 2b c1 a2 63 75 72 6c 78 Data Ascii: 6Adobe_Illustrator/28.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_infodnameqAdobe Illustratorgversiond28.0isignaturexself#jumbf=c2pa.signaturejassertionscurlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX fj\|`9#A]+F"d+curlx
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 69 6d 65 53 74 61 6d 70 69 6e 67 43 41 2e 63 72 74 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 78 2b 8c 42 c7 84 10 84 58 94 82 c9 15 fb 96 c2 f4 0b d2 c9 81 b5 f5 af 25 58 c9 23 51 c4 79 0c 47 62 ea 0b b3 d0 65 12 60 0c d4 7e 90 9a 29 f0 fe 6f d8 1c e9 fe 33 2b cf 0e 14 e2 96 3a ad 8b f7 23 c1 e9 16 52 5a e2 e0 70 51 32 14 80 75 a9 8b c5 f1 77 52 44 11 7f 78 3c e3 83 8b b1 f2 49 e9 17 eb 40 34 e7 90 68 cc 56 fb 18 65 5a c5 bd 0b ad e4 13 45 79 e4 af a8 20 3c d5 0f 5f d1 a1 fb 64 9c 3b 19 53 75 04 0b 81 96 e4 75 8b f1 a3 70 29 e9 cc bd ae 26 62 8d 1c 4e 66 a8 8e c9 64 b1 31 48 60 2b 17 8a cf 0a c5 5b a5 db 7b 46 b0 36 13 94 5d 9c c8 c5 ce 22 c6 92 b3 59 22 2d a4 f2 77 d1 98 81 42 7e 3d 53 70 03 61 39 ec 85 b3 7d 66 44 c0 d6 91 df fc da 2f Data Ascii: imeStampingCA.crt0*Hx+BX%X#QyGbe`~)o3+:#RZpQ2uwRDx<I@4hVeZEy <_d;Suup)&bNfd1H`+[{F6]"Y"-wB~=Spa9}fD/
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 33 b4 cd b1 02 03 01 00 01 a3 82 01 5d 30 82 01 59 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 ba 16 d9 6d 4d 85 2f 73 29 76 9a 2f 75 8c 6a 20 8f 9e c8 6f 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ec d7 e3 82 d2 71 5d 64 4c df 2e 67 3f e7 ba 98 ae 1c 0f 4f 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 08 30 77 06 08 2b 06 01 05 05 07 01 01 04 6b 30 69 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 41 06 08 2b 06 01 05 05 07 30 02 86 35 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 54 72 75 73 74 65 64 52 6f 6f 74 47 34 Data Ascii: 3]0Y0U00UmM/s)v/uj o0U#0q]dL.g?O0U0U%0+0w+k0i0$+0http://ocsp.digicert.com0A+05http://cacerts.digicert.com/DigiCertTrustedRootG4
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: da b0 e4 5d f2 f3 0d 9e 54 d1 da d2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 23 30 21 06 03 55 04 0a 13 1a 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 31 1d 30 1b 06 03 55 04 0b 13 14 41 64 6f 62 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 31 22 30 20 06 03 55 04 03 13 19 41 64 6f 62 65 20 50 72 6f 64 75 63 74 20 53 65 72 76 69 63 65 73 20 47 33 30 1e 17 0d 32 33 30 32 30 31 30 30 30 30 30 30 5a 17 0d 32 34 30 32 30 31 32 33 35 39 35 39 5a 30 81 a1 31 11 30 0f 06 03 55 04 03 0c 08 63 61 69 2d 70 72 6f 64 31 1c 30 1a 06 03 55 04 0b 0c 13 43 6f 6e 74 65 6e 74 20 43 72 65 64 65 6e 74 69 61 6c 73 31 13 30 11 06 03 55 04 0a 0c 0a 41 64 6f 62 65 20 49 6e 63 2e 31 11 30 0f Data Ascii: ]T0*H0u10UUS1#0!UAdobe Systems Incorporated10UAdobe Trust Services1"0 UAdobe Product Services G30230201000000Z240201235959Z010Ucai-prod10UContent Credentials10UAdobe Inc.10
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 0c 20 67 3b 4d 9d 6c 5a e6 a6 0d e9 4d cd 05 a9 14 38 18 bf fc f2 98 d1 35 23 32 e6 d5 3d 4a 84 27 48 21 98 a8 8b 23 7c bf 00 ce 03 c4 1a 25 d7 46 00 01 61 cd 6e 5d e7 1f e3 f7 9a c9 bd ca d8 c3 ec ee 19 d6 4d b5 0a a4 71 c9 23 0c 69 74 dd ef 4c 67 59 35 6a 73 f4 ec 5f ba 8d de 10 b4 25 91 3b c0 08 78 2a 91 a5 e2 fc 50 1a 9c 77 b9 3c 28 67 e9 fa f5 ff 87 0d 17 c8 28 0f 46 ee 3c 0a 60 4b 7c f3 c2 a8 d1 87 1a c7 f0 84 b0 3d f2 67 f0 9a b3 ba b3 1a 2c 33 27 9d cd 7c b4 7c d4 88 cb 57 ef 78 df ea 85 e1 ee fa 02 c5 7f d3 e0 3d e7 14 f9 71 53 7a 26 d9 ca 5c 2d 0d 56 77 8d 36 eb 1d 7c ae 54 86 47 59 06 a5 30 82 06 a1 30 82 04 89 a0 03 02 01 02 02 10 0c a8 b6 54 7b 89 e6 d2 06 89 75 cd 8b 9b 89 e2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 6c 31 0b 30 09 06 Data Ascii: g;MlZM85#2=J'H!#\|%Fan]Mq#itLgY5js_%;xPw<(g(F<`K\|=g,3'\|\|Wx=qSz&\-Vw6\|TGY00T{u0H0l10
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 31 d4 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 71 ce e5 07 8c a6 dc 2d dc c8 e0 3b 65 5e 00 92 81 95 eb 95 20 24 af 9f 69 38 5d c9 7c f1 b8 da a5 4d 00 65 3b 25 c1 18 5c 9e be 59 b7 dc 1b 06 3b 59 83 25 fa 33 bb 22 f2 4f 6f bb 21 5c 56 16 f5 b9 c9 83 15 fb 94 b5 35 e0 a1 31 72 19 9c 2c d6 35 79 ee 88 84 12 76 63 c3 f3 64 c4 54 29 27 79 0a 45 11 3e 0d 0f 04 b1 a3 cf f2 91 fc 3a 1f 1f 1f 86 e2 b3 d3 08 e1 8e 45 8c 5e 62 b7 74 d6 57 22 e6 15 71 bc a7 1c bc 89 3b 30 3e bd 65 37 b0 7d 93 d2 33 ed 16 9e c5 37 7f 46 66 77 b8 60 6d 1a 54 c9 67 1e 1b 47 87 16 97 54 28 af d9 15 68 47 8c 35 42 db ca 1d 0a 73 7c f3 9b 47 9d c2 97 be 22 2d 2b 46 54 52 8f c0 22 d8 45 2a 58 44 5e c9 ea f5 52 fd 7c 56 e0 bc ef 37 66 fa 54 42 8e 72 f2 66 37 72 e1 a7 11 Data Ascii: 10Hq-;e^ $i8]\|Me;%\Y;Y%3"Oo!\V51r,5yvcdT)'yE>:E^btW"q;0>e7}37Ffw`mTgGT(hG5Bs\|G"-+FTR"EXD^R\|V7fTBrf7r
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-19 20:22:46 UTC	1369	IN	Data Raw: 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 83 0c 30 32 38 1a 8c c6 c9 10 02 0c 0c 0c 00 00 00 00 ff ff 62 1c e9 01 40 4b c0 c8 e0 e8 c0 c0 c0 20 c0 c0 c0 00 ca 18 fc 50 1a 04 14 a0 98 54 70 00 aa fe 03 03 03 c3 45 28 7d 01 44 ff 67 d8 7f 61 58 05 de 50 01 0c 0c 0c 00 00 00 00 ff ff 1a cd 44 54 00 8c 0c 8e a0 8c e2 00 cd 24 f6 14 64 12 4a c1 05 28 06 65 b0 0b ff 19 f6 1f a0 ad 75 a3 80 81 81 81 01 00 00 00 ff ff 1a cd 44 64 00 46 06 47 05 68 a6 b1 87 d2 03 91 61 88 05 07 a0 19 eb e0 7f 86 fd 1b 06 b1 3b 87 26 60 60 60 00 00 00 00 ff ff Data Ascii: `P`P`P`P`P028b@K PTpE(}DgaXPDT$dJ(euDdFGha;&```

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49832	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:46 UTC	635	OUT	GET /dist/site.7acaecb637d2a1f6764a.css HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp
2024-07-19 20:22:46 UTC	804	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:46 GMT Content-Type: text/css Content-Length: 364771 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 ETag: "1dacc865123dfe3" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202246Z-15b94bb6ff9f6lb49366mxup980000000deg000000003x3k x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-19 20:22:46 UTC	15580	IN	Data Raw: 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 6f 6c 5b 63 6c 61 73 73 5d 2c 75 6c 5b 63 6c 61 73 73 5d 7b 70 61 64 64 69 6e 67 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 64 64 2c 64 6c 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 6c 69 2c 6f 6c 5b 63 6c 61 73 73 5d 2c 70 2c 75 6c 5b 63 6c 61 73 73 5d 7b 6d 61 72 67 69 6e 3a 30 7d 62 6f 64 79 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 3b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 53 70 65 65 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 6f 6c 5b 63 6c 61 73 Data Ascii: *,:after,:before{box-sizing:border-box}ol[class],ul[class]{padding:0}blockquote,body,dd,dl,figcaption,figure,h1,h2,h3,h4,h5,li,ol[class],p,ul[class]{margin:0}body{min-height:100vh;scroll-behavior:smooth;text-rendering:optimizeSpeed;line-height:1.5}ol[clas
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 62 33 33 33 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 65 66 74 3a 2d 32 33 70 78 3b 74 6f 70 3a 38 70 78 3b 68 65 69 67 68 74 3a 37 70 78 3b 77 69 64 74 68 3a 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 61 70 70 2d 6f 6c 20 6c 69 3a 3a 6d 61 72 6b 65 72 2c 2e 72 69 63 68 2d 74 65 78 74 20 6f 6c 20 6c 69 3a 3a 6d 61 72 6b 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 72 69 63 68 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 72 65 6d 7d 2e 72 69 63 68 2d 74 65 78 74 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 36 32 35 72 65 6d 3b 6c Data Ascii: ackground-color:#db333e;border-radius:50%;content:"";display:inline-block;left:-23px;top:8px;height:7px;width:7px;position:absolute}.app-ol li::marker,.rich-text ol li::marker{color:inherit}.rich-text{padding-bottom:2rem}.rich-text h1{font-size:2.625rem;l
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 80 b4 22 7d 2e 66 61 2d 75 73 65 72 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 75 73 65 72 2d 78 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 b5 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 b1 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6d 65 73 73 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 89 ba 22 7d 2e 66 61 2d 69 6e 66 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a9 22 7d 2e 66 61 2d 63 6f 6d 70 72 65 73 73 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 64 6f 77 6e 2d 6c 65 66 74 2d 61 6e 64 2d 75 Data Ascii: xt-height:before{content:""}.fa-user-times:before,.fa-user-xmark:before{content:""}.fa-stethoscope:before{content:""}.fa-comment-alt:before,.fa-message:before{content:""}.fa-info:before{content:""}.fa-compress-alt:before,.fa-down-left-and-u
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a0 96 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 82 9c 22 7d 2e 66 61 2d 63 6f 6c 6f 6e 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 80 22 7d 2e 66 61 2d 68 65 61 64 73 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 96 90 22 7d 2e 66 61 2d 73 74 6f 72 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 81 b1 22 7d 2e 66 61 2d 72 6f 61 64 2d 63 69 72 63 6c 65 2d 78 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 95 a6 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 94 83 22 7d 2e 66 61 2d 6d 61 72 73 2d 73 74 72 6f 6b 65 2d 75 70 3a 62 65 66 Data Ascii: e{content:""}.fa-unlock:before{content:""}.fa-colon-sign:before{content:""}.fa-headset:before{content:""}.fa-store-slash:before{content:""}.fa-road-circle-xmark:before{content:""}.fa-user-minus:before{content:""}.fa-mars-stroke-up:bef
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 61 2d 73 63 61 6c 65 2d 75 6e 62 61 6c 61 6e 63 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 94 95 22 7d 2e 66 61 2d 73 6f 72 74 2d 61 73 63 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 9e 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 2d 64 6f 74 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 6d 6d 65 6e 74 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 92 ad 22 7d 2e 66 61 2d 70 6c 61 6e 74 2d 77 69 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 96 aa 22 7d 2e 66 61 2d 64 69 61 6d 6f 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 99 22 7d 2e 66 61 2d 66 61 63 65 2d 67 72 69 6e 2d 73 71 75 69 6e 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 Data Ascii: a-scale-unbalanced:before{content:""}.fa-sort-asc:before,.fa-sort-up:before{content:""}.fa-comment-dots:before,.fa-commenting:before{content:""}.fa-plant-wilt:before{content:""}.fa-diamond:before{content:""}.fa-face-grin-squint:before,.fa-g
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 74 3a 22 ef 91 b0 22 7d 2e 66 61 2d 74 72 61 73 68 2d 63 61 6e 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 72 61 73 68 2d 72 65 73 74 6f 72 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a0 aa 22 7d 2e 66 61 2d 6e 61 69 72 61 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 87 b6 22 7d 2e 66 61 2d 63 61 72 74 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 98 22 7d 2e 66 61 2d 77 61 6c 6b 69 65 2d 74 61 6c 6b 69 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a3 af 22 7d 2e 66 61 2d 66 69 6c 65 2d 65 64 69 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8c 9c 22 7d 2e 66 61 Data Ascii: t:""}.fa-trash-can-arrow-up:before,.fa-trash-restore-alt:before{content:""}.fa-naira-sign:before{content:""}.fa-cart-arrow-down:before{content:""}.fa-walkie-talkie:before{content:""}.fa-file-edit:before,.fa-file-pen:before{content:""}.fa
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 a7 22 7d 2e 66 61 2d 79 65 6c 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 a9 22 7d 2e 66 61 2d 63 63 2d 76 69 73 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 b0 22 7d 2e 66 61 2d 6c 61 73 74 66 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 82 22 7d 2e 66 61 2d 73 68 6f 70 77 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 96 b5 22 7d 2e 66 61 2d 63 72 65 61 74 69 76 65 2d 63 6f 6d 6d 6f 6e 73 2d 6e 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 93 a8 22 7d 2e 66 61 2d 61 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8d b5 22 7d 2e 66 61 2d 72 65 64 68 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9e bc 22 7d Data Ascii: efore{content:""}.fa-yelp:before{content:""}.fa-cc-visa:before{content:""}.fa-lastfm:before{content:""}.fa-shopware:before{content:""}.fa-creative-commons-nc:before{content:""}.fa-aws:before{content:""}.fa-redhat:before{content:""}
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 2d 74 65 6c 65 67 72 61 6d 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 65 6c 65 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8b 86 22 7d 2e 66 61 2d 6f 6c 64 2d 72 65 70 75 62 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 94 90 22 7d 2e 66 61 2d 6f 64 79 73 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 97 86 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 77 68 61 74 73 61 70 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 77 68 61 74 73 61 70 70 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 8c 22 7d 2e 66 61 2d 6e 6f 64 65 2d 6a 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8f 93 22 7d 2e 66 61 2d 65 64 67 65 2d 6c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: -telegram-plane:before,.fa-telegram:before{content:""}.fa-old-republic:before{content:""}.fa-odysee:before{content:""}.fa-square-whatsapp:before,.fa-whatsapp-square:before{content:""}.fa-node-js:before{content:""}.fa-edge-legacy:before{cont
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 61 72 6f 75 6e 64 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 6d 64 2d 73 74 61 72 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 6d 64 2d 65 6e 64 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 6d 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e Data Ascii: ntent:space-between!important}.justify-content-md-around{justify-content:space-around!important}.align-items-md-start{align-items:flex-start!important}.align-items-md-end{align-items:flex-end!important}.align-items-md-center{align-items:center!important}.
2024-07-19 20:22:46 UTC	16384	IN	Data Raw: 5f 68 65 61 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 7d 2e 73 65 63 74 69 6f 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 5f 5f 6d 65 64 69 61 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 73 65 63 74 69 6f 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 5f 5f 6d 65 64 69 61 2d 2d 69 6d 61 67 65 2d 6c 65 66 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 32 70 78 7d 2e 73 65 63 74 69 6f 6e 2d 63 6f 6d 70 6f 6e 65 6e 74 5f 5f 6d 65 64 69 61 2d 2d 69 6d 61 67 65 2d 72 69 67 68 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 32 70 78 Data Ascii: _heading{padding-bottom:1.5rem}}.section-component__media{width:100%;height:100%;object-fit:cover}@media(min-width:768px){.section-component__media--image-left{border-top-right-radius:32px}.section-component__media--image-right{border-top-left-radius:32px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49831	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:46 UTC	626	OUT	GET /layouts/system/VisitorIdentification.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp
2024-07-19 20:22:46 UTC	1249	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:46 GMT Content-Type: application/x-javascript Content-Length: 3091 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-store ETag: "0b613ca5b8d91:0" Last-Modified: Mon, 17 Jul 2023 11:53:00 GMT Set-Cookie: shell#lang=en; path=/; secure; SameSite=Strict Set-Cookie: ARRAffinity=9711c419a659049fd2590cda84358b6b7fe4a165cdb6acbb6ef91d696e076af4;Path=/;HttpOnly;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.net Set-Cookie: ARRAffinitySameSite=9711c419a659049fd2590cda84358b6b7fe4a165cdb6acbb6ef91d696e076af4;Path=/;HttpOnly;SameSite=None;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.net Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202246Z-15b94bb6ff9w7mjpz9kwq46cvc0000000crg00000000nu8s x-fd-int-roxy-purgeid: 71368145 X-Cache: PRIVATE_NOSTORE Accept-Ranges: bytes
2024-07-19 20:22:46 UTC	3091	IN	Data Raw: ef bb bf 66 75 6e 63 74 69 6f 6e 20 73 75 62 73 63 72 69 62 65 45 76 65 6e 74 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 20 7b 0d 0a 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 3b 0d 0a 20 20 7d 20 65 6c 73 65 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 3b 0d 0a 20 20 7d 0d 0a Data Ascii: function subscribeEvent(event, listener, useCapture) { if (document.addEventListener) { document.addEventListener(event, listener, useCapture); } else if (document.attachEvent) { document.attachEvent(event, listener, useCapture); }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49835	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	640	OUT	GET /api/public/content/b6c2916537114887a5ba7800de8d6ede?v=78059a5e HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:47 UTC	627	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: image/png Content-Length: 17327 Connection: close CF-Ray: 8a5d6cf20a7818b4-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 456 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icons_W_Microsoft.png; filename*=utf-8''icons_W_Microsoft.png ETag: "0x8DBF0A276D5B2AF" Last-Modified: Wed, 29 Nov 2023 06:14:37 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128887 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:47 UTC	742	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 2c 6f 63 61 42 58 00 00 2c 6f 6a 75 6d 62 00 00 00 1e 6a 75 6d 64 63 32 70 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 00 00 00 2c 49 6a 75 6d 62 00 00 00 47 6a 75 6d 64 63 32 6d 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 75 72 6e 3a 75 75 69 64 3a 37 36 34 34 37 35 39 32 2d 36 35 36 62 2d 34 30 30 34 2d 61 30 66 34 2d 64 33 61 65 37 33 37 61 63 31 65 33 00 00 00 01 b3 6a 75 6d 62 00 00 00 29 6a 75 6d 64 63 32 61 73 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 00 00 00 00 d7 6a 75 6d 62 00 00 00 26 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 63 74 69 6f 6e 73 00 00 00 Data Ascii: PNGIHDRR:W,ocaBX,ojumbjumdc2pa8qc2pa,IjumbGjumdc2ma8qurn:uuid:76447592-656b-4004-a0f4-d3ae737ac1e3jumb)jumdc2as8qc2pa.assertionsjumb&jumdcbor8qc2pa.actions
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 39 62 31 62 32 35 6f 63 6c 61 69 6d 5f 67 65 6e 65 72 61 74 6f 72 78 36 41 64 6f 62 65 5f 50 68 6f 74 6f 73 68 6f 70 2f 32 35 2e 31 2e 30 20 61 64 6f 62 65 5f 63 32 70 61 2f 30 2e 37 2e 36 20 63 32 70 61 2d 72 73 2f 30 2e 32 35 2e 32 74 63 6c 61 69 6d 5f 67 65 6e 65 72 61 74 6f 72 5f 69 6e 66 6f 81 bf 64 6e 61 6d 65 6f 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 67 76 65 72 73 69 6f 6e 66 32 35 2e 31 2e 30 ff 69 73 69 67 6e 61 74 75 72 65 78 19 73 65 6c 66 23 6a 75 6d 62 66 3d 63 32 70 61 2e 73 69 67 6e 61 74 75 72 65 6a 61 73 73 65 72 74 69 6f 6e 73 82 a2 63 75 72 6c 78 27 73 65 6c 66 23 6a 75 6d 62 66 3d 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 2f 63 32 70 61 2e 61 63 74 69 6f 6e 73 64 68 61 73 68 58 20 4a 69 c1 bd ff a8 de 41 30 78 be 24 ed cc f8 Data Ascii: 9b1b25oclaim_generatorx6Adobe_Photoshop/25.1.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_infodnameoAdobe Photoshopgversionf25.1.0isignaturexself#jumbf=c2pa.signaturejassertionscurlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX JiA0x$
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 54 72 75 73 74 65 64 47 34 52 53 41 34 30 39 36 53 48 41 32 35 36 54 69 6d 65 53 74 61 6d 70 69 6e 67 43 41 2e 63 72 74 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 78 2b 8c 42 c7 84 10 84 58 94 82 c9 15 fb 96 c2 f4 0b d2 c9 81 b5 f5 af 25 58 c9 23 51 c4 79 0c 47 62 ea 0b b3 d0 65 12 60 0c d4 7e 90 9a 29 f0 fe 6f d8 1c e9 fe 33 2b cf 0e 14 e2 96 3a ad 8b f7 23 c1 e9 16 52 5a e2 e0 70 51 32 14 80 75 a9 8b c5 f1 77 52 44 11 7f 78 3c e3 83 8b b1 f2 49 e9 17 eb 40 34 e7 90 68 cc 56 fb 18 65 5a c5 bd 0b ad e4 13 45 79 e4 af a8 20 3c d5 0f 5f d1 a1 fb 64 9c 3b 19 53 75 04 0b 81 96 e4 75 8b f1 a3 70 29 e9 cc bd ae 26 62 8d 1c 4e 66 a8 8e c9 64 b1 31 48 60 2b 17 8a cf 0a c5 5b a5 db 7b 46 b0 36 13 94 5d 9c c8 c5 ce 22 c6 92 b3 59 22 2d a4 f2 77 d1 Data Ascii: TrustedG4RSA4096SHA256TimeStampingCA.crt0*Hx+BX%X#QyGbe`~)o3+:#RZpQ2uwRDx<I@4hVeZEy <_d;Suup)&bNfd1H`+[{F6]"Y"-w
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 84 54 ee ce e9 5d c8 5e 30 12 bd 46 9e b5 d3 76 b9 d2 0e 6b 99 0c d2 33 b4 cd b1 02 03 01 00 01 a3 82 01 5d 30 82 01 59 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 ba 16 d9 6d 4d 85 2f 73 29 76 9a 2f 75 8c 6a 20 8f 9e c8 6f 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ec d7 e3 82 d2 71 5d 64 4c df 2e 67 3f e7 ba 98 ae 1c 0f 4f 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 08 30 77 06 08 2b 06 01 05 05 07 01 01 04 6b 30 69 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 41 06 08 2b 06 01 05 05 07 30 02 86 35 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f Data Ascii: T]^0Fvk3]0Y0U00UmM/s)v/uj o0U#0q]dL.g?O0U0U%0+0w+k0i0$+0http://ocsp.digicert.com0A+05http://cacerts.digicert.co
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 82 59 06 33 30 82 06 2f 30 82 04 17 a0 03 02 01 02 02 10 1b 5b 0b 3b da b0 e4 5d f2 f3 0d 9e 54 d1 da d2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 23 30 21 06 03 55 04 0a 13 1a 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 31 1d 30 1b 06 03 55 04 0b 13 14 41 64 6f 62 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 31 22 30 20 06 03 55 04 03 13 19 41 64 6f 62 65 20 50 72 6f 64 75 63 74 20 53 65 72 76 69 63 65 73 20 47 33 30 1e 17 0d 32 33 30 32 30 31 30 30 30 30 30 30 5a 17 0d 32 34 30 32 30 31 32 33 35 39 35 39 5a 30 81 a1 31 11 30 0f 06 03 55 04 03 0c 08 63 61 69 2d 70 72 6f 64 31 1c 30 1a 06 03 55 04 0b 0c 13 43 6f 6e 74 65 6e 74 20 43 72 65 64 65 6e 74 69 61 6c 73 31 13 Data Ascii: Y30/0[;]T0*H0u10UUS1#0!UAdobe Systems Incorporated10UAdobe Trust Services1"0 UAdobe Product Services G30230201000000Z240201235959Z010Ucai-prod10UContent Credentials1
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: fe 9f 90 30 9d af b3 0d f3 fe 27 d8 b4 8d ac c5 2f 68 11 19 76 62 ea 0c 20 67 3b 4d 9d 6c 5a e6 a6 0d e9 4d cd 05 a9 14 38 18 bf fc f2 98 d1 35 23 32 e6 d5 3d 4a 84 27 48 21 98 a8 8b 23 7c bf 00 ce 03 c4 1a 25 d7 46 00 01 61 cd 6e 5d e7 1f e3 f7 9a c9 bd ca d8 c3 ec ee 19 d6 4d b5 0a a4 71 c9 23 0c 69 74 dd ef 4c 67 59 35 6a 73 f4 ec 5f ba 8d de 10 b4 25 91 3b c0 08 78 2a 91 a5 e2 fc 50 1a 9c 77 b9 3c 28 67 e9 fa f5 ff 87 0d 17 c8 28 0f 46 ee 3c 0a 60 4b 7c f3 c2 a8 d1 87 1a c7 f0 84 b0 3d f2 67 f0 9a b3 ba b3 1a 2c 33 27 9d cd 7c b4 7c d4 88 cb 57 ef 78 df ea 85 e1 ee fa 02 c5 7f d3 e0 3d e7 14 f9 71 53 7a 26 d9 ca 5c 2d 0d 56 77 8d 36 eb 1d 7c ae 54 86 47 59 06 a5 30 82 06 a1 30 82 04 89 a0 03 02 01 02 02 10 0c a8 b6 54 7b 89 e6 d2 06 89 75 cd 8b 9b 89 Data Ascii: 0'/hvb g;MlZM85#2=J'H!#\|%Fan]Mq#itLgY5js_%;x*Pw<(g(F<`K\|=g,3'\|\|Wx=qSz&\-Vw6\|TGY00T{u
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 18 30 16 80 14 a6 1c e1 6d 54 24 4c a8 8f 48 72 bf 6e a9 8c d5 e4 ec 31 d4 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 71 ce e5 07 8c a6 dc 2d dc c8 e0 3b 65 5e 00 92 81 95 eb 95 20 24 af 9f 69 38 5d c9 7c f1 b8 da a5 4d 00 65 3b 25 c1 18 5c 9e be 59 b7 dc 1b 06 3b 59 83 25 fa 33 bb 22 f2 4f 6f bb 21 5c 56 16 f5 b9 c9 83 15 fb 94 b5 35 e0 a1 31 72 19 9c 2c d6 35 79 ee 88 84 12 76 63 c3 f3 64 c4 54 29 27 79 0a 45 11 3e 0d 0f 04 b1 a3 cf f2 91 fc 3a 1f 1f 1f 86 e2 b3 d3 08 e1 8e 45 8c 5e 62 b7 74 d6 57 22 e6 15 71 bc a7 1c bc 89 3b 30 3e bd 65 37 b0 7d 93 d2 33 ed 16 9e c5 37 7f 46 66 77 b8 60 6d 1a 54 c9 67 1e 1b 47 87 16 97 54 28 af d9 15 68 47 8c 35 42 db ca 1d 0a 73 7c f3 9b 47 9d c2 97 be 22 2d 2b 46 54 52 8f c0 22 d8 45 2a 58 44 5e c9 Data Ascii: 0mT$LHrn10Hq-;e^ $i8]\|Me;%\Y;Y%3"Oo!\V51r,5yvcdT)'yE>:E^btW"q;0>e7}37Ffw`mTgGT(hG5Bs\|G"-+FTR"EXD^
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 Data Ascii: ntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49836	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	405	OUT	GET /api/public/content/aac7c7d3363d4892b9f909aa59250d04?v=52228a06 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:47 UTC	618	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: image/png Content-Length: 4234 Connection: close CF-Ray: 8a5d6cf20c494372-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 91 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-dark-2021.png; filename*=utf-8''logo-dark-2021.png ETag: "0x8DA778798ACF8DB" Last-Modified: Sat, 06 Aug 2022 08:42:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 85969 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:47 UTC	751	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 18 00 00 00 de 08 03 00 00 00 61 4f 9c 21 00 00 00 5a 50 4c 54 45 47 70 4c 00 00 3f 01 00 41 00 00 3e 00 00 3e 00 00 41 00 00 40 00 00 40 00 00 3e 00 00 41 01 00 41 00 00 3f 00 00 40 00 00 3e 00 00 40 00 00 40 00 00 3f 00 00 40 00 00 3f 00 00 41 00 00 3f 01 00 41 01 00 41 00 00 3f 00 00 01 00 00 3f 00 00 40 02 00 3f 00 00 3e 00 00 41 9c da ce fc 00 00 00 1e 74 52 4e 53 00 40 ff 20 41 df 9f be 10 cf bf 80 6f 30 90 4f 50 af 60 de a0 ef fe 70 01 61 ce 70 51 bf a0 0d ea 6d 00 00 0f c1 49 44 41 54 78 01 ec d4 b1 11 80 20 0c 00 c0 48 00 dd 7f 62 4b db 94 9c f9 1f e2 a3 87 6b 94 65 74 00 20 46 00 31 02 88 11 40 8c 00 62 04 10 23 80 18 01 c4 08 20 46 00 31 02 88 11 40 8c 00 62 04 10 e3 29 00 c4 08 20 46 00 Data Ascii: PNGIHDRaO!ZPLTEGpL?A>>A@@>AA?@>@@?@?A?AA??@?>AtRNS@ Ao0OP`papQmIDATx HbKket F1@b# F1@b) F
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 11 60 8b 06 e9 61 34 d3 7c f8 d1 a2 9d de 1a c8 a2 35 8c 0d a4 31 a4 ca 93 86 51 c8 f9 df 15 54 c1 fa c4 25 83 6d 2a a1 87 f1 f8 5d 28 14 ee 4e 05 f7 71 4a b6 1f c6 63 ff 4c ae 4a 9e 35 8c cf af eb fb c5 e5 51 72 e2 72 03 32 99 c0 46 a9 f4 30 9a a9 6b 21 39 09 f7 28 e4 c9 c2 48 3e c8 4e ff 77 27 08 e3 3a 72 91 d7 30 3a 60 25 13 b0 0e 7c 01 9b 95 7a 18 8f 8d 4e 3a fc 4a 89 9d 0c 3c 61 18 39 67 7c 9f 28 cf 1c c6 81 15 1f 61 fc 8d 55 80 f5 89 15 6c 57 e9 61 b4 2b f8 2e 7f f8 e9 80 5d 56 9e 32 8c 5c 6e f8 ae 5f 95 a7 0e a3 72 7e 5b 41 d5 ca 97 0c 00 89 0b d8 30 df c3 68 37 04 7c 47 18 1a b8 51 94 2b 4f 1a 46 2e 09 df 33 f1 4d 0f a3 2a 39 4f 00 d6 d2 78 18 e9 7b 18 0f 2a 63 18 78 a8 9a 0f ed 62 fb 61 e4 92 76 e8 e2 49 ae 31 86 f7 53 69 19 58 03 b0 46 be 80 4d Data Ascii: `a4\|51QT%m](NqJcLJ5Qrr2F0k!9(H>Nw':r0:`%\|zN:J<a9g\|(aUlWa+.]V2\n_r~[A0h7\|GQ+OF.3M9Ox{*cxbavI1SiXFM
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 46 60 3c 05 8c 83 4d af df 80 11 18 81 11 18 4f 00 a3 b7 8a 5a b7 01 23 30 02 23 30 3e 3d 8c 5b 63 35 75 f3 b0 6d 1b 30 02 23 30 02 e3 53 c3 f8 b0 da ae 53 ff 3e 6c e9 3e 02 23 30 02 63 f7 fa 89 7a 60 fc 41 a9 f4 72 c1 28 ab fd 5c d7 6e 7c 7f f1 db b6 01 23 30 02 e3 01 55 07 a3 5e 43 ef 5e 5e 5f fb be 1f db d4 1e d9 60 1c ec 57 6a ba f1 96 91 47 60 04 46 60 04 c6 6d 73 ef 7d 7b 0d 56 5f 36 18 b7 60 bf 5c c8 c2 23 30 02 23 30 02 e3 e6 d6 56 8f 52 7e 18 47 9b 5c 02 8f ee 93 3c 02 23 30 02 23 30 6e 2f 7d 63 bf 47 51 b9 f2 95 81 c7 f6 36 68 71 04 46 60 04 46 60 f4 6b 67 bf 53 51 32 9e 4b 2b 74 d4 e0 08 8c c0 08 8c c0 e8 fb 60 6d 39 30 4a 6f 77 a9 69 cd 06 8c c0 08 8c c0 58 10 8b 0a 18 bd dd ab e6 e6 36 60 04 46 60 fc 87 80 71 7b 69 ac 2d 0c c6 ad b3 79 53 dc Data Ascii: F`<MOZ#0#0>=[c5um0#0SS>l>#0cz`Ar(\n\|#0U^C^^_`WjG`F`ms}{V_6`\#0#0VR~G\<#0#0n/}cGQ6hqF`F`kgSQ2K+t`m90JowiX6`F`q{i-yS
2024-07-19 20:22:47 UTC	745	IN	Data Raw: 71 30 1a 60 fc 5d 51 7f d5 06 18 81 b1 58 18 7d a8 00 c6 b5 38 18 7d 00 46 e5 83 14 b7 00 8c c0 58 0d 8c 32 56 00 e3 31 0c b5 8a 61 03 c6 56 ff 2b 00 46 60 2c 17 46 53 01 8c 32 15 07 a3 01 46 ed d3 c2 3c 30 02 63 3d 30 4a 57 01 8c a6 38 18 a5 03 46 e5 bb 5a b6 0e 18 81 b1 1e 18 4d 05 30 4a 57 1c 8c 06 18 d3 97 5e 7e c8 00 23 30 d6 03 a3 74 15 c0 68 8a 83 51 3a 60 54 be dc 6f eb 80 11 18 eb 81 d1 54 00 a3 5c 8a 83 d1 00 a3 6e c2 28 62 80 11 18 eb 81 51 2e 15 c0 38 1c 00 63 ea b0 01 e3 9b f2 bd 5a c0 08 8c 15 c0 e8 42 f9 30 ca 78 00 8c 69 c3 06 8c d1 49 5a 3e 00 23 30 56 03 a3 ac 15 c0 e8 97 03 60 4c 19 36 60 8c bd a4 36 03 23 30 d6 03 a3 4c e5 c3 28 43 2c 0d 46 b9 00 a3 e2 44 5a 77 32 7d 3c 8c c0 08 8c 7e 29 1f 46 59 8b 83 d1 2d c0 a8 7c df a9 5f 80 11 18 Data Ascii: q0`]QX}8}FX2V1aV+F`,FS2F<0c=0JW8FZM0JW^~#0thQ:`ToT\n(bQ.8cZB0xiIZ>#0V`L6`6#0L(C,FDZw2}<~)FY-\|_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49837	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	640	OUT	GET /api/public/content/71680926188a4357b6b246fb0177c4b4?v=9a69a64d HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:47 UTC	631	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: image/jpeg Content-Length: 20524 Connection: close CF-Ray: 8a5d6cf21ace2394-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 431 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=TechPartner.jpg; filename*=utf-8''TechPartner.jpg ETag: "0x8DBF63F65A00C4C" Last-Modified: Wed, 06 Dec 2023 09:40:35 GMT Vary: Accept-Encoding api-supported-versions: 1.0 Cf-Bgj: h2pri ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 129762 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:47 UTC	738	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Condition in IEC61966-2.1
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 06 51 50 Data Ascii: 1J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQQP
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 05 06 07 08 ff c4 00 3d 11 01 00 01 02 03 03 09 06 06 01 03 04 03 00 00 00 00 02 01 03 04 05 12 11 21 22 06 13 31 32 41 51 61 71 81 33 42 52 91 b1 c1 07 23 34 a1 d1 f0 14 24 62 92 82 a2 b2 e1 72 c2 d2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 da 9a 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 0b 77 35 cf f1 de 3b b3 4f 76 cd ef 36 fb 2d be 99 bd 52 4f 57 50 d8 da 07 c3 d4 Data Ascii: =!"12AQaq3BR#4$br?w5;Ov6-ROWP
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 24 16 02 7b fb 85 bf 8a c5 c4 60 ac df eb 47 78 d9 27 87 cf 6a 3e 03 c9 22 9a d5 ca 4c fb 11 7c 93 4c f3 aa 24 0e a2 99 dd 86 c4 da 01 9f 12 7a c3 47 c0 6d 68 31 19 4d eb 7c 51 df 44 b6 b3 4a d7 75 a3 bd 52 47 57 69 a9 86 ae 9a 56 87 32 58 5e 1c d2 08 04 7a 7c c1 05 6a d5 7b 50 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 53 6f b7 ba 5c 76 d5 51 72 ba c9 e5 52 d2 b3 aa 57 9d 00 d1 bd 77 24 80 3d 7d 49 d2 ad 28 35 e9 e2 ab da 75 78 c2 ae d5 b8 af 16 62 d5 d6 da f8 c1 69 bb 5f a9 9f 08 2c 3b 02 48 62 3a 73 da 46 9c d7 92 d1 f8 38 2d ce 0f 2a 8c e3 aa e4 b7 78 23 a9 ad fe 44 e5 1c b3 96 6f b2 5d f9 16 fb 70 be 57 39 ce 21 f5 52 ed 91 f5 1d 91 1c 63 4c 60 27 be 9a 00 5b fb 56 2d da 8e 9b 71 d8 a2 d6 57 01 01 01 01 01 01 01 01 Data Ascii: ${`Gx'j>"L\|L$zGmh1M\|QDJuRGWiV2X^z\|j{PSo\vQrRWw$=}I(5uxbi_,;Hb:sF8-*x#Do]pW9!RcL`'[V-qW
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: bb 0b be 3f 67 ea 2c 9e a9 ae a4 99 dd ce a9 eb c3 43 5b d8 76 6d 43 59 f7 b5 e6 15 6f 5d eb 5e d2 3b 69 df 4f e3 f8 16 36 63 82 64 1c 7d 76 75 b7 34 b4 57 5a 2b 3a 7a 9a ca 98 f4 d9 19 f0 7c 6f 1b 6b da 7e 0e 69 20 fc d6 44 2e c6 e4 75 46 42 82 a4 08 08 08 2a 56 0c 76 eb 96 5d 60 b6 63 16 ea eb ad c6 a0 ea 2a 5a 28 1d 2c 8f f9 e9 a0 13 a1 f1 2a 93 9c 61 1d 52 13 f5 07 84 c3 82 b2 cf 2f 35 d4 56 7d 71 7f 3a b3 61 98 eb 99 3d c6 bd db 00 79 92 f7 8e 06 12 47 bc 04 84 8d eb b8 2b 0b fc ce 77 57 33 d1 4e 9a d7 a1 6e 73 d2 c8 2c 9f 8f 6d 38 06 15 4f 1d 1d 7b 70 6c 5a cb 2b 1b 9b 53 63 dd 3d 55 72 3e 48 c3 2d cc ac 24 cd 53 50 d8 dd 2f 98 7a bc b1 a1 ee 37 d0 60 da bb 29 dc ea ea ad 7a bb 7e bb 3b 28 b5 39 3c 39 0f 15 dc 79 ea c3 41 51 92 3e 4c 32 9d 94 cc 18 Data Ascii: ?g,C[vmCYo]^;iO6cd}vu4WZ+:z\|ok~i D.uFBVv]`cZ(,*aR/5V}q:a=yG+wW3Nns,m8O{plZ+Sc=Ur>H-$SP/z7`)z~;(9<9yAQ>L2
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: e7 f1 97 25 72 f4 a5 28 ec 66 5a a7 0a 62 ab e4 fa 5a 3c ed b8 bd 4d 87 2e 12 c9 23 19 1d d1 96 49 9f 6f 79 73 03 87 f9 4b 41 60 d6 fa 4e f5 a7 2c 65 c7 2b 9f 30 62 16 5c d2 9f 13 ba de a1 a5 c8 2a a4 8e 38 28 e4 86 41 e6 3e 41 b6 35 af e9 e8 2e 3b ec 36 82 ab 5f 9d 63 96 bb f4 16 4b 95 fe c9 4b 7a a9 0c 30 db a7 b8 45 1d 44 81 ee e9 61 6c 45 c1 c7 6e f7 46 87 72 82 b4 25 61 94 c4 d7 37 cc 00 38 b3 ab b8 07 60 1d 7c bb 20 ed 40 40 40 40 41 aa 5f 6c 6d 34 6c e4 5e 3d 9d 8c d4 b2 da aa 9a f7 75 1f 78 36 48 f5 db d3 b7 51 5d 0e 47 d5 b8 84 9a f3 5b c1 df 45 5d 53 6b ac 82 ae db 51 35 25 55 33 c4 90 cf 0c 86 37 c6 f0 76 1c d7 02 08 20 fa 10 ab 5a 6a 12 4b 79 92 9f 33 6b 29 f9 b2 cd 1e 51 ee b5 8d be d2 39 94 77 88 1a 03 5a 09 98 34 b2 a7 40 13 a9 da f7 13 fc Data Ascii: %r(fZbZ<M.#IoysKA`N,e+0b\*8(A>A5.;6_cKKz0EDalEnFr%a78`\| @@@@A_lm4l^=ux6HQ]G[E]SkQ5%U37v ZjKy3k)Q9wZ4@
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: b1 d9 da 3d b6 3d 57 43 92 75 6e 21 26 bd d6 f0 10 10 77 52 d5 cd 43 53 0d 4d 0c d2 53 d4 53 bd b2 45 2c 52 16 3e 37 b4 ed ae 6b 86 88 20 8d 82 10 49 b1 73 5c 39 7d 33 28 b9 b6 c7 1e 5e d6 31 b1 c5 7d 86 51 47 79 a7 68 0d 03 fc a4 34 b6 a0 34 03 ee d4 32 43 b7 7d e0 b1 bf c7 e6 fd 8c b6 78 76 7f 7c 87 07 70 a3 72 f8 64 ac e1 4b cc 39 84 6c 61 91 f6 69 18 29 2f 10 34 0d 90 69 4b 88 9b a7 7a ea 81 d2 7e 21 a9 fe 47 37 ed a3 b3 e9 fd f3 11 9d 4d 34 d4 75 12 41 59 14 90 4f 03 cb 24 8a 56 96 bd 8e 07 44 10 7b 82 16 48 90 31 ae 10 bd 5c ed 11 5f b2 ea 9a 1c 2f 17 93 bb 2e f7 d7 3a 21 50 07 72 29 a1 00 cb 50 ed 03 af 2d 84 7c c8 56 27 88 8c 65 a6 3b eb e0 2b 0e e4 2c 27 8d 3a a2 e2 3b 17 d7 f7 98 f6 3e d5 65 34 cc 90 b1 c3 63 ae 96 87 6e 8a 3e fa 73 5f 29 95 df Data Ascii: ==WCun!&wRCSMSSE,R>7k Is\9}3(^1}QGyh442C}xv\|prdK9lai)/4iKz~!G7M4uAYO$VD{H1\_/.:!Pr)P-\|V'e;+,':;>e4cn>s_)
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 45 db 84 4b 29 69 7e c8 7f 94 ff 00 db 28 e2 ae 5d b7 cd d9 8e 9a ff 00 e3 45 34 69 96 a9 2a bc a5 c3 19 3f 21 5f a8 32 ae 57 c8 e8 6c ec 64 31 4f 90 5b e3 81 fe 56 25 6f 7c b1 b2 9e 01 b2 47 9a e6 bd ce f2 b4 0f ba 49 de fb db c3 e2 ad da 8f 37 66 3b 7b bf dd 55 67 09 4b 8a 4f 6e 49 80 5d b9 bf 01 b5 db f8 e5 9f 64 f0 7a 2a a6 d1 e1 56 1a 88 9d f4 9c 8e 60 e0 27 af 9c 82 00 6b 58 5c f3 21 0e 0d ee 3d 4f 7a 42 fc 70 d7 25 2b 9b e7 ef 57 bb c1 59 53 54 78 7a 1f 98 2e 33 47 26 19 70 c1 b8 a2 eb 1d ae df f4 16 54 72 27 20 4b 03 88 05 cd 1a b7 d3 00 41 70 d9 e8 e9 07 6f 3b d7 af 75 f9 cb 9c 8d eb d1 db 5f 76 3f 7a 94 8f 0e 98 b6 05 e0 b7 12 b8 60 9e 1e b1 cb 15 fe 2f 22 be 8b cc 33 44 7b 39 9d 6e f3 00 70 3e 8e 01 e3 63 e0 7b 2d 0e 3e ec 6e e2 25 28 b2 ed 47 Data Ascii: EK)i~(]E4i?!_2Wld1O[V%o\|GI7f;{UgKOnI]dzV`'kX\!=OzBp%+WYSTxz.3G&pTr' KApo;u_v?z`/"3D{9np>c{->n%(G
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 6b 3b 81 f7 7b 23 8a 8f 33 1b 78 58 ef af 47 f3 55 34 71 71 2a 1c a5 c7 b9 ef 30 5d 31 2a 9a 9a 6b 5e 29 89 55 c0 0d 96 c8 ea 90 c8 f1 db 5f 99 14 6c a9 a8 60 68 0d 12 17 83 d5 dd ce e9 23 b0 6f 68 61 ef e1 ec 46 5d b5 ed af 7d 7c 12 9c 65 25 ef 6d e1 3c a3 9a 30 d1 82 f8 6c a4 8e d5 c7 b6 f9 99 f5 8d fa e5 e6 53 bf 2a aa 0e 0d 7c e3 4d 2e 74 2c 23 b0 3a 67 e3 b0 03 6c 7f 95 6e c5 ce 73 11 be 7d df 0a ba 25 28 e9 8f 43 2d 3c 30 78 17 c7 f8 16 91 f5 f7 aa bf af 72 6a c6 74 d4 56 f9 41 82 36 1d 13 14 63 67 a5 bf 3d 1d bb e7 ad 01 ab c7 66 37 31 3c 3d 14 64 5a b1 18 32 76 dd 6f a5 b4 d2 c7 4b 6e 86 3a 7a 78 9a 03 23 8d ba 0d 1a d7 ff 00 8b 5c be f5 20 20 20 20 20 20 20 20 20 d5 67 b6 42 37 fd b9 e3 97 f4 3b a3 ea da d6 f5 74 f6 df 99 11 d6 d7 41 92 75 6e 7a Data Ascii: k;{#3xXGU4qq0]1k^)U_l`h#ohaF]}\|e%m<0lS*\|M.t,#:glns}%(C-<0xrjtVA6cg=f71<=dZ2voKn:zx#\ gB7;tAunz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49838	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	405	OUT	GET /api/public/content/4ef1a859ca4b4ddc94fb3037e36456aa?v=d619a895 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:47 UTC	617	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: image/png Content-Length: 18794 Connection: close CF-Ray: 8a5d6cf21d9ac427-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 456 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icons_Google.png; filename*=utf-8''icons_Google.png ETag: "0x8DBDF506FC258A7" Last-Modified: Tue, 07 Nov 2023 05:14:36 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 125917 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:47 UTC	752	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 2c 62 63 61 42 58 00 00 2c 62 6a 75 6d 62 00 00 00 1e 6a 75 6d 64 63 32 70 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 00 00 00 2c 3c 6a 75 6d 62 00 00 00 47 6a 75 6d 64 63 32 6d 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 75 72 6e 3a 75 75 69 64 3a 61 32 30 65 63 32 64 35 2d 31 62 36 30 2d 34 37 64 62 2d 61 61 30 38 2d 36 36 39 30 65 65 30 35 64 64 34 35 00 00 00 01 a6 6a 75 6d 62 00 00 00 29 6a 75 6d 64 63 32 61 73 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 00 00 00 00 ca 6a 75 6d 62 00 00 00 26 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 63 74 69 6f 6e 73 00 00 00 Data Ascii: PNGIHDRR:W,bcaBX,bjumbjumdc2pa8qc2pa,<jumbGjumdc2ma8qurn:uuid:a20ec2d5-1b60-47db-aa08-6690ee05dd45jumb)jumdc2as8qc2pa.assertionsjumb&jumdcbor8qc2pa.actions
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 36 41 64 6f 62 65 5f 49 6c 6c 75 73 74 72 61 74 6f 72 2f 32 38 2e 30 20 61 64 6f 62 65 5f 63 32 70 61 2f 30 2e 37 2e 36 20 63 32 70 61 2d 72 73 2f 30 2e 32 35 2e 32 74 63 6c 61 69 6d 5f 67 65 6e 65 72 61 74 6f 72 5f 69 6e 66 6f 81 bf 64 6e 61 6d 65 71 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 67 76 65 72 73 69 6f 6e 64 32 38 2e 30 ff 69 73 69 67 6e 61 74 75 72 65 78 19 73 65 6c 66 23 6a 75 6d 62 66 3d 63 32 70 61 2e 73 69 67 6e 61 74 75 72 65 6a 61 73 73 65 72 74 69 6f 6e 73 82 a2 63 75 72 6c 78 27 73 65 6c 66 23 6a 75 6d 62 66 3d 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 2f 63 32 70 61 2e 61 63 74 69 6f 6e 73 64 68 61 73 68 58 20 eb ac 66 e1 6a 83 9f 7c 60 9c e9 39 f5 fe d6 23 41 82 a7 5d 2b c4 92 12 10 46 f4 22 64 d0 2b c1 a2 63 75 72 6c 78 Data Ascii: 6Adobe_Illustrator/28.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_infodnameqAdobe Illustratorgversiond28.0isignaturexself#jumbf=c2pa.signaturejassertionscurlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX fj\|`9#A]+F"d+curlx
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 69 6d 65 53 74 61 6d 70 69 6e 67 43 41 2e 63 72 74 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 78 2b 8c 42 c7 84 10 84 58 94 82 c9 15 fb 96 c2 f4 0b d2 c9 81 b5 f5 af 25 58 c9 23 51 c4 79 0c 47 62 ea 0b b3 d0 65 12 60 0c d4 7e 90 9a 29 f0 fe 6f d8 1c e9 fe 33 2b cf 0e 14 e2 96 3a ad 8b f7 23 c1 e9 16 52 5a e2 e0 70 51 32 14 80 75 a9 8b c5 f1 77 52 44 11 7f 78 3c e3 83 8b b1 f2 49 e9 17 eb 40 34 e7 90 68 cc 56 fb 18 65 5a c5 bd 0b ad e4 13 45 79 e4 af a8 20 3c d5 0f 5f d1 a1 fb 64 9c 3b 19 53 75 04 0b 81 96 e4 75 8b f1 a3 70 29 e9 cc bd ae 26 62 8d 1c 4e 66 a8 8e c9 64 b1 31 48 60 2b 17 8a cf 0a c5 5b a5 db 7b 46 b0 36 13 94 5d 9c c8 c5 ce 22 c6 92 b3 59 22 2d a4 f2 77 d1 98 81 42 7e 3d 53 70 03 61 39 ec 85 b3 7d 66 44 c0 d6 91 df fc da 2f Data Ascii: imeStampingCA.crt0*Hx+BX%X#QyGbe`~)o3+:#RZpQ2uwRDx<I@4hVeZEy <_d;Suup)&bNfd1H`+[{F6]"Y"-wB~=Spa9}fD/
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 33 b4 cd b1 02 03 01 00 01 a3 82 01 5d 30 82 01 59 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 ba 16 d9 6d 4d 85 2f 73 29 76 9a 2f 75 8c 6a 20 8f 9e c8 6f 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ec d7 e3 82 d2 71 5d 64 4c df 2e 67 3f e7 ba 98 ae 1c 0f 4f 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 08 30 77 06 08 2b 06 01 05 05 07 01 01 04 6b 30 69 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 41 06 08 2b 06 01 05 05 07 30 02 86 35 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 2f 44 69 67 69 43 65 72 74 54 72 75 73 74 65 64 52 6f 6f 74 47 34 Data Ascii: 3]0Y0U00UmM/s)v/uj o0U#0q]dL.g?O0U0U%0+0w+k0i0$+0http://ocsp.digicert.com0A+05http://cacerts.digicert.com/DigiCertTrustedRootG4
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: da b0 e4 5d f2 f3 0d 9e 54 d1 da d2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 23 30 21 06 03 55 04 0a 13 1a 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 31 1d 30 1b 06 03 55 04 0b 13 14 41 64 6f 62 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 31 22 30 20 06 03 55 04 03 13 19 41 64 6f 62 65 20 50 72 6f 64 75 63 74 20 53 65 72 76 69 63 65 73 20 47 33 30 1e 17 0d 32 33 30 32 30 31 30 30 30 30 30 30 5a 17 0d 32 34 30 32 30 31 32 33 35 39 35 39 5a 30 81 a1 31 11 30 0f 06 03 55 04 03 0c 08 63 61 69 2d 70 72 6f 64 31 1c 30 1a 06 03 55 04 0b 0c 13 43 6f 6e 74 65 6e 74 20 43 72 65 64 65 6e 74 69 61 6c 73 31 13 30 11 06 03 55 04 0a 0c 0a 41 64 6f 62 65 20 49 6e 63 2e 31 11 30 0f Data Ascii: ]T0*H0u10UUS1#0!UAdobe Systems Incorporated10UAdobe Trust Services1"0 UAdobe Product Services G30230201000000Z240201235959Z010Ucai-prod10UContent Credentials10UAdobe Inc.10
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 0c 20 67 3b 4d 9d 6c 5a e6 a6 0d e9 4d cd 05 a9 14 38 18 bf fc f2 98 d1 35 23 32 e6 d5 3d 4a 84 27 48 21 98 a8 8b 23 7c bf 00 ce 03 c4 1a 25 d7 46 00 01 61 cd 6e 5d e7 1f e3 f7 9a c9 bd ca d8 c3 ec ee 19 d6 4d b5 0a a4 71 c9 23 0c 69 74 dd ef 4c 67 59 35 6a 73 f4 ec 5f ba 8d de 10 b4 25 91 3b c0 08 78 2a 91 a5 e2 fc 50 1a 9c 77 b9 3c 28 67 e9 fa f5 ff 87 0d 17 c8 28 0f 46 ee 3c 0a 60 4b 7c f3 c2 a8 d1 87 1a c7 f0 84 b0 3d f2 67 f0 9a b3 ba b3 1a 2c 33 27 9d cd 7c b4 7c d4 88 cb 57 ef 78 df ea 85 e1 ee fa 02 c5 7f d3 e0 3d e7 14 f9 71 53 7a 26 d9 ca 5c 2d 0d 56 77 8d 36 eb 1d 7c ae 54 86 47 59 06 a5 30 82 06 a1 30 82 04 89 a0 03 02 01 02 02 10 0c a8 b6 54 7b 89 e6 d2 06 89 75 cd 8b 9b 89 e2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 6c 31 0b 30 09 06 Data Ascii: g;MlZM85#2=J'H!#\|%Fan]Mq#itLgY5js_%;xPw<(g(F<`K\|=g,3'\|\|Wx=qSz&\-Vw6\|TGY00T{u0H0l10
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 31 d4 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 71 ce e5 07 8c a6 dc 2d dc c8 e0 3b 65 5e 00 92 81 95 eb 95 20 24 af 9f 69 38 5d c9 7c f1 b8 da a5 4d 00 65 3b 25 c1 18 5c 9e be 59 b7 dc 1b 06 3b 59 83 25 fa 33 bb 22 f2 4f 6f bb 21 5c 56 16 f5 b9 c9 83 15 fb 94 b5 35 e0 a1 31 72 19 9c 2c d6 35 79 ee 88 84 12 76 63 c3 f3 64 c4 54 29 27 79 0a 45 11 3e 0d 0f 04 b1 a3 cf f2 91 fc 3a 1f 1f 1f 86 e2 b3 d3 08 e1 8e 45 8c 5e 62 b7 74 d6 57 22 e6 15 71 bc a7 1c bc 89 3b 30 3e bd 65 37 b0 7d 93 d2 33 ed 16 9e c5 37 7f 46 66 77 b8 60 6d 1a 54 c9 67 1e 1b 47 87 16 97 54 28 af d9 15 68 47 8c 35 42 db ca 1d 0a 73 7c f3 9b 47 9d c2 97 be 22 2d 2b 46 54 52 8f c0 22 d8 45 2a 58 44 5e c9 ea f5 52 fd 7c 56 e0 bc ef 37 66 fa 54 42 8e 72 f2 66 37 72 e1 a7 11 Data Ascii: 10Hq-;e^ $i8]\|Me;%\Y;Y%3"Oo!\V51r,5yvcdT)'yE>:E^btW"q;0>e7}37Ffw`mTgGT(hG5Bs\|G"-+FTR"EXD^R\|V7fTBrf7r
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 a3 60 14 50 02 18 18 18 00 00 00 00 ff ff 1a c5 83 0c 30 32 38 1a 8c c6 c9 10 02 0c 0c 0c 00 00 00 00 ff ff 62 1c e9 01 40 4b c0 c8 e0 e8 c0 c0 c0 20 c0 c0 c0 00 ca 18 fc 50 1a 04 14 a0 98 54 70 00 aa fe 03 03 03 c3 45 28 7d 01 44 ff 67 d8 7f 61 58 05 de 50 01 0c 0c 0c 00 00 00 00 ff ff 1a cd 44 54 00 8c 0c 8e a0 8c e2 00 cd 24 f6 14 64 12 4a c1 05 28 06 65 b0 0b ff 19 f6 1f a0 ad 75 a3 80 81 81 81 01 00 00 00 ff ff 1a cd 44 64 00 46 06 47 05 68 a6 b1 87 d2 03 91 61 88 05 07 a0 19 eb e0 7f 86 fd 1b 06 b1 3b 87 26 60 60 60 00 00 00 00 ff ff Data Ascii: `P`P`P`P`P028b@K PTpE(}DgaXPDT$dJ(euDdFGha;&```

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49839	13.107.246.60	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	464	OUT	GET /layouts/system/VisitorIdentification.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:47 UTC	1189	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: application/x-javascript Content-Length: 3091 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-store ETag: "0b613ca5b8d91:0" Last-Modified: Mon, 17 Jul 2023 11:53:00 GMT Set-Cookie: ARRAffinity=4de739885471e527535718448a3423a087808b04f913e403628a8b15284ec9e2;Path=/;HttpOnly;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.net Set-Cookie: ARRAffinitySameSite=4de739885471e527535718448a3423a087808b04f913e403628a8b15284ec9e2;Path=/;HttpOnly;SameSite=None;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.net Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202247Z-15b94bb6ff9jhgnlnc201sfbps0000000ceg000000007wr9 x-fd-int-roxy-purgeid: 71368145 X-Cache: PRIVATE_NOSTORE Accept-Ranges: bytes
2024-07-19 20:22:47 UTC	3091	IN	Data Raw: ef bb bf 66 75 6e 63 74 69 6f 6e 20 73 75 62 73 63 72 69 62 65 45 76 65 6e 74 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 20 7b 0d 0a 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 3b 0d 0a 20 20 7d 20 65 6c 73 65 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 3b 0d 0a 20 20 7d 0d 0a Data Ascii: function subscribeEvent(event, listener, useCapture) { if (document.addEventListener) { document.addEventListener(event, listener, useCapture); } else if (document.attachEvent) { document.attachEvent(event, listener, useCapture); }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49840	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	640	OUT	GET /api/public/content/40074a2fd2f848cb91f70e474add3d9a?v=ff1a19a9 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:47 UTC	637	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: image/jpeg Content-Length: 21437 Connection: close CF-Ray: 8a5d6cf3c9450f71-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 456 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=ChannelPartner.jpg; filename*=utf-8''ChannelPartner.jpg ETag: "0x8DBF63F65BB7F99" Last-Modified: Wed, 06 Dec 2023 09:40:35 GMT Vary: Accept-Encoding api-supported-versions: 1.0 Cf-Bgj: h2pri ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 129764 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:47 UTC	732	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Condition in IEC6196
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 Data Ascii: l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'Pq
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 00 00 02 05 01 03 04 06 07 ff c4 00 3c 11 01 00 01 02 03 03 08 07 07 04 03 01 01 00 00 00 00 02 01 03 04 05 12 11 21 22 06 13 31 32 41 51 61 71 33 42 81 91 a1 c1 f0 07 23 34 52 62 d1 e1 14 24 72 b1 a2 c2 f1 92 43 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 da 9a 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 0e 39 24 6c 51 b9 f2 Data Ascii: <!"12AQaq3B#4Rb$rC?9$lQ
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 0c d4 b3 b6 46 bd bf 30 41 20 8f de 3b 2a 69 46 51 96 99 24 f7 96 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 06 0f cd 35 d3 db 38 a7 28 ac a2 90 c5 53 49 6e 92 68 64 0d 04 b1 ed ee d3 a3 db b1 0a 76 a3 aa e4 58 ab 47 b3 72 5e 07 cc 13 3f fa 67 b2 49 8d 64 75 27 6f cb f1 88 07 44 f2 1d 03 25 65 09 21 8f 24 97 3d cf 84 b1 c4 fe a9 5e bb 98 bd 6b d0 cb 6d 3b ab f2 aa 2f 07 33 f0 ff 00 90 e3 b6 67 e4 58 cc f4 39 a6 20 3b fd 7b 60 79 a8 8a 11 a0 75 51 1e 84 94 ee 00 8d b6 46 8d 1e db 2b 65 ac 55 b9 4b 4c b7 57 ba a2 31 5d 60 80 80 80 80 80 80 80 80 80 83 d6 c6 71 5b ce 67 78 82 d3 89 5a eb af 17 2a 8f f2 54 b4 50 3a 67 91 f1 3a 00 e8 0f 89 3d 87 c5 6b 9c e3 08 ea 94 Data Ascii: F0A ;iFQ$58(SInhdvXGr^?gIdu'oD%e!$=^km;/3gX9 ;{`yuQF+eUKLW1]`q[gxZTP:g:=k
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 8e 59 b5 0a ab 7d ba db 8e 60 76 ff 00 26 bf 3c cb 2a ad 11 d2 cb 34 a7 a4 fd 59 44 c6 02 63 68 1a 60 6c 64 b8 f5 6c 97 13 fa 68 d7 9c b1 2e b6 d9 fa b4 db f1 af d7 f1 9e 19 79 2c 6f 81 6c fb 0e cf f2 fb a5 6e 0d 66 fa a2 bb cb 69 af a7 8a df 1d 2d 35 0c 3f a7 6d 35 34 41 9d 9e e0 d6 b9 ef 79 f7 9c 5d f0 00 31 95 b9 9d 8b d6 b4 c6 e4 b6 fd 6f 6e b1 28 cb aa bc aa a9 d2 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 c6 79 2b f0 fb 21 fe 5d 37 f8 4a 94 3a cc 55 fc df af 7c 88 80 80 80 83 27 c0 b9 37 29 e2 fb af d6 38 1d ee ba cf 52 fe d2 88 64 dc 73 b4 6f dd 96 22 0b 24 6f 7f 47 02 16 ab b6 2d dd 8e 9b 91 da 24 c1 98 71 6f 30 bb cb e4 5b 47 f4 69 92 cd fe b0 63 74 c6 Data Ascii: Y}`v&<*4YDch`ldlh.y,olnfi-5?m54Ay]1on( y+!]7J:U\|'7)8Rdso"$oG-$qo0[Gict
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 5a b5 79 27 bf 04 9c bf 63 e5 5c 8e a0 e3 90 dc 29 9f 6e 80 35 f6 f7 44 21 a3 b3 d3 91 2b 69 e9 69 d8 d2 5a 4f 44 65 cf 93 40 bc eb d0 06 b1 9c 19 8e 16 e5 8d 3a bf f7 c5 b6 c4 f5 2e aa ab 74 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 3c 7c 64 5d 1b 67 88 64 a4 3a e1 e6 cd d6 47 4e ba 3c c7 79 7f 77 b7 dc e9 ff 00 f7 dd 07 b0 80 80 80 80 80 83 19 e4 af c3 ec 87 f9 74 df e1 2a 50 eb 31 57 f3 7e bd f2 22 02 02 02 02 02 0b 69 e0 12 a6 0a 36 f2 bd 45 7d ad d7 ca 68 31 37 c9 2d ac 34 93 5c d0 24 26 0d 00 7e ff 00 dc f4 3f 79 54 66 91 d5 cd f1 6c de 8c ba ac cf 90 78 3b 28 e4 6c aa 93 26 e6 4c 9e df 6a 82 9a 98 4f 93 53 c4 cd 43 8b 51 97 34 d3 d2 46 76 58 65 73 1e 48 8c 77 6f de 77 57 50 Data Ascii: Zy'c\)n5D!+iiZODe@:.t<\|d]gd:GN<ywt*P1W~"i6E}h17-4\$&~?yTflx;(l&LjOSCQ4FvXesHwowWP
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 63 78 05 ae aa cd 8b c3 49 72 8b c9 a8 65 4d 4b dc ce a6 bb b3 ea 24 7b 4e c1 d7 76 b8 14 19 22 02 02 02 02 02 0c 67 92 bf 0f b2 1f e5 d3 7f 84 a9 43 ac c5 5f cd fa f7 c8 88 08 08 08 08 08 2d 87 80 d7 da 62 a6 e5 c7 e5 b1 d4 4d 63 66 21 23 ae 51 d3 76 91 f4 c1 b2 19 1a c3 b1 ef 16 ec 0e fe aa a3 32 d5 aa ce 9e 9d a8 cb aa ca 39 17 8c b9 0f 9b f2 6c 5a 5b c5 25 b7 13 c7 24 a0 2f b7 da 0c bd 2c c6 2d 2d 7b 5a c9 aa 23 d0 e9 32 0e e0 9f 79 e5 84 7b a1 ba 6c ec e2 30 f8 68 cb 4e fa f7 f7 d5 c9 28 ca 4f bc ae c3 77 cc f8 ac e3 3e 1f ed f2 53 f1 d5 b6 e9 15 33 6a aa 5d e5 56 66 57 27 3f 4e 7b 1a 40 2f 6b 35 d7 d1 d9 ad 6b 3a 8f dd d3 31 6a 71 85 ee 73 11 d7 d9 ec 8d 09 47 54 74 c7 a1 e8 e1 98 65 57 1b d0 dc f0 ae 22 9e Data Ascii: cxIreMK${Nv"gC_-bMcf!#Qv29lZ[%$/,--{Z#2y{l0hN(Ow>S3j]VfW'?N{@/k5k:1jqsGTteW"
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: 01 01 01 01 01 01 01 01 01 01 01 01 01 01 04 59 cc 5e 24 b0 0e 0c b4 be b7 90 32 0a 1a 37 74 9f 26 98 49 d7 2c ce 1b ec c6 37 6e 77 71 a3 a0 75 f1 5b ac 61 ae 5d 96 9b 71 63 6b 5b 9e 22 3d a9 f9 5e 71 f4 8b 4f 0b d2 bb 17 b4 3b a9 8e b8 d4 b1 af aa 95 a7 b7 ba ce ec 66 c1 ef be b3 f1 1d 25 5f 61 72 68 c7 8a f6 f6 35 3c af 0f 1e d4 0c df 8d 1d 49 6a e5 38 3e d7 d8 63 21 a6 a5 ad 6c 75 b1 33 e7 f0 64 9a fd fd 2e 27 bb 9e 54 f1 59 45 bb 9c 56 f7 57 e0 6a 6c af 85 7c 53 f1 d7 3c db 05 46 0b 7f a3 92 a5 ac 0e 9e 86 67 f9 73 c1 bf db 8d da 70 1b ed b2 34 4f a1 2b cf df c2 5e b1 2f bc 8b 3b 53 02 d0 c8 80 80 80 83 a5 76 ba 53 59 2d 95 97 1b a4 ad a7 a2 a0 81 f5 15 12 90 48 8e 36 34 b9 ce 20 0d f6 00 9e c8 3b a8 3c 9c 87 19 b5 65 76 d9 ad f9 25 be 92 e3 47 50 c2 Data Ascii: Y^$27t&I,7nwqu[a]qck["=^qO;f%_arh5<Ij8>c!lu3d.'TYEVWjl\|S<Fgsp4O+^/;SvSY-H64 ;<ev%GP
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: b7 b1 49 9e d7 f2 5c 96 cc 7b 82 ea 2d f4 d5 4e b6 b1 d7 4c 8a 92 97 cb a1 c3 ad d2 0f f3 2a 36 16 b4 f9 e4 0d 39 fa 0f 7b bd 3a 43 40 86 12 b1 1b 5a ae 62 3b fa 3b 65 5e fa fd 7f 2d 5a ba af 6e 8a ff 00 c6 bc 0d 8d d1 d0 e7 f7 0a 5c 5a d4 25 8e 5a 4b 25 54 06 aa e5 76 a8 f5 fa ca ba 26 35 d2 11 d4 09 8d 8f 01 ac e9 05 c3 ac 31 91 e8 9c 71 18 99 6a b7 be bd fd 94 f0 a3 6c 20 b5 1e 1f f1 8e 2c c8 29 9d 98 60 d7 2a 1c b2 ed 7b 1b ab bc cd 2b 65 a8 9c e9 a4 b1 c7 f5 5a 34 3f 44 d0 d6 33 e0 c6 fa 2a fb f2 bd 1f bb b9 bb 67 63 65 21 14 f2 c6 08 da 1a c0 03 40 d0 03 b0 01 73 36 3e d0 10 61 b9 5c d2 47 9c e0 ec 8a 47 b5 92 d6 56 09 18 1c 40 70 14 92 11 b1 f1 d1 41 99 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: I\{-NL69{:C@Zb;;e^-Zn\Z%ZK%Tv&51qjl ,)`{+eZ4?D3*gce!@s6>a\GGV@pA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49845	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	640	OUT	GET /api/public/content/a63e63b6df7443898bc7a682d78133c3?v=2e7b068c HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:47 UTC	623	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: image/png Content-Length: 12490 Connection: close CF-Ray: 8a5d6cf3fec95e70-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 456 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_BCircle_AI.png; filename*=utf-8''icon_BCircle_AI.png ETag: "0x8DC65F4E9BB5E90" Last-Modified: Fri, 26 Apr 2024 13:29:34 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 138814 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:47 UTC	746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 0c 49 69 43 43 50 69 63 63 00 00 48 89 ad 57 77 54 53 e9 d3 9e 5b 92 90 90 10 20 10 01 29 a1 37 41 44 4a 00 29 21 74 90 de 6d 84 24 84 50 42 0c 09 2a f6 b2 ac 82 6b 17 0b d8 d0 55 11 c5 b6 02 b2 56 c4 45 57 16 c1 ee 5a 16 75 51 58 59 17 75 b1 2b bf 93 02 ea ee fe f3 9d f3 cd 39 f7 be 73 9e 99 77 9e 99 79 6f ee cd 00 d0 cf f0 a4 d2 02 54 17 a0 50 22 97 25 86 07 b3 d2 33 32 59 a4 5e c0 81 00 7a e0 01 1e 3c 7e b1 94 13 1f 1f 03 00 30 bc 7e 2d af 6e 00 a2 5c af ba 28 63 c1 ff 4d f4 04 c2 62 3e 00 12 0f 00 d9 82 62 7e 21 00 f2 03 00 5e cd 97 ca e4 00 44 25 6e 3d 43 2e 55 ea 72 00 30 90 a5 67 64 02 10 97 2a 75 91 5a af 56 ea d9 6a fd 90 ca 27 39 91 0b 40 6c Data Ascii: PNGIHDRddpTIiCCPiccHWwTS[ )7ADJ)!tm$PBkUVEWZuQXYu+9swyoTP"%32Y^z<~0~-n\(cMb>b~!^D%n=C.Ur0gduZVj'9@l
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: f4 61 4f 62 28 31 84 18 41 0c 23 3a e2 26 78 00 ee 87 c7 e0 01 78 10 1e 80 bb e3 6c dc 67 b8 8e cf fe 84 c7 84 2e c2 43 c2 75 42 37 e1 f6 34 f1 a2 61 c6 61 de 89 d0 0d 0a 4d 0f 85 90 fd 65 2f 70 3b dc 1d f7 c4 83 71 7f 3c 40 19 19 67 e2 26 e0 82 7b e0 6c 9c 83 07 e2 7e b8 27 ee 03 5c 4d de ca ae 7c dd c3 7f 54 f0 c5 69 68 fc c8 6e 64 94 3c 8a 1c 44 76 f8 e7 4e 1d 27 1d cf 91 28 ca 5e 7f d9 1f 75 ae d9 23 fd 1e ce e0 df fc 9f 2d 62 10 40 11 44 ff d3 13 5b 8a 1d c5 da b0 b3 d8 45 ec 04 d6 08 2c ec 34 d6 84 b5 63 27 95 fa c8 d3 a5 3c 5d d1 08 5b a2 2a 9f 7c 28 00 f1 bf f8 86 4f 56 d9 c9 62 b7 3a b7 3e b7 0f 6a 9b 5c 38 53 f9 8e 06 6e 91 74 96 4c 2c ca 95 b3 38 52 69 81 90 15 29 e1 bb 8e 61 b9 bb b9 7b 00 28 bf 2f ea d7 d7 cb 04 d5 77 03 61 b6 7f c6 16 ff 06 Data Ascii: aOb(1A#:&xxlg.CuB74aaMe/p;q<@g&{l~'\M\|Tihnd<DvN'(^u#-b@D[E,4c'<][*\|(OVb:>j\8SntL,8Ri)a{(/wa
2024-07-19 20:22:47 UTC	1272	IN	Data Raw: 21 58 48 78 48 79 48 47 a8 7e 68 4a e8 e6 d0 fb 61 56 61 a2 b0 ba b0 81 70 cf f0 d9 e1 67 22 08 11 d1 11 ab 23 6e 46 9a 45 f2 23 6b 23 07 a2 bc a3 e6 46 b5 46 53 a3 93 a2 37 47 3f 8c 71 8a 91 c5 34 4f 44 27 46 4d 5c 3b f1 6e ac 6d ac 24 b6 31 0e e2 22 e3 d6 c6 dd 8b b7 8f 9f 1e ff 63 02 31 21 3e a1 2a e1 71 e2 b8 c4 39 89 6d 49 8c a4 69 49 fb 92 5e 25 07 27 af 4c be 93 e2 90 a2 48 69 49 a5 a7 4e 4e ad 4d 7d 9d 16 92 b6 26 ad 3b 7d 6c fa dc f4 4b 19 26 19 e2 8c a6 4c 52 66 6a e6 ee cc c1 49 a1 93 d6 4f ea 99 ec 39 b9 6c f2 8d 29 f6 53 66 4e b9 38 d5 64 6a c1 d4 93 d3 e8 d3 78 d3 8e 66 11 b2 d2 b2 f6 65 7d e0 c5 f1 6a 78 83 d9 91 d9 d5 d9 03 7c 2e 7f 03 ff a9 20 48 b0 4e d0 27 f4 17 ae 11 3e c9 f1 cf 59 93 d3 2b f2 17 ad 15 f5 e5 06 e6 56 e6 f6 8b b9 e2 cd Data Ascii: !XHxHyHG~hJaVapg"#nFE#k#FFS7G?q4OD'FM\;nm$1"c1!>*q9mIiI^%'LHiINNM}&;}lK&LRfjIO9l)SfN8djxfe}jx\|. HN'>Y+V
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: d0 24 21 15 ab 49 57 1c 75 06 84 fb a0 12 bb a2 52 9b 62 3b 8d 80 0c 20 e5 08 03 09 f6 f3 41 15 60 91 8f 5d b0 0b ec b5 a8 c0 17 38 79 4b 70 4a 77 a1 7c 61 9c 10 27 13 9c 40 82 28 0b 1c 41 9a bb 6d 53 2d 54 42 57 48 18 88 d5 78 30 b6 3d 10 ac b6 55 df 97 0d 7c d0 26 76 dc 0f a3 b7 be e5 be 6a 80 3f ea ff b6 7c 7f 05 2a fc 11 76 ee c7 28 6b 09 4e d1 2e 08 0a 3e e4 9a 65 50 73 fc b9 46 1d 7f 22 68 64 c9 a2 c3 e0 53 d0 a0 2d 56 da e5 38 09 57 a2 12 ba e1 d8 d9 fa 92 86 08 c1 dc 97 b0 8e 9e b3 3a c2 fc 9d 83 df f5 58 ee 6f f5 3c dc 3f 2d 07 a5 72 71 2a 96 40 d1 54 9c bd 1f 83 53 08 21 b9 9f bf 8a e8 fa f7 df 25 82 44 71 84 4a 10 42 5c 88 6a 30 1a c7 ba 04 48 87 b0 20 4d e6 13 ae ae 4f 8e 19 78 88 d6 54 01 51 25 72 47 b5 05 bb fc 35 d4 be 97 71 0a 36 98 eb 7a Data Ascii: $!IWuRb; A`]8yKpJw\|a'@(AmS-TBWHx0=U\|&vj?\|v(kN.>ePsF"hdS-V8W:Xo<?-rq@TS!%DqJB\j0H MOxTQ%rG5q6z
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: c4 08 70 34 21 bb 76 6d c7 ef ef b8 11 90 7b c6 5d 74 29 37 ee 95 82 95 71 b7 29 25 ab 5d 74 1d 9a 3f 75 c1 45 f6 04 1c 3b 35 1e fe 86 41 48 89 46 56 bf fe df e3 c6 1b ae 60 c0 80 de 34 6e dc 80 a4 a4 44 8d a0 b2 b2 72 0e 1c 28 66 e5 ca b5 bc f5 f6 5c 66 ce 9c 4f 49 f1 1e 2c 5f 96 46 dc c1 bb d6 62 ef de 7c 2a 2a 2a 49 4e 4e aa 76 c5 d1 39 25 1f 45 45 25 1a 1f 06 c9 e5 9c 7e 7a 57 1a 36 ca a2 b2 32 48 42 82 a4 6a aa d2 4b e7 0c ec 4b 20 21 83 60 65 10 25 56 5b 7c b9 c4 44 38 1c 9f 14 77 fc 02 a7 e4 45 17 ff a1 23 10 c4 63 a5 46 d7 80 ff 6a 08 d5 db aa 12 64 d8 e1 03 74 ee dc 83 87 1f fe 1d 97 5d 76 41 44 54 44 43 66 66 1a cd 9a 35 a2 4b 97 b6 8c 1c 39 8c 6f bf dd ca 9d 77 3d c9 eb d3 df c4 f2 25 eb 35 79 48 d2 bf b7 fc 14 e4 ef e5 df ff 7e 8f 5f fd 6a 64 Data Ascii: p4!vm{]t)7q)%]t?uE;5AHFV`4nDr(f\fOI,_Fb\|***INNv9%EE%~zW62HBjKK !`e%V[\|D8wE#cFjdt]vADTDCff5K9ow=%5yH~_jd
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: ec b6 12 99 39 6b 11 bb 73 f7 51 56 5a ce ae 5d 12 b3 6a ae f7 a3 7d fc c4 54 6d 62 2b 04 a1 46 a8 8c 61 38 f9 6b c1 16 4c 79 ca bc 41 3f 68 b5 00 2a 33 5c df a3 ce 54 d1 48 b3 43 a4 a6 a5 b1 ec f3 e9 3a be e4 29 73 51 dc 5d bb 0e d3 ca b3 a6 a8 89 fe ed 87 1f be c4 90 21 e7 44 7e 17 0d de 67 77 4e fc 0b 93 1e 7a 12 cb 97 66 14 bb b6 ce 85 c0 15 51 a9 1a 13 bb aa 02 31 52 c4 e1 b3 dc 6b 52 3a e6 3b ea e0 a7 be 7f 38 1c ef 0c 8b 71 2b 94 35 1b 7b dd c5 72 26 45 02 88 ee ac fd 67 81 9d e1 ae a8 1e 21 4f 47 3b 5d 0d 1a 64 9a bf 5c c4 6f db 96 43 69 99 20 ec e0 d8 94 76 e8 42 f9 8c b8 62 b8 26 86 70 99 f1 41 8c 99 5c 53 34 59 7e 33 86 71 3a 2b b9 63 c2 4d fc f6 ff 8d a6 b8 b8 54 fb 14 72 cb ea 7a c4 7c d7 12 df c6 b6 49 4f 4f 63 d2 43 53 78 e2 2f 93 f1 07 b2 Data Ascii: 9ksQVZ]j}Tmb+Fa8kLyA?h*3\THC:)sQ]!D~gwNzfQ1RkR:;8q+5{r&Eg!OG;]d\oCi vBb&pA\S4Y~3q:+cMTrz\|IOOcCSx/
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: b8 c7 d2 e5 42 35 c1 52 69 cc 9e 35 97 4f 3e 59 4e f3 e6 cd f4 da 24 1a 2d 8c e5 f3 a7 10 0e 49 be 45 a4 4a 1a 76 b8 40 07 46 25 48 19 9d 7f a9 3b 58 4d fc 38 64 a0 74 40 b1 6e 3f 75 73 1e cd 9b b7 e6 bc 73 cf 8a 7c e6 71 c0 bd f7 3e cd f6 6d 1b 08 24 34 20 1c 0a 53 5a 5a ca 9a af 56 b1 e6 2b 2f 06 25 ce 68 75 e7 f1 f8 83 d1 6f d1 ba a5 0a c2 5a bf 15 1e 28 e4 40 c1 5e 2d 55 c4 aa 12 6f 5f 88 71 7a ef 5e dc 78 e3 48 3a 75 6a a3 c5 f2 b3 cf 4c e3 8b 2f 96 61 f9 52 0e 31 de 11 26 22 e0 d0 42 b6 86 08 71 b7 b2 fd e8 9d 42 cf c2 e9 de a3 13 ed db b7 72 4d 4e f3 f3 a5 4b 57 31 6d da fb ba 5a 44 4c 45 01 cb 17 c0 b2 aa 08 70 c4 9a ab e3 06 6e 63 06 2d de 8c 48 f5 52 c7 46 f4 26 e0 b3 24 8b 68 d6 1c 0a 96 70 fe f9 83 78 e7 9d 67 75 7a c0 d3 95 57 8e b8 90 1f 5f Data Ascii: B5Ri5O>YN$-IEJv@F%H;XM8dt@n?uss\|q>m$4 SZZV+/%huoZ(@^-Uo_qz^xH:ujL/aR1&"BqBrMNKW1mZDLEpnc-HRF&$hpxguzW_
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: c5 ca 6f 78 e8 a1 17 e8 75 fa a5 0c 19 3a 86 19 ef 2e 38 8a d3 b1 55 8e d9 e1 a2 bd e2 79 47 8f e3 15 f4 b5 6e dd 86 c1 83 7f c0 a0 41 83 e8 dd fb 2c 1e 7b f4 4e 2e 1c 3a 30 52 f1 e2 65 3d 27 dc 71 23 3d 7a f6 d2 55 28 f1 37 30 8c 09 0e 3b 37 7a 45 0e 5f 81 92 76 ad 31 c9 07 53 bb 9b c9 0b cf ff 83 2e 5d da f3 bb db 7f 11 71 9c bc 5c 84 14 52 4b 11 c3 ce 1d 5b ab e5 10 34 ab ab 64 36 6f d9 c1 80 01 23 09 06 0f e0 d8 8a d5 5f 39 cc 9d 33 97 d7 5f 7f 9e 11 23 86 46 6c fe 83 41 91 b3 7b 9f 3e dc 53 58 28 27 b4 aa 23 4b ee 23 8e 5d de 9e fd 91 50 88 80 88 27 28 64 f4 e8 9f 70 ef 9f c6 e9 f0 47 74 0a 37 9a c8 a2 5b 24 22 71 fe f9 fd f9 7a cd 72 7c 56 ac b1 aa 5a c1 98 ab 3a 74 6c ef f0 e2 ce 2b 22 ab 8b 11 44 f7 2a 2b 85 3b 7e 77 3f bb 73 f6 f1 e8 a3 b7 47 2d Data Ascii: oxu:.8UyGnA,{N.:0Re='q#=zU(70;7zE_v1S.]q\RK[4d6o#_93_#FlA{>SX('#K#]P'(dpGt7[$"qzr\|VZ:tl+"D*+;~w?sG-
2024-07-19 20:22:47 UTC	1369	IN	Data Raw: b0 d1 51 60 c3 65 b6 ee 51 22 a0 a3 c6 ae b1 68 be 97 c8 8c 77 e6 b1 6a d5 3a 3d 56 9b 36 2d 74 25 bc 54 d9 df 78 e3 08 16 2e 7a 95 81 df 3f 47 73 ca a1 cc e6 63 00 6e e9 4f e9 df 3c ac d5 3c a7 2e 81 68 d1 2d af 40 f2 58 70 b2 63 b5 b6 8c 62 f4 11 0c 96 30 71 e2 23 2c 5c f0 4f 2d d7 4d 7c c8 58 36 fd fb f7 e2 cd 37 9f 64 d3 a6 ed 6c d9 b2 4b 9b ca 89 89 09 1a 59 42 08 af f5 85 21 a2 38 97 4a 9b 9f df 7c b3 5e 87 c1 3d 05 ed 1d f8 c9 c8 cc a4 63 47 f3 c8 2a f1 37 a4 ce 57 b8 d4 71 92 74 bb a5 7d fb f6 31 7c f8 38 fe f8 c7 71 0c 1c d8 87 ec ec 4c 9d 1b 37 fd b5 52 b8 65 fc b5 7c b2 78 79 24 44 73 8c cf 81 9a fc 93 63 bf 05 fb bc 28 49 ad 9d 1a 8c a8 52 9d a6 40 c2 8d f5 6d ad 61 3a 00 15 32 6a d4 08 a6 4e 7d 50 3b 87 de 19 71 cf e9 aa 2d 50 e7 44 05 27 bd Data Ascii: Q`eQ"hwj:=V6-t%Tx.z?GscnO<<.h-@Xpcb0q#,\O-M\|X67dlKYB!8J\|^=cG*7Wqt}1\|8qL7Re\|xy$Dsc(IR@ma:2jN}P;q-PD'
2024-07-19 20:22:47 UTC	889	IN	Data Raw: 28 db 7b 24 62 08 f8 ea 36 78 68 a5 79 1a 99 75 be 7b 0e ec a4 12 5d 75 85 48 21 5d 94 f5 15 47 a5 66 41 e0 00 4e d1 15 b0 67 b5 8b eb 23 2a a5 3a 9a b1 d2 8b b1 64 21 64 b6 45 59 fd c0 a9 3c d9 1e 5d 71 12 80 6d 8a a2 02 52 c7 3e 12 b6 cd ad f2 eb 8e 0c 75 44 a6 6c 25 91 b9 c5 73 50 99 bd c0 ea e1 3e 8e f4 94 e6 94 38 82 eb fc 05 2c 9c a2 df c0 d6 57 eb 42 8c 7a 3c a5 2d 54 09 25 ef a1 32 bf 07 56 07 13 1c d3 7c 7f 0a eb 94 7a 83 7b ec cb 2f c4 98 08 db fe 62 a2 b8 da 2a 3d 6a 88 45 dc 98 d2 12 82 e5 50 fc 26 64 76 45 59 3d bf 0b 3a a5 1e e0 3e 7f 5d a2 e8 45 e3 0c 31 62 cb ba c6 2a ff 5d cb 4b 38 a5 78 3a 4a 8e e2 fa 06 ba 91 e1 53 de 24 ae 23 b8 7e 59 a0 00 a7 f0 67 b0 fd ef 6e 57 04 21 46 9d ad 84 fa 28 64 b7 c8 55 2b fa 0f 20 dd 46 f9 7f 10 35 87 ff Data Ascii: ({$b6xhyu{]uH!]GfANg#:d!dEY<]qmR>uDl%sP>8,WBz<-T%2V\|z{/b=jEP&dvEY=:>]E1b*]K8x:JS$#~YgnW!F(dU+ F5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49844	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	681	OUT	GET /layouts/system/VisitorIdentificationCSS.aspx?tstamp=1721420566186 HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:47 UTC	1057	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: text/css; charset=utf-8 Content-Length: 18 Connection: close Cache-Control: no-store, no-cache Expires: -1 Pragma: no-cache Set-Cookie: ARRAffinity=d45f3e41a57738967561c580e540208a1117a87753342792901a31a4fc49e688;Path=/;HttpOnly;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.net Set-Cookie: ARRAffinitySameSite=d45f3e41a57738967561c580e540208a1117a87753342792901a31a4fc49e688;Path=/;HttpOnly;SameSite=None;Secure;Domain=mc-7031c099-5948-40b8-8d4c-4177-headless.azurewebsites.net Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202247Z-15b94bb6ff92swstpkghazzvcg0000000eng000000001evs x-fd-int-roxy-purgeid: 0 X-Cache: PRIVATE_NOSTORE Accept-Ranges: bytes
2024-07-19 20:22:47 UTC	18	IN	Data Raw: 0d 0a 2e 73 63 5f 43 6f 6e 74 61 63 74 20 7b 0d 0a 7d Data Ascii: .sc_Contact {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49843	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	705	OUT	GET /dist/fonts/open-sans-v18-latin-600.woff2 HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mimecast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:47 UTC	733	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: font/woff2 Content-Length: 14880 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc8651267520" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202247Z-15b94bb6ff9dq4kpvdrfc2b4440000000e2g00000000rtmk x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:47 UTC	14880	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3a 20 00 11 00 00 00 00 6e a8 00 00 39 be 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 16 1b 10 1c 74 06 60 00 82 0c 08 81 26 09 8f 34 11 0c 0a 81 af 6c 81 97 5b 0b 83 4e 00 01 36 02 24 03 87 10 04 20 05 83 44 07 84 78 0c 82 18 1b a4 5f 25 ec 16 fc bb 5b 89 a8 94 69 80 12 45 b0 71 80 84 cd 17 07 ff ff 3d 41 8a 1c a5 1d 97 76 c6 c3 0b 27 55 72 d2 96 35 3d a7 e5 0e 38 1c 1d 4a a5 0e e0 75 56 b8 68 9a 48 1f 15 fa f4 16 3f 76 70 c1 3d c6 6e e7 23 02 5a 36 19 b1 5b ce 2b c1 16 ac ca df 64 59 1d ef b1 15 11 0c 7e 9a 38 81 ad 2e 9d bc 11 79 f4 af c7 59 e5 a7 37 e3 7f 65 4f 98 91 f1 2f 67 bb 23 34 39 c5 ce c3 93 7f 4f 9e 7b 67 e6 bd 85 51 ed 26 e9 c8 2a 2e 61 55 60 09 16 55 4a b8 85 55 49 7f 8e 74 ea dd Data Ascii: wOF2: n9t`&4l[N6$ Dx_%[iEq=Av'Ur5=8JuVhH?vp=n#Z6[+dY~8.yY7eO/g#49O{gQ&*.aU`UJUIt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49841	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	694	OUT	GET /dist/fonts/fa-solid-900.woff2 HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mimecast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:47 UTC	734	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: font/woff2 Content-Length: 156400 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc8651242df0" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202247Z-15b94bb6ff9nrw2l8np4hh7eq40000000c9000000000bf3t x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:47 UTC	15650	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 62 f0 00 0a 00 00 00 06 1c 39 00 02 62 a5 03 05 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 ab 44 00 81 91 2a ca 96 c6 1c cb ab 48 05 87 6d 07 20 25 1c 0e 93 87 b2 fb 00 00 aa c0 79 00 00 d8 aa 9f 87 11 29 9a 3d 3c 45 e4 ac d7 03 a0 aa aa aa aa aa 9a 97 10 70 5c db f6 aa 0a 00 20 f8 d1 4f 7e f6 8b 5f fd e6 77 7f f0 47 7f f2 67 7f f1 57 7f f3 77 ff f0 4f ff f2 6f ff f1 5f ff f3 7f ff 29 30 18 77 ff 40 98 96 ed b8 dc 1e af cf 6f f8 8f 5f be 3b 77 7e 7e 4a dd 84 d6 1e 5d 63 fb 44 d1 55 95 a0 f0 51 d8 a1 75 25 51 f1 cf 41 37 02 61 53 77 7f 19 0b 6d e9 48 77 06 60 e9 e5 9b 0d 00 5c b0 02 66 87 c8 d8 06 81 5a a7 4b 99 1a 00 4c 7c 2e fa 13 a5 4f 48 4d 37 3d 70 26 c7 47 93 e8 c8 2b 21 Data Ascii: wOF2b9b6$ `D*Hm %y)=<Ep\ O~_wGgWwOo_)0w@o_;w~~J]cDUQu%QA7aSwmHw`\fZKL\|.OHM7=p&G+!
2024-07-19 20:22:47 UTC	16384	IN	Data Raw: e5 4d 25 2a 89 51 ef 8c 41 55 56 73 7a 49 3f ee db 82 64 d4 60 23 d5 be 9e e3 8b 1a 3b 3a 3a cb 87 3a cb 6d 1a a7 de ba 57 e7 70 d2 28 2a c7 cf 55 4a 27 c5 7e 15 60 f7 1c a3 90 51 24 05 12 d1 a0 4c c3 1a 82 f4 fb ed 0e 22 ae 70 af a1 a7 37 37 08 ae 20 62 a7 dd 5f bd 7d 15 7d 1f 57 c9 4f 65 8c 9e ef 74 66 7c ae de 89 19 95 23 57 08 77 24 1d 27 c6 f3 3f 8c 31 fb ce a5 20 5e a6 6e bf 59 cb 71 b0 f4 ce 0b d8 69 f7 df 81 48 7a c5 e9 cd 0d 42 36 36 4f 17 3d 82 ef ec b7 3b 58 1f a1 90 d1 1a 2f 7c 44 bf e0 6b 91 14 38 42 8e f1 4d a8 67 18 86 c1 88 b1 51 10 86 28 d3 0f f1 1b 2f 11 e6 03 95 3c 9f fa 85 61 fb b4 68 75 45 7a 42 bf d3 91 e5 28 65 b1 07 0b af ea a7 bb fe e2 9e bf 18 40 b0 a4 ad d1 eb 97 d5 01 70 00 e6 33 32 c6 09 6c c2 00 ce c0 b3 e1 0e 78 19 7c 1f 3c Data Ascii: M%QAUVszI?d`#;:::mWp(UJ'~`Q$L"p77 b_}}WOetf\|#Ww$'?1 ^nYqiHzB66O=;X/\|Dk8BMgQ(/<ahuEzB(e@p32lx\|<
2024-07-19 20:22:47 UTC	16384	IN	Data Raw: 11 5a ad 79 13 4e d4 30 5b 81 92 6a f4 df 33 dd 60 e1 69 ab 27 8f 5c 1f 10 6b 2c b2 50 59 71 de c2 83 b3 c1 e0 78 d4 8e a3 8f 1f 4e e7 2d b4 30 6a 84 59 47 9b 6c 21 6e 98 0c 1c 93 53 c5 22 ec 50 b8 75 bc 2f 8c 66 a0 74 3a 70 ca ad d5 6a d4 5f 5c 93 86 44 c4 b8 b4 3c e0 06 84 99 d1 56 e1 ef 67 cf 49 bc 9c 28 8a e7 08 97 bd c6 31 19 08 35 a2 0c ef 72 e0 1a 6a f5 7e 38 7e af c7 0b e8 08 72 ae b6 b5 83 c0 53 22 1f 13 db 92 66 4c 4c 96 e1 94 49 3c 8f a0 af c9 98 c9 4d 93 26 98 7a 05 7b 2a 1d c0 15 20 a1 18 b4 5b cd 5a 4b 61 83 3a bd a6 14 3c 35 fe b9 d3 50 0e fc 22 1b 0e 50 41 e9 40 e1 75 9c 52 e1 e7 59 8f 8c ad e1 0f 44 47 fe 95 f5 b1 28 6e 1d 2e 75 8a 83 3a 47 fb d5 09 ad 87 1e 45 ee d2 a8 de cd 98 99 4d 95 a8 f1 78 da 4e 00 ac bc 69 86 e4 4b aa a6 6d 66 de Data Ascii: ZyN0[j3`i'\k,PYqxN-0jYGl!nS"Pu/ft:pj_\D<VgI(15rj~8~rS"fLLI<M&z{* [ZKa:<5P"PA@uRYDG(n.u:GEMxNiKmf
2024-07-19 20:22:48 UTC	16384	IN	Data Raw: ca df 8f c3 1b 52 71 65 ae 48 ee 88 04 cd ea 8f e4 0e 48 db cc 7e 49 9c 32 da da 81 4e a2 9b f8 02 80 06 a6 32 97 62 da 4e 49 60 76 12 c6 f7 31 07 81 95 0e 1f e8 5c 31 94 0d 90 97 76 de 24 72 13 a2 a3 47 8b ea bc fb 24 30 cd 5c e4 5b bb 46 b8 02 a5 f2 6c 95 58 96 df 18 c4 bd 42 3c 29 28 bd 78 f1 cb 60 20 f9 36 60 c8 99 37 fe 1c a5 39 be d4 f6 ee 0d 1a 4e 7e ae 5a 95 4f 7b 8c ef 2f 1d 61 cc 5a 07 2b 2e 53 04 04 df 1a c0 75 28 41 9b 42 13 61 51 68 e1 2a f5 31 45 99 3b 5a eb 48 d7 22 07 5c 0e 91 15 fe 38 a0 33 72 d3 83 db 7b 9d 4e 35 6f ff b8 17 e1 de 2f 47 86 2c f0 89 9e 23 1c e5 92 ac bf eb a9 47 cf f2 0d db b2 e0 9f c6 ff 99 58 79 64 83 34 d9 89 0e 72 6f 40 75 cb f9 f7 71 c7 b1 dd ab f0 fe e7 5a ab d5 ec b4 96 da 8a 65 ad ac 5b 51 ec ae 01 4e 1b 86 b4 db Data Ascii: RqeHH~I2N2bNI`v1\1v$rG$0\[FlXB<)(x` 6`79N~ZO{/aZ+.Su(ABaQh*1E;ZH"\83r{N5o/G,#GXyd4ro@uqZe[QN
2024-07-19 20:22:48 UTC	16384	IN	Data Raw: c3 e3 e7 97 1b 0c 5d b8 ed 63 cd 1d 2b cd 9a c0 97 61 72 74 1c 0c 73 12 98 18 bb f9 a0 92 bb cd f7 bd d2 54 1e 2b f3 a0 e3 f7 2a 56 f0 c2 72 12 cd cd 0d 72 bb fd 4c 4d 15 5a 27 d2 23 27 6e cc 56 11 00 fe 68 80 94 84 b4 d5 ab a4 ad 64 9c 39 0c d1 8e 70 63 76 17 0c b8 23 ee 3f 55 5a 10 a1 58 9c 9d f6 bd 99 99 e6 5a b3 e9 6b 39 3d 98 5b 18 8b 67 6a dd 56 35 a4 a6 a5 a6 50 32 e3 b9 5e 4c 9a c7 f3 c6 cc 4c bb ed 43 3c 54 4f b2 88 32 89 03 91 eb fd c8 9c 5b 46 99 e5 c2 53 35 ec c5 03 28 18 c3 5c 98 c6 dd 0e 04 43 8f 05 2e a6 af 95 c1 76 4a d0 fd 69 6e 21 14 5c 16 f4 33 3b fc 50 d5 1e e3 da 76 bf a5 6f 3a 26 70 62 53 b7 ee 2f f2 77 fb d2 fd f7 df 7f ff 4c b9 d7 2b cf e0 37 34 60 02 f1 5a 80 4d 7f 23 91 ef d2 2b 00 c2 2b 4b 69 a8 dc 6c b8 0c c7 6d c1 87 0e c6 77 Data Ascii: ]c+artsT+*VrrLMZ'#'nVhd9pcv#?UZXZk9=[gjV5P2^LLC<TO2[FS5(\C.vJin!\3;Pvo:&pbS/wL+74`ZM#++Kilmw
2024-07-19 20:22:48 UTC	16384	IN	Data Raw: 0d 5a ad 56 64 f5 e0 22 28 1a 86 62 21 26 ba ce 03 a1 aa 85 00 b8 84 6f c8 37 1a b3 86 46 a9 66 cc 36 1a f9 1b b0 c4 21 28 a8 aa 08 b8 ae 93 b8 50 04 ac 29 70 09 f2 8a 92 07 ce 6c a1 aa c2 66 bc 1f 45 d1 60 14 45 a3 d1 68 10 45 48 46 68 6b 13 0f 60 88 2e 47 77 a0 77 78 d8 d8 29 1d 02 a9 13 6d 6f b8 6b eb 1e 89 2c 85 d4 52 22 f0 f7 51 13 57 bc 1f bd 92 e3 7d 17 cd 92 ff cb 9c df 89 4c b2 d4 d3 a5 35 a0 5b 6c 6e 52 0d a9 c9 90 15 eb c6 39 b7 78 b3 a0 54 e2 ea 8b 95 0e 4a b6 5d 31 cb 8f d5 6c d7 8d f9 c6 3c 4e 17 04 0f 77 7f b1 54 2a 71 cf a5 a5 6e 64 8a fe 94 05 e3 7f 26 96 e5 e5 b4 73 3d cb 22 fb f4 7a a8 65 c3 44 00 db ea fa be ed 85 1a 94 2b 9b 95 93 73 2e 46 00 45 e1 d8 c5 99 f6 64 ad 16 94 cb 94 e6 16 e6 69 6f 86 4c 16 3c 18 ff c3 d2 d2 92 4b b9 d7 e9 Data Ascii: ZVd"(b!&o7Ff6!(P)plfE`EhEHFhk`.Gwwx)mok,R"QW}L5[lnR9xTJ]1l<NwT*qnd&s="zeD+s.FEdioL<K
2024-07-19 20:22:48 UTC	16384	IN	Data Raw: da 38 3a 3a f2 8c a9 73 ca 1f 6f 6e b9 0e 50 af 2f 2e 4c 4f 8c 23 c6 4c f3 a8 fe a0 db c3 cd d8 a7 19 16 1b 46 df dd 56 48 d5 ae 8f 02 e8 38 3e 95 26 69 42 dc 26 8a 1d e3 38 4d a9 3e fe 87 14 a7 a5 26 25 08 09 03 ee 4e 69 d4 8f de fc f4 d3 4f b7 fb b7 40 44 ae cc a1 e3 7f 28 4d 2a a9 53 0d 42 97 08 35 a3 7e f4 f3 55 55 7d 4d 23 5f 07 e8 a9 c8 92 56 ed 26 0a f2 21 b6 5b 4b d8 cb c0 22 0c d7 fa 64 6b cf 20 4a c5 b2 2f 7b 05 15 fb 4b 2b 28 7d a2 d5 6a b5 9e 59 2e 99 13 99 b2 52 70 b4 49 51 cf 47 1b 0d 87 d1 f2 40 de 75 b9 39 b4 1d ed 47 c7 11 0a 6d db 5e ca a2 44 0a fe 44 35 76 ed 12 46 1c d1 35 60 35 99 8f 11 ec 02 5a ee 63 2a 69 8c 66 02 db 99 18 8e 18 73 80 73 0e dc 61 cc 07 52 62 02 56 9a 71 59 f8 d9 f8 22 ac 8d 2f 06 18 06 38 18 3f 23 6e c5 41 c7 83 49 Data Ascii: 8::sonP/.LO#LFVH8>&iB&8M>&%NiO@D(MSB5~UU}M#_V&![K"dk J/{K+(}jY.RpIQG@u9Gm^DD5vF5`5ZcifssaRbVqY"/8?#nAI
2024-07-19 20:22:48 UTC	16384	IN	Data Raw: b4 a3 89 7b 72 07 93 5c 4b 06 90 73 ad 64 a3 2b 81 0d 00 3f 66 7a 90 0d e2 d1 e2 75 cf de fc fe 84 bf 64 3c 32 0e 50 e0 4a 0b c6 6c e3 82 52 ee 5f 3e b2 8d 10 03 48 d3 ba 71 62 a9 c5 88 ce ca bb e4 1b b6 ee bb 77 5b 72 86 a3 6e 77 34 ee 76 43 c2 99 fa c9 cb 13 b8 ae 3d 5f 5b e1 7d 02 77 20 e3 44 42 01 78 9e a7 18 73 d3 82 e7 db 36 f9 18 74 29 b5 83 46 92 00 5d 9b ee 04 a6 2f 72 fe cb 01 40 f0 64 95 1e bb 7a 1d bb f2 e1 e7 ed 9f ff 8f 58 6f 21 84 68 29 9b 70 8f bb 49 29 05 d9 d4 8e f6 b9 54 82 36 e9 93 ef 54 32 7c 0b be 6c 38 c3 3e 33 07 0d e3 98 d8 da 78 84 d8 da bc 40 08 f1 8c b6 09 e6 cb 7f 2d fa 98 71 e3 d8 36 49 9c 0e f2 39 62 6b 73 d0 60 9f d8 da 18 c6 31 f5 d4 97 ba aa e7 79 84 70 66 8c b6 89 8f cd c1 af 16 4a a7 fe f9 ff a0 f5 75 8e 26 be 85 4e 13 Data Ascii: {r\Ksd+?fzud<2PJlR_>Hqbw[rnw4vC=_[}w DBxs6t)F]/r@dzXo!h)pI)T6T2\|l8>3x@-q6I9bks`1ypfJu&N
2024-07-19 20:22:48 UTC	16384	IN	Data Raw: 82 6b c1 07 ad 60 08 19 3a c1 8a 36 96 9e 7b 55 b2 fb 52 24 0e de 58 b8 4d fa 2f e8 49 f4 8c d4 f2 7c 97 a3 03 2e 74 46 ea cf 8f 77 81 5b 10 84 61 ea 86 3c b0 e2 ec 1d 1b 20 e9 a7 c3 6b e9 03 3b f6 79 50 54 6d 2b c8 3f c7 f9 df b9 8d 78 3e bb 25 7c 82 2e 30 3f e1 ee b9 f2 ae 58 17 36 d3 31 26 ec cd 9b 84 57 f9 3c c3 e6 e7 8d df eb ca 60 33 22 78 1a a0 ba 0e f5 5f b9 9f f3 83 5f b3 1e f9 d1 62 7c 12 9d d3 25 98 79 e2 1e 22 6a dc 24 35 af 2d b6 e7 52 9b 86 6d bc 60 f9 5c a3 2b 45 d2 b2 2d ad cd 66 a9 55 9a c4 ac 45 08 f5 78 d9 e2 2c c3 92 a1 91 43 f7 28 a2 19 12 66 b3 8b 72 04 bf 52 f7 4b aa 2a 55 b1 72 48 05 2c b7 25 0e 8a ac ee 96 e5 dd aa 22 03 97 da 32 06 f5 90 82 ab e9 54 7f c8 51 0c e3 73 3b c1 0d c5 79 9c 9b bf 5f 51 7a 0a e8 a0 a8 f2 a2 a4 1c 54 65 Data Ascii: k`:6{UR$XM/I\|.tFw[a< k;yPTm+?x>%\|.0?X61&W<`3"x__b\|%y"j$5-Rm`\+E-fUEx,C(frRK*UrH,%"2TQs;y_QzTe
2024-07-19 20:22:48 UTC	9678	IN	Data Raw: 3d 9a e4 74 84 cb 75 6d 20 94 c1 8a 08 25 1f 0d 85 2e d3 f5 21 59 92 92 06 67 63 91 b0 c1 bc 65 6d 42 93 46 a3 30 05 c1 af c8 65 8c c0 2d 6c 6f 26 27 6c 73 d2 b0 45 f6 e1 57 30 59 72 2c 90 bd c8 cd e5 83 57 d0 0b db 47 53 a7 af 66 c9 bb 8f 6b bb de 05 ff 2c 49 44 53 7b 0a d9 66 82 d2 53 31 d6 4c 6b e7 d4 24 be b2 54 2c f9 56 23 0c 60 ec 3a e1 e7 81 17 98 31 69 da 17 e8 2b 82 7c ce b5 7f f6 6e 8e 24 b3 57 74 39 59 1b 3f 98 8c 33 fb dc 17 d5 76 bd fb ff 2c 41 31 a8 bb 95 9c 9d b9 d1 9e aa 11 49 c2 93 53 3b e1 4a 42 34 df 72 e2 fa ec 78 f3 b3 40 5f d5 f1 56 2c 02 8f 3b a8 11 91 9a a9 54 a8 69 fd 9e 66 0b 58 9b 76 96 d6 b3 03 04 a9 da e3 60 6d bb 04 51 65 6d fc ec 40 6f 5d 52 8d 7d 33 08 d1 87 43 4d 19 61 b2 e5 ab 3c f1 bd 80 60 ff 67 3f 0b 54 c9 ff a3 27 00 Data Ascii: =tum %.!YgcemBF0e-lo&'lsEW0Yr,WGSfk,IDS{fS1Lk$T,V#`:1i+\|n$Wt9Y?3v,A1IS;JB4rx@_V,;TifXv`mQem@o]R}3CMa<`g?T'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49842	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:47 UTC	709	OUT	GET /dist/fonts/open-sans-v18-latin-regular.woff2 HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mimecast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:47 UTC	733	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:47 GMT Content-Type: font/woff2 Content-Length: 14380 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc865126772c" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202247Z-15b94bb6ff9l65tv1z07gzckqw0000000cug00000000081z x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:47 UTC	14380	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 38 2c 00 11 00 00 00 00 6a 9c 00 00 37 ca 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 16 1b 10 1c 74 06 60 00 82 0c 08 81 22 09 8f 34 11 10 0a 81 a7 54 81 90 32 0b 83 4e 00 01 36 02 24 03 87 10 04 20 05 83 5a 07 84 78 0c 82 09 1b 02 5c 55 07 7a d8 38 00 c0 bf 7c 74 51 d4 0d ca 69 c9 ec ff 4f 09 74 c8 b0 65 1a 18 1c 2f 22 00 cf 2a dd 5b 94 57 aa cb 0b 0d 7e 0b 4b 43 3f 94 44 a8 c2 cd 3c fb f6 d6 61 d7 cc d7 33 96 c1 0d 58 61 79 d2 51 8b b7 31 0e e1 3a 0e 47 5f 0c 3c b6 d6 e2 cd ad 24 04 d2 88 ff fa a7 ca d7 d7 a7 83 fb c0 08 49 66 5b 1e fa d6 22 7f 55 57 f7 ec 1e b0 a2 80 42 85 ac 10 7c 64 24 92 27 a1 f2 62 dc 45 81 02 94 40 0e 3d d1 4e 0f f0 ee fa 67 67 ef 50 f6 21 65 cc a2 24 63 66 67 ad 8c 55 Data Ascii: wOF28,j7t`"4T2N6$ Zx\Uz8\|tQiOte/"*[W~KC?D<a3XayQ1:G_<$If["UWB\|d$'bE@=NggP!e$cfgU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49849	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	405	OUT	GET /api/public/content/b6c2916537114887a5ba7800de8d6ede?v=78059a5e HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	627	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/png Content-Length: 17327 Connection: close CF-Ray: 8a5d6cf749864267-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 457 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icons_W_Microsoft.png; filename*=utf-8''icons_W_Microsoft.png ETag: "0x8DBF0A276D5B2AF" Last-Modified: Wed, 29 Nov 2023 06:14:37 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128887 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	742	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 2c 6f 63 61 42 58 00 00 2c 6f 6a 75 6d 62 00 00 00 1e 6a 75 6d 64 63 32 70 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 00 00 00 2c 49 6a 75 6d 62 00 00 00 47 6a 75 6d 64 63 32 6d 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 75 72 6e 3a 75 75 69 64 3a 37 36 34 34 37 35 39 32 2d 36 35 36 62 2d 34 30 30 34 2d 61 30 66 34 2d 64 33 61 65 37 33 37 61 63 31 65 33 00 00 00 01 b3 6a 75 6d 62 00 00 00 29 6a 75 6d 64 63 32 61 73 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 00 00 00 00 d7 6a 75 6d 62 00 00 00 26 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 63 74 69 6f 6e 73 00 00 00 Data Ascii: PNGIHDRR:W,ocaBX,ojumbjumdc2pa8qc2pa,IjumbGjumdc2ma8qurn:uuid:76447592-656b-4004-a0f4-d3ae737ac1e3jumb)jumdc2as8qc2pa.assertionsjumb&jumdcbor8qc2pa.actions
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 39 62 31 62 32 35 6f 63 6c 61 69 6d 5f 67 65 6e 65 72 61 74 6f 72 78 36 41 64 6f 62 65 5f 50 68 6f 74 6f 73 68 6f 70 2f 32 35 2e 31 2e 30 20 61 64 6f 62 65 5f 63 32 70 61 2f 30 2e 37 2e 36 20 63 32 70 61 2d 72 73 2f 30 2e 32 35 2e 32 74 63 6c 61 69 6d 5f 67 65 6e 65 72 61 74 6f 72 5f 69 6e 66 6f 81 bf 64 6e 61 6d 65 6f 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 67 76 65 72 73 69 6f 6e 66 32 35 2e 31 2e 30 ff 69 73 69 67 6e 61 74 75 72 65 78 19 73 65 6c 66 23 6a 75 6d 62 66 3d 63 32 70 61 2e 73 69 67 6e 61 74 75 72 65 6a 61 73 73 65 72 74 69 6f 6e 73 82 a2 63 75 72 6c 78 27 73 65 6c 66 23 6a 75 6d 62 66 3d 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 2f 63 32 70 61 2e 61 63 74 69 6f 6e 73 64 68 61 73 68 58 20 4a 69 c1 bd ff a8 de 41 30 78 be 24 ed cc f8 Data Ascii: 9b1b25oclaim_generatorx6Adobe_Photoshop/25.1.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_infodnameoAdobe Photoshopgversionf25.1.0isignaturexself#jumbf=c2pa.signaturejassertionscurlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX JiA0x$
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 54 72 75 73 74 65 64 47 34 52 53 41 34 30 39 36 53 48 41 32 35 36 54 69 6d 65 53 74 61 6d 70 69 6e 67 43 41 2e 63 72 74 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 78 2b 8c 42 c7 84 10 84 58 94 82 c9 15 fb 96 c2 f4 0b d2 c9 81 b5 f5 af 25 58 c9 23 51 c4 79 0c 47 62 ea 0b b3 d0 65 12 60 0c d4 7e 90 9a 29 f0 fe 6f d8 1c e9 fe 33 2b cf 0e 14 e2 96 3a ad 8b f7 23 c1 e9 16 52 5a e2 e0 70 51 32 14 80 75 a9 8b c5 f1 77 52 44 11 7f 78 3c e3 83 8b b1 f2 49 e9 17 eb 40 34 e7 90 68 cc 56 fb 18 65 5a c5 bd 0b ad e4 13 45 79 e4 af a8 20 3c d5 0f 5f d1 a1 fb 64 9c 3b 19 53 75 04 0b 81 96 e4 75 8b f1 a3 70 29 e9 cc bd ae 26 62 8d 1c 4e 66 a8 8e c9 64 b1 31 48 60 2b 17 8a cf 0a c5 5b a5 db 7b 46 b0 36 13 94 5d 9c c8 c5 ce 22 c6 92 b3 59 22 2d a4 f2 77 d1 Data Ascii: TrustedG4RSA4096SHA256TimeStampingCA.crt0*Hx+BX%X#QyGbe`~)o3+:#RZpQ2uwRDx<I@4hVeZEy <_d;Suup)&bNfd1H`+[{F6]"Y"-w
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 84 54 ee ce e9 5d c8 5e 30 12 bd 46 9e b5 d3 76 b9 d2 0e 6b 99 0c d2 33 b4 cd b1 02 03 01 00 01 a3 82 01 5d 30 82 01 59 30 12 06 03 55 1d 13 01 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 ba 16 d9 6d 4d 85 2f 73 29 76 9a 2f 75 8c 6a 20 8f 9e c8 6f 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ec d7 e3 82 d2 71 5d 64 4c df 2e 67 3f e7 ba 98 ae 1c 0f 4f 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 13 06 03 55 1d 25 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 08 30 77 06 08 2b 06 01 05 05 07 01 01 04 6b 30 69 30 24 06 08 2b 06 01 05 05 07 30 01 86 18 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 64 69 67 69 63 65 72 74 2e 63 6f 6d 30 41 06 08 2b 06 01 05 05 07 30 02 86 35 68 74 74 70 3a 2f 2f 63 61 63 65 72 74 73 2e 64 69 67 69 63 65 72 74 2e 63 6f Data Ascii: T]^0Fvk3]0Y0U00UmM/s)v/uj o0U#0q]dL.g?O0U0U%0+0w+k0i0$+0http://ocsp.digicert.com0A+05http://cacerts.digicert.co
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 82 59 06 33 30 82 06 2f 30 82 04 17 a0 03 02 01 02 02 10 1b 5b 0b 3b da b0 e4 5d f2 f3 0d 9e 54 d1 da d2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 75 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 23 30 21 06 03 55 04 0a 13 1a 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 31 1d 30 1b 06 03 55 04 0b 13 14 41 64 6f 62 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 31 22 30 20 06 03 55 04 03 13 19 41 64 6f 62 65 20 50 72 6f 64 75 63 74 20 53 65 72 76 69 63 65 73 20 47 33 30 1e 17 0d 32 33 30 32 30 31 30 30 30 30 30 30 5a 17 0d 32 34 30 32 30 31 32 33 35 39 35 39 5a 30 81 a1 31 11 30 0f 06 03 55 04 03 0c 08 63 61 69 2d 70 72 6f 64 31 1c 30 1a 06 03 55 04 0b 0c 13 43 6f 6e 74 65 6e 74 20 43 72 65 64 65 6e 74 69 61 6c 73 31 13 Data Ascii: Y30/0[;]T0*H0u10UUS1#0!UAdobe Systems Incorporated10UAdobe Trust Services1"0 UAdobe Product Services G30230201000000Z240201235959Z010Ucai-prod10UContent Credentials1
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: fe 9f 90 30 9d af b3 0d f3 fe 27 d8 b4 8d ac c5 2f 68 11 19 76 62 ea 0c 20 67 3b 4d 9d 6c 5a e6 a6 0d e9 4d cd 05 a9 14 38 18 bf fc f2 98 d1 35 23 32 e6 d5 3d 4a 84 27 48 21 98 a8 8b 23 7c bf 00 ce 03 c4 1a 25 d7 46 00 01 61 cd 6e 5d e7 1f e3 f7 9a c9 bd ca d8 c3 ec ee 19 d6 4d b5 0a a4 71 c9 23 0c 69 74 dd ef 4c 67 59 35 6a 73 f4 ec 5f ba 8d de 10 b4 25 91 3b c0 08 78 2a 91 a5 e2 fc 50 1a 9c 77 b9 3c 28 67 e9 fa f5 ff 87 0d 17 c8 28 0f 46 ee 3c 0a 60 4b 7c f3 c2 a8 d1 87 1a c7 f0 84 b0 3d f2 67 f0 9a b3 ba b3 1a 2c 33 27 9d cd 7c b4 7c d4 88 cb 57 ef 78 df ea 85 e1 ee fa 02 c5 7f d3 e0 3d e7 14 f9 71 53 7a 26 d9 ca 5c 2d 0d 56 77 8d 36 eb 1d 7c ae 54 86 47 59 06 a5 30 82 06 a1 30 82 04 89 a0 03 02 01 02 02 10 0c a8 b6 54 7b 89 e6 d2 06 89 75 cd 8b 9b 89 Data Ascii: 0'/hvb g;MlZM85#2=J'H!#\|%Fan]Mq#itLgY5js_%;x*Pw<(g(F<`K\|=g,3'\|\|Wx=qSz&\-Vw6\|TGY00T{u
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 18 30 16 80 14 a6 1c e1 6d 54 24 4c a8 8f 48 72 bf 6e a9 8c d5 e4 ec 31 d4 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 71 ce e5 07 8c a6 dc 2d dc c8 e0 3b 65 5e 00 92 81 95 eb 95 20 24 af 9f 69 38 5d c9 7c f1 b8 da a5 4d 00 65 3b 25 c1 18 5c 9e be 59 b7 dc 1b 06 3b 59 83 25 fa 33 bb 22 f2 4f 6f bb 21 5c 56 16 f5 b9 c9 83 15 fb 94 b5 35 e0 a1 31 72 19 9c 2c d6 35 79 ee 88 84 12 76 63 c3 f3 64 c4 54 29 27 79 0a 45 11 3e 0d 0f 04 b1 a3 cf f2 91 fc 3a 1f 1f 1f 86 e2 b3 d3 08 e1 8e 45 8c 5e 62 b7 74 d6 57 22 e6 15 71 bc a7 1c bc 89 3b 30 3e bd 65 37 b0 7d 93 d2 33 ed 16 9e c5 37 7f 46 66 77 b8 60 6d 1a 54 c9 67 1e 1b 47 87 16 97 54 28 af d9 15 68 47 8c 35 42 db ca 1d 0a 73 7c f3 9b 47 9d c2 97 be 22 2d 2b 46 54 52 8f c0 22 d8 45 2a 58 44 5e c9 Data Ascii: 0mT$LHrn10Hq-;e^ $i8]\|Me;%\Y;Y%3"Oo!\V51r,5yvcdT)'yE>:E^btW"q;0>e7}37Ffw`mTgGT(hG5Bs\|G"-+FTR"EXD^
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 Data Ascii: ntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49850	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	405	OUT	GET /api/public/content/71680926188a4357b6b246fb0177c4b4?v=9a69a64d HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	631	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/jpeg Content-Length: 20524 Connection: close CF-Ray: 8a5d6cf7480242b3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 432 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=TechPartner.jpg; filename*=utf-8''TechPartner.jpg ETag: "0x8DBF63F65A00C4C" Last-Modified: Wed, 06 Dec 2023 09:40:35 GMT Vary: Accept-Encoding api-supported-versions: 1.0 Cf-Bgj: h2pri ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 129762 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	738	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Condition in IEC61966-2.1
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 06 51 50 Data Ascii: 1J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQQP
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 05 06 07 08 ff c4 00 3d 11 01 00 01 02 03 03 09 06 06 01 03 04 03 00 00 00 00 02 01 03 04 05 12 11 21 22 06 13 31 32 41 51 61 71 81 33 42 52 91 b1 c1 07 23 34 a1 d1 f0 14 24 62 92 82 a2 b2 e1 72 c2 d2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 da 9a 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 0b 77 35 cf f1 de 3b b3 4f 76 cd ef 36 fb 2d be 99 bd 52 4f 57 50 d8 da 07 c3 d4 Data Ascii: =!"12AQaq3BR#4$br?w5;Ov6-ROWP
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 24 16 02 7b fb 85 bf 8a c5 c4 60 ac df eb 47 78 d9 27 87 cf 6a 3e 03 c9 22 9a d5 ca 4c fb 11 7c 93 4c f3 aa 24 0e a2 99 dd 86 c4 da 01 9f 12 7a c3 47 c0 6d 68 31 19 4d eb 7c 51 df 44 b6 b3 4a d7 75 a3 bd 52 47 57 69 a9 86 ae 9a 56 87 32 58 5e 1c d2 08 04 7a 7c c1 05 6a d5 7b 50 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 53 6f b7 ba 5c 76 d5 51 72 ba c9 e5 52 d2 b3 aa 57 9d 00 d1 bd 77 24 80 3d 7d 49 d2 ad 28 35 e9 e2 ab da 75 78 c2 ae d5 b8 af 16 62 d5 d6 da f8 c1 69 bb 5f a9 9f 08 2c 3b 02 48 62 3a 73 da 46 9c d7 92 d1 f8 38 2d ce 0f 2a 8c e3 aa e4 b7 78 23 a9 ad fe 44 e5 1c b3 96 6f b2 5d f9 16 fb 70 be 57 39 ce 21 f5 52 ed 91 f5 1d 91 1c 63 4c 60 27 be 9a 00 5b fb 56 2d da 8e 9b 71 d8 a2 d6 57 01 01 01 01 01 01 01 01 Data Ascii: ${`Gx'j>"L\|L$zGmh1M\|QDJuRGWiV2X^z\|j{PSo\vQrRWw$=}I(5uxbi_,;Hb:sF8-*x#Do]pW9!RcL`'[V-qW
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: bb 0b be 3f 67 ea 2c 9e a9 ae a4 99 dd ce a9 eb c3 43 5b d8 76 6d 43 59 f7 b5 e6 15 6f 5d eb 5e d2 3b 69 df 4f e3 f8 16 36 63 82 64 1c 7d 76 75 b7 34 b4 57 5a 2b 3a 7a 9a ca 98 f4 d9 19 f0 7c 6f 1b 6b da 7e 0e 69 20 fc d6 44 2e c6 e4 75 46 42 82 a4 08 08 08 2a 56 0c 76 eb 96 5d 60 b6 63 16 ea eb ad c6 a0 ea 2a 5a 28 1d 2c 8f f9 e9 a0 13 a1 f1 2a 93 9c 61 1d 52 13 f5 07 84 c3 82 b2 cf 2f 35 d4 56 7d 71 7f 3a b3 61 98 eb 99 3d c6 bd db 00 79 92 f7 8e 06 12 47 bc 04 84 8d eb b8 2b 0b fc ce 77 57 33 d1 4e 9a d7 a1 6e 73 d2 c8 2c 9f 8f 6d 38 06 15 4f 1d 1d 7b 70 6c 5a cb 2b 1b 9b 53 63 dd 3d 55 72 3e 48 c3 2d cc ac 24 cd 53 50 d8 dd 2f 98 7a bc b1 a1 ee 37 d0 60 da bb 29 dc ea ea ad 7a bb 7e bb 3b 28 b5 39 3c 39 0f 15 dc 79 ea c3 41 51 92 3e 4c 32 9d 94 cc 18 Data Ascii: ?g,C[vmCYo]^;iO6cd}vu4WZ+:z\|ok~i D.uFBVv]`cZ(,*aR/5V}q:a=yG+wW3Nns,m8O{plZ+Sc=Ur>H-$SP/z7`)z~;(9<9yAQ>L2
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: e7 f1 97 25 72 f4 a5 28 ec 66 5a a7 0a 62 ab e4 fa 5a 3c ed b8 bd 4d 87 2e 12 c9 23 19 1d d1 96 49 9f 6f 79 73 03 87 f9 4b 41 60 d6 fa 4e f5 a7 2c 65 c7 2b 9f 30 62 16 5c d2 9f 13 ba de a1 a5 c8 2a a4 8e 38 28 e4 86 41 e6 3e 41 b6 35 af e9 e8 2e 3b ec 36 82 ab 5f 9d 63 96 bb f4 16 4b 95 fe c9 4b 7a a9 0c 30 db a7 b8 45 1d 44 81 ee e9 61 6c 45 c1 c7 6e f7 46 87 72 82 b4 25 61 94 c4 d7 37 cc 00 38 b3 ab b8 07 60 1d 7c bb 20 ed 40 40 40 40 41 aa 5f 6c 6d 34 6c e4 5e 3d 9d 8c d4 b2 da aa 9a f7 75 1f 78 36 48 f5 db d3 b7 51 5d 0e 47 d5 b8 84 9a f3 5b c1 df 45 5d 53 6b ac 82 ae db 51 35 25 55 33 c4 90 cf 0c 86 37 c6 f0 76 1c d7 02 08 20 fa 10 ab 5a 6a 12 4b 79 92 9f 33 6b 29 f9 b2 cd 1e 51 ee b5 8d be d2 39 94 77 88 1a 03 5a 09 98 34 b2 a7 40 13 a9 da f7 13 fc Data Ascii: %r(fZbZ<M.#IoysKA`N,e+0b\*8(A>A5.;6_cKKz0EDalEnFr%a78`\| @@@@A_lm4l^=ux6HQ]G[E]SkQ5%U37v ZjKy3k)Q9wZ4@
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: b1 d9 da 3d b6 3d 57 43 92 75 6e 21 26 bd d6 f0 10 10 77 52 d5 cd 43 53 0d 4d 0c d2 53 d4 53 bd b2 45 2c 52 16 3e 37 b4 ed ae 6b 86 88 20 8d 82 10 49 b1 73 5c 39 7d 33 28 b9 b6 c7 1e 5e d6 31 b1 c5 7d 86 51 47 79 a7 68 0d 03 fc a4 34 b6 a0 34 03 ee d4 32 43 b7 7d e0 b1 bf c7 e6 fd 8c b6 78 76 7f 7c 87 07 70 a3 72 f8 64 ac e1 4b cc 39 84 6c 61 91 f6 69 18 29 2f 10 34 0d 90 69 4b 88 9b a7 7a ea 81 d2 7e 21 a9 fe 47 37 ed a3 b3 e9 fd f3 11 9d 4d 34 d4 75 12 41 59 14 90 4f 03 cb 24 8a 56 96 bd 8e 07 44 10 7b 82 16 48 90 31 ae 10 bd 5c ed 11 5f b2 ea 9a 1c 2f 17 93 bb 2e f7 d7 3a 21 50 07 72 29 a1 00 cb 50 ed 03 af 2d 84 7c c8 56 27 88 8c 65 a6 3b eb e0 2b 0e e4 2c 27 8d 3a a2 e2 3b 17 d7 f7 98 f6 3e d5 65 34 cc 90 b1 c3 63 ae 96 87 6e 8a 3e fa 73 5f 29 95 df Data Ascii: ==WCun!&wRCSMSSE,R>7k Is\9}3(^1}QGyh442C}xv\|prdK9lai)/4iKz~!G7M4uAYO$VD{H1\_/.:!Pr)P-\|V'e;+,':;>e4cn>s_)
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 45 db 84 4b 29 69 7e c8 7f 94 ff 00 db 28 e2 ae 5d b7 cd d9 8e 9a ff 00 e3 45 34 69 96 a9 2a bc a5 c3 19 3f 21 5f a8 32 ae 57 c8 e8 6c ec 64 31 4f 90 5b e3 81 fe 56 25 6f 7c b1 b2 9e 01 b2 47 9a e6 bd ce f2 b4 0f ba 49 de fb db c3 e2 ad da 8f 37 66 3b 7b bf dd 55 67 09 4b 8a 4f 6e 49 80 5d b9 bf 01 b5 db f8 e5 9f 64 f0 7a 2a a6 d1 e1 56 1a 88 9d f4 9c 8e 60 e0 27 af 9c 82 00 6b 58 5c f3 21 0e 0d ee 3d 4f 7a 42 fc 70 d7 25 2b 9b e7 ef 57 bb c1 59 53 54 78 7a 1f 98 2e 33 47 26 19 70 c1 b8 a2 eb 1d ae df f4 16 54 72 27 20 4b 03 88 05 cd 1a b7 d3 00 41 70 d9 e8 e9 07 6f 3b d7 af 75 f9 cb 9c 8d eb d1 db 5f 76 3f 7a 94 8f 0e 98 b6 05 e0 b7 12 b8 60 9e 1e b1 cb 15 fe 2f 22 be 8b cc 33 44 7b 39 9d 6e f3 00 70 3e 8e 01 e3 63 e0 7b 2d 0e 3e ec 6e e2 25 28 b2 ed 47 Data Ascii: EK)i~(]E4i?!_2Wld1O[V%o\|GI7f;{UgKOnI]dzV`'kX\!=OzBp%+WYSTxz.3G&pTr' KApo;u_v?z`/"3D{9np>c{->n%(G
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 6b 3b 81 f7 7b 23 8a 8f 33 1b 78 58 ef af 47 f3 55 34 71 71 2a 1c a5 c7 b9 ef 30 5d 31 2a 9a 9a 6b 5e 29 89 55 c0 0d 96 c8 ea 90 c8 f1 db 5f 99 14 6c a9 a8 60 68 0d 12 17 83 d5 dd ce e9 23 b0 6f 68 61 ef e1 ec 46 5d b5 ed af 7d 7c 12 9c 65 25 ef 6d e1 3c a3 9a 30 d1 82 f8 6c a4 8e d5 c7 b6 f9 99 f5 8d fa e5 e6 53 bf 2a aa 0e 0d 7c e3 4d 2e 74 2c 23 b0 3a 67 e3 b0 03 6c 7f 95 6e c5 ce 73 11 be 7d df 0a ba 25 28 e9 8f 43 2d 3c 30 78 17 c7 f8 16 91 f5 f7 aa bf af 72 6a c6 74 d4 56 f9 41 82 36 1d 13 14 63 67 a5 bf 3d 1d bb e7 ad 01 ab c7 66 37 31 3c 3d 14 64 5a b1 18 32 76 dd 6f a5 b4 d2 c7 4b 6e 86 3a 7a 78 9a 03 23 8d ba 0d 1a d7 ff 00 8b 5c be f5 20 20 20 20 20 20 20 20 20 d5 67 b6 42 37 fd b9 e3 97 f4 3b a3 ea da d6 f5 74 f6 df 99 11 d6 d7 41 92 75 6e 7a Data Ascii: k;{#3xXGU4qq0]1k^)U_l`h#ohaF]}\|e%m<0lS*\|M.t,#:glns}%(C-<0xrjtVA6cg=f71<=dZ2voKn:zx#\ gB7;tAunz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49847	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	705	OUT	GET /dist/fonts/open-sans-v18-latin-700.woff2 HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mimecast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:48 UTC	733	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: font/woff2 Content-Length: 15056 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc86512675d0" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202248Z-15b94bb6ff9bzr4dnuz3238r5n0000000dx00000000054ty x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:48 UTC	15056	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3a d0 00 11 00 00 00 00 71 8c 00 00 3a 6f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 16 1b 10 1c 74 06 60 00 82 0c 08 81 2a 09 8f 60 11 0c 0a 81 b5 40 81 9d 04 0b 83 4e 00 01 36 02 24 03 87 10 04 20 05 83 42 07 84 78 0c 81 78 1b 5b 62 15 6c 5c 65 86 8d 03 18 98 fc c3 30 1a 19 c1 c6 01 80 92 ff 71 f6 ff c7 04 3a 64 d8 32 0d c0 37 f5 46 90 a9 74 0a 75 0d 35 a8 55 4a ff ed 3e ed 53 58 1a 06 00 8e 32 6e d6 1e d6 37 4a ed 0c d2 26 da aa c5 89 5e 71 37 b6 7f 8e a3 a3 b7 96 d1 8b 1e 43 b5 b4 97 7a 26 4f 8e ea f2 ce 8c 9b 00 23 aa 66 d2 f1 0c 00 61 47 5f 45 bd f0 bf ea 08 8d 7d 92 4b f2 f0 fc ff d9 d7 da 47 f7 26 e5 96 ea b5 98 06 35 00 32 70 06 d2 27 ec ea 37 00 bf e0 3f 29 67 80 b6 d9 99 0d 46 62 25 Data Ascii: wOF2:q:ot`*`@N6$ Bxx[bl\e0q:d27Ftu5UJ>SX2n7J&^q7Cz&O#faG_E}KG&52p'7?)gFb%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49851	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	405	OUT	GET /api/public/content/a63e63b6df7443898bc7a682d78133c3?v=2e7b068c HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	623	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/png Content-Length: 12490 Connection: close CF-Ray: 8a5d6cf7e8327c6c-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 457 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_BCircle_AI.png; filename*=utf-8''icon_BCircle_AI.png ETag: "0x8DC65F4E9BB5E90" Last-Modified: Fri, 26 Apr 2024 13:29:34 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 138814 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 0c 49 69 43 43 50 69 63 63 00 00 48 89 ad 57 77 54 53 e9 d3 9e 5b 92 90 90 10 20 10 01 29 a1 37 41 44 4a 00 29 21 74 90 de 6d 84 24 84 50 42 0c 09 2a f6 b2 ac 82 6b 17 0b d8 d0 55 11 c5 b6 02 b2 56 c4 45 57 16 c1 ee 5a 16 75 51 58 59 17 75 b1 2b bf 93 02 ea ee fe f3 9d f3 cd 39 f7 be 73 9e 99 77 9e 99 79 6f ee cd 00 d0 cf f0 a4 d2 02 54 17 a0 50 22 97 25 86 07 b3 d2 33 32 59 a4 5e c0 81 00 7a e0 01 1e 3c 7e b1 94 13 1f 1f 03 00 30 bc 7e 2d af 6e 00 a2 5c af ba 28 63 c1 ff 4d f4 04 c2 62 3e 00 12 0f 00 d9 82 62 7e 21 00 f2 03 00 5e cd 97 ca e4 00 44 25 6e 3d 43 2e 55 ea 72 00 30 90 a5 67 64 02 10 97 2a 75 91 5a af 56 ea d9 6a fd 90 ca 27 39 91 0b 40 6c Data Ascii: PNGIHDRddpTIiCCPiccHWwTS[ )7ADJ)!tm$PBkUVEWZuQXYu+9swyoTP"%32Y^z<~0~-n\(cMb>b~!^D%n=C.Ur0gduZVj'9@l
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: f4 61 4f 62 28 31 84 18 41 0c 23 3a e2 26 78 00 ee 87 c7 e0 01 78 10 1e 80 bb e3 6c dc 67 b8 8e cf fe 84 c7 84 2e c2 43 c2 75 42 37 e1 f6 34 f1 a2 61 c6 61 de 89 d0 0d 0a 4d 0f 85 90 fd 65 2f 70 3b dc 1d f7 c4 83 71 7f 3c 40 19 19 67 e2 26 e0 82 7b e0 6c 9c 83 07 e2 7e b8 27 ee 03 5c 4d de ca ae 7c dd c3 7f 54 f0 c5 69 68 fc c8 6e 64 94 3c 8a 1c 44 76 f8 e7 4e 1d 27 1d cf 91 28 ca 5e 7f d9 1f 75 ae d9 23 fd 1e ce e0 df fc 9f 2d 62 10 40 11 44 ff d3 13 5b 8a 1d c5 da b0 b3 d8 45 ec 04 d6 08 2c ec 34 d6 84 b5 63 27 95 fa c8 d3 a5 3c 5d d1 08 5b a2 2a 9f 7c 28 00 f1 bf f8 86 4f 56 d9 c9 62 b7 3a b7 3e b7 0f 6a 9b 5c 38 53 f9 8e 06 6e 91 74 96 4c 2c ca 95 b3 38 52 69 81 90 15 29 e1 bb 8e 61 b9 bb b9 7b 00 28 bf 2f ea d7 d7 cb 04 d5 77 03 61 b6 7f c6 16 ff 06 Data Ascii: aOb(1A#:&xxlg.CuB74aaMe/p;q<@g&{l~'\M\|Tihnd<DvN'(^u#-b@D[E,4c'<][*\|(OVb:>j\8SntL,8Ri)a{(/wa
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 21 58 48 78 48 79 48 47 a8 7e 68 4a e8 e6 d0 fb 61 56 61 a2 b0 ba b0 81 70 cf f0 d9 e1 67 22 08 11 d1 11 ab 23 6e 46 9a 45 f2 23 6b 23 07 a2 bc a3 e6 46 b5 46 53 a3 93 a2 37 47 3f 8c 71 8a 91 c5 34 4f 44 27 46 4d 5c 3b f1 6e ac 6d ac 24 b6 31 0e e2 22 e3 d6 c6 dd 8b b7 8f 9f 1e ff 63 02 31 21 3e a1 2a e1 71 e2 b8 c4 39 89 6d 49 8c a4 69 49 fb 92 5e 25 07 27 af 4c be 93 e2 90 a2 48 69 49 a5 a7 4e 4e ad 4d 7d 9d 16 92 b6 26 ad 3b 7d 6c fa dc f4 4b 19 26 19 e2 8c a6 4c 52 66 6a e6 ee cc c1 49 a1 93 d6 4f ea 99 ec 39 b9 6c f2 8d 29 f6 53 66 4e b9 38 d5 64 6a c1 d4 93 d3 e8 d3 78 d3 8e 66 11 b2 d2 b2 f6 65 7d e0 c5 f1 6a 78 83 d9 91 d9 d5 d9 03 7c 2e 7f 03 ff a9 20 48 b0 4e d0 27 f4 17 ae 11 3e c9 f1 cf 59 93 d3 2b f2 17 ad 15 f5 e5 06 e6 56 e6 f6 8b b9 e2 cd Data Ascii: !XHxHyHG~hJaVapg"#nFE#k#FFS7G?q4OD'FM\;nm$1"c1!>*q9mIiI^%'LHiINNM}&;}lK&LRfjIO9l)SfN8djxfe}jx\|. HN'>Y+V
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 6a 80 3f ea ff b6 7c 7f 05 2a fc 11 76 ee c7 28 6b 09 4e d1 2e 08 0a 3e e4 9a 65 50 73 fc b9 46 1d 7f 22 68 64 c9 a2 c3 e0 53 d0 a0 2d 56 da e5 38 09 57 a2 12 ba e1 d8 d9 fa 92 86 08 c1 dc 97 b0 8e 9e b3 3a c2 fc 9d 83 df f5 58 ee 6f f5 3c dc 3f 2d 07 a5 72 71 2a 96 40 d1 54 9c bd 1f 83 53 08 21 b9 9f bf 8a e8 fa f7 df 25 82 44 71 84 4a 10 42 5c 88 6a 30 1a c7 ba 04 48 87 b0 20 4d e6 13 ae ae 4f 8e 19 78 88 d6 54 01 51 25 72 47 b5 05 bb fc 35 d4 be 97 71 0a 36 98 eb 7a 23 78 44 3d 95 09 a2 87 f7 b9 0b b1 21 90 80 6a 78 09 2a eb 57 38 fe c1 10 f2 57 c9 a2 08 11 6a 11 37 c7 14 5c ee d3 e2 c9 25 8e 52 28 5f 3e 94 cf c6 d9 f3 30 4e f1 2a 08 7b d7 bc ef 9e 92 04 11 ae 10 42 28 ac 46 43 20 fb 01 1c eb 4c 23 c3 6d d9 79 e1 e3 c0 09 b1 12 c8 32 53 f3 87 51 a5 af Data Ascii: j?\|v(kN.>ePsF"hdS-V8W:Xo<?-rq@TS!%DqJB\j0H MOxTQ%rG5q6z#xD=!jxW8Wj7\%R(_>0N{B(FC L#my2SQ
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: bb d6 62 ef de 7c 2a 2a 2a 49 4e 4e aa 76 c5 d1 39 25 1f 45 45 25 1a 1f 06 c9 e5 9c 7e 7a 57 1a 36 ca a2 b2 32 48 42 82 a4 6a aa d2 4b e7 0c ec 4b 20 21 83 60 65 10 25 56 5b 7c b9 c4 44 38 1c 9f 14 77 fc 02 a7 e4 45 17 ff a1 23 10 c4 63 a5 46 d7 80 ff 6a 08 d5 db aa 12 64 d8 e1 03 74 ee dc 83 87 1f fe 1d 97 5d 76 41 44 54 44 43 66 66 1a cd 9a 35 a2 4b 97 b6 8c 1c 39 8c 6f bf dd ca 9d 77 3d c9 eb d3 df c4 f2 25 eb 35 79 48 d2 bf b7 fc 14 e4 ef e5 df ff 7e 8f 5f fd 6a 64 44 54 85 c3 61 fd fe c6 1b 1f b2 7e dd 26 50 89 ee ef 9c c8 ee 8f be b7 f7 5f f9 8d df ef 27 58 59 c9 b1 01 b9 93 e0 3f f3 b7 b0 f7 2d 28 cb 77 d5 46 84 f2 35 e5 81 9b 15 4b 4c 41 65 df 6c 64 bb 98 6e b1 de de ec 4c 3b 5c c4 55 a3 7e ca d2 a5 d3 35 31 04 61 e1 b0 ad 45 86 bc 44 64 78 af 50 Data Ascii: b\|***INNv9%EE%~zW62HBjKK !`e%V[\|D8wE#cFjdt]vADTDCff5K9ow=%5yH~_jdDTa~&P_'XY?-(wF5KLAeldnL;\U~51aEDdxP
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 67 77 4e fc 0b 93 1e 7a 12 cb 97 66 14 bb b6 ce 85 c0 15 51 a9 1a 13 bb aa 02 31 52 c4 e1 b3 dc 6b 52 3a e6 3b ea e0 a7 be 7f 38 1c ef 0c 8b 71 2b 94 35 1b 7b dd c5 72 26 45 02 88 ee ac fd 67 81 9d e1 ae a8 1e 21 4f 47 3b 5d 0d 1a 64 9a bf 5c c4 6f db 96 43 69 99 20 ec e0 d8 94 76 e8 42 f9 8c b8 62 b8 26 86 70 99 f1 41 8c 99 5c 53 34 59 7e 33 86 71 3a 2b b9 63 c2 4d fc f6 ff 8d a6 b8 b8 54 fb 14 72 cb ea 7a c4 7c d7 12 df c6 b6 49 4f 4f 63 d2 43 53 78 e2 2f 93 f1 07 b2 5d ae ae 0e da 3a d3 c1 c8 72 97 90 42 98 14 1d fc 3c 6c c0 b3 6e e0 ca 55 7b 10 24 34 83 50 8e 1b 4b 09 80 6a 7c 9e d9 69 b1 99 ba d5 ee 62 59 24 24 18 79 ee 41 79 79 a5 bb f0 ea c3 0b b2 c5 44 6e dc a4 1d 93 1e ba dd fd ac ca d4 3d 32 38 b4 68 d1 44 bf bc 90 c9 e1 40 e6 20 44 6b de ac b1 Data Ascii: gwNzfQ1RkR:;8q+5{r&Eg!OG;]d\oCi vBb&pA\S4Y~3q:+cMTrz\|IOOcCSx/]:rB<lnU{$4PKj\|ibY$$yAyyDn=28hD@ Dk
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2b 2f 06 25 ce 68 75 e7 f1 f8 83 d1 6f d1 ba a5 0a c2 5a bf 15 1e 28 e4 40 c1 5e 2d 55 c4 aa 12 6f 5f 88 71 7a ef 5e dc 78 e3 48 3a 75 6a a3 c5 f2 b3 cf 4c e3 8b 2f 96 61 f9 52 0e 31 de 11 26 22 e0 d0 42 b6 86 08 71 b7 b2 fd e8 9d 42 cf c2 e9 de a3 13 ed db b7 72 4d 4e f3 f3 a5 4b 57 31 6d da fb ba 5a 44 4c 45 01 cb 17 c0 b2 aa 08 70 c4 9a ab e3 06 6e 63 06 2d de 8c 48 f5 52 c7 46 f4 26 e0 b3 24 8b 68 d6 1c 0a 96 70 fe f9 83 78 e7 9d 67 75 7a c0 d3 95 57 8e b8 90 1f 5f 7c 13 1f 2d fa d8 25 4a 2c 6b 73 52 05 83 1e 77 d4 69 04 a3 c7 14 dd ba 9a b0 76 c4 eb 05 de 7a 6b ae db b6 aa 0a 64 82 c2 f6 de eb e4 20 46 14 38 b6 ae 82 94 98 9a e8 45 31 8f 8d df e3 3a af 9a 18 95 24 25 05 b8 ff fe f1 9a 18 a2 7f 74 ca 20 68 92 67 0f ff f9 36 ed a8 c6 20 b6 3c 55 21 b5 Data Ascii: +/%huoZ(@^-Uo_qz^xH:ujL/aR1&"BqBrMNKW1mZDLEpnc-HRF&$hpxguzW_\|-%J,ksRwivzkd F8E1:$%t hg6 <U!
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: cf ff 83 2e 5d da f3 bb db 7f 11 71 9c bc 5c 84 14 52 4b 11 c3 ce 1d 5b ab e5 10 34 ab ab 64 36 6f d9 c1 80 01 23 09 06 0f e0 d8 8a d5 5f 39 cc 9d 33 97 d7 5f 7f 9e 11 23 86 46 6c fe 83 41 91 b3 7b 9f 3e dc 53 58 28 27 b4 aa 23 4b ee 23 8e 5d de 9e fd 91 50 88 80 88 27 28 64 f4 e8 9f 70 ef 9f c6 e9 f0 47 74 0a 37 9a c8 a2 5b 24 22 71 fe f9 fd f9 7a cd 72 7c 56 ac b1 aa 5a c1 98 ab 3a 74 6c ef f0 e2 ce 2b 22 ab 8b 11 44 f7 2a 2b 85 3b 7e 77 3f bb 73 f6 f1 e8 a3 b7 47 2d ce d2 e9 d5 2d 9b 45 3a d6 26 86 4c 33 e9 ca 8a 0a 5d da 29 bd 8d 03 81 80 ce a9 bf f9 d6 6c 4d 10 4f 37 55 bb a7 be 69 02 8f 3e 3a 95 47 1f 79 e1 f0 59 4d bb 9c 3e 7d fa e8 c3 39 9a 16 31 80 5f 67 23 e5 9e c4 13 5c 13 ce da 06 96 cb 21 0e 2b 25 57 53 15 b8 89 e5 96 de cf fc bc f4 d2 cb 4c Data Ascii: .]q\RK[4d6o#_93_#FlA{>SX('#K#]P'(dpGt7[$"qzr\|VZ:tl+"D*+;~w?sG--E:&L3])lMO7Ui>:GyYM>}91_g#\!+%WSL
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: c8 58 36 fd fb f7 e2 cd 37 9f 64 d3 a6 ed 6c d9 b2 4b 9b ca 89 89 09 1a 59 42 08 af f5 85 21 a2 38 97 4a 9b 9f df 7c b3 5e 87 c1 3d 05 ed 1d f8 c9 c8 cc a4 63 47 f3 c8 2a f1 37 a4 ce 57 b8 d4 71 92 74 bb a5 7d fb f6 31 7c f8 38 fe f8 c7 71 0c 1c d8 87 ec ec 4c 9d 1b 37 fd b5 52 b8 65 fc b5 7c b2 78 79 24 44 73 8c cf 81 9a fc 93 63 bf 05 fb bc 28 49 ad 9d 1a 8c a8 52 9d a6 40 c2 8d f5 6d ad 61 3a 00 15 32 6a d4 08 a6 4e 7d 50 3b 87 de 19 71 cf e9 aa 2d 50 e7 44 05 27 bd 5a e1 75 eb b7 30 68 d0 48 dd f9 41 1a 92 79 dd 20 44 f9 37 6d d6 44 9f fb 38 f3 cc d3 22 be 88 64 31 2f fa f1 2f 59 b3 fa 6b d7 99 93 31 cb 4c 6b 4a 2b 05 cb a7 b4 b5 35 ed b5 47 b8 f8 e2 c1 ba ff 49 f7 ee 43 c8 cb cb 8f e3 b9 8f 5a 41 67 5c c0 af 70 72 47 c0 9e ff 44 7a 93 1d d2 01 74 f6 Data Ascii: X67dlKYB!8J\|^=cG*7Wqt}1\|8qL7Re\|xy$Dsc(IR@ma:2jN}P;q-PD'Zu0hHAy D7mD8"d1//Yk1LkJ+5GICZAg\prGDzt
2024-07-19 20:22:48 UTC	792	IN	Data Raw: c0 ea e1 3e 8e f4 94 e6 94 38 82 eb fc 05 2c 9c a2 df c0 d6 57 eb 42 8c 7a 3c a5 2d 54 09 25 ef a1 32 bf 07 56 07 13 1c d3 7c 7f 0a eb 94 7a 83 7b ec cb 2f c4 98 08 db fe 62 a2 b8 da 2a 3d 6a 88 45 dc 98 d2 12 82 e5 50 fc 26 64 76 45 59 3d bf 0b 3a a5 1e e0 3e 7f 5d a2 e8 45 e3 0c 31 62 cb ba c6 2a ff 5d cb 4b 38 a5 78 3a 4a 8e e2 fa 06 ba 91 e1 53 de 24 ae 23 b8 7e 59 a0 00 a7 f0 67 b0 fd ef 6e 57 04 21 46 9d ad 84 fa 28 64 b7 c8 55 2b fa 0f 20 dd 46 f9 7f 10 35 87 ff 0d 44 09 1b 1c 5a 39 38 45 97 c3 f6 0f dd 1c 52 f5 96 ab 75 80 38 21 2d f2 5c dc 8b a0 d9 cb 10 6e 1c 69 8f f0 dd 24 8c 6d 22 69 52 cb 14 9e 87 b3 75 34 94 e5 d4 16 bd 3d 51 cf 53 97 7f 2c 28 5d 0f f6 db a8 d4 de 60 b5 fb 8e 12 c5 ae d2 17 e1 fb 61 eb cd e6 39 20 f5 27 86 40 3c 7d 08 57 d9 Data Ascii: >8,WBz<-T%2V\|z{/b=jEP&dvEY=:>]E1b]K8x:JS$#~YgnW!F(dU+ F5DZ98ERu8!-\ni$m"iRu4=QS,(]`a9 '@<}W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49846	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	725	OUT	GET /dist/e04557dae5fe925694a0.svg HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:48 UTC	714	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/svg+xml Content-Length: 505 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc8651264ef9" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202248Z-15b94bb6ff9f5mm5tsn3hmp5q40000000as000000000b9kf x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-19 20:22:48 UTC	505	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49852	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	405	OUT	GET /api/public/content/40074a2fd2f848cb91f70e474add3d9a?v=ff1a19a9 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	637	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/jpeg Content-Length: 21437 Connection: close CF-Ray: 8a5d6cf89aeb0c88-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 457 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=ChannelPartner.jpg; filename*=utf-8''ChannelPartner.jpg ETag: "0x8DBF63F65BB7F99" Last-Modified: Wed, 06 Dec 2023 09:40:35 GMT Vary: Accept-Encoding api-supported-versions: 1.0 Cf-Bgj: h2pri ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 129764 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2d 03 38 03 43 03 4f 03 5a 03 66 03 72 03 7e 03 8a 03 96 03 a2 03 ae 03 ba 03 c7 03 d3 03 e0 03 ec 03 f9 04 06 04 13 04 20 04 2d 04 3b 04 48 04 55 04 63 04 71 04 7e 04 8c 04 9a 04 a8 04 b6 04 c4 04 d3 04 e1 04 f0 04 fe 05 0d 05 1c 05 2b 05 3a 05 49 05 58 05 67 05 77 05 86 05 96 05 a6 05 b5 05 c5 05 d5 05 e5 05 f6 06 06 06 16 06 27 06 37 06 48 06 59 06 6a 06 7b 06 8c 06 9d 06 af 06 c0 06 d1 06 e3 06 f5 07 07 07 19 07 2b 07 3d 07 4f 07 61 07 74 07 86 07 99 07 ac 07 bf 07 d2 07 e5 07 f8 08 0b 08 1f 08 32 08 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 Data Ascii: -8COZfr~ -;HUcq~+:IXgw'7HYj{+=Oat2FZn%:Ody'=Tj"9Qi
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 ac 5c ac d0 ad 44 ad b8 ae 2d ae a1 af 16 af 8b b0 00 b0 75 b0 ea b1 60 b1 d6 b2 4b b2 c2 b3 38 b3 ae b4 25 b4 9c b5 13 b5 8a b6 01 b6 79 b6 f0 b7 68 b7 e0 b8 59 b8 d1 b9 4a b9 c2 ba 3b ba b5 bb 2e bb a7 bc 21 bc 9b bd 15 bd 8f be 0a be 84 be ff bf 7a bf f5 c0 70 c0 ec c1 67 c1 e3 c2 5f c2 db c3 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd Data Ascii: _4uL$hBd@iG&vV8nR7u\D-u`K8%yhYJ;.!zpg_XQKFA=:8655
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 99 70 f5 e4 5c f8 e2 ff 00 5d 66 9f ac 3a 48 e2 93 aa 19 f5 e9 e6 44 76 c7 fe ee a1 db e0 b4 5f c3 db bb 1d 37 22 36 1d e1 f7 da c7 6f ae fa 35 ab 9e ed bf 55 cc 74 cf ae 68 1a e9 20 3f 0d c9 1f 77 b3 fb ba ff 00 8b 42 a2 c4 e4 d2 8f 15 9d ec ea 6c 07 0a e4 2c 77 91 6c b4 f7 5c 26 f1 41 78 a1 aa 67 54 72 d2 ce d9 1a 47 6d f7 04 8e db ee a9 6e 5b 95 b9 69 92 4c 91 44 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 7c 3d ed 8d 85 cf 21 ad 68 d9 27 b0 01 04 05 cf 9e 35 b8 d3 80 29 26 8f 21 bc 47 71 bd 06 6e 2b 4d 03 84 d5 0f 3a ed ee 83 ee 83 f0 73 8b 5a 7f 69 75 61 f0 37 af f5 63 b9 8d ad 67 73 ff 00 b4 8b 93 39 85 f5 14 18 a5 43 b0 9b 04 84 86 c5 41 Data Ascii: p\]f:HDv_7"6o5Uth ?wBl,wl\&AxgTrGmn[iLD\|=!h'5)&!Gqn+M:sZiua7cgs9CA
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 5d 9d bc ef 70 ac 37 cb d9 6f d5 78 46 31 d1 53 72 ad db 80 fd 24 a4 f9 50 b0 77 25 db 70 e9 6b f4 ed 8d 2a f9 63 e5 77 57 33 d1 4f 5a bd 0d 75 9e 95 88 c8 71 9b 27 1e e2 74 d0 5a eb 69 78 ef 05 b3 13 1e 61 06 3c ed cb 75 aa ea 67 45 be 2a d3 a9 ea 65 68 12 b6 47 82 d6 81 ee eb 61 dd 3c 16 a5 29 cb ab aa 75 e8 db d9 e3 b3 a2 9e 0d 73 93 1a bd f1 15 cb 9b e8 2d f5 39 f5 43 b0 ba 48 e1 8a 4c 73 18 a4 e8 65 36 37 64 6b c7 9b 59 58 5f a6 b0 ba 36 bb a7 7a 73 de df d9 0e 0c df 0c 54 70 d2 97 37 c5 df 5e fa f7 51 ae 50 d5 d6 59 0f 05 35 75 55 f7 b9 a5 c7 ec f0 e3 bc 6f 4f 19 a6 c4 28 cb 4b 6a 2b e3 68 93 cd af 97 60 38 99 09 8f 44 ff 00 fd 3a b7 31 8c 63 a7 54 b6 cf b7 f6 6f b3 f0 5d 05 5a e8 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii: ]p7oxF1Sr$Pw%pkcwW3OZuq'tZixa<ugEehGa<)us-9CHLse67dkYX_6zsTp7^QPY5uUoO(Kj+h`8D:1cTo]Z
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 7b 7d aa 0a 6a 61 3e 4d 4f 13 35 0e 2d 46 5c d3 4f 49 19 d9 61 95 cc 79 22 31 dd bf 79 dd 5d 43 aa 16 31 96 ed 5b e6 ec c7 6f 77 ea f1 25 09 4b 8a 4e dd ef 8e af 9c eb 88 d8 ed 98 4c 6d c2 b0 56 56 47 06 19 8f 4d 13 9f 51 76 6f 58 15 17 3a 9d 1d 86 b5 8e 2f 2f 76 c7 ea b7 bb 81 7e 21 7e de 1a e4 a5 73 8a 7e b5 7b bc 28 cc a3 ce 47 87 a1 66 3c 0b ba d5 4b 7e b9 d9 b8 de cf 25 3e 0d 63 94 d3 52 df aa 00 32 e4 55 a1 b2 0a 8a 8e a1 d8 c6 3a 58 d6 eb b6 bf f6 b6 af 33 d5 c3 2b 92 e3 af 67 75 1b ac 7e 9e 85 dc 55 6e 91 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 06 33 c9 5f 87 d9 0f f2 e9 bf c2 54 a1 d6 62 af e6 fd 7b e4 44 04 04 04 04 04 16 ff 00 d9 ef 7d 65 86 4e 50 ac Data Ascii: {}ja>MO5-F\OIay"1y]C1[ow%KNLmVVGMQvoX://v~!~s~{(Gf<K~%>cR2U:X3+gu~Un3_Tb{D}eNP
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: b3 1e 05 dd 6a a5 bf 5c ec dc 6f 67 92 9f 06 b1 ca 69 a9 6f d5 00 19 72 2a d0 d9 05 45 47 50 ec 63 1d 2c 6b 75 db 5f fb 5b 57 99 ea e1 95 c9 71 d7 b3 ba 8d d6 3f 4f 42 ee 2a b7 48 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 83 cd b1 de e9 f2 1b 6b 2b a8 44 82 17 c9 23 07 58 d1 dc 6f 73 1d d8 7e f6 94 1e 92 02 02 02 02 02 0c 67 92 bf 0f b2 1f e5 d3 7f 84 a9 43 ac c5 5f cd fa f7 c8 88 08 08 08 08 08 2d f7 b3 ca 78 e9 6b f9 36 79 eb e3 b5 c7 16 35 d4 fa e9 5d 23 59 4a 01 79 32 b8 b1 cd 78 0d fb c7 a5 cd 77 bb d8 8f 55 4f 9b 47 d1 f6 ef 46 5d 56 65 90 d3 63 d9 6d ae 4b e5 f2 b6 f9 45 c3 38 dd 7b 9c 25 af b9 d4 49 57 9b dc 8b 8f 99 24 51 3d fd 2c ea 3e 61 2e 6b 5b a1 bd e8 ef cb 42 57 2d cb Data Ascii: j\ogiorEGPc,ku_[Wq?OBHk+D#Xos~gC_-xk6y5]#YJy2xwUOGF]VecmKE8{%IW$Q=,>a.k[BW-
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 04 04 04 04 04 1e 46 33 7d 8f 25 b4 47 70 a7 8d d0 b2 49 65 8c 31 c4 13 fa 39 5d 19 3d be 65 bb 41 eb a0 20 20 20 20 20 f0 33 93 52 30 ab f3 ad 94 6d b8 d6 32 db 50 fa 6a 37 c6 e7 8a 99 44 6e 2c 8c b5 a4 38 ed c0 0d 02 0a 0a 51 e2 07 d9 59 87 e6 ff 00 49 ba f0 e5 4f d9 1b b3 f6 ef a1 06 f5 d1 cc ef 97 97 b1 e5 ef fd 82 d6 b4 7e a1 2a df 0f 9c 5c 87 0d cd f4 47 4b 5b 7c cd e1 c7 3f e0 6b ab e9 39 16 c5 51 4d 4f d7 d3 15 ca 16 ba 4a 59 f7 e9 d3 2e 86 89 fd 97 06 bb f7 2b ec 3e 32 cd fe ac 98 46 6b ac 10 10 10 10 5c 0f 67 75 64 76 eb af 25 d5 54 d4 d0 d1 45 4f 8e 09 1f 53 5d 17 9b 04 0d 05 e4 be 56 02 3a 98 df bc 5b b1 b1 f1 54 f9 b4 75 73 7e 68 cb aa 93 f2 ec c2 93 3c b3 dd 2f 59 0d c2 b2 d7 c3 94 35 a3 e9 b5 92 6a 2b 96 7f 5c c7 6b 4d 20 35 c2 21 d2 40 60 Data Ascii: F3}%GpIe19]=eA 3R0m2Pj7Dn,8QYIO~*\GK[\|?k9QMOJY.+>2Fk\gudv%TEOS]V:[Tus~h</Y5j+\kM 5!@`
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: cf ea b7 19 6c 85 3a d5 f9 51 18 47 4f 9a 59 c1 3d 9f 9c 83 cb 1c 95 59 91 73 8d d6 96 4a 29 ea 84 f5 92 52 ce 5f 25 73 b4 d3 d0 d7 74 86 c5 1b 77 d1 db 6e 01 9a 6b 40 d3 97 2c f3 8b 36 ac f3 78 78 b6 46 c4 a5 2e 26 c2 31 5e 1e c7 71 86 50 18 ad f4 6e 96 db 48 29 68 c3 21 0d 65 2c 23 a7 f4 71 8f 50 df 75 bb 1e 87 43 61 79 e9 5c 94 ba d2 75 46 11 67 4d 68 60 01 a3 40 76 00 7a 69 45 37 e3 98 d7 39 ae 70 69 73 7e e9 23 b8 fe 08 39 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 45 dc c5 e2 3f 00 e0 bb 4b eb 79 0b 20 a2 a1 76 8f 95 4a 24 eb 9a 67 0f 83 23 6e dc e3 be c7 40 eb e2 b7 58 c3 5c bb 2d 36 e2 c6 d6 b7 fc 41 fb 55 72 ac d3 e9 36 9e 18 a0 fb 35 6b 93 6c fa ca b1 8d 92 a6 46 9d 8d b6 3e ec 66 Data Ascii: l:QGOY=YsJ)R_%stwnk@,6xxF.&1^qPnH)h!e,#qPuCay\uFgMh`@vziE79pis~#9E?Ky vJ$g#n@X\-6AUr65klF>f
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 7b 83 b1 3c 7e 42 43 6d f6 a9 5c d7 bd 87 7d a4 98 69 c7 b1 d1 e9 0c 04 7a 82 bd 06 1b 2b b3 6b 8a 5b ea 8a b4 12 5c ed bb b9 3e a5 59 8c bb 03 e5 7c 93 8e be 91 05 86 b2 39 ed 55 fd ab ec f7 08 19 57 41 5a de dd a5 81 e0 b1 c7 b7 de d0 70 f8 10 b4 5d b1 6e e7 5b a4 65 df 46 e3 2e 53 ff 00 33 97 fa 2c c9 25 ff 00 b9 a9 74 95 76 4a a7 9f d9 93 de 9e 97 64 fe b7 9a c1 f3 68 5a bf b8 b5 fa a9 f1 fe 45 81 f0 7d c5 17 6c 06 b3 94 28 f9 32 c5 72 92 cf 70 c4 df ef db 35 50 cb ad 31 12 75 8a 49 63 25 92 b9 cd 3a 1d 2e f5 70 f4 55 f8 fc 44 67 cd ca dc b7 ed f7 79 a3 2e ab ad cd 16 56 de 2b 2d 57 df 10 99 0d b7 8e f1 ea 3a 30 cb 06 09 6c 67 d2 ae b4 b4 83 fc 9c 6d a7 00 32 37 3d ad ef 2c a4 69 da 6b 80 d7 48 df 87 bb cd c6 51 c3 c7 55 7b 65 d8 e7 e6 a5 3e b2 34 bf Data Ascii: {<~BCm\}iz+k[\>Y\|9UWAZp]n[eF.S3,%tvJdhZE}l(2rp5P1uIc%:.pUDgy.V+-W:0lgm27=,ikHQU{e>4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49854	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	638	OUT	GET /dist/runtime.ae7f2517edfa26fd2d54.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:48 UTC	816	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: application/javascript Content-Length: 1293 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 ETag: "1dacc8651264a0d" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202248Z-15b94bb6ff9j5wxz0ew5xzhr540000000arg00000000e7zb x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-19 20:22:48 UTC	1293	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 65 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 72 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 69 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 61 6d 64 4f 3d 7b 7d 2c 72 3d 5b 5d 2c 6f 2e 4f 3d 28 65 2c 74 2c 6e 2c 69 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 75 3d 30 3b 75 3c 72 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 74 3d 72 5b 75 5d 5b 30 5d 2c Data Ascii: (()=>{"use strict";var r,e={},t={};function o(r){var n=t[r];if(void 0!==n)return n.exports;var i=t[r]={exports:{}};return e[r].call(i.exports,i,i.exports,o),i.exports}o.m=e,o.amdO={},r=[],o.O=(e,t,n,i)=>{if(!t){var a=1/0;for(u=0;u<r.length;u++){t=r[u][0],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49853	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	643	OUT	GET /dist/sharedVendor.48f94c21b16af0164137.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:48 UTC	817	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: application/javascript Content-Length: 40271 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 ETag: "1dacc865126d24f" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202248Z-15b94bb6ff9nr2ftf8enwuxcrg0000000c0g00000000cwar x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-19 20:22:48 UTC	15567	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 68 61 72 65 64 56 65 6e 64 6f 72 2e 34 38 66 39 34 63 32 31 62 31 36 61 66 30 31 36 34 31 33 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 30 5d 2c 7b 38 35 39 35 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 Data Ascii: /! For license information please see sharedVendor.48f94c21b16af0164137.js.LICENSE.txt /"use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[470],{8595:(t,e,n)=>{function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerab
2024-07-19 20:22:48 UTC	16384	IN	Data Raw: 6f 6e 3a 50 2c 67 65 74 4c 69 6d 69 74 3a 41 2c 65 78 63 65 65 64 65 64 4c 69 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3d 67 28 65 29 3f 50 28 29 3a 65 3b 76 61 72 20 6e 3d 21 30 21 3d 3d 74 26 26 6d 28 65 29 3c 6d 28 41 28 21 31 29 29 2c 69 3d 21 31 21 3d 3d 74 26 26 6d 28 65 29 3e 6d 28 41 28 21 30 29 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 69 7d 2c 72 65 70 6f 73 69 74 69 6f 6e 3a 77 7d 7d 2c 43 6f 6e 74 72 6f 6c 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 72 2c 73 2c 75 3d 4d 74 28 74 29 2c 63 3d 75 2e 6f 6e 2c 6c 3d 75 2e 65 6d 69 74 2c 64 3d 65 2e 4d 6f 76 65 2c 66 3d 64 2e 67 65 74 50 6f 73 69 74 69 6f 6e 2c 68 3d 64 2e 67 65 74 4c 69 6d 69 74 2c 70 3d 64 2e 74 6f 50 6f 73 69 74 69 6f 6e 2c 76 3d Data Ascii: on:P,getLimit:A,exceededLimit:function(t,e){e=g(e)?P():e;var n=!0!==t&&m(e)<m(A(!1)),i=!1!==t&&m(e)>m(A(!0));return n\|\|i},reposition:w}},Controller:function(t,e,n){var i,o,r,s,u=Mt(t),c=u.on,l=u.emit,d=e.Move,f=d.getPosition,h=d.getLimit,p=d.toPosition,v=
2024-07-19 20:22:48 UTC	8320	IN	Data Raw: 74 20 65 3d 74 2e 64 61 74 61 3b 69 66 28 65 2e 69 6e 64 65 78 4f 66 28 6c 29 3e 3d 30 29 7b 63 6f 6e 73 74 20 69 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6f 3d 65 2e 73 70 6c 69 74 28 66 29 2c 72 3d 6f 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 72 3b 65 2b 2b 29 7b 6c 65 74 20 6e 2c 72 3d 6f 5b 65 5d 3b 69 66 28 22 22 3d 3d 3d 72 29 6e 3d 67 28 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 79 2e 65 78 65 63 28 72 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 76 28 74 5b 32 5d 2c 68 29 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 30 2c 74 2e 69 6e 64 65 78 29 2b 74 5b 31 5d 2b 74 5b 32 5d 2e 73 6c 69 63 65 28 30 2c 2d 35 29 2b 74 5b 33 5d 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 72 29 7d 69 2e 69 6e Data Ascii: t e=t.data;if(e.indexOf(l)>=0){const i=t.parentNode,o=e.split(f),r=o.length-1;for(let e=0;e<r;e++){let n,r=o[e];if(""===r)n=g();else{const t=y.exec(r);null!==t&&v(t[2],h)&&(r=r.slice(0,t.index)+t[1]+t[2].slice(0,-5)+t[3]),n=document.createTextNode(r)}i.in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49858	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	650	OUT	GET /api/public/content/671e06972e724c10abdefd7d9b4967f2?v=a7fbf3d3&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/svg+xml Content-Length: 3744 Connection: close CF-Ray: 8a5d6cfa5ea95e6c-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 199 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-shutterstock-white.svg; filename*=utf-8''logo-shutterstock-white.svg ETag: "0x8DC99D03A584B2D" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140987 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	727	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <g i
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 39 31 2e 34 32 2c 35 37 2e 34 36 6c 2d 35 2e 33 39 2c 32 2e 39 38 76 36 2e 33 31 68 2d 32 2e 38 34 76 35 2e 31 35 68 32 2e 38 34 76 31 31 2e 31 33 63 30 2c 34 2e 37 35 2c 31 2e 39 35 2c 39 2e 30 32 2c 38 2e 38 35 2c 39 2e 30 32 68 32 2e 31 35 76 2d 35 2e 31 36 68 2d 2e 38 31 63 2d 33 2e 33 39 2c 30 2d 34 2e 38 31 2d 31 2e 39 35 2d 34 2e 38 31 2d 34 2e 36 31 76 2d 31 30 2e 33 39 68 36 2e 31 38 76 2d 35 2e 31 35 68 2d 36 2e 31 38 76 2d 39 2e 32 38 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 31 38 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 33 33 2e 34 37 2c 37 31 2e 34 39 63 32 2e 31 2c 30 2c 34 2e 32 35 2e 39 35 2c 34 2e 39 2c 33 2e 32 37 6c 34 2e 38 Data Ascii: class="cls-1" d="M191.42,57.46l-5.39,2.98v6.31h-2.84v5.15h2.84v11.13c0,4.75,1.95,9.02,8.85,9.02h2.15v-5.16h-.81c-3.39,0-4.81-1.95-4.81-4.61v-10.39h6.18v-5.15h-6.18v-9.28"/> <path id="path18" class="cls-1" d="M233.47,71.49c2.1,0,4.25.95,4.9,3.27l4.8
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 36 2e 32 68 35 2e 33 38 76 2d 31 36 2e 39 34 63 30 2d 35 2e 31 31 2d 33 2e 37 2d 38 2e 38 36 2d 39 2e 35 33 2d 38 2e 38 36 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 33 30 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 38 35 2e 39 38 2c 38 37 2e 30 32 63 2d 31 2e 30 32 2e 35 35 2d 32 2e 33 32 2e 38 37 2d 33 2e 36 31 2e 38 37 2d 34 2e 30 32 2c 30 2d 35 2e 35 33 2d 32 2e 30 35 2d 35 2e 35 33 2d 34 2e 38 37 76 2d 31 36 2e 32 36 68 2d 35 2e 33 39 76 31 36 2e 33 37 63 30 2c 36 2e 33 36 2c 33 2e 36 37 2c 39 2e 34 33 2c 31 30 2e 32 35 2c 39 2e 34 33 73 36 2e 36 34 2d 2e 38 2c 39 2e 36 35 2d 32 2e 31 31 76 2d 32 33 2e 36 39 68 2d 35 2e 33 38 76 32 30 2e 32 37 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 Data Ascii: 6.2h5.38v-16.94c0-5.11-3.7-8.86-9.53-8.86"/> <path id="path30" class="cls-1" d="M85.98,87.02c-1.02.55-2.32.87-3.61.87-4.02,0-5.53-2.05-5.53-4.87v-16.26h-5.39v16.37c0,6.36,3.67,9.43,10.25,9.43s6.64-.8,9.65-2.11v-23.69h-5.38v20.27"/> <path id="p
2024-07-19 20:22:48 UTC	279	IN	Data Raw: 39 38 2e 38 33 76 2e 30 35 63 30 2c 2e 33 36 2d 2e 31 39 2e 36 37 2d 2e 35 33 2e 38 33 6c 2e 35 2e 38 39 73 30 2c 2e 30 35 2d 2e 30 33 2e 30 35 68 2d 2e 35 39 2c 30 5a 4d 32 37 31 2e 35 32 2c 36 36 2e 36 38 63 2d 31 2e 31 34 2c 30 2d 31 2e 39 37 2e 38 39 2d 31 2e 39 37 2c 32 2e 30 33 73 2e 38 34 2c 31 2e 39 37 2c 31 2e 39 37 2c 31 2e 39 37 2c 31 2e 39 36 2d 2e 39 2c 31 2e 39 36 2d 31 2e 39 37 2d 2e 38 39 2d 32 2e 30 33 2d 31 2e 39 36 2d 32 2e 30 33 5a 4d 32 37 31 2e 35 32 2c 37 31 2e 32 37 63 2d 31 2e 34 35 2c 30 2d 32 2e 36 34 2d 31 2e 31 31 2d 32 2e 36 34 2d 32 2e 35 36 73 31 2e 31 38 2d 32 2e 36 33 2c 32 2e 36 34 2d 32 2e 36 33 2c 32 2e 36 33 2c 31 2e 31 38 2c 32 2e 36 33 2c 32 2e 36 33 2d 31 2e 31 36 2c 32 2e 35 36 2d 32 2e 36 33 2c 32 2e 35 36 22 2f Data Ascii: 98.83v.05c0,.36-.19.67-.53.83l.5.89s0,.05-.03.05h-.59,0ZM271.52,66.68c-1.14,0-1.97.89-1.97,2.03s.84,1.97,1.97,1.97,1.96-.9,1.96-1.97-.89-2.03-1.96-2.03ZM271.52,71.27c-1.45,0-2.64-1.11-2.64-2.56s1.18-2.63,2.64-2.63,2.63,1.18,2.63,2.63-1.16,2.56-2.63,2.56"/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49859	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	650	OUT	GET /api/public/content/b0d281d8bb0e4b8a89ee75e7f1de6bbb?v=a9fa1595&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	646	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/svg+xml Content-Length: 3816 Connection: close CF-Ray: 8a5d6cfa593715a3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 199 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-cushman_andwakefield.svg; filename*=utf-8''logo-cushman_andwakefield.svg ETag: "0x8DC99D03A584B2D" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140979 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	723	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 70 61 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <pat
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2e 33 37 76 2d 32 33 2e 30 38 6c 2d 33 2e 33 37 2c 32 2e 34 31 76 32 30 2e 36 39 68 30 5a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 39 2e 33 33 2c 39 36 2e 32 32 68 33 2e 33 37 76 2d 31 38 2e 32 38 6c 2d 33 2e 33 37 2c 32 2e 35 37 76 31 35 2e 37 32 68 30 5a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 33 35 2e 32 35 2c 37 31 2e 39 38 63 2d 34 2e 38 32 2c 30 2d 37 2e 38 38 2d 32 2e 37 33 2d 37 2e 38 38 2d 38 2e 30 31 76 2d 31 30 2e 32 36 68 34 2e 30 32 76 31 30 2e 32 36 63 30 2c 32 2e 38 39 2c 31 2e 34 35 2c 34 2e 34 39 2c 34 2e 30 32 2c 34 2e 34 39 73 33 2e 38 36 2d 31 2e 36 2c 33 2e 38 36 2d 34 2e 34 39 76 2d 31 30 2e 32 36 68 34 2e 30 32 76 31 30 2e 31 63 Data Ascii: .37v-23.08l-3.37,2.41v20.69h0Z"/> <path class="cls-1" d="M19.33,96.22h3.37v-18.28l-3.37,2.57v15.72h0Z"/> <path class="cls-1" d="M135.25,71.98c-4.82,0-7.88-2.73-7.88-8.01v-10.26h4.02v10.26c0,2.89,1.45,4.49,4.02,4.49s3.86-1.6,3.86-4.49v-10.26h4.02v10.1c
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 37 32 2e 31 34 2c 39 36 2e 32 32 68 2d 37 2e 30 38 76 2d 31 38 2e 31 32 68 37 2e 30 38 63 35 2e 37 39 2c 30 2c 39 2e 36 36 2c 34 2e 30 31 2c 39 2e 36 36 2c 38 2e 39 38 76 2e 31 36 63 30 2c 35 2e 31 33 2d 33 2e 38 36 2c 38 2e 39 38 2d 39 2e 36 36 2c 38 2e 39 38 68 30 5a 4d 32 37 37 2e 36 2c 38 37 2e 32 35 63 30 2d 33 2e 32 31 2d 32 2e 32 35 2d 35 2e 34 36 2d 35 2e 34 37 2d 35 2e 34 36 68 2d 33 2e 30 36 76 31 30 2e 39 31 68 33 2e 30 36 63 33 2e 32 32 2c 30 2c 35 2e 34 37 2d 32 2e 32 35 2c 35 2e 34 37 2d 35 2e 34 36 68 30 5a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 31 35 2e 35 32 2c 36 38 2e 32 37 63 2d 33 2e 33 38 2c 30 2d 35 2e 36 33 2d 32 2e Data Ascii: h class="cls-1" d="M272.14,96.22h-7.08v-18.12h7.08c5.79,0,9.66,4.01,9.66,8.98v.16c0,5.13-3.86,8.98-9.66,8.98h0ZM277.6,87.25c0-3.21-2.25-5.46-5.47-5.46h-3.06v10.91h3.06c3.22,0,5.47-2.25,5.47-5.46h0Z"/> <path class="cls-1" d="M115.52,68.27c-3.38,0-5.63-2.
2024-07-19 20:22:48 UTC	355	IN	Data Raw: 33 2e 32 31 2e 31 36 2c 31 2e 34 34 2e 39 37 2c 32 2e 35 37 2c 31 2e 36 2c 33 2e 33 36 2d 32 2e 30 39 2e 38 31 2d 33 2e 36 39 2c 33 2e 30 35 2d 33 2e 35 34 2c 35 2e 32 39 2e 31 36 2c 33 2e 30 35 2c 32 2e 37 34 2c 35 2e 36 31 2c 35 2e 39 35 2c 35 2e 36 31 73 33 2e 36 39 2d 2e 39 37 2c 34 2e 39 39 2d 32 2e 34 31 6c 31 2e 36 31 2c 32 2e 30 38 68 34 2e 36 37 6c 2d 34 2e 30 32 2d 34 2e 34 39 76 2e 30 33 5a 4d 32 37 32 2e 37 32 2c 36 37 2e 32 39 63 2d 2e 39 37 2c 31 2e 31 32 2d 31 2e 39 33 2c 31 2e 36 2d 32 2e 39 2c 31 2e 36 73 2d 32 2e 34 32 2d 2e 39 37 2d 32 2e 34 32 2d 32 2e 34 31 63 2d 2e 31 36 2d 2e 38 31 2e 34 39 2d 31 2e 39 32 2c 32 2e 32 35 2d 32 2e 37 33 6c 33 2e 30 36 2c 33 2e 35 32 68 30 5a 4d 32 37 30 2e 34 37 2c 35 39 2e 37 35 63 2d 2e 34 39 2d 2e Data Ascii: 3.21.16,1.44.97,2.57,1.6,3.36-2.09.81-3.69,3.05-3.54,5.29.16,3.05,2.74,5.61,5.95,5.61s3.69-.97,4.99-2.41l1.61,2.08h4.67l-4.02-4.49v.03ZM272.72,67.29c-.97,1.12-1.93,1.6-2.9,1.6s-2.42-.97-2.42-2.41c-.16-.81.49-1.92,2.25-2.73l3.06,3.52h0ZM270.47,59.75c-.49-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49860	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	650	OUT	GET /api/public/content/2acde0709cdf4ae2ada632bc3bb69977?v=360b4f6e&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	620	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/svg+xml Content-Length: 4997 Connection: close CF-Ray: 8a5d6cfa7bb00f98-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 199 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-vodacom.svg; filename*=utf-8''logo-vodacom.svg ETag: "0x8DC99D03A6F5236" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140989 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	749	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <g i
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 36 6c 2d 35 2e 36 39 2c 31 34 68 2d 33 2e 31 34 6c 2d 35 2e 38 36 2d 31 34 68 33 2e 38 33 5a 22 2f 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 67 31 34 32 37 30 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 31 34 32 36 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 32 31 2e 30 33 2c 39 37 2e 39 31 63 30 2d 2e 35 38 2d 2e 30 37 2d 31 2e 31 34 2d 2e 32 31 2d 31 2e 36 36 73 2d 2e 33 34 2d 2e 39 38 2d 2e 36 31 2d 31 2e 33 36 2d 2e 36 2d 2e 36 38 2d 2e 39 38 2d 2e 39 63 2d 2e 33 39 2d 2e 32 32 2d 2e 38 34 2d 2e 33 34 2d 31 2e 33 37 2d 2e 33 34 73 2d 2e 39 38 2e 31 31 2d 31 2e 33 37 2e 33 34 2d 2e 37 32 2e 35 33 2d 2e 39 38 2e 39 63 2d 2e 32 37 2e 33 38 2d 2e 34 37 2e 38 33 2d 2e 36 31 2c 31 2e 33 36 73 2d 2e 32 31 2c 31 2e Data Ascii: 6l-5.69,14h-3.14l-5.86-14h3.83Z"/> <g id="g14270"> <path id="path14262" class="cls-1" d="M121.03,97.91c0-.58-.07-1.14-.21-1.66s-.34-.98-.61-1.36-.6-.68-.98-.9c-.39-.22-.84-.34-1.37-.34s-.98.11-1.37.34-.72.53-.98.9c-.27.38-.47.83-.61,1.36s-.21,1.
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 39 2e 31 32 2c 39 38 2e 34 32 63 2d 2e 33 39 2e 30 32 2d 2e 37 39 2e 30 35 2d 31 2e 32 2e 31 73 2d 2e 38 2e 31 31 2d 31 2e 31 37 2e 31 39 63 2d 2e 37 38 2e 31 35 2d 31 2e 33 32 2e 34 32 2d 31 2e 36 33 2e 38 2d 2e 33 31 2e 33 37 2d 2e 34 35 2e 37 39 2d 2e 34 35 2c 31 2e 32 34 73 2e 31 37 2e 38 34 2e 35 31 2c 31 2e 31 32 63 2e 33 34 2e 32 38 2e 38 32 2e 34 32 2c 31 2e 34 35 2e 34 32 2e 34 37 2c 30 2c 2e 39 32 2d 2e 31 2c 31 2e 33 36 2d 2e 32 39 73 2e 38 32 2d 2e 34 34 2c 31 2e 31 33 2d 2e 37 33 76 2d 32 2e 38 35 68 30 5a 4d 31 34 39 2e 34 31 2c 31 30 34 2e 39 37 6c 2d 2e 31 35 2d 31 2e 30 35 63 2d 2e 33 39 2e 34 33 2d 2e 38 39 2e 37 37 2d 31 2e 34 39 2c 31 2e 30 31 2d 2e 36 2e 32 34 2d 31 2e 32 Data Ascii: class="cls-1" d="M149.12,98.42c-.39.02-.79.05-1.2.1s-.8.11-1.17.19c-.78.15-1.32.42-1.63.8-.31.37-.45.79-.45,1.24s.17.84.51,1.12c.34.28.82.42,1.45.42.47,0,.92-.1,1.36-.29s.82-.44,1.13-.73v-2.85h0ZM149.41,104.97l-.15-1.05c-.39.43-.89.77-1.49,1.01-.6.24-1.2
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 39 38 2d 2e 30 35 2c 31 2e 34 2d 2e 31 36 2e 34 31 2d 2e 31 31 2e 37 37 2d 2e 32 33 2c 31 2e 30 38 2d 2e 33 37 2e 33 31 2d 2e 31 35 2e 35 36 2d 2e 32 39 2e 37 36 2d 2e 34 34 73 2e 33 35 2d 2e 32 38 2e 34 34 2d 2e 33 37 6c 31 2e 30 32 2c 32 2e 39 33 5a 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 67 31 34 32 37 36 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 31 34 32 37 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 37 37 2e 36 33 2c 39 37 2e 38 38 63 30 2d 2e 35 38 2d 2e 30 37 2d 31 2e 31 33 2d 2e 32 2d 31 2e 36 35 2d 2e 31 34 2d 2e 35 32 2d 2e 33 34 2d 2e 39 37 2d 2e 36 2d 31 2e 33 34 2d 2e 32 37 2d 2e 33 37 2d 2e 36 2d 2e 36 37 2d 2e 39 38 2d 2e 38 39 73 2d 2e 38 34 2d 2e 33 34 2d 31 Data Ascii: 98-.05,1.4-.16.41-.11.77-.23,1.08-.37.31-.15.56-.29.76-.44s.35-.28.44-.37l1.02,2.93Z"/> </g> <g id="g14276"> <path id="path14272" class="cls-1" d="M177.63,97.88c0-.58-.07-1.13-.2-1.65-.14-.52-.34-.97-.6-1.34-.27-.37-.6-.67-.98-.89s-.84-.34-1
2024-07-19 20:22:48 UTC	141	IN	Data Raw: 37 36 2d 2e 32 36 2c 31 2e 35 37 2d 2e 33 39 2c 32 2e 34 34 2d 2e 33 39 2c 31 2e 30 34 2c 30 2c 31 2e 39 31 2e 31 34 2c 32 2e 36 31 2e 34 73 31 2e 32 37 2e 36 36 2c 31 2e 36 39 2c 31 2e 31 35 63 2e 34 33 2e 35 2e 37 33 2c 31 2e 31 31 2e 39 31 2c 31 2e 38 35 73 2e 32 37 2c 31 2e 35 36 2e 32 37 2c 32 2e 35 31 76 38 2e 33 33 68 2d 33 2e 35 37 5a 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: 76-.26,1.57-.39,2.44-.39,1.04,0,1.91.14,2.61.4s1.27.66,1.69,1.15c.43.5.73,1.11.91,1.85s.27,1.56.27,2.51v8.33h-3.57Z"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49857	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	650	OUT	GET /api/public/content/9bd89e511d2b44ccaeb12199e8897000?v=411770ce&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	643	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/svg+xml Content-Length: 12263 Connection: close CF-Ray: 8a5d6cfa7f43187d-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 199 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-aston_martin-white.svg; filename*=utf-8''logo-aston_martin-white.svg ETag: "0x8DC99D03A57FD1E" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140977 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	726	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; fill-rule: evenodd; stroke-width: 0px; }
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2e 35 37 2e 39 39 2c 31 2e 38 39 2c 33 2e 33 35 2c 32 2e 32 31 2e 30 34 2c 30 2c 2e 37 33 2e 30 38 2c 31 2e 31 31 2e 38 31 2c 30 2c 30 2c 31 2e 37 32 2c 33 2e 30 35 2c 31 2e 37 32 2c 33 2e 30 35 2e 35 2e 39 38 2c 31 2e 32 2c 31 2e 33 34 2c 32 2e 34 38 2c 31 2e 37 34 2c 30 2c 30 2c 33 31 2e 32 38 2c 39 2e 32 34 2c 33 31 2e 32 38 2c 39 2e 32 34 2c 31 2e 30 36 2e 33 32 2c 31 2e 35 2c 31 2e 35 32 2c 31 2e 35 2c 31 2e 35 32 2e 37 35 2c 31 2e 39 34 2c 31 2e 37 32 2c 33 2e 35 34 2c 36 2e 36 2c 35 2e 30 32 2c 30 2c 30 2c 32 35 2e 35 39 2c 37 2e 30 33 2c 32 35 2e 35 39 2c 37 2e 30 33 2e 33 31 2e 31 2c 33 2e 32 34 2c 31 2c 35 2e 34 35 2d 31 2e 31 34 2c 30 2c 30 2c 35 2e 39 39 2d 35 2e 37 35 2c 36 2d 35 2e 37 36 2c 30 2c 30 2c 2e 32 35 2d 2e 32 36 2e 35 39 2d 2e 32 Data Ascii: .57.99,1.89,3.35,2.21.04,0,.73.08,1.11.81,0,0,1.72,3.05,1.72,3.05.5.98,1.2,1.34,2.48,1.74,0,0,31.28,9.24,31.28,9.24,1.06.32,1.5,1.52,1.5,1.52.75,1.94,1.72,3.54,6.6,5.02,0,0,25.59,7.03,25.59,7.03.31.1,3.24,1,5.45-1.14,0,0,5.99-5.75,6-5.76,0,0,.25-.26.59-.2
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2d 31 2e 31 34 2d 31 2e 32 35 2d 31 2e 36 39 6c 35 2e 33 32 2d 2e 33 35 76 31 2e 34 39 6c 2d 34 2e 30 37 2e 35 35 5a 4d 31 30 36 2e 34 37 2c 35 34 2e 35 33 63 2d 2e 34 34 2d 2e 36 33 2d 2e 38 34 2d 31 2e 32 35 2d 31 2e 32 31 2d 31 2e 38 34 68 37 2e 32 39 76 31 2e 34 33 68 30 6c 2d 36 2e 30 38 2e 34 5a 4d 36 32 2e 36 33 2c 35 31 2e 36 68 30 63 2d 2e 39 35 2d 2e 30 37 2d 31 2e 31 35 2d 2e 31 38 2d 31 2e 34 35 2d 2e 36 38 2c 30 2c 30 2d 31 2e 32 34 2d 32 2e 30 38 2d 31 2e 33 34 2d 32 2e 32 34 2d 2e 32 31 2d 2e 33 38 2d 2e 32 37 2d 2e 36 37 2d 2e 32 37 2d 2e 38 36 2e 30 32 2d 2e 35 31 2e 33 37 2d 2e 39 2c 31 2e 32 37 2d 2e 39 32 68 33 37 2e 32 38 63 32 2e 35 32 2c 30 2c 34 2e 30 31 2c 32 2e 36 31 2c 34 2e 30 31 2c 32 2e 36 31 2e 33 33 2e 36 31 2e 37 32 2c 31 Data Ascii: -1.14-1.25-1.69l5.32-.35v1.49l-4.07.55ZM106.47,54.53c-.44-.63-.84-1.25-1.21-1.84h7.29v1.43h0l-6.08.4ZM62.63,51.6h0c-.95-.07-1.15-.18-1.45-.68,0,0-1.24-2.08-1.34-2.24-.21-.38-.27-.67-.27-.86.02-.51.37-.9,1.27-.92h37.28c2.52,0,4.01,2.61,4.01,2.61.33.61.72,1
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 38 2d 2e 30 37 2d 32 2e 32 32 2d 31 2e 38 37 2d 33 2e 31 32 2d 32 2e 37 33 68 38 2e 39 32 6c 2d 35 2e 37 39 2c 32 2e 37 33 5a 4d 31 31 31 2e 39 35 2c 37 38 2e 30 34 63 2d 33 2e 32 33 2d 31 2e 32 33 2d 33 2e 37 32 2d 32 2e 34 35 2d 34 2e 31 38 2d 33 2e 36 33 2d 2e 30 34 2d 2e 31 31 2d 2e 32 37 2d 2e 37 34 2d 2e 38 2d 31 2e 33 34 2c 31 2e 30 39 2d 2e 32 31 2c 32 2d 2e 36 37 2c 32 2e 30 36 2d 2e 37 2c 30 2c 30 2c 34 2e 33 37 2d 32 2e 30 36 2c 38 2e 37 33 2d 34 2e 31 31 2c 31 2e 35 38 2c 31 2e 32 35 2c 33 2e 32 31 2c 32 2e 33 39 2c 34 2e 38 38 2c 33 2e 34 33 6c 2d 37 2e 37 32 2c 35 2e 35 36 73 2d 31 2e 36 33 2c 31 2e 32 32 2d 32 2e 39 37 2e 38 5a 4d 31 32 31 2e 32 31 2c 38 30 2e 36 38 68 30 73 30 2c 30 2c 30 2c 30 6c 2d 36 2e 38 34 2d 31 2e 38 38 63 2e 36 38 Data Ascii: 8-.07-2.22-1.87-3.12-2.73h8.92l-5.79,2.73ZM111.95,78.04c-3.23-1.23-3.72-2.45-4.18-3.63-.04-.11-.27-.74-.8-1.34,1.09-.21,2-.67,2.06-.7,0,0,4.37-2.06,8.73-4.11,1.58,1.25,3.21,2.39,4.88,3.43l-7.72,5.56s-1.63,1.22-2.97.8ZM121.21,80.68h0s0,0,0,0l-6.84-1.88c.68
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 31 33 2e 37 33 63 2d 31 2e 39 37 2e 32 33 2d 33 2e 39 37 2e 33 35 2d 36 2e 30 32 2e 33 37 5a 4d 31 35 37 2e 33 31 2c 38 33 2e 38 37 68 30 73 2d 33 2e 34 37 2d 33 2e 33 33 2d 34 2e 36 34 2d 34 2e 34 35 63 31 2e 36 35 2d 2e 30 36 2c 33 2e 32 38 2d 2e 31 38 2c 34 2e 38 38 2d 2e 33 37 6c 31 2e 32 37 2c 34 2e 36 33 63 2e 30 34 2e 31 36 2e 32 39 2c 31 2e 31 38 2c 31 2c 31 2e 39 38 2d 2e 39 38 2d 2e 32 38 2d 31 2e 32 37 2d 2e 35 37 2d 32 2e 35 31 2d 31 2e 37 39 5a 4d 31 36 32 2e 35 37 2c 38 35 2e 35 31 68 30 63 2d 2e 35 38 2e 31 33 2d 31 2e 30 36 2e 30 37 2d 31 2e 34 38 2d 2e 31 38 2d 2e 39 2d 2e 35 35 2d 31 2e 31 39 2d 31 2e 38 32 2d 31 2e 32 31 2d 31 2e 39 6c 2d 31 2e 32 35 2d 34 2e 35 33 63 32 2e 31 38 2d 2e 33 2c 34 2e 33 31 2d 2e 37 33 2c 36 2e 33 39 2d 31 Data Ascii: 13.73c-1.97.23-3.97.35-6.02.37ZM157.31,83.87h0s-3.47-3.33-4.64-4.45c1.65-.06,3.28-.18,4.88-.37l1.27,4.63c.04.16.29,1.18,1,1.98-.98-.28-1.27-.57-2.51-1.79ZM162.57,85.51h0c-.58.13-1.06.07-1.48-.18-.9-.55-1.19-1.82-1.21-1.9l-1.25-4.53c2.18-.3,4.31-.73,6.39-1
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 6c 2d 33 34 2e 36 31 2d 32 2e 33 31 63 2e 34 35 2d 2e 36 37 2e 38 36 2d 31 2e 33 31 2c 31 2e 32 34 2d 31 2e 39 32 68 33 39 2e 34 35 63 2d 2e 31 2e 31 33 2d 2e 32 2e 32 38 2d 2e 33 2e 34 34 5a 4d 32 34 31 2e 35 34 2c 34 38 2e 36 38 68 30 73 2d 31 2e 33 34 2c 32 2e 32 34 2d 31 2e 33 34 2c 32 2e 32 34 63 2d 2e 32 35 2e 34 32 2d 2e 34 31 2e 36 2d 31 2e 34 34 2e 36 37 2c 30 2c 30 2d 34 30 2e 36 39 2c 30 2d 34 30 2e 36 39 2c 30 2c 2e 34 35 2d 2e 37 38 2e 38 35 2d 31 2e 34 38 2c 31 2e 31 37 2d 32 2e 30 39 2e 30 31 2d 2e 30 32 2c 31 2e 34 35 2d 32 2e 36 31 2c 34 2e 30 31 2d 32 2e 36 31 68 33 37 2e 32 38 63 2e 33 39 2e 30 31 2e 39 2e 30 36 2c 31 2e 31 37 2e 35 2e 30 33 2e 30 36 2e 31 31 2e 31 38 2e 31 31 2e 34 31 2c 30 2c 2e 32 2d 2e 30 36 2e 34 38 2d 2e 32 37 2e Data Ascii: l-34.61-2.31c.45-.67.86-1.31,1.24-1.92h39.45c-.1.13-.2.28-.3.44ZM241.54,48.68h0s-1.34,2.24-1.34,2.24c-.25.42-.41.6-1.44.67,0,0-40.69,0-40.69,0,.45-.78.85-1.48,1.17-2.09.01-.02,1.45-2.61,4.01-2.61h37.28c.39.01.9.06,1.17.5.03.06.11.18.11.41,0,.2-.06.48-.27.
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2d 31 2e 38 34 2e 37 39 2d 31 2e 36 32 2c 30 2d 32 2e 36 36 2d 31 2e 31 39 2d 32 2e 36 36 2d 33 2e 30 33 2c 30 2d 32 2e 30 34 2c 31 2e 30 36 2d 33 2e 33 31 2c 32 2e 37 36 2d 33 2e 33 31 2e 38 2c 30 2c 31 2e 35 36 2e 33 35 2c 32 2e 30 32 2e 39 35 2e 35 31 2e 36 36 2e 36 32 2c 31 2e 33 35 2e 36 32 2c 32 2e 31 37 2c 30 2c 2e 30 34 2c 30 2c 2e 30 39 2c 30 2c 2e 31 34 2c 30 2c 2e 36 37 2d 2e 32 37 2c 31 2e 36 32 2d 2e 39 2c 32 2e 32 39 68 30 73 30 2c 30 2c 30 2c 30 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 5f 31 37 31 32 34 32 31 35 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 20 31 37 31 32 34 32 31 35 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 36 2e 31 34 2c 35 34 2e 35 31 68 2d 2e 36 32 76 35 2e 31 37 68 2d Data Ascii: -1.84.79-1.62,0-2.66-1.19-2.66-3.03,0-2.04,1.06-3.31,2.76-3.31.8,0,1.56.35,2.02.95.51.66.62,1.35.62,2.17,0,.04,0,.09,0,.14,0,.67-.27,1.62-.9,2.29h0s0,0,0,0Z"/> <path id="_171242152" data-name=" 171242152" class="cls-1" d="M146.14,54.51h-.62v5.17h-
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 31 2e 32 31 2e 30 36 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 5f 31 37 31 32 30 39 30 35 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 20 31 37 31 32 30 39 30 35 36 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 37 35 2e 39 38 2c 35 34 2e 35 31 68 2d 35 2e 32 31 76 2e 37 33 68 2e 30 37 63 2e 36 2d 2e 30 37 2c 31 2e 31 38 2d 2e 31 32 2c 32 2e 31 31 2d 2e 31 33 76 36 2e 34 68 31 2e 30 31 76 2d 36 2e 34 63 2e 37 31 2c 30 2c 31 2e 33 38 2e 30 34 2c 32 2e 30 31 2e 31 32 68 2e 30 37 73 30 2d 2e 37 33 2c 30 2d 2e 37 33 68 2d 2e 30 36 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 69 64 3d 22 5f 31 37 31 32 32 31 36 30 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 20 31 37 31 32 32 31 36 30 30 22 20 63 6c 61 Data Ascii: 1.21.06Z"/> <path id="_171209056" data-name=" 171209056" class="cls-1" d="M175.98,54.51h-5.21v.73h.07c.6-.07,1.18-.12,2.11-.13v6.4h1.01v-6.4c.71,0,1.38.04,2.01.12h.07s0-.73,0-.73h-.06Z"/> <polygon id="_171221600" data-name=" 171221600" cla
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 37 2c 33 2e 37 39 6c 34 2e 30 39 2c 35 2e 32 2e 39 35 2c 31 2e 31 32 2e 33 37 2e 35 63 2d 2e 34 31 2d 2e 30 32 2d 2e 37 37 2d 2e 30 36 2d 31 2e 31 35 2d 2e 30 36 73 2d 2e 37 37 2e 30 34 2d 31 2e 31 33 2e 30 36 63 2d 2e 34 33 2d 2e 36 32 2d 2e 38 33 2d 31 2e 31 38 2d 31 2e 32 35 2d 31 2e 37 34 6c 2d 32 2e 33 34 2d 33 2e 30 35 2d 31 2e 35 39 2d 31 2e 38 37 68 2d 2e 37 35 76 36 2e 36 36 63 2d 2e 33 32 2d 2e 30 32 2d 2e 36 2d 2e 30 36 2d 2e 38 37 2d 2e 30 36 2d 2e 33 2c 30 2d 2e 36 2e 30 34 2d 2e 38 37 2e 30 36 76 2d 31 33 2e 36 34 68 30 5a 4d 31 38 33 2e 30 37 2c 39 36 2e 38 34 63 2e 32 38 2e 30 32 2c 31 2e 35 34 2e 31 2c 32 2e 35 36 2d 2e 31 2c 31 2e 34 35 2d 2e 33 2c 32 2e 35 34 2d 31 2e 33 2c 32 2e 35 34 2d 32 2e 38 35 2c 30 2d 31 2e 33 38 2d 2e 37 2d 32 Data Ascii: 7,3.79l4.09,5.2.95,1.12.37.5c-.41-.02-.77-.06-1.15-.06s-.77.04-1.13.06c-.43-.62-.83-1.18-1.25-1.74l-2.34-3.05-1.59-1.87h-.75v6.66c-.32-.02-.6-.06-.87-.06-.3,0-.6.04-.87.06v-13.64h0ZM183.07,96.84c.28.02,1.54.1,2.56-.1,1.45-.3,2.54-1.3,2.54-2.85,0-1.38-.7-2
2024-07-19 20:22:48 UTC	585	IN	Data Raw: 73 30 2c 30 2c 30 2c 30 5a 4d 31 31 30 2e 31 31 2c 31 30 34 2e 33 63 2d 2e 33 32 2d 2e 30 32 2d 2e 35 39 2d 2e 30 36 2d 2e 38 37 2d 2e 30 36 2d 2e 33 2c 30 2d 2e 36 2e 30 34 2d 2e 38 37 2e 30 36 76 2d 31 32 2e 37 32 63 2d 32 2c 30 2d 33 2e 32 32 2e 31 32 2d 34 2e 33 34 2e 32 34 2e 30 32 2d 2e 32 2e 30 36 2d 2e 34 2e 30 36 2d 2e 36 73 2d 2e 30 34 2d 2e 33 38 2d 2e 30 36 2d 2e 36 68 31 30 2e 32 33 63 2d 2e 30 32 2e 32 32 2d 2e 30 36 2e 34 2d 2e 30 36 2e 36 73 2e 30 34 2e 34 2e 30 36 2e 36 63 2d 2e 39 39 2d 2e 31 32 2d 32 2e 33 38 2d 2e 32 34 2d 34 2e 31 34 2d 2e 32 34 76 31 32 2e 37 32 68 30 5a 4d 39 35 2e 35 37 2c 31 30 31 2e 35 37 63 2e 37 37 2c 31 2e 32 38 2c 31 2e 36 36 2c 32 2e 30 38 2c 33 2e 32 31 2c 32 2e 30 38 73 32 2e 37 36 2d 31 2e 33 34 2c 32 2e Data Ascii: s0,0,0,0ZM110.11,104.3c-.32-.02-.59-.06-.87-.06-.3,0-.6.04-.87.06v-12.72c-2,0-3.22.12-4.34.24.02-.2.06-.4.06-.6s-.04-.38-.06-.6h10.23c-.02.22-.06.4-.06.6s.04.4.06.6c-.99-.12-2.38-.24-4.14-.24v12.72h0ZM95.57,101.57c.77,1.28,1.66,2.08,3.21,2.08s2.76-1.34,2.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49856	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	650	OUT	GET /api/public/content/dd00d4036b494fd987dfa08614f988f5?v=2254cd74&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	624	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/svg+xml Content-Length: 3962 Connection: close CF-Ray: 8a5d6cfa9ca38c8a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 199 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-sky-white.svg; filename*=utf-8''logo-sky-white.svg ETag: "0x8DC99D03A714DBD" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140990 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: none; } .cls-1
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2c 35 2e 31 39 2d 31 2e 30 38 2c 35 2e 31 39 2d 36 2e 30 38 2c 30 2d 2e 36 35 2d 2e 30 37 2d 31 2e 33 32 2d 2e 32 2d 31 2e 39 35 2d 33 2e 37 37 2d 2e 34 36 2d 31 30 2e 36 35 2d 31 2e 31 36 2d 31 36 2e 33 2d 2e 35 33 2d 37 2e 34 36 2e 38 34 2d 31 31 2e 32 37 2c 35 2e 33 33 2d 31 31 2e 32 37 2c 31 30 2e 37 2e 30 32 2c 33 2e 30 32 2c 31 2e 35 32 2c 35 2e 38 34 2c 33 2e 39 39 2c 37 2e 35 36 68 2e 30 37 63 2e 32 2e 31 34 2e 35 37 2e 33 39 2e 38 35 2e 35 33 2c 32 2e 38 39 2c 31 2e 36 32 2c 39 2e 32 32 2c 32 2e 31 31 2c 31 32 2e 31 36 2c 31 2e 37 31 6c 37 2e 37 34 2d 31 2e 30 39 63 31 2e 39 33 2d 2e 32 37 2c 34 2e 31 36 2e 31 33 2c 34 2e 37 2c 31 2e 39 31 6c 2d 2e 30 36 2e 30 32 5a 22 2f 3e 0a 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0a 20 20 20 20 3c 6c 69 Data Ascii: ,5.19-1.08,5.19-6.08,0-.65-.07-1.32-.2-1.95-3.77-.46-10.65-1.16-16.3-.53-7.46.84-11.27,5.33-11.27,10.7.02,3.02,1.52,5.84,3.99,7.56h.07c.2.14.57.39.85.53,2.89,1.62,9.22,2.11,12.16,1.71l7.74-1.09c1.93-.27,4.16.13,4.7,1.91l-.06.02Z"/> </clipPath> <li
2024-07-19 20:22:48 UTC	1224	IN	Data Raw: 20 20 20 20 20 20 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 35 22 20 64 3d 22 4d 31 31 32 2e 38 37 2c 35 37 2e 36 32 63 2d 37 2e 34 36 2e 38 32 2d 31 31 2e 32 37 2c 35 2e 33 31 2d 31 31 2e 32 37 2c 31 30 2e 36 38 2c 30 2c 34 2e 34 32 2c 33 2e 32 31 2c 38 2e 36 2c 39 2e 32 32 2c 39 2e 37 34 6c 37 2e 32 34 2c 31 2e 34 32 63 32 2e 36 35 2e 35 32 2c 34 2c 31 2e 31 31 2c 34 2c 32 2e 35 36 2c 30 2c 31 2e 31 2d 31 2e 30 32 2c 32 2e 32 35 2d 34 2e 34 34 2c 32 2e 32 35 2d 33 2e 30 38 2c 30 2d 37 2e 32 34 2d 2e 34 36 2d 39 2e 38 38 2d 2e 34 36 73 Data Ascii: <stop offset="1" stop-color="#fff"/> </linearGradient> </defs> <path class="cls-5" d="M112.87,57.62c-7.46.82-11.27,5.31-11.27,10.68,0,4.42,3.21,8.6,9.22,9.74l7.24,1.42c2.65.52,4,1.11,4,2.56,0,1.1-1.02,2.25-4.44,2.25-3.08,0-7.24-.46-9.88-.46s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49861	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	650	OUT	GET /api/public/content/6db1962dd31c45afbc8d5f9a804730c1?v=fab1a644&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:48 UTC	647	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: image/svg+xml Content-Length: 10210 Connection: close CF-Ray: 8a5d6cfaa9cf8c72-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 199 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-michelin_group-white.svg; filename*=utf-8''logo-michelin_group-white.svg ETag: "0x8DC99D03A569DBE" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140981 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:48 UTC	722	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #000; } .cls-1, .cls-2 { stroke-width: 0px;
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 35 31 2d 31 2e 31 33 2d 2e 35 31 68 2d 37 2e 32 6c 2d 34 2e 37 31 2c 31 32 2e 37 39 68 35 2e 32 33 6c 33 2e 33 34 2d 39 2e 30 36 2d 2e 33 39 2c 39 2e 30 36 68 38 2e 37 36 6c 34 2e 37 31 2d 31 32 2e 37 39 68 2d 35 2e 31 38 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 38 31 2e 34 32 2c 39 36 2e 33 33 68 2d 36 2e 30 33 6c 2d 34 2e 37 31 2c 31 32 2e 37 39 68 31 32 2e 31 6c 31 2e 35 36 2d 34 2e 32 35 68 2d 36 2e 30 37 6c 33 2e 31 34 2d 38 2e 35 34 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 35 39 2e 31 32 2c 39 36 2e 33 33 6c 2d 34 2e 37 31 2c 31 32 2e 37 39 68 31 33 2e 30 37 6c 31 2e 32 37 2d 33 2e 34 35 68 2d 37 2e 32 31 6c 2e 35 33 2d 31 2e 34 Data Ascii: 51-1.13-.51h-7.2l-4.71,12.79h5.23l3.34-9.06-.39,9.06h8.76l4.71-12.79h-5.18Z"/> <path class="cls-2" d="M181.42,96.33h-6.03l-4.71,12.79h12.1l1.56-4.25h-6.07l3.14-8.54Z"/> <path class="cls-2" d="M159.12,96.33l-4.71,12.79h13.07l1.27-3.45h-7.21l.53-1.4
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 38 2e 36 37 2d 2e 32 35 2e 31 32 2d 2e 35 2e 32 35 2d 2e 37 34 2e 34 2d 2e 35 37 2e 30 32 2d 31 2e 34 36 2e 31 32 2d 32 2e 36 32 2e 34 36 68 2d 2e 30 35 63 2d 2e 31 2d 2e 30 33 2d 2e 39 37 2d 2e 32 2d 32 2e 30 35 2d 2e 32 2d 2e 34 36 2c 30 2d 2e 39 2e 30 33 2d 31 2e 33 2e 30 39 2d 2e 32 36 2e 30 34 2d 31 2e 31 38 2e 31 38 2d 31 2e 39 33 2e 34 2d 2e 33 36 2e 31 31 2d 31 2e 33 2e 34 32 2d 32 2e 33 36 2c 31 2e 31 2d 32 2e 32 39 2d 2e 35 33 2d 34 2e 36 31 2d 2e 37 2d 36 2e 30 36 2d 2e 37 36 2c 31 2e 33 37 2d 31 2e 38 35 2c 32 2e 30 35 2d 33 2e 39 39 2c 31 2e 38 33 2d 35 2e 38 33 2d 2e 34 33 2d 33 2e 34 36 2d 32 2e 37 37 2d 35 2e 35 2d 33 2e 36 31 2d 36 2e 31 33 2d 31 2e 34 36 2d 36 2e 30 35 2d 35 2e 36 36 2d 38 2e 36 32 2d 39 2e 31 35 2d 39 2e 30 32 2d 2e 36 Data Ascii: 8.67-.25.12-.5.25-.74.4-.57.02-1.46.12-2.62.46h-.05c-.1-.03-.97-.2-2.05-.2-.46,0-.9.03-1.3.09-.26.04-1.18.18-1.93.4-.36.11-1.3.42-2.36,1.1-2.29-.53-4.61-.7-6.06-.76,1.37-1.85,2.05-3.99,1.83-5.83-.43-3.46-2.77-5.5-3.61-6.13-1.46-6.05-5.66-8.62-9.15-9.02-.6
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 38 2d 2e 30 33 2e 33 39 2d 2e 32 35 2d 2e 30 36 2d 2e 33 39 2d 2e 31 33 2d 2e 30 34 2d 31 2e 32 38 2d 2e 35 32 2d 31 2e 31 33 2d 31 2e 30 39 2c 30 2c 30 2c 30 2d 2e 30 32 2c 30 2d 2e 30 32 2e 30 34 2d 2e 31 35 2e 32 35 2d 2e 33 33 2e 35 35 2d 2e 33 36 2c 31 2e 32 39 2d 2e 31 32 2c 32 2e 30 35 2d 2e 32 37 2c 32 2e 34 2d 2e 33 32 2e 32 31 2d 2e 30 33 2e 33 38 2d 2e 30 38 2e 34 31 2d 2e 31 38 2e 30 33 2d 2e 30 39 2d 2e 30 33 2d 2e 31 33 2d 2e 32 36 2d 2e 31 32 2d 32 2e 31 38 2e 31 33 2d 34 2e 39 38 2d 2e 33 34 2d 36 2e 32 31 2d 2e 36 39 2d 32 2e 30 35 2d 2e 36 35 2d 33 2e 33 36 2d 32 2e 30 33 2d 33 2e 38 39 2d 34 2e 31 32 2d 2e 36 31 2d 32 2e 34 32 2e 30 32 2d 34 2e 33 34 2e 38 32 2d 35 2e 33 39 2e 34 31 2d 2e 35 2c 31 2e 31 31 2d 31 2e 31 34 2c 31 2e 33 32 Data Ascii: 8-.03.39-.25-.06-.39-.13-.04-1.28-.52-1.13-1.09,0,0,0-.02,0-.02.04-.15.25-.33.55-.36,1.29-.12,2.05-.27,2.4-.32.21-.03.38-.08.41-.18.03-.09-.03-.13-.26-.12-2.18.13-4.98-.34-6.21-.69-2.05-.65-3.36-2.03-3.89-4.12-.61-2.42.02-4.34.82-5.39.41-.5,1.11-1.14,1.32
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2e 39 2c 32 2e 31 32 2d 2e 37 35 2c 31 2e 31 36 2d 31 2e 32 32 2c 32 2e 34 39 2d 31 2e 33 34 2c 33 2e 38 34 2d 2e 31 33 2c 31 2e 33 34 2e 30 32 2c 32 2e 37 33 2e 34 34 2c 34 2e 30 33 2e 34 32 2c 31 2e 33 2c 31 2e 30 39 2c 32 2e 34 39 2c 31 2e 39 34 2c 33 2e 34 32 2e 38 32 2e 38 39 2c 31 2e 38 33 2c 31 2e 36 34 2c 32 2e 39 32 2c 32 2e 31 35 2e 35 33 2e 32 35 2c 31 2e 30 37 2e 34 34 2c 31 2e 36 31 2e 35 38 2d 2e 34 31 2e 31 34 2d 2e 37 34 2e 32 32 2d 2e 38 36 2e 32 34 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 35 34 2e 30 38 2c 38 36 2e 38 32 63 2d 2e 36 35 2e 32 31 2d 31 2e 37 39 2e 36 37 2d 33 2e 33 37 2e 36 37 68 2d 2e 31 34 63 2d 31 2e 36 35 2d 2e 30 33 2d 33 2e 35 38 2d 2e 38 38 2d 34 2e 39 39 2d Data Ascii: .9,2.12-.75,1.16-1.22,2.49-1.34,3.84-.13,1.34.02,2.73.44,4.03.42,1.3,1.09,2.49,1.94,3.42.82.89,1.83,1.64,2.92,2.15.53.25,1.07.44,1.61.58-.41.14-.74.22-.86.24"/> <path class="cls-2" d="M154.08,86.82c-.65.21-1.79.67-3.37.67h-.14c-1.65-.03-3.58-.88-4.99-
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 36 36 2c 31 2e 37 39 2d 2e 39 33 2c 32 2e 33 2d 2e 38 31 2e 32 34 2e 30 36 2e 34 34 2e 32 2e 36 31 2e 34 36 2e 32 33 2e 33 36 2e 30 32 2e 35 32 2c 30 2c 2e 35 33 2d 2e 30 32 2c 30 2d 2e 38 39 2e 35 35 2d 31 2e 32 35 2e 37 37 2d 2e 31 38 2d 2e 32 2d 2e 35 36 2d 2e 35 32 2d 31 2e 31 33 2d 2e 35 37 2d 2e 36 33 2d 2e 30 35 2d 31 2e 32 38 2e 32 33 2d 31 2e 39 34 2e 38 35 2d 31 2e 36 2c 31 2e 35 31 2d 33 2e 33 34 2c 32 2d 33 2e 33 37 2c 32 2e 30 31 2d 2e 31 39 2e 30 35 2d 2e 33 2e 32 34 2d 2e 32 35 2e 34 33 2e 30 34 2e 31 36 2e 31 38 2e 32 36 2e 33 34 2e 32 36 2e 30 33 2c 30 2c 2e 30 36 2c 30 2c 2e 30 39 2d 2e 30 31 2e 30 38 2d 2e 30 32 2c 31 2e 39 33 2d 2e 35 34 2c 33 2e 36 37 2d 32 2e 31 38 2e 35 2d 2e 34 37 2e 39 38 2d 2e 37 2c 31 2e 34 2d 2e 36 36 2e 34 31 Data Ascii: 66,1.79-.93,2.3-.81.24.06.44.2.61.46.23.36.02.52,0,.53-.02,0-.89.55-1.25.77-.18-.2-.56-.52-1.13-.57-.63-.05-1.28.23-1.94.85-1.6,1.51-3.34,2-3.37,2.01-.19.05-.3.24-.25.43.04.16.18.26.34.26.03,0,.06,0,.09-.01.08-.02,1.93-.54,3.67-2.18.5-.47.98-.7,1.4-.66.41
2024-07-19 20:22:48 UTC	1369	IN	Data Raw: 2e 31 35 2e 33 34 22 2f 3e 0a 20 20 3c 2f 67 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 32 35 2e 33 33 2c 35 39 2e 32 35 63 30 2c 2e 34 36 2e 30 37 2e 39 34 2e 31 38 2c 31 2e 33 38 2e 31 34 2e 34 35 2e 33 2e 38 38 2e 35 38 2c 31 2e 32 36 2e 32 33 2e 33 32 2e 35 31 2e 36 34 2e 39 31 2e 37 37 68 30 73 30 2c 30 2c 2e 30 34 2e 30 31 63 2e 30 32 2c 30 2c 2e 30 33 2c 30 2c 2e 30 33 2c 30 68 30 63 2e 30 39 2e 30 32 2e 31 39 2e 30 33 2e 32 38 2e 30 33 2e 31 35 2c 30 2c 2e 33 31 2d 2e 30 33 2e 35 2d 2e 30 37 2e 31 39 2d 2e 30 34 2e 33 39 2d 2e 30 38 2e 35 36 2d 2e 31 37 2e 32 31 2d 2e 31 31 2e 33 33 2d 2e 33 39 2e 34 31 2d 2e 36 2e 30 39 2d 2e 32 34 2e 31 34 2d 2e 35 2e 31 35 2d 2e 37 36 2e 30 33 2d 2e 34 36 2d 2e 30 35 Data Ascii: .15.34"/> </g> <path class="cls-1" d="M125.33,59.25c0,.46.07.94.18,1.38.14.45.3.88.58,1.26.23.32.51.64.91.77h0s0,0,.04.01c.02,0,.03,0,.03,0h0c.09.02.19.03.28.03.15,0,.31-.03.5-.07.19-.04.39-.08.56-.17.21-.11.33-.39.41-.6.09-.24.14-.5.15-.76.03-.46-.05
2024-07-19 20:22:48 UTC	1274	IN	Data Raw: 35 36 2d 2e 31 33 2c 31 2e 31 36 2e 32 37 2c 31 2e 35 35 2e 39 35 2d 2e 30 32 2d 2e 30 34 2d 2e 30 33 2d 2e 30 37 2d 2e 30 35 2d 2e 31 31 2d 2e 33 38 2d 2e 37 36 2d 31 2e 30 34 2d 31 2e 35 35 2d 32 2e 33 2d 31 2e 32 31 2d 31 2e 36 36 2e 34 35 2d 31 2e 32 38 2c 32 2e 36 31 2d 31 2e 31 2c 33 2e 32 39 2e 30 39 2e 32 37 2e 31 39 2e 35 33 2e 33 32 2e 37 37 4d 31 31 38 2e 38 31 2c 36 33 2e 32 32 63 2d 2e 32 38 2d 2e 35 32 2d 2e 34 34 2d 31 2e 30 37 2d 2e 35 32 2d 31 2e 36 35 2d 2e 30 38 2d 2e 35 37 2d 2e 31 31 2d 31 2e 31 36 2d 2e 30 31 2d 31 2e 37 32 2e 31 2d 2e 35 35 2e 33 35 2d 31 2e 30 37 2e 38 31 2d 31 2e 34 2e 33 37 2d 2e 32 37 2e 38 36 2d 2e 34 34 2c 31 2e 33 34 2d 2e 34 34 2e 31 33 2c 30 2c 2e 32 35 2e 30 31 2e 33 37 2e 30 34 2c 31 2e 32 2e 32 35 2c 31 Data Ascii: 56-.13,1.16.27,1.55.95-.02-.04-.03-.07-.05-.11-.38-.76-1.04-1.55-2.3-1.21-1.66.45-1.28,2.61-1.1,3.29.09.27.19.53.32.77M118.81,63.22c-.28-.52-.44-1.07-.52-1.65-.08-.57-.11-1.16-.01-1.72.1-.55.35-1.07.81-1.4.37-.27.86-.44,1.34-.44.13,0,.25.01.37.04,1.2.25,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49855	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	637	OUT	GET /dist/shared.d65d42466ad2647993ec.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:48 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: application/javascript Content-Length: 550 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc8651264d26" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202248Z-15b94bb6ff9w28gpps1cmmqxzc0000000cp000000000ac8z x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-19 20:22:48 UTC	550	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 32 5d 2c 7b 39 39 31 37 3a 28 65 2c 61 2c 72 29 3d 3e 7b 72 2e 64 28 61 2c 7b 5a 3a 28 29 3d 3e 74 7d 29 3b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 63 6c 61 73 73 7b 70 75 73 68 45 76 65 6e 74 28 65 29 7b 63 6f 6e 73 74 20 61 3d 65 3b 61 2e 65 76 65 6e 74 4c 61 62 65 6c 3d 74 68 69 73 2e 72 65 70 6c 61 63 65 45 76 65 6e 74 4c 61 62 65 6c 50 61 72 61 6d 65 74 65 72 73 28 61 2e 65 76 65 6e 74 4c 61 62 65 6c 29 2c 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c Data Ascii: "use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[712],{9917:(e,a,r)=>{r.d(a,{Z:()=>t});const t=new class{pushEvent(e){const a=e;a.eventLabel=this.replaceEventLabelParameters(a.eventLabel),window.dataLayer=window.dataLayer\|\|[],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49862	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:48 UTC	635	OUT	GET /dist/site.7bdbe456878bd11113ce.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:49 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:48 GMT Content-Type: application/javascript Content-Length: 154805 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 ETag: "1dacc86512413b5" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202248Z-15b94bb6ff9tnc8juta868r09w00000004f000000000s77g x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-19 20:22:49 UTC	15566	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 31 5d 2c 7b 37 33 31 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 7b 76 61 72 20 72 3d 69 2e 63 61 6c 6c 28 Data Ascii: "use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[641],{7312:(e,t,i)=>{function r(e,t,i){return(t=function(e){var t=function(e,t){if("object"!=typeof e\|\|null===e)return e;var i=e[Symbol.toPrimitive];if(void 0!==i){var r=i.call(
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 28 50 3d 6a 28 5b 22 20 22 2c 22 22 5d 29 29 2c 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6d 61 70 28 28 65 3d 3e 7b 72 65 74 75 72 6e 28 30 2c 76 2e 64 79 29 28 46 7c 7c 28 46 3d 6a 28 5b 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 27 22 3e 5c 6e 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 2d 63 61 72 64 20 61 72 74 69 63 6c 65 2d 63 61 72 64 2d 2d 63 6f 6d 70 61 63 74 2d 6d 6f 62 69 6c 65 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 2d 63 61 72 64 5f 5f 6c 69 6e 6b 20 6d 63 2d 61 6e 63 68 6f 72 22 20 68 72 65 66 3d 22 27 2c 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 27 2c 27 5c 6e 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 2d Data Ascii: (P=j([" ",""])),null==e?void 0:e.map((e=>{return(0,v.dy)(F\|\|(F=j(['<div class="','">\n <div class="article-card article-card--compact-mobile">\n <a class="article-card__link mc-anchor" href="','">\n ','\n <div class="article-
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 68 6f 72 73 57 72 61 70 70 65 72 3d 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 75 74 68 6f 72 2d 6c 69 73 74 5f 5f 61 75 74 68 6f 72 2d 63 61 72 64 73 22 29 2c 74 68 69 73 2e 6c 6f 61 64 4d 6f 72 65 42 75 74 74 6f 6e 3d 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 75 74 68 6f 72 2d 6c 69 73 74 5f 5f 6c 6f 61 64 2d 6d 6f 72 65 2d 62 75 74 74 6f 6e 22 29 2c 74 68 69 73 2e 61 75 74 68 6f 72 4c 69 73 74 41 72 74 69 63 6c 65 73 4c 69 6e 6b 4c 61 62 65 6c 3d 74 68 69 73 2e 6c 69 73 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 75 74 68 6f 72 2d 6c 69 73 74 2d 61 72 74 69 63 6c 65 73 2d 6c 69 6e 6b 2d 6c 61 62 65 6c 22 29 7c 7c 22 22 2c 74 68 69 73 2e 6e 75 6d 62 65 72 Data Ascii: horsWrapper=this.list.querySelector(".author-list__author-cards"),this.loadMoreButton=this.list.querySelector(".author-list__load-more-button"),this.authorListArticlesLinkLabel=this.list.getAttribute("data-author-list-articles-link-label")\|\|"",this.number
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 3f 74 68 69 73 2e 68 65 61 64 65 72 4e 61 76 49 74 65 6d 49 63 6f 6e 4f 70 65 6e 3a 74 68 69 73 2e 68 65 61 64 65 72 4e 61 76 49 74 65 6d 49 63 6f 6e 43 6c 6f 73 65 64 29 2c 6e 75 6c 6c 3d 3d 69 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 65 3f 74 68 69 73 2e 68 65 61 64 65 72 4e 61 76 49 74 65 6d 49 63 6f 6e 43 6c 6f 73 65 64 3a 74 68 69 73 2e 68 65 61 64 65 72 4e 61 76 49 74 65 6d 49 63 6f 6e 4f 70 65 6e 29 7d 6f 70 65 6e 54 6f 70 4c 65 76 65 6c 4c 69 6e 6b 28 65 29 7b 76 61 72 20 74 2c 69 2c 72 2c 73 3b 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 6c 61 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 74 68 69 73 2e 68 65 61 64 65 Data Ascii: ?this.headerNavItemIconOpen:this.headerNavItemIconClosed),null==i\|\|i.classList.remove(e?this.headerNavItemIconClosed:this.headerNavItemIconOpen)}openTopLevelLink(e){var t,i,r,s;null==e\|\|null===(t=e.lastElementChild)\|\|void 0===t\|\|t.classList.add(this.heade
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 28 74 68 69 73 29 29 29 7d 29 29 7d 63 6c 6f 73 65 28 29 7b 74 68 69 73 2e 74 61 62 42 75 74 74 6f 6e 73 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 63 6c 6f 73 65 28 29 7d 29 29 2c 74 68 69 73 2e 73 65 74 4f 70 65 6e 43 6c 61 73 73 28 21 31 29 7d 74 6f 67 67 6c 65 49 74 65 6d 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 69 73 4f 70 65 6e 28 29 3b 74 68 69 73 2e 63 6c 6f 73 65 41 6c 6c 49 74 65 6d 73 28 29 2c 74 68 69 73 2e 73 65 74 4f 70 65 6e 43 6c 61 73 73 28 21 65 29 2c 74 68 69 73 2e 74 61 62 42 75 74 74 6f 6e 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 2e 74 6f 67 67 6c 65 54 61 62 28 65 29 7d 29 29 7d 73 65 74 4f 70 65 6e 43 6c 61 73 73 28 65 29 7b 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c Data Ascii: (this)))}))}close(){this.tabButtons.forEach((e=>{e.close()})),this.setOpenClass(!1)}toggleItem(){const e=this.isOpen();this.closeAllItems(),this.setOpenClass(!e),this.tabButtons.forEach((t=>{t.toggleTab(e)}))}setOpenClass(e){this.component.classList.toggl
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 28 74 29 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 69 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 Data Ascii: primitive value.")}return String(e)}(e);return"symbol"==typeof t?t:String(t)}(t))in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}function Ie(e,t,i){return(t=function(e){var t=function(e,t){if("object"!=typeof
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 69 6e 6e 65 72 54 65 78 74 3d 22 44 4e 53 20 52 65 63 6f 72 64 22 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 64 6e 73 2d 74 69 74 6c 65 22 29 2c 72 2e 61 70 70 65 6e 64 28 69 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 6f 74 61 6c 4c 6f 6f 6b 75 70 73 22 29 2c 65 2e 69 6e 6e 65 72 54 65 78 74 3d 22 54 6f 74 61 6c 20 6c 6f 6f 6b 20 75 70 73 3a 20 22 2b 74 2e 61 6e 61 6c 79 7a 65 64 2e 74 6f 74 61 6c 5f 6c 6f 6f 6b 75 70 73 2c 72 2e 61 70 70 65 6e 64 28 65 29 7d 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6e 61 6c 79 7a 65 64 2e 6c 6f 6f 6b 75 70 73 26 26 6e 75 6c 6c 21 3d 74 2e 61 6e 61 6c 79 7a 65 64 2e 6c 6f 6f 6b 75 70 73 29 7b 6c 65 74 20 65 3d Data Ascii: cument.createElement("div");i.innerText="DNS Record",i.classList.add("dns-title"),r.append(i),e.classList.add("totalLookups"),e.innerText="Total look ups: "+t.analyzed.total_lookups,r.append(e)}if(null!=t.analyzed.lookups&&null!=t.analyzed.lookups){let e=
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 69 2c 65 7d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 72 2c 73 2c 6f 2c 6e 2c 6c 2c 61 2c 63 2c 64 2c 75 3b 28 4f 65 28 74 68 69 73 2c 22 41 70 69 52 6f 75 74 65 50 61 74 68 22 2c 22 2f 61 70 69 2f 64 6d 61 72 63 2d 61 6e 61 6c 79 7a 65 72 2f 62 69 6d 69 2d 72 65 63 6f 72 64 2d 63 68 65 63 6b 65 72 22 29 2c 4f 65 28 74 68 69 73 2c 22 62 69 6d 69 52 65 63 6f 72 64 43 68 65 63 6b 65 72 22 2c 6e 75 6c 6c 29 2c 4f 65 28 74 68 69 73 2c 22 62 Data Ascii: n e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}new class{constructor(){var e,t,i,r,s,o,n,l,a,c,d,u;(Oe(this,"ApiRoutePath","/api/dmarc-analyzer/bimi-record-checker"),Oe(this,"bimiRecordChecker",null),Oe(this,"b
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 7a 5f 5f 71 75 65 73 74 69 6f 6e 2d 73 6c 69 64 65 2d 32 22 29 26 26 22 2b 31 30 30 30 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 72 65 73 75 6c 74 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 67 65 74 28 22 71 75 69 7a 5f 5f 71 75 65 73 74 69 6f 6e 2d 73 6c 69 64 65 2d 33 22 29 29 26 26 22 4d 69 63 72 6f 73 6f 66 74 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 72 65 73 75 6c 74 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 67 65 74 28 22 71 75 69 7a 5f 5f 71 75 65 73 74 69 6f 6e 2d 73 6c 69 64 65 2d 34 22 29 29 26 26 22 6d 75 6c 74 69 70 6c 65 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 72 65 73 75 6c 74 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f Data Ascii: z__question-slide-2")&&"+1000"!==(null===(e=this.results)\|\|void 0===e?void 0:e.get("quiz__question-slide-3"))&&"Microsoft"===(null===(t=this.results)\|\|void 0===t?void 0:t.get("quiz__question-slide-4"))&&"multiple"!==(null===(i=this.results)\|\|void 0===i?vo
2024-07-19 20:22:49 UTC	8167	IN	Data Raw: 7b 73 6c 69 64 65 58 3a 6e 75 6c 6c 21 3d 73 3f 73 3a 22 47 6f 20 74 6f 20 73 6c 69 64 65 20 25 73 22 2c 70 72 65 76 3a 6e 75 6c 6c 21 3d 6f 3f 6f 3a 22 50 72 65 76 69 6f 75 73 20 73 6c 69 64 65 22 2c 6e 65 78 74 3a 6e 75 6c 6c 21 3d 6e 3f 6e 3a 22 4e 65 78 74 20 73 6c 69 64 65 22 7d 7d 29 2c 74 68 69 73 2e 6d 6f 64 61 6c 43 61 72 6f 75 73 65 6c 2e 6d 6f 75 6e 74 28 29 2c 74 68 69 73 2e 70 61 67 65 43 61 72 6f 75 73 65 6c 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 73 6c 69 64 65 43 6c 69 63 6b 65 64 28 65 2c 74 29 7d 29 29 2c 74 68 69 73 2e 70 61 67 65 43 61 72 6f 75 73 65 6c 2e 6f 6e 28 22 69 6e 61 63 74 69 76 65 22 2c 28 65 3d 3e 7b 74 68 69 73 2e 73 6c 69 64 65 49 6e 61 63 74 69 76 65 28 74 68 69 73 2e 70 61 67 65 43 Data Ascii: {slideX:null!=s?s:"Go to slide %s",prev:null!=o?o:"Previous slide",next:null!=n?n:"Next slide"}}),this.modalCarousel.mount(),this.pageCarousel.on("click",((e,t)=>{this.slideClicked(e,t)})),this.pageCarousel.on("inactive",(e=>{this.slideInactive(this.pageC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49865	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	650	OUT	GET /api/public/content/509ae1a8c65d4c52826a5829290dbd6c?v=d858776e&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	638	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 2990 Connection: close CF-Ray: 8a5d6cfe2c5d4372-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 200 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-servicenow-white.svg; filename*=utf-8''logo-servicenow-white.svg ETag: "0x8DC99D03A5A1FA3" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140985 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	731	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill-rule: evenodd; } .cls-1, .cls-2 { fill: #fff;
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 2e 33 34 63 30 2c 33 2e 36 31 2c 31 33 2e 33 39 2c 32 2e 31 33 2c 31 33 2e 33 39 2c 31 31 2e 36 39 2c 30 2c 35 2e 33 31 2d 35 2e 31 2c 38 2e 35 2d 31 30 2e 38 34 2c 38 2e 35 2d 33 2e 38 33 2c 30 2d 37 2e 38 36 2d 31 2e 32 38 2d 31 31 2e 30 35 2d 33 2e 36 31 6c 33 2e 34 2d 35 2e 35 33 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2e 38 35 2c 38 30 2e 38 32 63 30 2d 37 2e 36 35 2d 35 2e 33 31 2d 31 34 2e 30 33 2d 31 32 2e 39 36 2d 31 34 2e 30 33 2d 38 2e 30 38 2c 30 2d 31 33 2e 33 39 2c 36 2e 38 2d 31 33 2e 33 39 2c 31 34 2e 32 34 2c 30 2c 38 2e 37 31 2c 36 2e 31 36 2c 31 34 2e 32 34 2c 31 34 2e 32 34 2c 31 34 2e 32 34 2c 34 2e 32 35 2c 30 2c 38 2e 35 2d 31 2e 37 2c 31 31 2e 32 36 2d 34 2e 38 39 6c Data Ascii: .34c0,3.61,13.39,2.13,13.39,11.69,0,5.31-5.1,8.5-10.84,8.5-3.83,0-7.86-1.28-11.05-3.61l3.4-5.53Z"/> <path class="cls-1" d="M60.85,80.82c0-7.65-5.31-14.03-12.96-14.03-8.08,0-13.39,6.8-13.39,14.24,0,8.71,6.16,14.24,14.24,14.24,4.25,0,8.5-1.7,11.26-4.89l
2024-07-19 20:22:49 UTC	890	IN	Data Raw: 32 2e 39 38 2c 30 2d 35 2e 35 33 2c 32 2e 33 34 2d 35 2e 39 35 2c 34 2e 38 39 68 31 31 2e 34 38 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 38 33 2e 39 2c 39 34 2e 38 35 76 2d 32 37 2e 34 32 68 37 2e 30 31 76 32 2e 33 34 63 32 2e 31 33 2d 31 2e 37 2c 34 2e 36 38 2d 32 2e 37 36 2c 37 2e 36 35 2d 32 2e 37 36 2c 33 2e 38 33 2c 30 2c 37 2e 32 33 2c 31 2e 37 2c 39 2e 35 36 2c 34 2e 34 36 2c 31 2e 37 2c 32 2e 31 33 2c 32 2e 39 38 2c 34 2e 38 39 2c 32 2e 39 38 2c 39 2e 35 36 76 31 34 2e 30 33 68 2d 37 2e 34 34 76 2d 31 34 2e 36 36 63 30 2d 32 2e 37 36 2d 2e 36 34 2d 34 2e 32 35 2d 31 2e 37 2d 35 2e 31 2d 31 2e 30 36 2d 31 2e 30 36 2d 32 2e 33 34 2d 31 2e 37 2d 34 2e 32 35 2d 31 2e 37 2d 32 2e 39 38 2c 30 Data Ascii: 2.98,0-5.53,2.34-5.95,4.89h11.48Z"/> <path class="cls-1" d="M183.9,94.85v-27.42h7.01v2.34c2.13-1.7,4.68-2.76,7.65-2.76,3.83,0,7.23,1.7,9.56,4.46,1.7,2.13,2.98,4.89,2.98,9.56v14.03h-7.44v-14.66c0-2.76-.64-4.25-1.7-5.1-1.06-1.06-2.34-1.7-4.25-1.7-2.98,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49866	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	650	OUT	GET /api/public/content/1c9bb09595ba4175b9b901a7fdc0a7bf?v=28be8a73&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	638	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 4296 Connection: close CF-Ray: 8a5d6cfe5e634264-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 200 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-mitsubishi-white.svg; filename*=utf-8''logo-mitsubishi-white.svg ETag: "0x8DC99D03A5C6942" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140982 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	731	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <g i
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 22 63 6c 73 2d 31 22 20 64 3d 22 4d 39 37 2e 38 34 2c 39 31 2e 31 37 63 2d 34 2e 38 33 2c 30 2d 36 2e 34 39 2d 33 2e 31 36 2d 36 2e 36 37 2d 37 2e 30 37 68 33 2e 35 33 63 30 2c 31 2e 38 38 2e 39 33 2c 33 2e 37 31 2c 33 2e 31 35 2c 33 2e 37 31 73 32 2e 39 36 2d 2e 39 32 2c 32 2e 39 36 2d 32 2e 33 39 2d 2e 39 32 2d 31 2e 38 37 2d 34 2e 38 32 2d 34 2e 30 38 63 2d 32 2e 37 38 2d 31 2e 36 38 2d 34 2e 36 33 2d 33 2e 33 34 2d 34 2e 36 33 2d 36 2e 33 31 73 32 2e 30 34 2d 35 2e 33 37 2c 36 2e 33 31 2d 35 2e 33 37 2c 36 2e 33 2c 32 2e 39 36 2c 36 2e 34 39 2c 36 2e 34 37 68 2d 33 2e 37 63 30 2d 31 2e 36 37 2d 2e 39 32 2d 33 2e 33 35 2d 32 2e 37 38 2d 33 2e 33 35 73 2d 32 2e 36 2e 37 36 2d 32 2e 36 2c 32 2e 30 34 2c 31 2e 31 2c 32 2e 32 32 2c 34 2e 30 37 2c 33 2e 37 Data Ascii: "cls-1" d="M97.84,91.17c-4.83,0-6.49-3.16-6.67-7.07h3.53c0,1.88.93,3.71,3.15,3.71s2.96-.92,2.96-2.39-.92-1.87-4.82-4.08c-2.78-1.68-4.63-3.34-4.63-6.31s2.04-5.37,6.31-5.37,6.3,2.96,6.49,6.47h-3.7c0-1.67-.92-3.35-2.78-3.35s-2.6.76-2.6,2.04,1.1,2.22,4.07,3.7
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 32 2e 34 2d 2e 39 33 2d 32 2e 30 38 2d 34 2e 38 32 2d 34 2e 32 39 63 2d 32 2e 37 38 2d 31 2e 34 37 2d 34 2e 36 35 2d 33 2e 31 35 2d 34 2e 36 35 2d 36 2e 31 31 73 32 2e 30 33 2d 35 2e 33 36 2c 36 2e 33 31 2d 35 2e 33 36 2c 36 2e 33 2c 32 2e 39 35 2c 36 2e 35 2c 36 2e 34 36 68 2d 33 2e 35 31 63 2d 2e 32 2d 31 2e 38 33 2d 31 2e 31 33 2d 33 2e 33 33 2d 32 2e 39 37 2d 33 2e 33 33 73 2d 32 2e 36 2e 37 33 2d 32 2e 36 2c 32 2e 30 33 2c 31 2e 31 32 2c 32 2e 30 34 2c 34 2e 30 39 2c 33 2e 37 32 63 33 2e 33 33 2c 31 2e 38 33 2c 35 2e 33 37 2c 33 2e 31 34 2c 35 2e 33 37 2c 36 2e 36 39 73 2d 33 2e 31 36 2c 35 2e 37 31 2d 36 2e 36 39 2c 35 2e 37 31 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 67 31 30 38 35 30 Data Ascii: 2.4-.93-2.08-4.82-4.29c-2.78-1.47-4.65-3.15-4.65-6.11s2.03-5.36,6.31-5.36,6.3,2.95,6.5,6.46h-3.51c-.2-1.83-1.13-3.33-2.97-3.33s-2.6.73-2.6,2.03,1.12,2.04,4.09,3.72c3.33,1.83,5.37,3.14,5.37,6.69s-3.16,5.71-6.69,5.71"/> </g> </g> <g id="g10850
2024-07-19 20:22:49 UTC	827	IN	Data Raw: 33 2d 31 30 2e 37 32 73 32 2e 35 38 2d 31 30 2e 37 32 2c 38 2e 33 2d 31 30 2e 37 32 2c 38 2e 33 32 2c 34 2e 39 37 2c 38 2e 33 32 2c 31 30 2e 37 32 2d 32 2e 35 37 2c 31 30 2e 37 32 2d 38 2e 33 32 2c 31 30 2e 37 32 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 67 36 33 36 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 36 33 36 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 33 37 2e 34 32 2c 37 33 2e 34 31 76 31 37 2e 35 36 68 2d 33 2e 37 31 76 2d 31 37 2e 35 36 68 2d 34 2e 34 33 76 2d 33 2e 31 35 68 31 32 2e 35 38 76 33 2e 31 35 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 67 36 33 36 34 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 Data Ascii: 3-10.72s2.58-10.72,8.3-10.72,8.32,4.97,8.32,10.72-2.57,10.72-8.32,10.72"/> </g> <g id="g6360"> <path id="path6362" class="cls-1" d="M237.42,73.41v17.56h-3.71v-17.56h-4.43v-3.15h12.58v3.15"/> </g> <g id="g6364"> <pat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49867	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	415	OUT	GET /api/public/content/671e06972e724c10abdefd7d9b4967f2?v=a7fbf3d3&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 3744 Connection: close CF-Ray: 8a5d6cfe895e434a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 200 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-shutterstock-white.svg; filename*=utf-8''logo-shutterstock-white.svg ETag: "0x8DC99D03A584B2D" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140987 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <g i
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 31 32 2e 36 36 2c 37 32 2e 32 37 68 2d 35 2e 36 63 2d 2e 38 39 2c 30 2d 31 2e 36 32 2e 37 32 2d 31 2e 36 32 2c 31 2e 36 31 76 36 2e 30 38 68 2d 35 2e 35 32 76 2d 36 2e 30 38 63 30 2d 33 2e 39 34 2c 33 2e 31 39 2d 37 2e 31 33 2c 37 2e 31 34 2d 37 2e 31 33 68 35 2e 36 76 35 2e 35 32 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 32 34 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 30 38 2e 31 2c 38 36 2e 35 33 68 35 2e 36 63 2e 38 38 2c 30 2c 31 2e 36 31 2d 2e 37 32 2c 31 2e 36 31 2d 31 2e 36 32 76 2d 36 2e 30 37 68 35 2e 35 32 76 36 2e 30 37 63 30 2c 33 2e 39 34 2d 33 2e 31 39 2c 37 2e 31 34 2d 37 2e 31 33 2c 37 2e 31 34 68 2d 35 2e 36 76 2d 35 2e 35 32 22 2f 3e 0a Data Ascii: ass="cls-1" d="M212.66,72.27h-5.6c-.89,0-1.62.72-1.62,1.61v6.08h-5.52v-6.08c0-3.94,3.19-7.13,7.14-7.13h5.6v5.52"/> <path id="path24" class="cls-1" d="M208.1,86.53h5.6c.88,0,1.61-.72,1.61-1.62v-6.07h5.52v6.07c0,3.94-3.19,7.14-7.13,7.14h-5.6v-5.52"/>
2024-07-19 20:22:49 UTC	1006	IN	Data Raw: 33 2d 36 2e 37 33 2d 37 2e 33 35 2d 37 2e 34 33 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 33 34 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 33 39 2e 38 37 2c 37 37 2e 34 38 68 2d 39 2e 30 38 76 2d 31 2e 38 34 63 30 2d 32 2e 30 35 2c 31 2e 30 33 2d 34 2e 32 35 2c 34 2e 35 37 2d 34 2e 32 35 73 34 2e 35 31 2c 32 2e 31 34 2c 34 2e 35 31 2c 34 2e 31 36 76 31 2e 39 34 68 30 5a 4d 31 34 35 2e 32 35 2c 37 34 2e 39 36 63 30 2d 34 2e 36 33 2d 33 2e 35 33 2d 38 2e 37 2d 39 2e 38 37 2d 38 2e 37 73 2d 39 2e 39 36 2c 34 2e 34 39 2d 39 2e 39 36 2c 38 2e 37 76 38 2e 34 31 63 30 2c 35 2e 38 31 2c 33 2e 37 31 2c 39 2e 31 39 2c 39 2e 39 36 2c 39 2e 31 39 73 38 2e 33 38 2d 33 2e 31 38 2c 39 2e 32 32 2d 35 2e 31 6c 2d 34 2e 35 Data Ascii: 3-6.73-7.35-7.43"/> <path id="path34" class="cls-1" d="M139.87,77.48h-9.08v-1.84c0-2.05,1.03-4.25,4.57-4.25s4.51,2.14,4.51,4.16v1.94h0ZM145.25,74.96c0-4.63-3.53-8.7-9.87-8.7s-9.96,4.49-9.96,8.7v8.41c0,5.81,3.71,9.19,9.96,9.19s8.38-3.18,9.22-5.1l-4.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49869	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	415	OUT	GET /api/public/content/b0d281d8bb0e4b8a89ee75e7f1de6bbb?v=a9fa1595&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	646	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 3816 Connection: close CF-Ray: 8a5d6cfe8c7418a1-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 200 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-cushman_andwakefield.svg; filename*=utf-8''logo-cushman_andwakefield.svg ETag: "0x8DC99D03A584B2D" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140979 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	723	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 70 61 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <pat
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 2e 33 37 76 2d 32 33 2e 30 38 6c 2d 33 2e 33 37 2c 32 2e 34 31 76 32 30 2e 36 39 68 30 5a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 39 2e 33 33 2c 39 36 2e 32 32 68 33 2e 33 37 76 2d 31 38 2e 32 38 6c 2d 33 2e 33 37 2c 32 2e 35 37 76 31 35 2e 37 32 68 30 5a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 33 35 2e 32 35 2c 37 31 2e 39 38 63 2d 34 2e 38 32 2c 30 2d 37 2e 38 38 2d 32 2e 37 33 2d 37 2e 38 38 2d 38 2e 30 31 76 2d 31 30 2e 32 36 68 34 2e 30 32 76 31 30 2e 32 36 63 30 2c 32 2e 38 39 2c 31 2e 34 35 2c 34 2e 34 39 2c 34 2e 30 32 2c 34 2e 34 39 73 33 2e 38 36 2d 31 2e 36 2c 33 2e 38 36 2d 34 2e 34 39 76 2d 31 30 2e 32 36 68 34 2e 30 32 76 31 30 2e 31 63 Data Ascii: .37v-23.08l-3.37,2.41v20.69h0Z"/> <path class="cls-1" d="M19.33,96.22h3.37v-18.28l-3.37,2.57v15.72h0Z"/> <path class="cls-1" d="M135.25,71.98c-4.82,0-7.88-2.73-7.88-8.01v-10.26h4.02v10.26c0,2.89,1.45,4.49,4.02,4.49s3.86-1.6,3.86-4.49v-10.26h4.02v10.1c
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 37 32 2e 31 34 2c 39 36 2e 32 32 68 2d 37 2e 30 38 76 2d 31 38 2e 31 32 68 37 2e 30 38 63 35 2e 37 39 2c 30 2c 39 2e 36 36 2c 34 2e 30 31 2c 39 2e 36 36 2c 38 2e 39 38 76 2e 31 36 63 30 2c 35 2e 31 33 2d 33 2e 38 36 2c 38 2e 39 38 2d 39 2e 36 36 2c 38 2e 39 38 68 30 5a 4d 32 37 37 2e 36 2c 38 37 2e 32 35 63 30 2d 33 2e 32 31 2d 32 2e 32 35 2d 35 2e 34 36 2d 35 2e 34 37 2d 35 2e 34 36 68 2d 33 2e 30 36 76 31 30 2e 39 31 68 33 2e 30 36 63 33 2e 32 32 2c 30 2c 35 2e 34 37 2d 32 2e 32 35 2c 35 2e 34 37 2d 35 2e 34 36 68 30 5a 22 2f 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 31 35 2e 35 32 2c 36 38 2e 32 37 63 2d 33 2e 33 38 2c 30 2d 35 2e 36 33 2d 32 2e Data Ascii: h class="cls-1" d="M272.14,96.22h-7.08v-18.12h7.08c5.79,0,9.66,4.01,9.66,8.98v.16c0,5.13-3.86,8.98-9.66,8.98h0ZM277.6,87.25c0-3.21-2.25-5.46-5.47-5.46h-3.06v10.91h3.06c3.22,0,5.47-2.25,5.47-5.46h0Z"/> <path class="cls-1" d="M115.52,68.27c-3.38,0-5.63-2.
2024-07-19 20:22:49 UTC	355	IN	Data Raw: 33 2e 32 31 2e 31 36 2c 31 2e 34 34 2e 39 37 2c 32 2e 35 37 2c 31 2e 36 2c 33 2e 33 36 2d 32 2e 30 39 2e 38 31 2d 33 2e 36 39 2c 33 2e 30 35 2d 33 2e 35 34 2c 35 2e 32 39 2e 31 36 2c 33 2e 30 35 2c 32 2e 37 34 2c 35 2e 36 31 2c 35 2e 39 35 2c 35 2e 36 31 73 33 2e 36 39 2d 2e 39 37 2c 34 2e 39 39 2d 32 2e 34 31 6c 31 2e 36 31 2c 32 2e 30 38 68 34 2e 36 37 6c 2d 34 2e 30 32 2d 34 2e 34 39 76 2e 30 33 5a 4d 32 37 32 2e 37 32 2c 36 37 2e 32 39 63 2d 2e 39 37 2c 31 2e 31 32 2d 31 2e 39 33 2c 31 2e 36 2d 32 2e 39 2c 31 2e 36 73 2d 32 2e 34 32 2d 2e 39 37 2d 32 2e 34 32 2d 32 2e 34 31 63 2d 2e 31 36 2d 2e 38 31 2e 34 39 2d 31 2e 39 32 2c 32 2e 32 35 2d 32 2e 37 33 6c 33 2e 30 36 2c 33 2e 35 32 68 30 5a 4d 32 37 30 2e 34 37 2c 35 39 2e 37 35 63 2d 2e 34 39 2d 2e Data Ascii: 3.21.16,1.44.97,2.57,1.6,3.36-2.09.81-3.69,3.05-3.54,5.29.16,3.05,2.74,5.61,5.95,5.61s3.69-.97,4.99-2.41l1.61,2.08h4.67l-4.02-4.49v.03ZM272.72,67.29c-.97,1.12-1.93,1.6-2.9,1.6s-2.42-.97-2.42-2.41c-.16-.81.49-1.92,2.25-2.73l3.06,3.52h0ZM270.47,59.75c-.49-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49871	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	415	OUT	GET /api/public/content/9bd89e511d2b44ccaeb12199e8897000?v=411770ce&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	643	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 12263 Connection: close CF-Ray: 8a5d6cfeacbe7c81-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 200 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-aston_martin-white.svg; filename*=utf-8''logo-aston_martin-white.svg ETag: "0x8DC99D03A57FD1E" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140977 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	726	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; fill-rule: evenodd; stroke-width: 0px; }
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 2e 35 37 2e 39 39 2c 31 2e 38 39 2c 33 2e 33 35 2c 32 2e 32 31 2e 30 34 2c 30 2c 2e 37 33 2e 30 38 2c 31 2e 31 31 2e 38 31 2c 30 2c 30 2c 31 2e 37 32 2c 33 2e 30 35 2c 31 2e 37 32 2c 33 2e 30 35 2e 35 2e 39 38 2c 31 2e 32 2c 31 2e 33 34 2c 32 2e 34 38 2c 31 2e 37 34 2c 30 2c 30 2c 33 31 2e 32 38 2c 39 2e 32 34 2c 33 31 2e 32 38 2c 39 2e 32 34 2c 31 2e 30 36 2e 33 32 2c 31 2e 35 2c 31 2e 35 32 2c 31 2e 35 2c 31 2e 35 32 2e 37 35 2c 31 2e 39 34 2c 31 2e 37 32 2c 33 2e 35 34 2c 36 2e 36 2c 35 2e 30 32 2c 30 2c 30 2c 32 35 2e 35 39 2c 37 2e 30 33 2c 32 35 2e 35 39 2c 37 2e 30 33 2e 33 31 2e 31 2c 33 2e 32 34 2c 31 2c 35 2e 34 35 2d 31 2e 31 34 2c 30 2c 30 2c 35 2e 39 39 2d 35 2e 37 35 2c 36 2d 35 2e 37 36 2c 30 2c 30 2c 2e 32 35 2d 2e 32 36 2e 35 39 2d 2e 32 Data Ascii: .57.99,1.89,3.35,2.21.04,0,.73.08,1.11.81,0,0,1.72,3.05,1.72,3.05.5.98,1.2,1.34,2.48,1.74,0,0,31.28,9.24,31.28,9.24,1.06.32,1.5,1.52,1.5,1.52.75,1.94,1.72,3.54,6.6,5.02,0,0,25.59,7.03,25.59,7.03.31.1,3.24,1,5.45-1.14,0,0,5.99-5.75,6-5.76,0,0,.25-.26.59-.2
2024-07-19 20:22:49 UTC	1272	IN	Data Raw: 2d 31 2e 31 34 2d 31 2e 32 35 2d 31 2e 36 39 6c 35 2e 33 32 2d 2e 33 35 76 31 2e 34 39 6c 2d 34 2e 30 37 2e 35 35 5a 4d 31 30 36 2e 34 37 2c 35 34 2e 35 33 63 2d 2e 34 34 2d 2e 36 33 2d 2e 38 34 2d 31 2e 32 35 2d 31 2e 32 31 2d 31 2e 38 34 68 37 2e 32 39 76 31 2e 34 33 68 30 6c 2d 36 2e 30 38 2e 34 5a 4d 36 32 2e 36 33 2c 35 31 2e 36 68 30 63 2d 2e 39 35 2d 2e 30 37 2d 31 2e 31 35 2d 2e 31 38 2d 31 2e 34 35 2d 2e 36 38 2c 30 2c 30 2d 31 2e 32 34 2d 32 2e 30 38 2d 31 2e 33 34 2d 32 2e 32 34 2d 2e 32 31 2d 2e 33 38 2d 2e 32 37 2d 2e 36 37 2d 2e 32 37 2d 2e 38 36 2e 30 32 2d 2e 35 31 2e 33 37 2d 2e 39 2c 31 2e 32 37 2d 2e 39 32 68 33 37 2e 32 38 63 32 2e 35 32 2c 30 2c 34 2e 30 31 2c 32 2e 36 31 2c 34 2e 30 31 2c 32 2e 36 31 2e 33 33 2e 36 31 2e 37 32 2c 31 Data Ascii: -1.14-1.25-1.69l5.32-.35v1.49l-4.07.55ZM106.47,54.53c-.44-.63-.84-1.25-1.21-1.84h7.29v1.43h0l-6.08.4ZM62.63,51.6h0c-.95-.07-1.15-.18-1.45-.68,0,0-1.24-2.08-1.34-2.24-.21-.38-.27-.67-.27-.86.02-.51.37-.9,1.27-.92h37.28c2.52,0,4.01,2.61,4.01,2.61.33.61.72,1
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 33 2e 39 33 63 2d 31 2e 35 36 2d 2e 36 39 2d 33 2e 30 38 2d 31 2e 34 37 2d 34 2e 35 37 2d 32 2e 33 33 2c 34 2e 34 32 2d 33 2e 31 39 2c 39 2e 30 33 2d 36 2e 35 31 2c 31 30 2e 31 39 2d 37 2e 33 34 68 33 2e 36 6c 2d 39 2e 32 31 2c 39 2e 36 37 5a 4d 31 31 37 2e 39 2c 36 36 2e 39 39 63 2d 2e 30 38 2d 2e 30 37 2d 32 2e 32 32 2d 31 2e 38 37 2d 33 2e 31 32 2d 32 2e 37 33 68 38 2e 39 32 6c 2d 35 2e 37 39 2c 32 2e 37 33 5a 4d 31 31 31 2e 39 35 2c 37 38 2e 30 34 63 2d 33 2e 32 33 2d 31 2e 32 33 2d 33 2e 37 32 2d 32 2e 34 35 2d 34 2e 31 38 2d 33 2e 36 33 2d 2e 30 34 2d 2e 31 31 2d 2e 32 37 2d 2e 37 34 2d 2e 38 2d 31 2e 33 34 2c 31 2e 30 39 2d 2e 32 31 2c 32 2d 2e 36 37 2c 32 2e 30 36 2d 2e 37 2c 30 2c 30 2c 34 2e 33 37 2d 32 2e 30 36 2c 38 2e 37 33 2d 34 2e 31 31 2c Data Ascii: 3.93c-1.56-.69-3.08-1.47-4.57-2.33,4.42-3.19,9.03-6.51,10.19-7.34h3.6l-9.21,9.67ZM117.9,66.99c-.08-.07-2.22-1.87-3.12-2.73h8.92l-5.79,2.73ZM111.95,78.04c-3.23-1.23-3.72-2.45-4.18-3.63-.04-.11-.27-.74-.8-1.34,1.09-.21,2-.67,2.06-.7,0,0,4.37-2.06,8.73-4.11,
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 2e 32 36 68 38 2e 39 32 63 2d 2e 39 31 2e 39 31 2d 33 2e 30 35 2c 32 2e 36 37 2d 33 2e 31 32 2c 32 2e 37 33 2d 32 2e 31 37 2d 31 2e 30 32 2d 34 2e 32 38 2d 32 2e 30 31 2d 35 2e 37 39 2d 32 2e 37 33 5a 4d 31 35 31 2e 32 34 2c 37 38 2e 33 36 76 2d 31 34 2e 31 68 32 2e 32 34 6c 33 2e 37 38 2c 31 33 2e 37 33 63 2d 31 2e 39 37 2e 32 33 2d 33 2e 39 37 2e 33 35 2d 36 2e 30 32 2e 33 37 5a 4d 31 35 37 2e 33 31 2c 38 33 2e 38 37 68 30 73 2d 33 2e 34 37 2d 33 2e 33 33 2d 34 2e 36 34 2d 34 2e 34 35 63 31 2e 36 35 2d 2e 30 36 2c 33 2e 32 38 2d 2e 31 38 2c 34 2e 38 38 2d 2e 33 37 6c 31 2e 32 37 2c 34 2e 36 33 63 2e 30 34 2e 31 36 2e 32 39 2c 31 2e 31 38 2c 31 2c 31 2e 39 38 2d 2e 39 38 2d 2e 32 38 2d 31 2e 32 37 2d 2e 35 37 2d 32 2e 35 31 2d 31 2e 37 39 5a 4d 31 36 32 Data Ascii: .26h8.92c-.91.91-3.05,2.67-3.12,2.73-2.17-1.02-4.28-2.01-5.79-2.73ZM151.24,78.36v-14.1h2.24l3.78,13.73c-1.97.23-3.97.35-6.02.37ZM157.31,83.87h0s-3.47-3.33-4.64-4.45c1.65-.06,3.28-.18,4.88-.37l1.27,4.63c.04.16.29,1.18,1,1.98-.98-.28-1.27-.57-2.51-1.79ZM162
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 31 37 2d 2e 32 38 2e 33 35 2d 2e 33 39 2e 35 38 5a 4d 32 33 36 2e 35 37 2c 35 33 2e 31 33 68 30 73 30 2c 30 2c 30 2c 30 6c 2d 31 2e 34 32 2c 32 2e 35 31 63 2d 2e 31 39 2e 33 37 2d 2e 34 39 2e 39 35 2d 31 2e 34 34 2c 31 2e 32 37 2d 2e 37 39 2e 32 2d 32 2e 33 37 2e 30 37 2d 32 2e 39 32 2c 30 6c 2d 33 34 2e 36 31 2d 32 2e 33 31 63 2e 34 35 2d 2e 36 37 2e 38 36 2d 31 2e 33 31 2c 31 2e 32 34 2d 31 2e 39 32 68 33 39 2e 34 35 63 2d 2e 31 2e 31 33 2d 2e 32 2e 32 38 2d 2e 33 2e 34 34 5a 4d 32 34 31 2e 35 34 2c 34 38 2e 36 38 68 30 73 2d 31 2e 33 34 2c 32 2e 32 34 2d 31 2e 33 34 2c 32 2e 32 34 63 2d 2e 32 35 2e 34 32 2d 2e 34 31 2e 36 2d 31 2e 34 34 2e 36 37 2c 30 2c 30 2d 34 30 2e 36 39 2c 30 2d 34 30 2e 36 39 2c 30 2c 2e 34 35 2d 2e 37 38 2e 38 35 2d 31 2e 34 38 Data Ascii: 17-.28.35-.39.58ZM236.57,53.13h0s0,0,0,0l-1.42,2.51c-.19.37-.49.95-1.44,1.27-.79.2-2.37.07-2.92,0l-34.61-2.31c.45-.67.86-1.31,1.24-1.92h39.45c-.1.13-.2.28-.3.44ZM241.54,48.68h0s-1.34,2.24-1.34,2.24c-.25.42-.41.6-1.44.67,0,0-40.69,0-40.69,0,.45-.78.85-1.48
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 31 2e 35 2c 33 2e 36 31 2c 33 2e 37 34 2c 33 2e 36 31 2c 33 2e 38 36 2d 31 2e 35 31 2c 33 2e 38 36 2d 33 2e 37 36 63 30 2d 32 2e 34 31 2d 31 2e 39 33 2d 33 2e 34 39 2d 33 2e 38 34 2d 33 2e 34 39 68 30 5a 4d 31 33 37 2e 32 31 2c 36 30 2e 33 37 63 2d 2e 34 39 2e 35 32 2d 31 2e 31 31 2e 37 39 2d 31 2e 38 34 2e 37 39 2d 31 2e 36 32 2c 30 2d 32 2e 36 36 2d 31 2e 31 39 2d 32 2e 36 36 2d 33 2e 30 33 2c 30 2d 32 2e 30 34 2c 31 2e 30 36 2d 33 2e 33 31 2c 32 2e 37 36 2d 33 2e 33 31 2e 38 2c 30 2c 31 2e 35 36 2e 33 35 2c 32 2e 30 32 2e 39 35 2e 35 31 2e 36 36 2e 36 32 2c 31 2e 33 35 2e 36 32 2c 32 2e 31 37 2c 30 2c 2e 30 34 2c 30 2c 2e 30 39 2c 30 2c 2e 31 34 2c 30 2c 2e 36 37 2d 2e 32 37 2c 31 2e 36 32 2d 2e 39 2c 32 2e 32 39 68 30 73 30 2c 30 2c 30 2c 30 5a 22 2f Data Ascii: 1.5,3.61,3.74,3.61,3.86-1.51,3.86-3.76c0-2.41-1.93-3.49-3.84-3.49h0ZM137.21,60.37c-.49.52-1.11.79-1.84.79-1.62,0-2.66-1.19-2.66-3.03,0-2.04,1.06-3.31,2.76-3.31.8,0,1.56.35,2.02.95.51.66.62,1.35.62,2.17,0,.04,0,.09,0,.14,0,.67-.27,1.62-.9,2.29h0s0,0,0,0Z"/
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 37 35 2c 35 37 2e 36 35 76 2d 32 2e 36 34 63 2e 34 31 2d 2e 30 32 2c 31 2e 30 35 2d 2e 30 35 2c 31 2e 34 2c 30 2c 2e 36 39 2e 31 31 2c 31 2e 30 34 2e 35 32 2c 31 2e 30 34 2c 31 2e 32 73 2d 2e 34 36 2c 31 2e 32 31 2d 31 2e 32 33 2c 31 2e 33 37 63 2d 2e 34 33 2e 30 39 2d 2e 39 36 2e 30 37 2d 31 2e 32 31 2e 30 36 5a 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 5f 31 37 31 32 30 39 30 35 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 20 31 37 31 32 30 39 30 35 36 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 37 35 2e 39 38 2c 35 34 2e 35 31 68 2d 35 2e 32 31 76 2e 37 33 68 2e 30 37 63 2e 36 2d 2e 30 37 2c 31 2e 31 38 2d 2e 31 32 2c 32 2e 31 31 2d 2e 31 33 76 36 2e 34 68 31 2e 30 31 76 2d 36 2e 34 63 2e 37 31 2c 30 2c 31 2e 33 Data Ascii: 75,57.65v-2.64c.41-.02,1.05-.05,1.4,0,.69.11,1.04.52,1.04,1.2s-.46,1.21-1.23,1.37c-.43.09-.96.07-1.21.06Z"/> <path id="_171209056" data-name=" 171209056" class="cls-1" d="M175.98,54.51h-5.21v.73h.07c.6-.07,1.18-.12,2.11-.13v6.4h1.01v-6.4c.71,0,1.3
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 39 39 2d 2e 31 32 2d 32 2e 33 38 2d 2e 32 34 2d 34 2e 31 34 2d 2e 32 34 76 31 32 2e 37 32 68 30 5a 4d 31 38 31 2e 33 32 2c 39 30 2e 36 32 68 34 2e 32 31 63 33 2e 30 36 2c 30 2c 34 2e 34 2c 31 2e 30 31 2c 34 2e 34 2c 33 2e 30 33 2c 30 2c 32 2e 33 31 2d 32 2e 30 36 2c 33 2e 34 33 2d 34 2e 30 37 2c 33 2e 37 39 6c 34 2e 30 39 2c 35 2e 32 2e 39 35 2c 31 2e 31 32 2e 33 37 2e 35 63 2d 2e 34 31 2d 2e 30 32 2d 2e 37 37 2d 2e 30 36 2d 31 2e 31 35 2d 2e 30 36 73 2d 2e 37 37 2e 30 34 2d 31 2e 31 33 2e 30 36 63 2d 2e 34 33 2d 2e 36 32 2d 2e 38 33 2d 31 2e 31 38 2d 31 2e 32 35 2d 31 2e 37 34 6c 2d 32 2e 33 34 2d 33 2e 30 35 2d 31 2e 35 39 2d 31 2e 38 37 68 2d 2e 37 35 76 36 2e 36 36 63 2d 2e 33 32 2d 2e 30 32 2d 2e 36 2d 2e 30 36 2d 2e 38 37 2d 2e 30 36 2d 2e 33 2c 30 Data Ascii: 99-.12-2.38-.24-4.14-.24v12.72h0ZM181.32,90.62h4.21c3.06,0,4.4,1.01,4.4,3.03,0,2.31-2.06,3.43-4.07,3.79l4.09,5.2.95,1.12.37.5c-.41-.02-.77-.06-1.15-.06s-.77.04-1.13.06c-.43-.62-.83-1.18-1.25-1.74l-2.34-3.05-1.59-1.87h-.75v6.66c-.32-.02-.6-.06-.87-.06-.3,0
2024-07-19 20:22:49 UTC	682	IN	Data Raw: 39 2c 30 2d 35 2e 35 39 2c 32 2e 36 35 2d 35 2e 35 39 2c 36 2e 37 73 32 2e 34 36 2c 36 2e 31 36 2c 35 2e 34 32 2c 36 2e 31 36 63 34 2e 31 39 2c 30 2c 35 2e 36 39 2d 34 2e 33 35 2c 35 2e 35 35 2d 36 2e 35 34 2c 30 2d 31 2e 36 35 2d 2e 32 32 2d 33 2e 30 35 2d 31 2e 32 35 2d 34 2e 33 39 68 30 73 30 2c 30 2c 30 2c 30 5a 4d 31 31 30 2e 31 31 2c 31 30 34 2e 33 63 2d 2e 33 32 2d 2e 30 32 2d 2e 35 39 2d 2e 30 36 2d 2e 38 37 2d 2e 30 36 2d 2e 33 2c 30 2d 2e 36 2e 30 34 2d 2e 38 37 2e 30 36 76 2d 31 32 2e 37 32 63 2d 32 2c 30 2d 33 2e 32 32 2e 31 32 2d 34 2e 33 34 2e 32 34 2e 30 32 2d 2e 32 2e 30 36 2d 2e 34 2e 30 36 2d 2e 36 73 2d 2e 30 34 2d 2e 33 38 2d 2e 30 36 2d 2e 36 68 31 30 2e 32 33 63 2d 2e 30 32 2e 32 32 2d 2e 30 36 2e 34 2d 2e 30 36 2e 36 73 2e 30 34 2e Data Ascii: 9,0-5.59,2.65-5.59,6.7s2.46,6.16,5.42,6.16c4.19,0,5.69-4.35,5.55-6.54,0-1.65-.22-3.05-1.25-4.39h0s0,0,0,0ZM110.11,104.3c-.32-.02-.59-.06-.87-.06-.3,0-.6.04-.87.06v-12.72c-2,0-3.22.12-4.34.24.02-.2.06-.4.06-.6s-.04-.38-.06-.6h10.23c-.02.22-.06.4-.06.6s.04.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49870	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	415	OUT	GET /api/public/content/2acde0709cdf4ae2ada632bc3bb69977?v=360b4f6e&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	620	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 4997 Connection: close CF-Ray: 8a5d6cfea8de8c8a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 200 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-vodacom.svg; filename*=utf-8''logo-vodacom.svg ETag: "0x8DC99D03A6F5236" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140989 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	749	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <g i
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 36 6c 2d 35 2e 36 39 2c 31 34 68 2d 33 2e 31 34 6c 2d 35 2e 38 36 2d 31 34 68 33 2e 38 33 5a 22 2f 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 67 31 34 32 37 30 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 31 34 32 36 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 32 31 2e 30 33 2c 39 37 2e 39 31 63 30 2d 2e 35 38 2d 2e 30 37 2d 31 2e 31 34 2d 2e 32 31 2d 31 2e 36 36 73 2d 2e 33 34 2d 2e 39 38 2d 2e 36 31 2d 31 2e 33 36 2d 2e 36 2d 2e 36 38 2d 2e 39 38 2d 2e 39 63 2d 2e 33 39 2d 2e 32 32 2d 2e 38 34 2d 2e 33 34 2d 31 2e 33 37 2d 2e 33 34 73 2d 2e 39 38 2e 31 31 2d 31 2e 33 37 2e 33 34 2d 2e 37 32 2e 35 33 2d 2e 39 38 2e 39 63 2d 2e 32 37 2e 33 38 2d 2e 34 37 2e 38 33 2d 2e 36 31 2c 31 2e 33 36 73 2d 2e 32 31 2c 31 2e Data Ascii: 6l-5.69,14h-3.14l-5.86-14h3.83Z"/> <g id="g14270"> <path id="path14262" class="cls-1" d="M121.03,97.91c0-.58-.07-1.14-.21-1.66s-.34-.98-.61-1.36-.6-.68-.98-.9c-.39-.22-.84-.34-1.37-.34s-.98.11-1.37.34-.72.53-.98.9c-.27.38-.47.83-.61,1.36s-.21,1.
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 34 39 2e 31 32 2c 39 38 2e 34 32 63 2d 2e 33 39 2e 30 32 2d 2e 37 39 2e 30 35 2d 31 2e 32 2e 31 73 2d 2e 38 2e 31 31 2d 31 2e 31 37 2e 31 39 63 2d 2e 37 38 2e 31 35 2d 31 2e 33 32 2e 34 32 2d 31 2e 36 33 2e 38 2d 2e 33 31 2e 33 37 2d 2e 34 35 2e 37 39 2d 2e 34 35 2c 31 2e 32 34 73 2e 31 37 2e 38 34 2e 35 31 2c 31 2e 31 32 63 2e 33 34 2e 32 38 2e 38 32 2e 34 32 2c 31 2e 34 35 2e 34 32 2e 34 37 2c 30 2c 2e 39 32 2d 2e 31 2c 31 2e 33 36 2d 2e 32 39 73 2e 38 32 2d 2e 34 34 2c 31 2e 31 33 2d 2e 37 33 76 2d 32 2e 38 35 68 30 5a 4d 31 34 39 2e 34 31 2c 31 30 34 2e 39 37 6c 2d 2e 31 35 2d 31 2e 30 35 63 2d 2e 33 39 2e 34 33 2d 2e 38 39 2e 37 37 2d 31 2e 34 39 2c 31 2e 30 31 2d 2e 36 2e 32 34 2d 31 2e 32 Data Ascii: class="cls-1" d="M149.12,98.42c-.39.02-.79.05-1.2.1s-.8.11-1.17.19c-.78.15-1.32.42-1.63.8-.31.37-.45.79-.45,1.24s.17.84.51,1.12c.34.28.82.42,1.45.42.47,0,.92-.1,1.36-.29s.82-.44,1.13-.73v-2.85h0ZM149.41,104.97l-.15-1.05c-.39.43-.89.77-1.49,1.01-.6.24-1.2
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 39 38 2d 2e 30 35 2c 31 2e 34 2d 2e 31 36 2e 34 31 2d 2e 31 31 2e 37 37 2d 2e 32 33 2c 31 2e 30 38 2d 2e 33 37 2e 33 31 2d 2e 31 35 2e 35 36 2d 2e 32 39 2e 37 36 2d 2e 34 34 73 2e 33 35 2d 2e 32 38 2e 34 34 2d 2e 33 37 6c 31 2e 30 32 2c 32 2e 39 33 5a 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 67 31 34 32 37 36 22 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 31 34 32 37 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 37 37 2e 36 33 2c 39 37 2e 38 38 63 30 2d 2e 35 38 2d 2e 30 37 2d 31 2e 31 33 2d 2e 32 2d 31 2e 36 35 2d 2e 31 34 2d 2e 35 32 2d 2e 33 34 2d 2e 39 37 2d 2e 36 2d 31 2e 33 34 2d 2e 32 37 2d 2e 33 37 2d 2e 36 2d 2e 36 37 2d 2e 39 38 2d 2e 38 39 73 2d 2e 38 34 2d 2e 33 34 2d 31 Data Ascii: 98-.05,1.4-.16.41-.11.77-.23,1.08-.37.31-.15.56-.29.76-.44s.35-.28.44-.37l1.02,2.93Z"/> </g> <g id="g14276"> <path id="path14272" class="cls-1" d="M177.63,97.88c0-.58-.07-1.13-.2-1.65-.14-.52-.34-.97-.6-1.34-.27-.37-.6-.67-.98-.89s-.84-.34-1
2024-07-19 20:22:49 UTC	141	IN	Data Raw: 37 36 2d 2e 32 36 2c 31 2e 35 37 2d 2e 33 39 2c 32 2e 34 34 2d 2e 33 39 2c 31 2e 30 34 2c 30 2c 31 2e 39 31 2e 31 34 2c 32 2e 36 31 2e 34 73 31 2e 32 37 2e 36 36 2c 31 2e 36 39 2c 31 2e 31 35 63 2e 34 33 2e 35 2e 37 33 2c 31 2e 31 31 2e 39 31 2c 31 2e 38 35 73 2e 32 37 2c 31 2e 35 36 2e 32 37 2c 32 2e 35 31 76 38 2e 33 33 68 2d 33 2e 35 37 5a 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: 76-.26,1.57-.39,2.44-.39,1.04,0,1.91.14,2.61.4s1.27.66,1.69,1.15c.43.5.73,1.11.91,1.85s.27,1.56.27,2.51v8.33h-3.57Z"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49863	13.107.246.60	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	454	OUT	GET /dist/e04557dae5fe925694a0.svg HTTP/1.1 Host: www.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:49 UTC	734	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 505 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc8651264ef9" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202249Z-15b94bb6ff9l2slhr3ee6x866g0000000d0g00000000bf9k x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:49 UTC	505	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49872	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	415	OUT	GET /api/public/content/dd00d4036b494fd987dfa08614f988f5?v=2254cd74&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	624	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 3962 Connection: close CF-Ray: 8a5d6cfedc638cee-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 200 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-sky-white.svg; filename*=utf-8''logo-sky-white.svg ETag: "0x8DC99D03A714DBD" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140990 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	745	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: none; } .cls-1
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 2e 34 35 2d 32 2e 33 2c 31 2e 36 32 6c 2d 36 2e 38 32 2e 39 36 63 2d 2e 39 34 2e 31 37 2d 31 2e 37 35 2e 37 36 2d 32 2e 32 2c 31 2e 36 2d 2e 32 38 2e 36 39 2c 33 2e 31 32 2d 37 2e 33 37 2c 33 2e 31 32 2d 37 2e 33 37 2c 32 2e 30 35 2d 34 2e 39 33 2c 35 2e 33 2d 35 2e 34 31 2c 37 2e 36 38 2d 35 2e 33 37 2c 31 2e 33 34 2e 30 35 2c 32 2e 36 35 2e 33 34 2c 33 2e 38 37 2e 39 4d 31 36 38 2e 37 36 2c 35 37 2e 38 38 63 2d 31 2e 32 39 2d 2e 33 36 2d 32 2e 36 32 2d 2e 35 35 2d 33 2e 39 35 2d 2e 35 39 2d 34 2e 32 32 2c 30 2d 36 2e 35 35 2c 31 2e 35 34 2d 38 2e 39 39 2c 34 2e 31 38 6c 2d 31 31 2e 35 38 2c 31 32 2e 36 35 63 2e 36 32 2e 31 39 2c 31 2e 32 36 2e 32 34 2c 31 2e 39 2e 31 34 6c 39 2e 32 39 2d 31 2e 33 63 31 2e 32 37 2d 2e 31 39 2c 32 2e 34 33 2d 2e 37 39 2c Data Ascii: .45-2.3,1.62l-6.82.96c-.94.17-1.75.76-2.2,1.6-.28.69,3.12-7.37,3.12-7.37,2.05-4.93,5.3-5.41,7.68-5.37,1.34.05,2.65.34,3.87.9M168.76,57.88c-1.29-.36-2.62-.55-3.95-.59-4.22,0-6.55,1.54-8.99,4.18l-11.58,12.65c.62.19,1.26.24,1.9.14l9.29-1.3c1.27-.19,2.43-.79,
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 2e 38 36 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 34 34 34 22 2f 3e 0a 20 20 20 20 20 20 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 34 30 34 30 34 30 22 2f 3e 0a 20 20 20 20 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 20 20 20 20 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 22 20 78 3d 22 39 36 2e 39 37 22 20 79 3d 22 33 32 2e 30 35 22 20 77 69 64 74 68 3d 22 31 30 35 2e 39 39 22 20 68 65 69 67 68 74 3d 22 36 30 2e 32 35 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 6d 61 73 6b 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 6d 61 73 6b 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 6f Data Ascii: <stop offset=".86" stop-color="#444"/> <stop offset="1" stop-color="#404040"/> </linearGradient> <mask id="mask" x="96.97" y="32.05" width="105.99" height="60.25" maskUnits="userSpaceOnUse"> <g id="mask-2" data-name="mask"> <po
2024-07-19 20:22:49 UTC	479	IN	Data Raw: 36 2d 34 31 2e 37 39 63 2d 31 2e 32 32 2d 2e 35 35 2d 32 2e 35 34 2d 2e 38 35 2d 33 2e 38 37 2d 2e 39 2d 32 2e 34 32 2d 2e 30 35 2d 35 2e 36 35 2e 34 34 2d 37 2e 36 38 2c 35 2e 33 37 6c 2d 36 2e 31 33 2c 31 34 2e 33 32 2d 31 31 2e 39 34 2d 31 39 2e 33 37 63 2d 31 2e 32 39 2d 2e 33 34 2d 32 2e 36 32 2d 2e 35 35 2d 33 2e 39 36 2d 2e 35 39 2d 34 2e 32 32 2c 30 2d 36 2e 35 35 2c 31 2e 35 35 2d 38 2e 39 39 2c 34 2e 31 39 4d 31 33 34 2e 34 35 2c 35 31 2e 37 33 76 34 30 2e 38 33 63 2e 37 31 2e 31 31 2c 31 2e 34 33 2e 31 35 2c 32 2e 31 36 2e 31 35 2c 35 2e 39 37 2c 30 2c 37 2e 32 32 2d 31 2e 37 38 2c 37 2e 32 32 2d 34 2e 38 36 76 2d 34 32 2e 32 34 63 2d 2e 37 35 2d 2e 31 35 2d 31 2e 35 2d 2e 32 34 2d 32 2e 32 36 2d 2e 32 33 2d 36 2e 30 37 2d 2e 30 31 2d 37 2e 31 Data Ascii: 6-41.79c-1.22-.55-2.54-.85-3.87-.9-2.42-.05-5.65.44-7.68,5.37l-6.13,14.32-11.94-19.37c-1.29-.34-2.62-.55-3.96-.59-4.22,0-6.55,1.55-8.99,4.19M134.45,51.73v40.83c.71.11,1.43.15,2.16.15,5.97,0,7.22-1.78,7.22-4.86v-42.24c-.75-.15-1.5-.24-2.26-.23-6.07-.01-7.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49864	13.107.246.60	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	461	OUT	GET /dist/runtime.ae7f2517edfa26fd2d54.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:49 UTC	836	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: application/javascript Content-Length: 1293 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 ETag: "1dacc8651264a0d" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202249Z-15b94bb6ff9dq4kpvdrfc2b4440000000e3000000000rzch x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:49 UTC	1293	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 65 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 72 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 69 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 61 6d 64 4f 3d 7b 7d 2c 72 3d 5b 5d 2c 6f 2e 4f 3d 28 65 2c 74 2c 6e 2c 69 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 75 3d 30 3b 75 3c 72 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 74 3d 72 5b 75 5d 5b 30 5d 2c Data Ascii: (()=>{"use strict";var r,e={},t={};function o(r){var n=t[r];if(void 0!==n)return n.exports;var i=t[r]={exports:{}};return e[r].call(i.exports,i,i.exports,o),i.exports}o.m=e,o.amdO={},r=[],o.O=(e,t,n,i)=>{if(!t){var a=1/0;for(u=0;u<r.length;u++){t=r[u][0],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49874	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	640	OUT	GET /api/public/content/946d853722194c86bdae8da05e63158a?v=dda04a96 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	620	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 1076 Connection: close CF-Ray: 8a5d6cff5b9142d4-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 433 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=topnav_plans.svg; filename*=utf-8''topnav_plans.svg ETag: "0x8DBE1BC707C6884" Last-Modified: Fri, 10 Nov 2023 07:12:46 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 127128 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	749	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <g i
2024-07-19 20:22:49 UTC	327	IN	Data Raw: 73 2d 31 22 20 64 3d 22 6d 34 39 2e 33 38 2c 36 31 2e 32 39 68 35 2e 36 38 6c 31 30 2e 36 31 2d 39 2e 33 35 68 31 31 2e 35 39 56 31 34 2e 31 35 48 32 34 2e 39 38 76 33 39 2e 36 68 32 34 2e 34 76 37 2e 35 34 5a 6d 2d 31 38 2e 37 38 2d 31 33 2e 31 36 76 2d 32 38 2e 33 35 68 34 31 2e 30 33 76 32 36 2e 35 33 68 2d 38 2e 30 39 6c 2d 38 2e 35 34 2c 37 2e 35 32 76 2d 35 2e 36 39 68 2d 32 34 2e 34 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 6d 35 31 2e 39 2c 32 34 2e 38 33 63 2d 33 2e 31 36 2c 30 2d 35 2e 37 33 2c 32 2e 35 36 2d 35 2e 37 33 2c 35 2e 37 33 2c 30 2c 32 2e 32 37 2c 31 2e 33 32 2c 34 2e 32 32 2c 33 2e 32 33 2c 35 2e 31 35 76 37 2e 31 36 68 35 76 2d 37 2e 31 36 63 31 2e 39 31 2d 2e 39 33 2c 33 Data Ascii: s-1" d="m49.38,61.29h5.68l10.61-9.35h11.59V14.15H24.98v39.6h24.4v7.54Zm-18.78-13.16v-28.35h41.03v26.53h-8.09l-8.54,7.52v-5.69h-24.4Z"/> <path class="cls-1" d="m51.9,24.83c-3.16,0-5.73,2.56-5.73,5.73,0,2.27,1.32,4.22,3.23,5.15v7.16h5v-7.16c1.91-.93,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49868	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	415	OUT	GET /api/public/content/6db1962dd31c45afbc8d5f9a804730c1?v=fab1a644&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	647	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/svg+xml Content-Length: 10210 Connection: close CF-Ray: 8a5d6cff6d534295-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 200 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-michelin_group-white.svg; filename*=utf-8''logo-michelin_group-white.svg ETag: "0x8DC99D03A569DBE" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140981 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 30 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #000; } .cls-1, .cls-2 { stroke-width: 0px;
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 38 6c 2d 34 2e 37 31 2c 31 32 2e 37 39 68 35 2e 36 32 6c 33 2e 34 31 2d 39 2e 32 35 2d 2e 37 32 2c 39 2e 32 35 68 34 2e 39 39 6c 36 2e 31 32 2d 39 2e 30 39 2d 33 2e 33 34 2c 39 2e 30 39 68 35 2e 36 35 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 38 39 2e 38 35 2c 39 36 2e 33 33 6c 2d 34 2e 37 31 2c 31 32 2e 37 39 68 36 2e 32 6c 34 2e 37 31 2d 31 32 2e 37 39 68 2d 36 2e 31 39 5a 22 2f 3e 0a 20 20 3c 2f 67 3e 0a 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 39 31 2e 35 31 2c 36 30 2e 33 32 76 2d 2e 30 33 63 2d 2e 32 37 2d 2e 37 35 2d 2e 39 37 2d 31 2e 36 38 2d 32 2e 31 32 2d 31 2e 39 34 2d 2e 34 32 2d 2e 38 37 2d 31 2e 32 38 2d 31 2e 34 2d 32 2e 32 38 2d 31 2e 34 2d Data Ascii: 8l-4.71,12.79h5.62l3.41-9.25-.72,9.25h4.99l6.12-9.09-3.34,9.09h5.65Z"/> <path class="cls-2" d="M189.85,96.33l-4.71,12.79h6.2l4.71-12.79h-6.19Z"/> </g> <path class="cls-1" d="M191.51,60.32v-.03c-.27-.75-.97-1.68-2.12-1.94-.42-.87-1.28-1.4-2.28-1.4-
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 2e 39 38 2c 31 2e 35 39 2d 2e 36 31 2c 32 2e 37 37 2d 31 2e 34 32 2c 33 2e 35 2d 32 2e 34 2c 31 2e 33 38 2d 2e 32 34 2c 32 2e 34 36 2d 2e 38 35 2c 33 2e 30 34 2d 31 2e 31 38 2c 31 2e 33 38 2d 2e 37 38 2c 32 2e 33 35 2d 31 2e 35 35 2c 32 2e 39 37 2d 32 2e 33 35 2e 35 31 2d 2e 36 36 2e 38 32 2d 31 2e 31 36 2c 31 2e 30 36 2d 31 2e 37 31 2e 34 37 2d 2e 32 35 2c 31 2d 2e 35 37 2c 31 2e 37 2d 31 2e 30 33 2c 32 2e 34 32 2d 31 2e 36 32 2c 32 2e 39 33 2d 34 2e 35 37 2c 32 2e 39 38 2d 34 2e 39 31 2e 30 31 2d 2e 30 37 2e 30 32 2d 2e 31 34 2e 30 33 2d 2e 32 31 2e 31 32 2c 30 2c 2e 32 34 2e 30 31 2e 33 37 2e 30 31 2c 32 2e 34 33 2c 30 2c 35 2e 36 2d 31 2e 35 33 2c 37 2e 33 31 2d 32 2e 33 35 68 2e 30 33 63 2e 32 36 2d 2e 31 34 2e 34 39 2d 2e 32 35 2e 36 2d 2e 32 39 2e Data Ascii: .98,1.59-.61,2.77-1.42,3.5-2.4,1.38-.24,2.46-.85,3.04-1.18,1.38-.78,2.35-1.55,2.97-2.35.51-.66.82-1.16,1.06-1.71.47-.25,1-.57,1.7-1.03,2.42-1.62,2.93-4.57,2.98-4.91.01-.07.02-.14.03-.21.12,0,.24.01.37.01,2.43,0,5.6-1.53,7.31-2.35h.03c.26-.14.49-.25.6-.29.
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 38 2e 33 31 2e 31 33 2e 34 36 2e 30 34 2e 31 36 2e 30 38 2e 33 34 2e 31 31 2e 35 31 2d 2e 33 32 2e 30 37 2d 2e 34 33 2e 32 39 2d 2e 31 31 2e 34 2e 32 31 2e 30 37 2e 34 35 2e 32 32 2e 36 34 2e 33 35 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 2e 30 32 2c 30 6c 2e 31 2e 30 37 63 2e 30 36 2e 30 35 2e 31 38 2e 31 34 2e 32 39 2e 32 33 2c 31 2e 31 37 2e 39 36 2c 32 2e 33 35 2c 32 2e 35 36 2c 32 2e 36 2c 34 2e 36 32 2e 32 32 2c 31 2e 37 36 2d 2e 37 35 2c 33 2e 36 39 2d 31 2e 39 2c 35 2d 2e 34 35 2e 34 39 2d 31 2e 32 35 2c 31 2e 32 34 2d 32 2e 36 34 2c 32 2e 30 39 2d 2e 33 31 2e 31 39 2d 2e 30 33 2e 34 33 2c 31 2e 35 32 2d 2e 31 33 2e 31 34 2d 2e 30 33 2e 33 35 2d 2e 31 33 2e 34 38 2c 30 2c 2e 31 35 2e 31 35 2e 31 38 2e 38 31 2d 2e 33 36 2c 31 Data Ascii: 8.31.13.46.04.16.08.34.11.51-.32.07-.43.29-.11.4.21.07.45.22.64.35,0,0,0,0,0,0,0,0,0,0,.02,0l.1.07c.06.05.18.14.29.23,1.17.96,2.35,2.56,2.6,4.62.22,1.76-.75,3.69-1.9,5-.45.49-1.25,1.24-2.64,2.09-.31.19-.03.43,1.52-.13.14-.03.35-.13.48,0,.15.15.18.81-.36,1
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 37 2d 34 2e 30 35 2e 36 31 2d 36 2e 30 39 2e 37 35 2d 31 2e 31 31 2c 31 2e 38 33 2d 31 2e 37 37 2c 32 2e 36 36 2d 32 2e 31 35 2d 2e 35 35 2c 31 2e 36 31 2d 2e 38 2c 34 2e 31 2e 39 36 2c 37 2e 30 37 76 2e 30 32 73 2e 30 32 2e 30 32 2e 30 32 2e 30 32 63 2e 38 39 2c 31 2e 34 2c 32 2e 30 35 2c 32 2e 34 39 2c 33 2e 34 34 2c 33 2e 32 33 2e 38 32 2e 34 33 2c 31 2e 37 31 2e 37 33 2c 32 2e 36 32 2e 38 37 2d 2e 36 34 2e 34 35 2d 31 2e 34 2e 37 37 2d 32 2e 30 36 2c 31 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 32 22 20 64 3d 22 4d 31 36 34 2e 31 33 2c 38 30 2e 34 32 63 2d 2e 37 35 2e 34 32 2d 31 2e 38 2e 39 39 2d 33 2e 31 32 2c 31 2e 30 33 2d 2e 30 36 2c 30 2d 2e 31 32 2c 30 2d 2e 31 38 2c 30 2d 31 2e 39 38 2c 30 2d 34 2e 33 36 2d 2e Data Ascii: 7-4.05.61-6.09.75-1.11,1.83-1.77,2.66-2.15-.55,1.61-.8,4.1.96,7.07v.02s.02.02.02.02c.89,1.4,2.05,2.49,3.44,3.23.82.43,1.71.73,2.62.87-.64.45-1.4.77-2.06,1"/> <path class="cls-2" d="M164.13,80.42c-.75.42-1.8.99-3.12,1.03-.06,0-.12,0-.18,0-1.98,0-4.36-.
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 2d 33 2e 31 38 2d 36 2e 35 33 2c 30 2c 30 2c 2e 33 32 2d 32 2e 32 31 2c 32 2e 30 32 2d 33 2e 35 31 2c 31 2e 31 33 2d 2e 38 37 2c 31 2e 38 31 2d 31 2e 32 35 2c 31 2e 38 31 2d 31 2e 32 35 2c 30 2c 30 2c 31 2e 30 36 2d 2e 37 2c 32 2e 36 35 2d 2e 37 2e 36 38 2c 30 2c 31 2e 34 37 2e 31 33 2c 32 2e 33 31 2e 35 2d 2e 32 35 2e 31 38 2d 2e 34 37 2e 33 37 2d 2e 35 39 2e 35 35 2d 2e 33 33 2e 34 39 2d 2e 37 38 2c 31 2e 36 32 2d 2e 34 37 2c 31 2e 36 32 2e 32 33 2c 30 2c 2e 33 38 2d 2e 35 35 2c 31 2e 31 34 2d 2e 39 35 2e 33 37 2d 2e 32 2c 32 2e 31 35 2d 31 2e 32 34 2c 32 2e 31 35 2d 31 2e 32 34 2c 30 2c 30 2c 2e 30 38 2d 2e 32 37 2e 31 35 2d 2e 34 34 2c 30 2c 30 2c 2e 32 31 2d 2e 34 37 2e 36 37 2d 31 2e 31 33 2e 30 33 2d 2e 30 35 2e 30 39 2d 2e 31 34 2e 32 2d 2e 32 37 Data Ascii: -3.18-6.53,0,0,.32-2.21,2.02-3.51,1.13-.87,1.81-1.25,1.81-1.25,0,0,1.06-.7,2.65-.7.68,0,1.47.13,2.31.5-.25.18-.47.37-.59.55-.33.49-.78,1.62-.47,1.62.23,0,.38-.55,1.14-.95.37-.2,2.15-1.24,2.15-1.24,0,0,.08-.27.15-.44,0,0,.21-.47.67-1.13.03-.05.09-.14.2-.27
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 2e 36 33 2e 31 34 2c 32 2e 31 31 2e 37 36 2e 32 37 2e 33 34 2e 35 35 2e 38 34 2e 37 36 2c 31 2e 33 34 2e 30 38 2e 31 37 2e 31 35 2e 33 35 2e 32 32 2e 35 35 2e 32 2e 35 38 2e 32 39 2c 31 2e 31 35 2e 32 36 2c 31 2e 36 38 2d 2e 30 32 2e 33 32 2d 2e 30 38 2e 36 32 2d 2e 31 38 2e 38 38 2d 2e 31 31 2e 32 39 2d 2e 32 38 2e 36 36 2d 2e 36 31 2e 38 34 2d 2e 32 32 2e 31 32 2d 2e 34 36 2e 31 37 2d 2e 36 36 2e 32 31 68 30 63 2d 2e 31 38 2e 30 34 2d 2e 33 38 2e 30 38 2d 2e 35 39 2e 30 38 2d 2e 31 33 2c 30 2d 2e 32 35 2d 2e 30 31 2d 2e 33 37 2d 2e 30 34 2d 2e 30 32 2c 30 2d 2e 30 34 2c 30 2d 2e 30 36 2d 2e 30 32 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2d 2e 30 32 2c 30 2d 2e 30 32 2c 30 68 30 73 30 2c 30 2c 30 2c 30 63 2d 2e 35 32 2d 2e 31 37 2d 2e 38 36 2d 2e Data Ascii: .63.14,2.11.76.27.34.55.84.76,1.34.08.17.15.35.22.55.2.58.29,1.15.26,1.68-.02.32-.08.62-.18.88-.11.29-.28.66-.61.84-.22.12-.46.17-.66.21h0c-.18.04-.38.08-.59.08-.13,0-.25-.01-.37-.04-.02,0-.04,0-.06-.02,0,0,0,0,0,0,0,0-.02,0-.02,0h0s0,0,0,0c-.52-.17-.86-.
2024-07-19 20:22:49 UTC	627	IN	Data Raw: 2e 38 38 2e 35 39 2d 2e 35 31 2d 2e 30 38 2d 31 2d 2e 32 38 2d 31 2e 34 37 2d 2e 35 2d 2e 33 38 2d 2e 31 38 2d 2e 37 38 2d 2e 34 32 2d 31 2e 32 31 2d 2e 34 35 2d 2e 34 38 2e 30 32 2d 2e 39 36 2e 30 32 2d 31 2e 34 34 2d 2e 30 34 2d 2e 31 36 2d 2e 30 32 2d 2e 33 2d 2e 30 38 2d 2e 33 36 2d 2e 32 35 2d 2e 30 37 2d 2e 32 33 2e 30 38 2d 2e 34 36 2e 33 32 2d 2e 34 37 2e 30 38 2c 30 2c 2e 31 35 2e 30 32 2e 32 33 2e 30 32 2e 31 35 2c 30 2c 2e 33 2e 30 32 2e 34 36 2e 30 32 2c 31 2e 37 31 2e 30 35 2c 33 2e 34 35 2d 2e 32 32 2c 35 2e 30 39 2d 2e 37 32 2c 31 2d 2e 33 31 2c 31 2e 39 38 2d 2e 37 33 2c 32 2e 38 35 2d 31 2e 33 34 2e 33 36 2d 2e 32 35 2e 36 39 2d 2e 35 33 2e 39 39 2d 2e 38 35 2e 30 34 2d 2e 30 35 2e 30 38 2d 2e 31 31 2e 31 33 2d 2e 31 37 2d 2e 30 33 2d 2e Data Ascii: .88.59-.51-.08-1-.28-1.47-.5-.38-.18-.78-.42-1.21-.45-.48.02-.96.02-1.44-.04-.16-.02-.3-.08-.36-.25-.07-.23.08-.46.32-.47.08,0,.15.02.23.02.15,0,.3.02.46.02,1.71.05,3.45-.22,5.09-.72,1-.31,1.98-.73,2.85-1.34.36-.25.69-.53.99-.85.04-.05.08-.11.13-.17-.03-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49873	13.107.246.60	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	466	OUT	GET /dist/sharedVendor.48f94c21b16af0164137.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:49 UTC	837	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: application/javascript Content-Length: 40271 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 ETag: "1dacc865126d24f" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202249Z-15b94bb6ff9l65tv1z07gzckqw0000000ct000000000dccf x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:49 UTC	15547	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 68 61 72 65 64 56 65 6e 64 6f 72 2e 34 38 66 39 34 63 32 31 62 31 36 61 66 30 31 36 34 31 33 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 30 5d 2c 7b 38 35 39 35 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 Data Ascii: /! For license information please see sharedVendor.48f94c21b16af0164137.js.LICENSE.txt /"use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[470],{8595:(t,e,n)=>{function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerab
2024-07-19 20:22:49 UTC	16384	IN	Data Raw: 50 6f 73 69 74 69 6f 6e 3a 6b 2c 67 65 74 50 6f 73 69 74 69 6f 6e 3a 50 2c 67 65 74 4c 69 6d 69 74 3a 41 2c 65 78 63 65 65 64 65 64 4c 69 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3d 67 28 65 29 3f 50 28 29 3a 65 3b 76 61 72 20 6e 3d 21 30 21 3d 3d 74 26 26 6d 28 65 29 3c 6d 28 41 28 21 31 29 29 2c 69 3d 21 31 21 3d 3d 74 26 26 6d 28 65 29 3e 6d 28 41 28 21 30 29 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 69 7d 2c 72 65 70 6f 73 69 74 69 6f 6e 3a 77 7d 7d 2c 43 6f 6e 74 72 6f 6c 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 69 2c 6f 2c 72 2c 73 2c 75 3d 4d 74 28 74 29 2c 63 3d 75 2e 6f 6e 2c 6c 3d 75 2e 65 6d 69 74 2c 64 3d 65 2e 4d 6f 76 65 2c 66 3d 64 2e 67 65 74 50 6f 73 69 74 69 6f 6e 2c 68 3d 64 2e 67 65 74 4c 69 6d Data Ascii: Position:k,getPosition:P,getLimit:A,exceededLimit:function(t,e){e=g(e)?P():e;var n=!0!==t&&m(e)<m(A(!1)),i=!1!==t&&m(e)>m(A(!0));return n\|\|i},reposition:w}},Controller:function(t,e,n){var i,o,r,s,u=Mt(t),c=u.on,l=u.emit,d=e.Move,f=d.getPosition,h=d.getLim
2024-07-19 20:22:49 UTC	8340	IN	Data Raw: 33 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 64 61 74 61 3b 69 66 28 65 2e 69 6e 64 65 78 4f 66 28 6c 29 3e 3d 30 29 7b 63 6f 6e 73 74 20 69 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6f 3d 65 2e 73 70 6c 69 74 28 66 29 2c 72 3d 6f 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 72 3b 65 2b 2b 29 7b 6c 65 74 20 6e 2c 72 3d 6f 5b 65 5d 3b 69 66 28 22 22 3d 3d 3d 72 29 6e 3d 67 28 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 79 2e 65 78 65 63 28 72 29 3b 6e 75 6c 6c 21 3d 3d 74 26 26 76 28 74 5b 32 5d 2c 68 29 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 30 2c 74 2e 69 6e 64 65 78 29 2b 74 5b 31 5d 2b 74 5b 32 5d 2e 73 6c 69 63 65 28 30 2c 2d 35 29 2b 74 5b 33 5d 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 Data Ascii: 3===t.nodeType){const e=t.data;if(e.indexOf(l)>=0){const i=t.parentNode,o=e.split(f),r=o.length-1;for(let e=0;e<r;e++){let n,r=o[e];if(""===r)n=g();else{const t=y.exec(r);null!==t&&v(t[2],h)&&(r=r.slice(0,t.index)+t[1]+t[2].slice(0,-5)+t[3]),n=document.cr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49875	13.107.246.60	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	460	OUT	GET /dist/shared.d65d42466ad2647993ec.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:49 UTC	743	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: application/javascript Content-Length: 550 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc8651264d26" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202249Z-15b94bb6ff9l65tv1z07gzckqw0000000cn000000000t5hd x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:49 UTC	550	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 32 5d 2c 7b 39 39 31 37 3a 28 65 2c 61 2c 72 29 3d 3e 7b 72 2e 64 28 61 2c 7b 5a 3a 28 29 3d 3e 74 7d 29 3b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 63 6c 61 73 73 7b 70 75 73 68 45 76 65 6e 74 28 65 29 7b 63 6f 6e 73 74 20 61 3d 65 3b 61 2e 65 76 65 6e 74 4c 61 62 65 6c 3d 74 68 69 73 2e 72 65 70 6c 61 63 65 45 76 65 6e 74 4c 61 62 65 6c 50 61 72 61 6d 65 74 65 72 73 28 61 2e 65 76 65 6e 74 4c 61 62 65 6c 29 2c 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c Data Ascii: "use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[712],{9917:(e,a,r)=>{r.d(a,{Z:()=>t});const t=new class{pushEvent(e){const a=e;a.eventLabel=this.replaceEventLabelParameters(a.eventLabel),window.dataLayer=window.dataLayer\|\|[],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49877	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	640	OUT	GET /api/public/content/2e6624e57dcf401aba62439ed1bf9f1f?v=4c53bcb4 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	636	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/png Content-Length: 8840 Connection: close CF-Ray: 8a5d6d01ad5b43ed-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 433 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_mimecastercentral.png; filename*=utf-8''icon_mimecastercentral.png ETag: "0x8DBD578667AEEEC" Last-Modified: Wed, 25 Oct 2023 16:35:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 124596 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	733	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 22 1d 49 44 41 54 78 01 ed 9d 3d 70 1c c7 95 c7 5f cf 42 16 28 ba 4a ab 93 e4 8f bb 40 c3 c0 65 50 74 95 96 99 32 2e 33 39 12 94 9d 23 42 d9 39 22 19 3a 12 18 f9 1c 91 8c ce 17 09 cc 74 11 c1 e8 e4 48 cb 4c 17 11 ac 32 09 da a7 2a 0d 33 d5 09 2e 81 55 92 40 5b dc ee 7b dd b3 0b ec 2e f6 63 3e 7a 66 ba 7b fe bf 12 44 00 5a 82 e2 ec f4 7f de fb bf d7 af 05 01 30 cb fa 46 4c c3 4e 97 a4 8c 89 a2 2e 29 c5 bf aa 57 89 84 fe bc cb af d0 1f f1 c9 6f e0 ef 93 f9 fe 12 c4 21 bf e6 70 f4 c5 e1 e8 83 bf 2d 92 f4 fb Data Ascii: PNGIHDR,,y}upHYssRGBgAMAa"IDATx=p_B(J@ePt2.39#B9":tHL2*3.U@[{.c>zf{DZ0FLN.)Wo!p-
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 13 f6 a9 de 25 00 aa a1 c7 a2 b5 45 d1 4f d6 49 7d 7d 9f c0 42 10 61 2d 22 4d ff b4 4f d5 23 00 ea 03 69 e2 12 10 61 9d 42 a7 7f 3f ff 3d 49 f5 47 fe e2 67 04 40 bd 74 39 da ba 46 d1 4f bb a4 5e ff 0b d1 01 da 20 26 80 60 4d a2 a3 2a d5 f9 6f fe ec 3d 02 a0 51 d8 82 10 62 93 3a 3f 7d c6 69 22 c6 38 8f 80 60 19 a6 a2 2a f4 54 01 57 d0 07 d7 6e b2 b7 15 73 b4 f5 10 d1 16 3c ac b1 57 f5 31 a1 a7 0a b8 0d 7b 5b 9d 0f 89 da 3d fd b4 c5 11 16 a2 2a e0 15 ec 6d 29 5d 49 a4 36 57 12 5b 1a 61 6d c4 ec 0f dc 25 54 00 81 9f b4 b6 92 18 51 db 88 ce 5f 25 11 3d 20 88 15 f0 17 fd c0 7d c0 f7 f2 35 6a 19 2d 4a 09 47 29 a0 a2 6d fe 62 9d 00 f0 1b 7d 0f bf 97 b6 3f 9c fd 1f a2 c3 e7 d4 02 5a 92 12 9a 14 f0 33 82 b1 0e c2 a4 35 29 62 f8 29 a1 9e ac 90 a6 80 31 01 10 26 69 Data Ascii: %EOI}}Ba-"MO#iaB?=IGg@t9FO^ &`Mo=Qb:?}i"8`TWns<W1{[=*m)]I6W[am%TQ_%= }5j-JG)mb}?Z35)b)1&i
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 33 e8 89 a1 c5 f6 e4 da a1 86 d4 b0 62 c1 72 6c 68 5e a3 53 14 8d 78 6d 8d c4 2b 26 e0 3b 7a eb 8c 2e ba ec 38 31 e4 ee a5 0b 3d 7a 51 59 0b 43 56 2a cf 64 aa 15 ac a6 15 ff 34 35 a7 86 8b e0 9b 2b 92 3a 65 7c 9f 20 5e 3e 31 16 a9 41 63 29 df 22 9a 4a 05 67 a9 38 93 a9 50 b0 1a 31 ff 56 23 c4 0d 92 8f b7 c9 19 58 bc 48 72 da 68 c4 ab 4f c0 35 74 cf d4 7d f6 36 76 9d 3d 3a ab ee aa e0 2a 2a cc 64 aa 13 2c 57 14 ff 34 4e ce aa 4e 19 7b 5e 11 8b 97 d2 5b 81 62 02 35 a3 8d 73 da 25 29 58 a4 be db 75 65 d2 e6 62 9c 0c 0c f6 48 ed 5f a4 0a a8 46 b0 5c 53 fc d3 0c d2 e6 3d d7 99 8c be f4 90 41 8c 74 b6 0f 0b 14 a9 bd d4 34 8f 06 de 1d 40 2a de be cb ff ff 9b e4 1a 15 65 32 15 08 56 4d 7b 05 cb e2 e8 31 46 cb 19 0b 98 b8 84 08 ac 30 09 5f bf 01 49 f5 d0 4b 81 9a Data Ascii: 3brlh^Sxm+&;z.81=zQYCVd45+:e\| ^>1Ac)"Jg8P1V#XHrhO5t}6v=:d,W4NN{^[b5s%)XuebH_F\S=At4@e2VM{1F0_IK
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 22 72 3d 64 d7 37 7d cb a2 aa 45 28 79 2d 3d e0 d7 93 14 31 f4 51 32 d9 59 9a 16 2e 16 2c 54 07 e7 20 de 21 57 e9 6c 5c e1 a8 c2 f7 13 b8 6d a3 a3 16 be 26 e7 dd f7 86 a4 84 fd 32 66 89 5f bc 58 b0 da b3 f9 32 3b ae b6 37 44 1b 1f b1 61 bb 83 88 78 2e 5d 36 3e ee b2 21 ef fa 68 24 9f db 4c ec a2 16 9f c1 b8 40 b0 7e a1 2f 5e 4c 60 96 ae 73 29 86 ae 02 2a b1 4d 60 39 4a 6d bb 2b 5a 58 6f 33 f0 3a bb 30 57 c0 e7 0b 56 b4 d6 27 30 1f 97 7c 2c b3 c7 13 7e 55 66 52 d1 fa 98 5c a3 f3 23 44 57 b3 44 b2 3f f7 db 73 5f ec 5b 09 bf 56 1c f1 b1 da bd 21 bd 38 fa 9a b9 26 5a f0 af 4e b3 40 83 e6 08 56 4f fb 20 7d 02 f3 71 c1 db 83 58 95 c3 3d d1 42 84 75 9a de bc 49 a4 a7 05 6b ed 39 2e de 72 e2 46 7d 2c 6d b0 43 ac ca 63 44 eb c2 4d 6a 1c 73 2f c5 04 66 99 db de 70 Data Ascii: "r=d7}E(y-=1Q2Y.,T !Wl\m&2f_X2;7Dax.]6>!h$L@~/^L`s)*M`9Jm+ZXo3:0WV'0\|,~UfR\#DWD?s_[V!8&ZN@VO }qX=BuIk9.rF},mCcDMjs/fp
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 04 fc c0 9a e7 88 35 57 8c 17 3a 25 b4 f0 c4 68 35 25 af 9f 44 8a e1 0d b2 63 29 85 c7 9a 2b c6 93 64 bc 35 27 21 50 04 0b 4f ca 27 03 c2 f5 f7 81 84 e8 cf 03 b2 06 2a 85 39 49 f4 bf c6 82 85 9c ba 18 76 ae 9b 50 77 08 b8 8d 20 db a9 7b 42 20 0f 89 fe 57 2a 58 e8 bc 2d 8a 9d eb 26 d7 6f 11 70 1b a9 2c bf 47 2a 21 90 9d 51 2b 08 22 ac 32 08 5b 4f 49 5d 2d 84 97 e5 30 03 eb be 13 c6 0b e5 c5 5c af 51 84 15 21 9f 2e 46 42 b6 50 ea 06 01 37 51 74 9b ec 93 10 c8 ce 68 42 46 2a 58 c3 e1 80 40 7e 64 c7 62 64 aa cd 77 f4 64 39 48 42 b4 6f bf c1 57 40 b0 f2 91 4e c8 18 a5 84 28 b3 16 c3 f2 5c 23 25 ab 78 92 83 32 54 15 f9 0e 15 1e 4e b9 48 27 64 88 e3 af c5 f9 2f f9 df 31 81 ec a8 7d 41 b6 c1 fb e0 12 09 bf c7 e7 a8 2a c4 db df f0 4d d4 25 b0 02 ce 3c d4 e3 8b fa Data Ascii: 5W:%h5%Dc)+d5'!PO'9IvPw {B WX-&op,G!Q+"2[OI]-0\Q!.FBP7QthBFX@~dbdwd9HBoW@N(\#%x2TNH'd/1}A*M%<
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: b3 5b 00 39 04 8b da b6 d7 69 40 00 34 89 5c bf 45 a1 23 65 ae c0 20 9f 60 a5 15 9b 01 85 8e 36 db 7d da e5 0f 02 25 f8 73 42 07 79 d7 59 4e c1 a2 76 a4 4a ad 37 db 81 33 84 bc de 54 fe 31 48 39 4c f7 c9 df f5 f6 83 e6 7a 74 2a 07 66 3b 70 8b 30 5b 8a 0a ad b3 fc 11 96 26 64 33 10 66 3b 70 8d 10 07 fb 15 5c 67 c5 22 ac 70 5b 1c 10 5d 01 07 09 6e bd 15 5e 67 c5 22 2c d3 e2 20 73 e7 9f ce a3 04 bc 2b e0 20 81 ad b7 12 59 4c 41 c1 a2 51 c9 35 b4 29 0e 72 87 00 70 91 70 d6 5b 42 25 2a 9f c5 05 2b 34 d5 47 2b 03 70 9a 40 d6 9b c9 62 8a af b3 82 1e d6 98 80 72 eb 8c bb c5 01 68 0e ef d7 db e8 80 90 e2 eb ac 44 84 a5 09 44 f5 11 5d 01 2f f0 7c bd 95 8c ae 34 25 23 2c 4d 00 51 16 a2 2b e0 0d de ae b7 24 3d d1 a8 dc e8 a0 0e 95 e6 ab e7 14 bd 7e 86 b5 af 4f 3e a2 Data Ascii: [9i@4\E#e `6}%sByYNvJ73T1H9Lztf;p0[&d3f;p\g"p[]n^g", s+ YLAQ5)rpp[B%+4G+p@brhDD]/\|4%#,MQ+$=~O>
2024-07-19 20:22:49 UTC	1262	IN	Data Raw: 9f 00 f0 83 c1 68 83 71 42 56 c8 18 69 55 30 9b bd 28 11 b9 82 7c 99 4d 6e 91 e5 09 52 5e ac 74 54 65 bc 33 88 15 f0 0a bd bd ed 01 75 2e 6c 91 15 9e 8c d6 d2 f1 19 91 f3 48 48 7e 7f 9d 1c c1 9d 08 cb b0 52 f1 f9 09 73 f4 41 f1 0a 85 a9 00 de c4 76 1a e0 3d 56 bd ad 85 3b 50 6a db d4 9c 15 c7 04 4b b3 a0 72 58 7a 92 a1 d9 57 a5 cd fd 98 00 08 03 bb 82 32 d5 11 df 7c 45 70 1e ee a4 84 c7 e8 30 55 4e 8f 84 49 f7 06 16 17 2b 93 02 4a 1f 4e c9 05 20 0f 3a 23 f9 92 ef 6f 3b 23 89 25 af b1 f1 b1 f2 66 0d ba 77 00 87 83 11 d6 98 8d 2d 7e 33 3e 1a 99 8c 03 2a 84 4e 01 cf 7c 94 36 81 02 10 30 22 ba 45 f2 91 25 af 89 d7 8d a3 a7 66 3b 2c 58 9a 32 17 ce f8 61 3a 05 44 bb 02 68 0b 7b fc 80 77 32 32 b2 85 e3 82 55 14 2b 5b 10 00 f0 11 e7 8c 72 9b 38 e8 61 95 45 9b eb Data Ascii: hqBViU0(\|MnR^tTe3u.lHH~RsAv=V;PjKrXzW2\|Ep0UNI+JN :#o;#%fw-~3>*N\|60"E%f;,X2a:Dh{w22U+[r8aE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49876	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	640	OUT	GET /api/public/content/a74558d866934fd38d631466eda4fae9?v=31f14de1 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	649	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/png Content-Length: 11899 Connection: close CF-Ray: 8a5d6d01dd774271-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 433 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_threat_intelligence_hub.png; filename*=utf-8''icon_threat_intelligence_hub.png ETag: "0x8DBD5625AB11BDA" Last-Modified: Wed, 25 Oct 2023 13:57:40 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 124526 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 2e 10 49 44 41 54 78 01 ed 9d 07 7c 54 65 d6 c6 cf 9d 80 d2 94 50 42 53 24 0a 22 a1 48 40 51 54 5c 03 22 e2 5a c0 b2 6b 5b 05 b1 97 5d c0 b5 ae 05 70 17 5d 3f 57 81 b5 00 56 b0 62 5b 41 05 c1 46 40 40 44 20 01 81 04 a4 0c 02 4a 09 10 94 26 92 b9 df fb bc 93 c1 21 a4 cc dc 7b 67 e6 de 99 e7 ff fb 05 92 49 48 c2 94 e7 9e f3 9c f3 9e 63 08 21 65 a9 d1 26 53 4a d2 d2 25 10 c8 14 f1 a5 8b 69 aa bf cd ba 22 06 de 4f 57 5f 81 b7 cc df ff 81 ba 5d f4 ed 95 60 14 ab af 29 2e fd a0 b8 f4 4d dd 6c f8 83 b7 1b 3b 82 Data Ascii: PNGIHDR,,y}upHYssRGBgAMAa.IDATx\|TePBS$"H@QT\"Zk[]p]?WVb[AF@@D J&!{gIHc!e&SJ%i"OW_]`).Ml;
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 14 ac 88 d0 e9 df 08 f5 e4 ea 2f 84 38 4d d0 98 67 03 6a 04 a4 09 a9 1c 5f 5b 15 51 55 9f a0 7c aa ae 42 48 6c c8 56 a2 d5 5f 7c 8d 6a 88 b9 65 86 90 0a 61 84 55 11 c1 f4 0f 3e 55 b6 10 12 3f 98 26 56 02 23 ac 43 40 fa d7 f4 31 09 98 63 d4 07 4d 84 90 f8 92 ae a2 ad 41 e2 6b 9c 2e 66 83 e5 22 45 6c 83 08 83 82 15 0e a2 2a 33 ed 13 f5 5e 6f 21 24 a1 28 0b c2 30 fa 4a 5a e3 1d 2a 4d e4 18 e7 52 28 58 9a 83 a2 2a f6 54 11 b7 80 c5 b5 7d 95 b7 95 a9 a2 ad 45 8c b6 e8 61 85 bc aa 57 84 3d 55 c4 dd 28 6f 2b ed 3a 91 d4 9e 7e 9a c2 11 16 a3 2a e2 29 94 b7 65 a2 92 28 a9 5c 49 4c d1 08 ab 4d a6 f2 07 3e 10 56 00 89 37 49 d9 4a a2 4f 52 0d 5f d6 40 31 7c 79 42 b1 22 de 05 17 dc 3c f5 5c 1e 24 29 46 0a a5 84 a5 29 a0 29 43 d5 07 35 84 10 6f 83 e7 70 ef 60 fb 43 ed Data Ascii: /8Mgj_[QU\|BHlV_\|jeaU>U?&V#C@1cMAk.f"El3^o!$(0JZMR(XT}EaW=U(o+:~)e(\ILM>V7IJOR_@1\|yB"<\$)F))C5op`C
2024-07-19 20:22:49 UTC	1272	IN	Data Raw: 4b 1f 74 a6 58 11 42 e2 82 d2 9a 3a d9 95 7d 41 e5 82 65 1a 11 f7 47 10 42 88 6d aa 48 0b 2b 4f 09 99 0e 12 42 e2 4b a5 69 61 b5 0a ff 19 aa 83 25 14 2b 52 39 ad 5a 1d 23 4d 9a 64 48 b5 6a 69 15 7e 4d 20 10 90 1f 7f dc 2c 2b 57 fe 20 84 54 41 28 2d cc 2d ef 93 15 0b 96 ae 0e 9a 42 52 0b 9f cf 27 87 1d 56 5d 6a d4 38 5c 0e 3f fc 30 fd 7e 8b 16 4d 25 3b 3b 4b 8e 3e ba b1 b4 6b db 4a 9a 37 6f 22 99 99 47 49 dd ba 47 48 b4 ec d9 f3 ab ac 58 b1 46 d6 ad db 28 85 85 6b 64 ed 0f 3f 4a 7e 7e 81 ac 5d fb 93 ec db f7 9b fc fa eb 3e d9 b9 73 b7 ec df bf 5f 48 8a 82 26 d2 40 f9 82 55 71 4a c8 25 13 29 45 ad 5a 35 e4 c8 23 eb 48 9d 3a b5 54 d4 d4 42 ce fa 43 17 39 e9 a4 b6 d2 56 09 d4 51 47 35 92 58 b3 61 c3 26 59 b6 6c 95 2c 58 b8 4c 66 cf 5e a8 c4 6c b5 6c db b6 43 Data Ascii: KtXB:}AeGBmH+OBKia%+R9Z#MdHji~M ,+W TA(--BR'V]j8\?0~M%;;K>kJ7o"GIGHXF(kd?J~~]>s_H&@UqJ%)EZ5#H:TBC9VQG5Xa&Yl,XLf^llC
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: d5 56 4f 57 20 f1 05 53 56 71 38 bc 65 cb e6 d2 bc 79 53 19 fe e8 18 59 b8 70 99 90 04 13 b6 79 fe f7 08 cb 68 38 46 48 c2 b8 ea ca f3 65 f8 f0 81 72 e2 89 27 e8 14 05 6d 0c 24 31 20 da 3a e1 84 4c dd fe b0 f3 97 5d f2 dd 92 ef 85 24 14 75 f5 2e 1a 86 77 4a 05 0b 13 46 7d b7 08 89 3b f0 ab ee b9 7b 80 0c 1a d4 4f b7 2b d4 ac 79 38 c5 ca 05 e0 31 c0 79 cc 2e 5d da eb 52 fa a2 45 cb 79 1e 31 a1 34 1c af 44 ab 38 28 58 69 8d 55 85 50 ae 10 12 57 70 ee 6f f4 e8 87 e5 d6 5b ae d0 fe 09 06 ed 79 9d 9f 7f de 29 5f 7f 9d 2f e9 e9 47 ea 14 cb eb 60 d1 46 f7 ee a7 4a 6b 15 71 7d ab 7c ad 1d 3b 76 0a 49 00 69 69 8b 94 8f 95 1f f4 b0 4c 23 9b fe 55 7c 81 a1 3e 64 c8 6d d2 b7 cf d9 e2 34 98 05 f5 e1 87 d3 e5 e8 a3 9b e8 99 58 18 3b e3 34 98 41 35 6b d6 02 99 31 73 be Data Ascii: VOW SVq8eySYpyh8FHer'm$1 :L]$u.wJF};{O+y81y.]REy14D8(XiUPWpo[y)_/G`FJkq}\|;vIiiL#U\|>dm4X;4A5k1s
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: d7 90 68 21 92 63 7a 18 03 d2 7c d3 10 61 41 ac 72 84 38 02 4e fa df 77 df 8d 72 cb cd 97 3b 22 56 88 7c e0 53 a1 5d e1 cb 2f e7 96 7b 3c 24 3b bb 8d 32 f4 ff ac e7 67 59 c1 ef df 20 0f 3c 30 52 45 58 b3 c5 4d ac 5a bd 4e a7 a9 a7 9c d2 41 f7 93 45 9b be 41 bc 03 2a 8d 46 44 55 b6 c2 89 fb 31 2f 6f 99 14 14 ae d6 91 16 22 39 bb 6d 15 10 ad f6 ed 8e 67 7a 18 3b 16 29 c1 6a 08 c1 e2 e2 54 07 40 4b c1 43 0f dd aa 17 44 a0 af c8 2e 88 32 46 8f 79 5b 1e 57 69 da 9a 35 eb cb fd 1a 54 bf 72 72 ba 48 ff 7e 17 eb 96 00 2b 8c fa ef 6b f2 ea ab 93 0e f8 61 6e 02 a2 05 3f 0b 3e 91 95 fb 14 d1 e7 37 73 f3 a5 50 19 f0 e5 89 07 52 eb e5 cb fd 5a c0 d0 68 6a b7 5f ab 6c 7a 88 65 17 c4 21 0c 2d 58 19 f0 af b2 85 d8 02 62 85 d1 30 d7 0f b8 d4 11 b1 42 39 fe f9 e7 df d1 7e Data Ascii: h!cz\|aAr8Nwr;"V\|S]/{<$;2gY <0REXMZNAEA*FDU1/o"9mgz;)jT@KCD.2Fy[Wi5TrrH~+kan?>7sPRZhj_lze!-Xb0B9~
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 23 3c 28 e2 f4 e8 71 4a 4c f6 47 26 1b 14 ac 4a c0 a1 5b ec 9f 43 59 db ae e7 83 79 eb f7 dc 7d bd de f0 9c 68 d1 c2 aa 2a bb b3 9f bc 89 73 b3 a9 e0 87 5d 71 79 6f 7d 4e d1 0e a1 b6 89 f7 df ff dc f2 ea b4 54 42 3d 6b 8d 62 f6 62 55 cc 0c 95 ca 61 dc 08 a6 5e e2 c9 69 f5 85 8e 26 cf ab ae ba 40 5f 45 1f 7d 6c ac de f5 87 12 bd 55 f0 6f ad ee c4 43 03 23 a2 2c af 1a ef 56 07 23 16 ef d8 e9 88 28 a0 61 f8 ea ab 2f 90 bf ab 2a 9f 9d 2d d6 38 02 f4 cd 37 8b 75 bb 84 13 91 5a 0a 80 a3 39 26 27 8c 55 c1 e7 9f 63 db f1 34 3d 99 d3 ce 04 49 88 d6 65 97 9d 2b 37 df 74 b9 34 6b 96 21 76 80 07 f5 93 c5 3d 81 48 75 bd 9c 16 62 6d 9a 15 30 a2 a6 aa c3 cf 55 11 12 2b 8c bf b6 23 56 a8 10 63 95 da 53 23 c6 39 d2 db 95 22 f0 2c 61 24 20 92 79 f9 e5 0f 64 f2 e4 99 b2 73 Data Ascii: #<(qJLG&J[CYy}hs]qyo}NTB=kbbUa^i&@_E}lUoC#,V#(a/-87uZ9&'Uc4=Ie+7t4k!v=Hubm0U+#VcS#9",a$ yds
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: f1 b8 4f 59 42 69 20 c4 0a 4d a2 c4 49 0a 07 07 4b 4b 46 46 7f e1 32 55 47 28 52 fa 9f 97 5f 20 25 ca e0 75 22 3d 04 d8 5c 8c 48 eb b4 d3 3a c9 8f 2a 7d 2b bb f1 06 8b 57 d3 54 64 70 f2 c9 ed 2c 6d 2a 46 c5 10 03 0a 61 f2 a3 ec ee 06 73 18 e9 df e8 d1 43 a5 cf 45 3d a2 ae 80 86 40 bf d3 ab af 7e a8 1f 8f b2 20 62 7b fd b5 27 e4 ea ab cf 97 06 0d ec ad 6b 0b 81 c7 e1 be fb 9e 62 64 15 1b fc ea d5 35 2a 24 58 39 ea 4f 6b 03 c2 c9 21 20 d2 42 7a 88 0d 2d 88 8e aa 57 b7 3f 7b 0a a9 1b 22 8e 33 4e ef 2c 45 5b b6 c9 77 4b be 3f f0 39 b4 3f fc ac 22 a3 96 2d 8f 51 a2 d5 5e ac 80 e9 0d a8 18 1e a1 a2 ad 39 5f e7 27 54 b4 1a 35 6a 20 c3 87 0f 94 73 55 c5 d4 8e f9 fd fe ff 3e 93 f1 af 4e 52 8f c7 c1 51 23 56 b5 bd f0 fc 23 ba f2 78 d8 61 ce 1c 02 87 58 dd 7f ff 53 Data Ascii: OYBi MIKKFF2UG(R_ %u"=\H:}+WTdp,mFasCE=@~ b{'kbd5*$X9Ok! Bz-W?{"3N,E[wK?9?"-Q^9_'T5j sU>NRQ#V#xaXS
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 3e 15 c1 63 b1 61 c3 66 79 f7 bd 69 f2 f4 33 6f e8 c2 02 49 28 7e 91 95 8f 87 3e 38 38 ff e0 99 c2 84 82 dd 87 f3 e7 2f 55 a9 c7 2f d2 ac 69 63 6d 52 33 45 8c 1f 98 6b 96 9f 5f 20 6f be 39 b9 74 c9 08 cd 75 17 30 43 05 53 13 42 1f 1c fc 6a f0 65 60 a0 12 8f e8 24 10 0c e4 5b b8 b0 40 57 da f6 ab 34 a4 6d 56 4b cb c7 6c 48 e4 a0 bf ea f5 37 3e 92 a7 9e 1c 27 6f bf 33 55 57 05 89 0b 30 64 ac 98 45 73 43 1f 1e 2c 58 66 43 e4 21 fd 85 24 14 a4 25 38 1f b8 74 e9 4a d9 f7 db 7e 7d 18 39 3d fd 48 21 b1 01 bd 64 38 7b f8 dc 73 13 0e 14 41 88 4b 30 d3 1e 0f 19 ee a0 4c be 71 b4 f2 b1 4a ee 13 e2 0a d0 55 be 60 c1 52 d9 a4 52 c5 f4 7a 47 ea 21 7e b1 ec a9 4a 35 90 02 4e f9 64 86 1e 63 8c 83 d2 6c 59 70 23 cb ae 0b ff e8 50 57 d7 c8 9a 2e 5c fb e5 3a d0 bd dd ed 8c Data Ascii: >cafyi3oI(~>88/U/icmR3Ek_ o9tu0CSBje`$[@W4mVKlH7>'o3UW0dEsC,XfC!$%8tJ~}9=H!d8{sAK0LqJU`RRzG!~J5NdclYp#PW.\:
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 05 8b 51 16 21 24 5a 4c 63 7c b4 ad 0c e1 d8 10 2c 61 94 45 08 89 06 bf 12 8d 71 62 03 7b 82 c5 28 8b 10 12 29 36 a3 2b e0 c0 fe 26 56 0c 09 21 55 a2 2a 83 7b 3a 45 73 6e b0 3c d2 c4 36 1b f7 8a af 41 4d a5 7d 39 42 08 21 e5 61 9a 83 45 56 ce 15 9b 38 b4 21 13 51 d6 af 79 ea 9d 4c 21 84 90 83 b1 dc 77 55 16 9b 1e 56 08 e5 65 99 32 58 08 21 a4 2c 0e 9e 3f 76 76 07 b9 91 85 75 60 39 42 08 21 41 1c 8b ae 80 43 11 56 29 9c e4 40 08 09 c7 34 bb 8b 83 38 2b 58 98 97 65 08 0f 46 13 42 82 9b 9c 6d b6 31 1c f2 2d c5 71 d8 e6 40 08 31 94 af 1d e8 e4 b4 60 39 1c 61 01 36 93 12 92 f2 e8 e1 7c ce 8a 15 88 41 84 15 fa ce 1c f2 47 48 8a e2 a8 d1 1e 4e 0c 22 ac 52 cc 00 db 1c 08 49 45 1c 36 da c3 71 a0 d3 bd 22 8a fc e2 cb a8 a7 de e9 2a 84 90 d4 20 98 0a 4e 90 18 11 bb Data Ascii: Q!$ZLc\|,aEqb{()6+&V!U{:Esn<6AM}9B!aEV8!QyL!wUVe2X!,?vvu`9B!ACV)@48+XeFBm1-q@1`9a6\|AGHN"RIE6q" N
2024-07-19 20:22:49 UTC	324	IN	Data Raw: 54 34 25 93 98 f6 25 06 0a 56 c2 09 45 5d 72 96 d0 eb 72 29 8c a6 dc 02 05 cb 55 b4 c9 51 e2 d5 9f 29 a3 1b 80 48 c9 44 09 04 c6 53 a4 dc 03 05 cb b5 28 a3 de 27 7d 29 5e f1 24 5c a4 f6 e6 33 e5 73 1f 14 2c 4f 10 8a bc 98 36 3a 4f 78 ba 47 91 72 3b 14 2c cf d1 4e 99 f4 81 1c f5 c8 a9 c8 8b 6d 12 d1 a3 04 4a cc fc a0 71 ee cb 15 59 9a 2f c4 33 50 b0 3c 8d ae 36 66 ab e8 4b a5 8e d2 51 28 60 15 91 ab 9e e9 8b 18 45 79 1f 0a 56 d2 a1 d2 47 31 b2 c5 30 ce 2a 6d 99 c8 94 d4 c2 af fe ff 18 33 3c 43 47 52 14 a8 a4 82 82 95 f4 84 a2 30 5f 4e 69 14 96 99 44 bd 5f 7e 25 cc b9 2a 72 5a a4 df 97 3d b9 14 a7 e4 86 82 95 b2 68 2f 0c 3d 60 10 af 16 2a 22 c9 94 60 34 96 29 ee c2 af 23 26 43 8a 83 c2 e4 53 82 54 92 9b 8a 6b da 09 05 8b 94 8b 9e 38 a1 de 0c 15 9d f9 d2 c5 Data Ascii: T4%%VE]rr)UQ)HDS('})^$\3s,O6:OxGr;,NmJqY/3P<6fKQ(`EyVG10m3<CGR0_NiD_~%rZ=h/=`*"`4)#&CSTk8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49878	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	640	OUT	GET /api/public/content/3de62109b5794239ac94fc95e68d8718?v=792a3c09 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	667	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/png Content-Length: 7764695 Connection: close CF-Ray: 8a5d6d01df0643e8-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 433 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename="SOECS 2024 Mock-up cover closed.png"; filename*=utf-8''SOECS%202024%20Mock-up%20cover%20closed.png ETag: "0x8DC42861BE65B77" Last-Modified: Tue, 12 Mar 2024 11:18:14 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 135851 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	702	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b b8 00 00 07 d0 08 02 00 00 00 dd 70 85 6d 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 Data Ascii: PNGIHDRpmIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 38 0d e7 e0 12 5c 81 eb 70 17 06 60 18 9e c2 18 bc 86 09 04 41 c8 08 13 61 21 3a 88 11 62 8e d8 22 ce 08 17 99 8e 04 22 61 48 34 92 80 a4 20 e9 88 14 51 22 c5 c8 72 a4 02 a9 42 6a 91 5d 48 23 f2 2d 72 14 39 8d 5c 40 fa 90 db c8 20 32 8a fc 8a bc 47 31 94 81 b2 51 03 d4 02 75 40 b9 a8 1f 1a 8a c6 a0 73 d1 74 34 0f 5d 80 96 a2 6b d1 1a b4 1e 3d 80 b6 a2 a7 d1 4b e8 75 74 00 7d 8a 8e 63 80 d1 31 0e 66 8c d9 61 5c 8c 87 45 60 89 58 1a 26 c7 16 63 e5 58 35 56 8f 35 63 1d 58 37 76 15 1b c0 9e 61 ef 08 24 02 8b 80 13 ec 08 5e 84 10 c2 6c 82 90 90 47 58 4c 58 43 a8 25 ec 23 b4 12 ba 08 57 09 83 84 31 c2 27 22 93 a8 4f b4 25 7a 12 f9 c4 78 62 3a b1 90 58 46 ac 26 ee 21 1e 21 9e 25 5e 27 0e 13 5f 93 48 24 0e c9 92 e4 4e 0a 21 25 90 32 49 0b 49 6b 48 db 48 2d a4 53 Data Ascii: 8\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF&!!%^'_H$N!%2IIkHH-S
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: b3 d8 b8 78 59 f1 e0 22 bf 45 bb 16 23 8b 53 17 77 2e 31 5d 52 ba 64 78 69 f0 d2 7d cb 68 cb b2 96 fd 50 e2 58 52 55 f2 6a 79 dc f2 8e 52 83 d2 a5 a5 43 2b 82 57 34 95 a9 94 c9 cb 6e ae f4 5a b9 63 15 61 95 64 55 ef 6a 97 d5 5b 56 7f 2a 17 95 5f ac 70 ac a8 ae f8 b0 46 b8 e6 e2 57 4e 5f d5 7c f5 79 6d da da de 4a b7 ca ed eb 48 eb a4 eb 6e ac f7 59 bf af 4a bd 6a 41 d5 d0 86 f0 0d ad 1b f1 8d e5 1b 5f 6d 4a de 74 a1 7a 6a f5 8e cd b4 cd ca cd 03 35 61 35 ed 5b cc b6 ac db f2 a1 36 a3 f6 7a 9d 7f 5d cb 56 fd ad ab b7 be d9 26 da d6 bf dd 77 7b f3 0e 83 1d 15 3b de ef 94 ec bc b5 2b 78 57 6b bd 45 7d f5 6e d2 ee 82 dd 8f 1a 62 1b ba bf e6 7e dd b8 47 77 4f c5 9e 8f 7b a5 7b 07 f6 45 ef eb 6a 74 6f 6c dc af bf bf b2 09 6d 52 36 8d 1e 48 3a 70 e5 9b 80 6f da Data Ascii: xY"E#Sw.1]Rdxi}hPXRUjyRC+W4nZcadUj[V*_pFWN_\|ymJHnYJjA_mJtzj5a5[6z]V&w{;+xWkE}nb~GwO{{EjtolmR6H:po
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 22 08 32 40 49 e9 b3 53 35 5f d5 aa 86 a3 4e ac 9f 9f cb 03 95 05 58 0b a6 80 54 2d 6f 37 b9 63 c9 6a da 12 18 b4 cd 4d 29 80 88 a8 59 2e af f0 dd 77 49 7e d8 35 0f 0e a0 e6 f8 f4 59 90 fe ec bd fa 22 aa 51 65 b1 16 41 41 79 ce f7 7b 7e be 3f e7 fb 25 b1 f6 5e 6b af 88 16 8e 2b 32 00 41 a1 00 59 db fb 1e 02 18 3d 51 00 23 ac 33 db 4a 8a 58 16 37 21 e7 06 9e 63 32 77 3e b6 3a 7c ec 48 ab c7 82 b0 49 a2 b7 42 aa 73 b2 6a 2c 89 25 2f f8 e7 cf 27 f6 1e d1 57 66 fd 7c 7f 7e 7e 7e ea 9c 82 16 57 ec b5 48 08 a4 ad 03 ec 72 10 62 44 30 10 a4 44 f2 64 9e ef f7 9c 93 99 55 22 b9 d6 5a 6b af b5 c8 90 84 cc 22 04 64 66 e6 21 f9 d9 7b 7f 3e 22 91 75 ce b1 8a f0 fb 2d 60 22 51 85 d7 e2 8f 2a a6 94 d2 b1 39 12 7c 14 fc 18 41 42 d6 da 52 96 48 45 c4 ac 30 6d 42 41 8e 4a Data Ascii: "2@IS5_NXT-o7cjM)Y.wI~5Y"QeAAy{~?%^k+2AY=Q#3JX7!c2w>:\|HIBsj,%/'Wf\|~~~WHrbD0DdU"Zk"df!{>"u-`"Q*9\|ABRHE0mBAJ
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: e9 a3 1a fc 6b 97 e3 aa 6e ab e5 96 55 8d b2 1b c1 8a 3e f8 1c 1c 74 9c 01 b6 83 dd 5b a3 97 a2 13 e6 50 d8 7e f2 8a a8 63 cd cc 3c df 2f 84 cf e7 cf 5a bd a4 24 63 c7 bf 3e 7f ed bd 05 54 e6 b7 4e e9 94 a4 54 66 29 53 80 45 db 1a 43 12 4a 27 0f a1 d8 3b 76 44 84 35 9a b5 f9 8a b5 19 58 8b 04 94 99 79 ce f9 66 e6 cf 4f 55 89 fc 7c 3e 7f fe 7c f6 da 00 4e 65 25 32 91 95 cc d1 8b 46 58 d5 77 3e 4b a4 58 e4 0a 7b 7a 0e 16 2e 84 eb a8 9d a3 24 8f 91 a6 2b 50 7d 9a 22 16 f6 da fc 6c b6 d9 b3 7a 63 ec fd f9 ec 88 35 2e cf a9 6f 1f 90 e7 6c 0e d8 e2 63 e8 c8 43 8a 96 91 52 a3 52 74 44 39 18 82 c6 a9 03 49 5c 74 a2 d2 bf c8 d4 a9 c2 c4 dd ed 9f 57 a9 94 a9 02 b8 23 16 17 83 f1 d9 ff fa eb e3 60 d5 86 a6 54 a7 52 92 11 ee 1c e7 fc 2d 1b 31 77 51 25 65 5e 85 13 7b Data Ascii: knU>t[P~c</Z$c>TNTf)SECJ';vD5XyfOU\|>\|Ne%2FXw>KX{z.$+P}"lzc5.olcCRRtD9I\tW#`TR-1wQ%e^{
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 0a 25 b1 6e fa d8 7a 80 14 c3 87 ac 1d 72 a7 d2 30 76 95 5c e1 37 5c 0f 90 80 ce 69 70 38 18 9b e3 fe 02 6a d8 04 4f 40 e8 5c 8d 61 45 1f 0d e3 e3 4e 9a 45 c4 75 99 7c 62 6b 52 37 0a 44 95 4e 02 40 42 82 75 e5 e2 95 2a 0b 54 fb 8f ce 78 0d 2e 30 27 42 8d 5b 18 c4 b7 68 3a bc f1 b1 50 26 1f 08 b8 a5 a1 3f d4 fa fe 85 29 fb 57 ef 80 76 7e 78 23 5f 41 44 41 40 e9 a0 9c e2 33 7e 17 a1 6f 55 19 21 17 b8 f0 87 74 64 1f 50 b1 1a ef 25 19 44 a1 6c 8c a3 d5 61 44 b4 5c 57 c1 a2 e7 3c 96 9e b0 f6 7d 63 56 ce a3 ee f0 32 f9 ea 25 ba 08 d7 eb b7 c0 13 e4 4b a0 93 37 7d 78 9c 69 7b f1 0f c6 bd b6 ed 67 d4 e2 02 6c 7b 96 83 12 5f 73 82 3d ce 07 51 03 8b 53 17 0d 47 01 51 c0 70 7d e6 89 18 54 0e ee eb a4 54 90 0a 86 8a 04 2a 8b 30 4a f8 17 57 15 5f 34 89 66 30 dc 5b 75 Data Ascii: %nzr0v\7\ip8jO@\aENEu\|bkR7DN@BuTx.0'B[h:P&?)Wv~x#_ADA@3~oU!tdP%DlaD\W<}cV2%K7}xi{gl{_s=QSGQp}TT0JW_4f0[u
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: ae c5 3e fb 65 54 1d 6c a0 8c 31 fc 77 94 74 b0 77 34 e0 d1 c9 30 91 ca 6c d4 60 00 bb aa e5 8d 3e df 93 7f 72 6b c7 5a 1b 3a 06 a3 50 37 ad 2e ab 5e 27 84 20 ab 4e 0b e1 42 b3 40 9a a1 d2 a7 5b 4b 2c 8a cd 8e 1b f1 92 4e 03 8f 7e 90 2b 00 bc 27 2c 4b 11 58 74 8a 41 22 2b 73 20 4b 3b 39 82 30 0c 3c 88 dc 0c c4 ba 64 97 c6 94 89 72 1a a9 6a 2d 36 85 a2 6f c6 12 c4 20 9b f4 3e ca 93 0f e4 a4 07 86 76 6a 8a 24 a3 23 ac 8e f6 a4 eb 5b 82 86 be 01 34 84 0b 56 25 c0 c3 8a b5 b8 d6 a7 09 d3 f0 8a 5e af b8 9d 0e 5e f8 c2 0c 2c 46 50 d4 12 20 27 71 aa c1 0f 02 23 9e bc 79 e8 8b 1b cc 53 bc 71 86 fb 1a 63 f9 0e 31 db fc 3a 5b 9f c0 ca 31 0e 26 e3 07 b3 a3 96 04 b9 82 0e a5 a7 34 a3 bd c3 1d 2c 04 14 09 14 e5 b8 2f 14 a5 04 16 16 21 46 d9 23 50 b1 82 2b b8 7d 0f 93 Data Ascii: >eTl1wtw40l`>rkZ:P7.^' NB@[K,N~+',KXtA"+s K;90<drj-6o >vj$#[4V%^^,FP 'q#ySqc1:[1&4,/!F#P+}
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: ad a0 a3 0f b4 8f 71 03 13 34 bc b8 aa d3 02 ce 17 d8 47 0d d7 d6 9a b1 8c 96 80 de 9b 66 65 ce 35 e1 b0 75 98 0d 04 8b fc b8 3b 40 af 3e 5b 60 7b 11 56 a8 52 85 02 e9 62 a6 55 50 29 fb 0e 94 a3 78 34 c5 70 83 e3 5d e6 4a 15 84 ec 72 cb 07 ef 02 d0 e0 bc 82 d0 91 ce f9 91 e4 fa 7a 60 6d 82 11 87 e9 68 9b 4f 03 00 ac b5 3e 7b 55 55 7d 55 95 b0 6f ea 5b d6 70 03 18 66 90 8e 3b d0 eb 60 fb 53 ed 97 20 56 f5 0a 33 f6 27 a6 ae d2 42 6c df 1f 10 cd f2 8e 15 55 5a 5b ea e4 9b dd c0 85 1d 26 04 81 51 53 86 65 1a 4e c7 ff a4 b3 f1 3e f1 92 a9 5e ad db 47 56 d5 e4 cb 61 9c d8 e4 bc a8 24 11 cb 4f 52 a6 ab f4 01 6c 96 d8 91 00 96 f4 f1 61 8c 58 23 60 1d 73 19 df 5b 3b d6 0a 42 25 da 0c 63 c4 5e 53 aa 06 60 c5 ea fa 1a 46 3a 8c 21 f6 38 bc b2 41 b9 56 d5 64 69 f5 62 Data Ascii: q4Gfe5u;@>[`{VRbUP)x4p]Jrz`mhO>{UU}Uo[pf;`S V3'BlUZ[&QSeN>^GVa$ORlaX#`s[;B%c^S`F:!8AVdib
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 55 f9 24 fa c0 b8 5c 8e 42 22 a5 5a 36 6a 0c 85 d8 e1 c3 9c dc b5 60 b8 d3 df f6 c0 01 31 b2 ac 92 4e b9 1e 2c a9 ce 37 fd 97 7a bf fe 6d 93 bc af bf 6c 2f d4 76 94 d3 18 e9 a6 e4 c6 c2 82 ee a5 d1 1f 13 4c 0d b9 64 f6 76 a5 2a 2f f9 4d 58 0d b7 be 62 3f 1b ef f6 8c 6e e2 b6 8e c1 97 56 a1 2f 27 d3 18 c9 5a 11 2b ce 65 3e 7b 91 2b c6 9d 69 1e 7f 50 62 d1 c4 8a 21 de b6 a2 ea d4 64 a9 0c 91 fa fd d6 6c a4 93 52 cf e1 f2 f1 cc 0e ba ee cf 6d d0 6f 28 fa 2c f2 a9 c2 c0 c3 c6 fb 5c 9d 1e cb 0d fe 80 58 91 75 8c 81 82 dc ab dc 3e 0d 44 9d 8c 66 f6 60 da 5f b5 a9 b7 6b 37 aa 83 93 27 93 e2 46 c4 1a 73 ae e7 e6 2d 68 cd ce 7b 9e 08 aa 08 3b bb e4 5e ad 97 ae fd 9b 23 c8 f1 c9 83 6c fa 8e 58 f0 b6 72 b6 67 35 f2 f8 4a ae 29 4e 05 80 94 56 55 bd 5a 86 15 51 52 4a Data Ascii: U$\B"Z6j`1N,7zml/vLdv*/MXb?nV/'Z+e>{+iPb!dlRmo(,\Xu>Df`_k7'Fs-h{;^#lXrg5J)NVUZQRJ
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 27 d7 2a 1b 3c bd f5 f8 d5 15 3b 71 51 bb 60 4a 3c e7 c7 0d 1e be df 3c a9 f1 9f cd 0d a2 68 07 c9 11 91 11 51 c6 6d bb c1 27 ca 76 b3 04 54 25 9e 26 31 18 6e 41 bb 7d 22 a8 aa ec 36 33 02 a0 ac 59 aa 01 a6 a6 f3 94 bd f7 88 d8 6b 95 ca 26 46 80 69 92 87 e5 3e bb 24 bf df 93 0d 24 24 a6 a9 aa 19 81 6e df 75 57 e6 7a 69 ac 5a 7b b7 70 93 8d ab 5d 54 fc 2d 81 99 0f ee 1d 2c a9 32 4f 1e 36 9a 15 9f 3f 7f 66 35 90 2a a4 0c 01 37 b1 21 82 1e 32 50 c1 b0 ce 57 55 b6 76 8b 69 e5 b1 a6 39 68 66 95 0e b4 9d d4 ef 54 0c 6f 4c 40 12 35 6e 93 6b 3b 2e 4f 7c 0e 04 a6 1c 0b c4 41 46 2c 37 df f0 82 b7 c4 38 bf d3 2e f1 84 37 95 25 f7 8f bc 3f 23 60 7a b9 9f 28 97 a9 a3 d7 70 14 f4 24 88 ac 2a c1 88 ca 23 89 05 67 9d ba 7f e3 de b0 36 24 9a f1 86 c9 04 f3 f6 51 c2 0b 97 Data Ascii: '<;qQ`J<<hQm'vT%&1nA}"63Yk&Fi>$$$nuWziZ{p]T-,2O6?f57!2PWUvi9hfToL@5nk;.O\|AF,78.7%?#`z(p$*#g6$Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49882	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	640	OUT	GET /api/public/content/d0635f650d1f47db87d21f2928042499?v=ce4369d8 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:49 UTC	616	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:49 GMT Content-Type: image/png Content-Length: 290275 Connection: close CF-Ray: 8a5d6d01fcd442cf-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 433 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=jointheteam.png; filename*=utf-8''jointheteam.png ETag: "0x8DBDBA5FD5DC282" Last-Modified: Thu, 02 Nov 2023 13:16:56 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 107637 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:49 UTC	753	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ef 00 00 01 22 08 02 00 00 00 5f 9d cd f0 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 e5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDR"_pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rd
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 33 2d 31 31 2d 30 32 54 31 35 3a 31 35 3a 31 35 2b 30 32 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 62 39 35 61 33 35 65 2d 32 38 61 63 2d 34 37 64 35 2d 61 62 31 39 2d 32 65 63 31 37 38 66 30 39 64 36 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 62 39 35 61 33 35 65 2d 32 38 61 63 2d 34 37 64 35 2d 61 62 31 39 2d 32 65 63 31 37 38 66 30 39 64 36 39 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 62 39 35 61 33 35 65 2d 32 38 61 63 2d 34 37 64 35 2d 61 62 31 39 Data Ascii: 3-11-02T15:15:15+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7b95a35e-28ac-47d5-ab19-2ec178f09d69" xmpMM:DocumentID="xmp.did:7b95a35e-28ac-47d5-ab19-2ec178f09d69" xmpMM:OriginalDocumentID="xmp.did:7b95a35e-28ac-47d5-ab19
2024-07-19 20:22:49 UTC	1272	IN	Data Raw: 5b 98 aa 68 25 ad 7e af a7 c3 38 d2 81 52 1a 04 7a 4f 08 6c 1d 11 91 f7 ce 7a 6f ac 71 ce 39 67 9d ad 9d b3 b6 ae 9d 31 ce 56 ce d6 64 0d 7b 67 ad 51 5c db 2a af 8b b2 28 8a c9 6c b9 48 8b 69 05 8e 58 e9 b0 a3 d0 30 13 93 64 70 de 39 e7 44 10 46 fd f5 ce 68 6b b0 b6 de ef 0f ba 49 4b 2a e9 9c 5b 2c d3 c3 a3 e3 77 de 7c e3 cd ef 7d 6b 7a 7e e2 8d 43 40 a1 35 0a b1 ba a8 00 00 80 80 cc 84 42 08 a9 98 81 c8 93 35 4c c4 c0 00 d8 7c 0b 0a c4 30 ee 0e 36 b7 77 ae ed 5c bd d9 5e 5b d3 41 10 45 51 14 45 93 f1 78 72 7a 72 7a f0 58 87 e1 60 7d ab d5 e9 ae 6f 6e 26 49 1c 05 61 a8 35 0a 31 9d cd f6 f7 1f c7 71 9c e8 c0 db fa e8 de db 1f 7d f8 0e 03 32 b0 73 d6 39 4f de 13 79 62 62 ef 89 08 98 01 00 85 6c 2e 28 c0 c5 13 23 04 22 0a 21 50 4a 21 94 10 42 28 a5 a5 d4 4a Data Ascii: [h%~8RzOlzoq9g1Vd{gQ\(lHiX0dp9DFhkIK[,w\|}kz~C@5B5L\|06w\^[AEQExrzrzX`}on&Ia51q}2s9Oybbl.(#"!PJ!B(J
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 29 a9 a4 14 4a e9 20 88 a4 92 4a aa b8 dd 91 52 d6 75 a5 55 50 d7 a5 ad 8d 0e b4 0e 42 62 1a 0c d7 1e 7d f0 fd 7f f8 9f ff 67 bf fb e3 3f b3 b7 b7 a3 a4 ca 8b a2 2c cb 2c 5d ce 26 e7 e9 62 5e a4 a9 33 c6 d6 86 c9 0b 00 21 64 a7 37 d0 3a 90 4a 4b 25 a3 20 4a da 1d ea fa aa c8 f3 34 3d 3b 39 0a 82 a0 ae 8a d9 e4 7c 31 9f 11 33 33 4d 66 93 d9 74 4c ce 7d 70 7a ce 27 27 cc c8 c0 4c c4 cd 17 00 30 cc 4f 4e 56 0d 12 01 05 a2 90 02 11 01 44 a8 a4 92 cd 7b 17 42 04 61 14 87 b1 92 52 49 15 85 51 56 64 93 d9 d4 98 9a bc 6f ee 73 46 00 6a 7a 9e 50 5a 77 92 96 46 ee 68 79 ad 1b ed 0e 07 e7 b5 9d e4 c5 12 11 ab fa 64 3c 49 97 65 51 3b a1 b4 64 41 44 c6 d9 30 8c 14 00 7a d7 e9 6d 28 a5 1f 3e 7e fc e0 de 7b f7 ee bd 5b d7 75 18 44 32 8c a4 d4 52 29 6b ed 78 7a 56 d6 86 Data Ascii: )J JRuUPBb}g?,,]&b^3!d7:JK% J4=;9\|133MftL}pz''L0ONVD{BaRIQVdosFjzPZwFhyd<IeQ;dAD0zm(>~{[uD2R)kxzV
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 9c 25 6a 60 0c 20 f2 e4 bc 6a 46 15 00 66 ef 81 3c a2 f4 80 e0 3d 31 4b 21 7a 71 58 59 eb 01 10 c5 a2 a8 8e 17 f9 20 49 7e ea ca d6 65 4d c8 f4 6e 65 24 73 3b 08 96 b5 79 b6 d5 0a 81 c3 76 eb ce a8 ff 78 99 9d 65 85 25 52 52 55 75 e5 8c e1 d5 88 04 cc 80 8c ab c9 19 9b 9b 04 90 9b f1 5e 00 00 03 35 2b 18 0a 48 d3 a5 75 6e bd 95 fc c4 ed 4b 5d 9b 9d a8 ce bb 69 75 56 59 c7 0c 52 a2 50 8e 3c 78 cf 0c 44 54 19 43 44 05 63 01 0a bb 23 51 97 54 97 67 d3 49 3e 9f 74 46 23 96 81 b3 6e b6 28 3e ba 7f 3f cb 0b a1 02 70 cc d0 ec 77 0c 00 c4 d8 f4 13 cb d4 74 18 2d c5 e7 7b d1 5e 27 b0 c6 2d ad df 7f f3 dd 6e a7 c7 ed 7e 7b b4 13 77 d7 3c 08 f6 be b6 56 28 72 ce 39 d9 7a ee f5 57 e2 4e 7f b2 48 c7 8f 92 a8 a3 9f e3 49 e1 fd 37 3e 78 72 96 97 9b e3 79 e7 ee b7 c6 8f Data Ascii: %j` jFf<=1K!zqXY I~eMne$s;yvxe%RRUu^5+HunK]iuVYRP<xDTCDc#QTgI>tF#n(>?pwt-{^'-n~{w<V(r9zWNHI7>xry
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 59 b9 da 06 be 16 00 28 a0 8f 48 52 b0 44 05 e2 02 de 71 64 6b a8 96 ca 6a 53 2e 1f ce 27 8f 1e ef df bb f7 e1 a7 5e 7f ed 33 2f bf d4 6d f7 9a 8b 28 85 64 10 01 0a a5 a4 10 28 84 40 40 29 44 2d a5 f7 ce 3b 15 4b a9 4d e0 9d 25 22 26 4f ce 3a ef d8 59 cf 42 ea b8 93 b4 e2 a4 dd 1f 94 65 b6 98 a6 d5 78 51 cc 96 45 59 33 4a 44 45 52 0a 29 a4 13 cc 64 ea f9 b9 cf 17 e5 f4 74 b6 b6 3d 18 6d 0c 07 83 6e bb bd b3 b1 b6 d6 ef 5d b9 72 e5 d6 0b 2f 3d fa f8 83 f7 df 7d f3 e9 e1 93 2a 4d 81 9c 90 5a 68 dd f0 0d 17 73 f9 b3 39 64 b5 0a ad 16 55 a9 a4 d6 5a 2a 29 e5 64 72 e6 6c bd b9 b5 b5 de eb 6c ad af ad 8d 86 4a 29 67 ad 42 f4 de 97 c6 68 5b 3d 35 d5 72 3a 2e ea 6a ef c6 73 eb 6b 6b 2d ad 9e 7f f9 f5 ce e3 8f 84 50 52 0a 25 a5 8e 12 81 48 cc c0 dc 60 5b ce 39 67 Data Ascii: Y(HRDqdkjS.'^3/m(d(@@)D-;KM%"&O:YBexQEY3JDER)dt=mn]r/=}MZhs9dUZ)drllJ)gBh[=5r:.jskk-PR%H`[9g
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 66 72 d6 b2 27 14 68 bc 33 75 6d 4d 5d 15 39 11 31 90 73 d6 3b 4b c0 71 9c 08 a9 66 45 9e 2d e7 dc ec 76 41 c0 c4 ec dd 4a a4 c0 58 54 f5 c4 51 5f 89 f3 bc aa ad f9 58 c8 40 e9 59 51 ce eb fa 9d c9 b4 0a 8f 72 62 81 cd e0 0f 5a 48 25 e5 6c 7c 7a 78 7e 52 58 bb 37 1a 5d ea c6 c3 6e d7 56 e5 93 32 d7 82 d7 db 2d 22 5a 38 4f de 02 31 a3 67 f2 ac b4 54 aa 99 30 d9 b3 b7 ce 79 7f b6 58 2e f3 a2 b2 26 35 ee c3 49 3e cb cb 65 c3 3a ae b6 67 f6 75 8d 02 85 0e e2 30 5a df dc 61 72 47 87 4f 84 94 cc 74 b2 7f f0 e4 fe c7 e9 72 31 5b 2e ea aa 44 21 c9 21 33 31 a0 90 ca 13 30 33 3b d7 60 16 52 2b 10 52 08 cf ce 97 59 da 74 32 21 15 42 83 00 13 59 bf 98 9c c2 8a af 07 66 28 8c 21 e7 c8 59 42 19 c6 1d f5 b9 17 9e 7b e9 ce 8b 7b 3b 3b ed 4e 2f 69 b5 07 bd fe 9d e7 9e ff Data Ascii: fr'h3umM]91s;KqfE-vAJXTQ_X@YQrbZH%l\|zx~RX7]nV2-"Z8O1gT0yX.&5I>e:gu0ZarGOtr1[.D!!3103;`R+RYt2!BYf(!YB{{;;N/i
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 07 0f 58 11 10 b3 01 71 30 5f 12 40 7b b0 56 56 f5 c3 93 b3 df f8 da 1f fd d1 bf f9 a5 2a 5f b4 da dd 28 88 95 0a 84 40 f2 ce 5a 5b d5 05 73 03 08 4a 66 bf da b6 71 35 09 a3 90 61 18 31 ca c3 34 af ad 41 14 44 8e 01 10 25 33 20 8a ca b8 ac 28 b2 bc 20 94 a7 e3 73 47 3e 0a 74 2b 0c ea 38 5c 1f f6 11 f1 0f df fe ee 83 83 a7 ec 28 94 c2 01 d4 d6 7b 57 93 77 e4 3d 03 33 b1 b3 18 46 a1 40 68 45 49 eb 95 1f bd f3 ca ab 67 27 47 65 91 07 2a 22 22 04 f0 e4 1b d6 8e 3c af b4 9b ff a3 af 06 73 44 86 e5 6c 32 4d 53 4f 44 4c 81 50 2f 6d 0d fa a3 f5 d9 7c f2 ce db 6f 7f fd a3 27 d6 d9 1f ba b6 fd d9 28 ce 4f 0e fe f8 ed 7b d6 82 54 52 2a 51 3a 6b 3c ca d5 6a cd 0c a8 a5 f2 e4 51 36 db 0a f0 6a 51 f2 02 25 a0 90 a2 61 b0 84 44 41 80 44 84 42 30 33 91 17 26 65 a1 39 f3 Data Ascii: Xq0_@{VV_(@Z[sJfq5a14AD%3 ( sG>t+8\({Ww=3F@hEIg'Ge""<sDl2MSODLP/m\|o'(O{TR*Q:k<jQ6jQ%aDADB03&e9
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: 7b b7 3f 58 1f f6 bb 6b 83 de a0 db b9 b4 bd 7d f3 f6 73 af 7e f8 89 bb 6f fc c9 f7 3e fe a8 4a 4b f0 0c 88 20 50 0a 5c 6f 77 5e bf 74 e9 b5 17 5f e3 fe 40 1b 93 4f 4f 8a 59 2d e7 63 e9 6b 5b a5 58 55 31 91 98 4f 7c 92 d4 cc b5 75 c7 27 27 4b 2d 75 12 17 a6 0e c2 38 4c 92 91 b5 ed 62 1a 05 70 5e bb f9 6c 96 66 f9 72 3e 2f b2 65 96 a6 69 b6 cc 8b bc ae ab a2 aa 2a 53 ad 40 12 22 72 ae c1 b2 89 f9 02 d0 7f 06 42 5e c8 53 11 25 22 68 89 88 28 85 94 4a 4a 29 84 44 29 02 1d 4a 04 6b 0c 33 21 73 80 90 68 39 08 c3 b5 50 0e 3a c9 ce e5 4b 83 4b 37 6a dd da 3c 39 b9 7b f7 ad 87 47 f7 11 28 8a 83 ce b0 bf b1 b9 1d 08 64 e6 f3 59 74 76 52 55 65 b6 58 9c a2 d0 08 e8 bc 15 88 2a 0c a3 38 0e e3 78 30 18 29 ad 10 38 5b 88 aa 2a b3 b2 74 95 91 c6 26 49 d2 1b 6e 0f f6 ae Data Ascii: {?Xk}s~o>JK P\ow^t_@OOY-ck[XU1O\|u''K-u8Lbp^lfr>/eiS@"rB^S%"h(JJ)D)Jk3!sh9P:KK7j<9{G(dYtvRUeX8x0)8[*t&In
2024-07-19 20:22:49 UTC	1369	IN	Data Raw: a1 81 37 1b fa 16 d8 13 7b 67 4c 5d 83 d6 45 b1 28 aa 32 8a 3b 08 e0 89 1a 8f 5d 83 52 ae 28 2d 4f c4 8e 99 b2 22 d7 3a 20 02 72 8e d8 33 53 f3 ec 40 a3 01 6e 66 70 f0 28 25 4a 85 c0 e4 7d 43 ca b3 77 28 44 a3 e6 c0 66 4e 27 5a d9 2f a5 6c 1e 3a 76 9e 99 80 b1 69 58 32 8c a2 28 91 52 19 5b 1b 67 95 6a f7 0f 7c 78 f8 e1 c7 d3 c9 f9 6c 3e f1 de 6d ac 6f 75 c3 f8 d1 a3 8f 9e ec 3f 6c 07 3a 2d ab 15 6a 7b 51 73 6b 6b 9d d6 cc a0 04 ea 46 af 00 d0 0e 42 54 7c 90 57 45 6d 4b c7 44 14 6a f5 ea e6 7a 37 d0 59 59 68 a2 ae 44 2f e5 d3 65 d1 81 85 4a 4b 53 9b 46 a5 74 a1 d6 58 01 d7 17 74 28 af 45 f1 76 2c af db fa e5 4b a3 56 7f b4 2c ef bd 35 59 32 03 01 7c 90 99 c7 69 fd e3 99 19 4d 4b a2 a7 ad 76 12 46 41 98 44 e7 4b 73 58 d6 3a 08 5f fd fc 0f fe ea af fc ca a3 Data Ascii: 7{gL]E(2;]R(-O": r3S@nfp(%J}Cw(DfN'Z/l:viX2(R[gj\|xl>mou?l:-j{QskkFBT\|WEmKDjz7YYhD/eJKSFtXt(Ev,KV,5Y2\|iMKvFADKsX:_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49884	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	415	OUT	GET /api/public/content/509ae1a8c65d4c52826a5829290dbd6c?v=d858776e&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	638	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/svg+xml Content-Length: 2990 Connection: close CF-Ray: 8a5d6d028b43433d-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 201 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-servicenow-white.svg; filename*=utf-8''logo-servicenow-white.svg ETag: "0x8DC99D03A5A1FA3" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140985 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	731	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill-rule: evenodd; } .cls-1, .cls-2 { fill: #fff;
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 2e 33 34 63 30 2c 33 2e 36 31 2c 31 33 2e 33 39 2c 32 2e 31 33 2c 31 33 2e 33 39 2c 31 31 2e 36 39 2c 30 2c 35 2e 33 31 2d 35 2e 31 2c 38 2e 35 2d 31 30 2e 38 34 2c 38 2e 35 2d 33 2e 38 33 2c 30 2d 37 2e 38 36 2d 31 2e 32 38 2d 31 31 2e 30 35 2d 33 2e 36 31 6c 33 2e 34 2d 35 2e 35 33 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 36 30 2e 38 35 2c 38 30 2e 38 32 63 30 2d 37 2e 36 35 2d 35 2e 33 31 2d 31 34 2e 30 33 2d 31 32 2e 39 36 2d 31 34 2e 30 33 2d 38 2e 30 38 2c 30 2d 31 33 2e 33 39 2c 36 2e 38 2d 31 33 2e 33 39 2c 31 34 2e 32 34 2c 30 2c 38 2e 37 31 2c 36 2e 31 36 2c 31 34 2e 32 34 2c 31 34 2e 32 34 2c 31 34 2e 32 34 2c 34 2e 32 35 2c 30 2c 38 2e 35 2d 31 2e 37 2c 31 31 2e 32 36 2d 34 2e 38 39 6c Data Ascii: .34c0,3.61,13.39,2.13,13.39,11.69,0,5.31-5.1,8.5-10.84,8.5-3.83,0-7.86-1.28-11.05-3.61l3.4-5.53Z"/> <path class="cls-1" d="M60.85,80.82c0-7.65-5.31-14.03-12.96-14.03-8.08,0-13.39,6.8-13.39,14.24,0,8.71,6.16,14.24,14.24,14.24,4.25,0,8.5-1.7,11.26-4.89l
2024-07-19 20:22:50 UTC	890	IN	Data Raw: 32 2e 39 38 2c 30 2d 35 2e 35 33 2c 32 2e 33 34 2d 35 2e 39 35 2c 34 2e 38 39 68 31 31 2e 34 38 5a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 38 33 2e 39 2c 39 34 2e 38 35 76 2d 32 37 2e 34 32 68 37 2e 30 31 76 32 2e 33 34 63 32 2e 31 33 2d 31 2e 37 2c 34 2e 36 38 2d 32 2e 37 36 2c 37 2e 36 35 2d 32 2e 37 36 2c 33 2e 38 33 2c 30 2c 37 2e 32 33 2c 31 2e 37 2c 39 2e 35 36 2c 34 2e 34 36 2c 31 2e 37 2c 32 2e 31 33 2c 32 2e 39 38 2c 34 2e 38 39 2c 32 2e 39 38 2c 39 2e 35 36 76 31 34 2e 30 33 68 2d 37 2e 34 34 76 2d 31 34 2e 36 36 63 30 2d 32 2e 37 36 2d 2e 36 34 2d 34 2e 32 35 2d 31 2e 37 2d 35 2e 31 2d 31 2e 30 36 2d 31 2e 30 36 2d 32 2e 33 34 2d 31 2e 37 2d 34 2e 32 35 2d 31 2e 37 2d 32 2e 39 38 2c 30 Data Ascii: 2.98,0-5.53,2.34-5.95,4.89h11.48Z"/> <path class="cls-1" d="M183.9,94.85v-27.42h7.01v2.34c2.13-1.7,4.68-2.76,7.65-2.76,3.83,0,7.23,1.7,9.56,4.46,1.7,2.13,2.98,4.89,2.98,9.56v14.03h-7.44v-14.66c0-2.76-.64-4.25-1.7-5.1-1.06-1.06-2.34-1.7-4.25-1.7-2.98,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49883	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	640	OUT	GET /api/public/content/682272e31e2c49f2824e8f36f05c9aa3?v=2270add9 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	606	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/png Content-Length: 181031 Connection: close CF-Ray: 8a5d6d0279375e60-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 107 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=newCFO.png; filename*=utf-8''newCFO.png ETag: "0x8DBDBA60BF2FC3E" Last-Modified: Thu, 02 Nov 2023 13:17:21 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 107638 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ec 00 00 01 22 08 02 00 00 00 b4 aa 76 f3 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 4b 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 54 69 a2 12 92 00 a1 84 18 12 40 ec 88 a8 c0 88 a2 22 82 15 19 14 71 c0 d1 11 90 b1 22 8a 85 41 b1 f7 01 79 08 28 e3 e0 28 36 54 de 0f de 1a 7d b3 e6 bd 37 6f f6 af bd f6 39 67 9d ef 9c 7d 3e 00 46 60 b0 44 9a 85 aa 01 64 4a 15 f2 88 00 1f 3c 36 2e 1e 27 77 03 0a 54 20 81 03 80 40 98 2d 0b 89 f4 8f 02 00 e0 fb f1 f0 ec 88 00 1f f8 02 04 e0 cd 6d 40 00 00 6e d8 04 86 e1 38 fc 7f 50 17 ca e4 0a 00 24 0c 00 a6 8b c4 d9 42 00 a4 10 00 32 72 15 32 05 00 Data Ascii: PNGIHDR"vgAMAaKiCCPsRGB IEC61966-2.1HSgTS=BKKoR RBTi@"q"Ay((6T}7o9g}>F`DdJ<6.'wT @-m@n8P$B2r2
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: c4 21 89 48 0a 22 45 94 c8 52 64 35 52 82 94 23 55 c8 5e a4 1e f9 1e 39 8e 9c 45 2e 21 3d c8 3d a4 0f 19 46 7e 43 3e a0 18 ca 40 d9 a8 1e 6a 86 da a1 5c d4 1b 0d 42 a3 d0 f9 68 0a ba 08 cd 47 0b d1 0d 68 25 5a 83 1e 42 9b d1 b3 e8 15 f4 16 da 8b 3e 47 c7 30 c0 e8 18 07 33 c4 6c 30 2e c6 c3 42 b1 78 2c 19 93 63 cb b1 62 ac 02 ab c1 1a b1 36 ac 13 bb 81 f5 62 23 d8 7b 02 89 c0 22 e0 04 1b 82 3b 21 90 30 97 20 24 2c 22 2c 27 94 12 aa 08 07 08 cd 84 0e c2 0d 42 1f 61 94 f0 99 c8 24 ea 12 ad 89 6e 44 3e 31 96 98 42 cc 25 16 11 2b 88 75 c4 63 c4 f3 c4 5b c4 01 e2 1b 12 89 c4 21 99 93 5c 48 81 a4 38 52 1a 69 09 a9 94 b4 93 d4 44 3a 43 ea 21 f5 93 c6 c8 64 b2 36 d9 9a ec 41 0e 25 0b c8 0a 72 11 79 3b f9 10 f9 34 f9 3a 79 80 fc 8e 42 a7 18 50 1c 29 fe 94 78 8a 94 Data Ascii: !H"ERd5R#U^9E.!==F~C>@j\BhGh%ZB>G03l0.Bx,cb6b#{";!0 $,",'Ba$nD>1B%+uc[!\H8RiD:C!d6A%ry;4:yBP)x
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 31 ab db 0a f5 0a 57 16 f6 af 09 58 d3 50 a4 52 24 2f ba b3 d6 7d ed ee 75 84 75 92 75 dd eb a7 af df be fe 73 b1 a8 f8 72 89 7d 49 45 c9 c7 52 61 e9 e5 6f 1c be a9 fc 66 62 43 f2 86 ee 32 e7 b2 5d 1b 49 1b a5 1b 6f 6f f2 dc 74 a0 5c bd 3c bf bc 7f 73 c8 e6 e6 2d f8 96 e2 2d af b7 2e dc 7a a9 62 46 c5 ee 6d b4 6d ca 6d bd 95 c1 95 ad db 4d b6 6f dc fe b1 2a b5 ea 56 b5 4f 75 d3 0e dd 1d eb 77 bc dd 29 da 79 7d 97 d7 ae c6 dd 7a bb 4b 76 7f d8 23 d9 73 77 6f c0 de e6 1a b3 9a 8a 7d a4 7d 39 fb 9e d6 46 d7 76 7e cb fd b6 be 4e a7 ae a4 ee d3 7e e9 fe de 03 11 07 3a ea 5d ea eb 0f ea 1e 2c 6b 40 1b 94 0d c3 87 12 0e 5d fb ce f7 bb d6 46 9b c6 bd 4d 9c a6 92 c3 70 58 79 f8 d9 f7 89 df df 3e 12 74 a4 fd 28 f7 68 e3 0f a6 3f ec 38 c6 3a 56 dc 8c 34 2f 6e 1e 6d Data Ascii: 1WXPR$/}uuusr}IERaofbC2]Ioot\<s--.zbFmmmMo*VOuw)y}zKv#swo}}9Fv~N~:],k@]FMpXy>t(h?8:V4/nm
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 66 66 38 34 36 37 36 2d 30 31 39 63 2d 34 33 36 39 2d 39 66 62 32 2d 30 36 36 32 38 35 31 38 38 32 63 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 66 66 38 34 36 37 36 2d 30 31 39 63 2d 34 33 36 39 2d 39 66 62 32 2d 30 36 36 32 38 35 31 38 38 32 63 39 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 66 66 38 34 36 37 36 2d 30 31 39 63 2d 34 33 36 39 2d 39 66 62 32 2d 30 36 36 32 38 35 31 38 38 32 63 39 22 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 Data Ascii: png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:8ff84676-019c-4369-9fb2-0662851882c9" xmpMM:DocumentID="xmp.did:8ff84676-019c-4369-9fb2-0662851882c9" xmpMM:OriginalDocumentID="xmp.did:8ff84676-019c-4369-9fb2-0662851882c9"> <photoshop:DocumentAncest
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: a1 ff f9 bf fc df f9 a7 ff d9 7f f1 5f fe 57 ae 97 d7 0c ec 73 fe b6 4f 7e e2 7b 3f f7 29 92 11 a1 b5 f2 e6 66 46 c2 00 6f 6e 60 04 7b f3 20 83 68 6e 0e 90 84 21 08 07 a2 2e 5c 33 37 e3 ba 7d 01 04 c3 60 cd f4 3b 00 a9 e7 9d 8c 11 6c e6 84 45 84 19 cd 3d 42 57 15 8c 30 83 9b 03 08 46 33 77 f3 3d 02 86 6e b9 38 01 92 e6 46 00 23 48 a2 b9 11 34 73 dd a9 5c 34 30 00 86 11 6c 06 ab f5 a2 a1 99 6b 43 19 0c 86 bb cf 08 37 d3 e6 9a b9 1b 82 74 f7 11 a1 17 d4 3e 85 ce 0a cc e0 c1 d0 fe 3b 00 e3 5c 8f 15 34 c3 69 eb 1f 7c fc ea 6b df fc d0 0c ad f7 57 97 fd 3f fe a1 1f fa a9 1f fb 6b bf eb 1f fd bd 7f e8 5f ff d7 2d e6 5b 4f 9f 7c f2 bd f7 fe 4f 7f e4 8f fe c6 d7 be f6 6f fd 1b 7f e8 f2 f0 6a cc 09 c0 cd f5 3a b6 8e 17 e0 6e 33 c8 08 6f fa 28 84 a1 dd 98 bb 75 10 Data Ascii: _WsO~{?)fFon`{ hn!.\37}`;lE=BW0F3w=n8F#H4s\40lkC7t>;\4i\|kW?k_-[O\|Ooj:n3o(u
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 7b ea a6 f3 13 cb 3d 90 30 47 6f 2d 82 c8 88 41 4f 68 20 80 30 58 e2 49 fd eb 72 65 3a a0 eb a6 19 8d a6 9f 21 40 4f 1b 74 1c 70 92 a8 ab 09 1a b4 a6 eb f7 65 5d 6d 1a 75 75 10 36 89 cd 60 b0 9d 21 9b 4b d9 5e 19 73 93 29 94 99 01 c0 11 14 34 6e d6 cc 5b 44 cc 31 e7 18 cd 1d db 69 df af 73 0c 12 ee 3e c7 d0 93 b8 19 68 ee 0e 83 c3 61 30 87 07 62 12 80 ac 84 d3 26 48 a2 61 59 7f b6 8c 81 85 d1 61 40 ae 99 bc a0 a1 c1 28 57 04 0a 69 ee 41 33 6f 86 00 8d d6 dc 66 30 88 ad 59 87 d7 eb 30 18 30 a7 51 01 66 59 72 13 9c 34 19 65 97 bd d5 06 c9 3f 23 ed 9b 99 e3 30 de 0e 04 cc e4 3e 0a b7 9a c3 60 1d 20 30 18 20 dc 6c c4 94 19 f5 0a 77 5c ee 80 ec 82 07 16 3a 3f 01 f4 75 0a a8 45 60 d0 10 74 f7 ee 7e 99 03 c0 8c 20 71 7e 72 4f 32 66 98 37 f9 48 83 0d 01 ae 8c c8 Data Ascii: {=0Go-AOh 0XIre:!@Otpe]muu6`!K^s)4n[D1is>ha0b&HaYa@(WiA3of0Y00QfYr4e?#0>` 0 lw\:?uE`t~ q~rO2f7H
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: ee 30 c8 6a 2c b6 3c 7d 83 92 05 89 73 15 5c 9b 2e 1a 2b 4c 35 20 12 93 27 63 ee 91 56 58 74 6b 72 1d 33 62 82 eb 9a 2d ca 0b 9e 26 ac 29 1c 86 c9 a9 88 ce 8a 98 66 98 31 30 63 db 36 85 98 de bc d1 dd b0 a8 28 1c 9f 18 65 d9 d2 ed b8 29 c8 92 4b 50 2c 8e 09 9b 41 d0 ba 00 08 08 73 30 8a 05 40 a3 c9 7a ca 38 ca 2b 38 2c 50 d6 3b 9d a6 e8 98 c4 a1 c1 68 4c fa a4 b9 13 11 4c 42 c6 0c 53 be 07 21 97 31 e7 34 43 e4 cb 58 01 51 13 5f 2e c7 63 16 0d 66 da 62 9a bb 4d 53 28 66 44 46 fa 86 72 47 b0 69 b3 b6 87 7a 9b 88 20 d0 44 f4 07 f5 35 2c e9 5d 03 27 c0 58 16 9b 20 26 65 5a 22 22 92 ef 35 37 6f 63 bf 46 28 44 32 12 46 9c 4e 27 f9 54 79 46 02 6e 0e 82 41 73 23 69 49 a9 51 c1 4d 45 1f d4 65 07 ac 9b a7 4f 87 a2 3e a3 31 88 b4 b8 b0 3d a2 69 99 ea 8c 59 e5 a5 fc Data Ascii: 0j,<}s\.+L5 'cVXtkr3b-&)f10c6(e)KP,As0@z8+8,P;hLLBS!14CXQ_.cfbMS(fDFrGiz D5,]'X &eZ""57ocF(D2FN'TyFnAs#iIQMEeO>1=iY
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: e9 70 49 93 8c 6a 06 e0 e6 86 69 0e 42 57 a6 9e df cc f2 58 a6 44 c6 32 21 91 96 54 68 46 24 04 8a cc 5a ce a4 48 10 d6 f1 d6 39 71 09 25 68 03 1c 64 03 49 3a 30 09 8a 82 28 ce 4a 99 d5 19 e9 ba 04 63 d7 1d 11 2c 00 b9 9d 4e ad 6f ba fe 3a 5f 00 b6 de 9a 68 20 37 d2 49 5a 4b 3e 3a 2f 12 2a de 35 c5 6b 11 b4 c5 a3 18 39 91 3c be b0 f3 04 41 a4 29 05 0c e8 66 00 06 69 48 50 25 8c 12 e9 48 13 34 b8 3e c9 e2 b6 00 66 fa 34 17 cb e0 60 78 85 b9 66 98 13 02 85 23 94 a7 49 09 93 0e ce 34 44 0c 47 79 00 3b 9c 4d bf fe da af 7f e6 ed 4f fd c3 bf e7 1f 7b f6 f4 d9 dd fd fd d3 fb a7 e7 bb f3 d3 a7 4f df 7e eb ad e7 6f bd 75 3a df 3d 79 72 7f 3a 6d e7 f3 e9 e9 fd fd dd f9 0e 80 bb 9f ee ce 46 46 4c 92 92 7a ec 63 cc 31 5e bd be 02 98 63 5e f6 9d 84 b7 45 85 c1 cc 4e Data Ascii: pIjiBWXD2!ThF$ZH9q%hdI:0(Jc,No:_h 7IZK>:/*5k9<A)fiHP%H4>f4`xf#I4DGy;MO{O~ou:=yr:mFFLzc1^c^EN
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: c5 23 66 88 e0 79 db 54 75 72 77 da 4e a7 f3 79 eb 5b 6b a7 6d 43 c6 f5 ca 0d f6 39 83 5c 15 22 23 df 49 c6 8e 8c 49 90 fb 3e b5 9a fb 1c 24 63 1a c0 11 d1 d1 c6 98 23 e6 d6 7b a4 c9 53 6a 4d de c6 ae fb 80 72 6b 96 38 74 1f fb f5 7a 41 44 6b de 5a 9f f3 41 17 6f df 47 6b cd dd e7 9c d7 eb b5 f7 de 5a 9b 53 2c bf e7 59 2c 62 0b 11 d6 7b a1 4b 48 a6 aa 9d 69 cd 1c 16 45 68 ae 9b 39 67 80 1c 33 04 ed 14 1a 47 b0 b7 26 b2 c2 97 58 c2 12 9f e6 99 cb 98 54 62 80 84 d2 b5 21 69 43 74 3e 62 56 b2 88 93 e6 7a 1e 15 19 1d 9c 06 13 40 90 ec bd 01 08 86 bb 35 4f 59 21 85 23 48 6f fe e4 fe d9 e5 ba 33 7f 2f b6 6d 8b 60 c4 2e 07 35 42 8a a1 48 7e 51 37 27 02 07 78 13 4f 77 f3 9e 61 59 9b a0 a2 1a 83 70 9f 99 35 58 70 32 a3 dc 0c 30 8a 54 9d 82 c5 05 b4 e9 30 c0 47 20 Data Ascii: #fyTurwNy[kmC9\"#II>$c#{SjMrk8tzADkZAoGkZS,Y,b{KHiEh9g3G&XTb!iCt>bVz@5OY!#Ho3/m`.5BH~Q7'xOwaYp5Xp20T0G
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: e1 26 39 b9 24 43 70 e0 7a ef 1e 73 a2 e4 2b ba 9e 0a cc 1d 86 e0 d8 77 77 d7 ae b9 5b f3 2a 08 70 03 39 55 fa 31 21 ae 9c 64 d1 cb a2 c5 5c f7 5f 31 39 b3 7a c0 f0 26 62 05 21 7f 41 58 83 e9 1d 2c d5 d6 81 e4 00 65 61 52 7c 9e 29 36 ed 4a 91 bf 9e 55 5a 12 ad 79 6f 79 ff 83 e1 2c 63 5d 87 4d 2e d6 54 99 93 76 1e 3c f4 e3 fa 26 2d 85 92 e4 81 1a 98 92 30 31 87 08 47 0a db d3 55 ab 8c 53 f6 3b 30 91 75 c8 cc 0c 91 a1 ca 1f f3 63 92 3a 66 ac 72 24 85 92 cd 9b 43 fa d7 64 71 41 30 e6 e9 74 6a cd c7 9c cd 38 23 d3 ce 16 d6 bc 01 59 22 57 b1 0f 84 91 d5 31 40 32 1d cf 2a d3 e4 c9 49 74 a5 55 54 68 0d 10 74 c9 e9 17 10 36 ad 34 52 6f a3 ca e3 d4 9a ba 2a 7c d3 bf 02 ca 41 04 43 2a b5 9e 80 5a 42 58 23 43 08 b5 81 33 e2 b2 4f 12 ad 79 93 73 2d f2 4d ac 6f 2b 81 Data Ascii: &9$Cpzs+ww[p9U1!d\_19z&b!AX,eaR\|)6JUZyoy,c]M.Tv<&-01GUS;0uc:fr$CdqA0tj8#Y"W1@2ItUTht64Ro\|ACZBX#C3Oys-Mo+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49885	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:49 UTC	415	OUT	GET /api/public/content/1c9bb09595ba4175b9b901a7fdc0a7bf?v=28be8a73&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	638	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/svg+xml Content-Length: 4296 Connection: close CF-Ray: 8a5d6d028f497ca2-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 201 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=logo-mitsubishi-white.svg; filename*=utf-8''logo-mitsubishi-white.svg ETag: "0x8DC99D03A5C6942" Last-Modified: Mon, 01 Jul 2024 13:17:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 140982 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	731	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 31 35 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 300 150"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <g i
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 22 63 6c 73 2d 31 22 20 64 3d 22 4d 39 37 2e 38 34 2c 39 31 2e 31 37 63 2d 34 2e 38 33 2c 30 2d 36 2e 34 39 2d 33 2e 31 36 2d 36 2e 36 37 2d 37 2e 30 37 68 33 2e 35 33 63 30 2c 31 2e 38 38 2e 39 33 2c 33 2e 37 31 2c 33 2e 31 35 2c 33 2e 37 31 73 32 2e 39 36 2d 2e 39 32 2c 32 2e 39 36 2d 32 2e 33 39 2d 2e 39 32 2d 31 2e 38 37 2d 34 2e 38 32 2d 34 2e 30 38 63 2d 32 2e 37 38 2d 31 2e 36 38 2d 34 2e 36 33 2d 33 2e 33 34 2d 34 2e 36 33 2d 36 2e 33 31 73 32 2e 30 34 2d 35 2e 33 37 2c 36 2e 33 31 2d 35 2e 33 37 2c 36 2e 33 2c 32 2e 39 36 2c 36 2e 34 39 2c 36 2e 34 37 68 2d 33 2e 37 63 30 2d 31 2e 36 37 2d 2e 39 32 2d 33 2e 33 35 2d 32 2e 37 38 2d 33 2e 33 35 73 2d 32 2e 36 2e 37 36 2d 32 2e 36 2c 32 2e 30 34 2c 31 2e 31 2c 32 2e 32 32 2c 34 2e 30 37 2c 33 2e 37 Data Ascii: "cls-1" d="M97.84,91.17c-4.83,0-6.49-3.16-6.67-7.07h3.53c0,1.88.93,3.71,3.15,3.71s2.96-.92,2.96-2.39-.92-1.87-4.82-4.08c-2.78-1.68-4.63-3.34-4.63-6.31s2.04-5.37,6.31-5.37,6.3,2.96,6.49,6.47h-3.7c0-1.67-.92-3.35-2.78-3.35s-2.6.76-2.6,2.04,1.1,2.22,4.07,3.7
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 32 2e 34 2d 2e 39 33 2d 32 2e 30 38 2d 34 2e 38 32 2d 34 2e 32 39 63 2d 32 2e 37 38 2d 31 2e 34 37 2d 34 2e 36 35 2d 33 2e 31 35 2d 34 2e 36 35 2d 36 2e 31 31 73 32 2e 30 33 2d 35 2e 33 36 2c 36 2e 33 31 2d 35 2e 33 36 2c 36 2e 33 2c 32 2e 39 35 2c 36 2e 35 2c 36 2e 34 36 68 2d 33 2e 35 31 63 2d 2e 32 2d 31 2e 38 33 2d 31 2e 31 33 2d 33 2e 33 33 2d 32 2e 39 37 2d 33 2e 33 33 73 2d 32 2e 36 2e 37 33 2d 32 2e 36 2c 32 2e 30 33 2c 31 2e 31 32 2c 32 2e 30 34 2c 34 2e 30 39 2c 33 2e 37 32 63 33 2e 33 33 2c 31 2e 38 33 2c 35 2e 33 37 2c 33 2e 31 34 2c 35 2e 33 37 2c 36 2e 36 39 73 2d 33 2e 31 36 2c 35 2e 37 31 2d 36 2e 36 39 2c 35 2e 37 31 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 67 31 30 38 35 30 Data Ascii: 2.4-.93-2.08-4.82-4.29c-2.78-1.47-4.65-3.15-4.65-6.11s2.03-5.36,6.31-5.36,6.3,2.95,6.5,6.46h-3.51c-.2-1.83-1.13-3.33-2.97-3.33s-2.6.73-2.6,2.03,1.12,2.04,4.09,3.72c3.33,1.83,5.37,3.14,5.37,6.69s-3.16,5.71-6.69,5.71"/> </g> </g> <g id="g10850
2024-07-19 20:22:50 UTC	827	IN	Data Raw: 33 2d 31 30 2e 37 32 73 32 2e 35 38 2d 31 30 2e 37 32 2c 38 2e 33 2d 31 30 2e 37 32 2c 38 2e 33 32 2c 34 2e 39 37 2c 38 2e 33 32 2c 31 30 2e 37 32 2d 32 2e 35 37 2c 31 30 2e 37 32 2d 38 2e 33 32 2c 31 30 2e 37 32 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 67 36 33 36 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 70 61 74 68 36 33 36 32 22 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 33 37 2e 34 32 2c 37 33 2e 34 31 76 31 37 2e 35 36 68 2d 33 2e 37 31 76 2d 31 37 2e 35 36 68 2d 34 2e 34 33 76 2d 33 2e 31 35 68 31 32 2e 35 38 76 33 2e 31 35 22 2f 3e 0a 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 3c 67 20 69 64 3d 22 67 36 33 36 34 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 Data Ascii: 3-10.72s2.58-10.72,8.3-10.72,8.32,4.97,8.32,10.72-2.57,10.72-8.32,10.72"/> </g> <g id="g6360"> <path id="path6362" class="cls-1" d="M237.42,73.41v17.56h-3.71v-17.56h-4.43v-3.15h12.58v3.15"/> </g> <g id="g6364"> <pat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49880	13.107.246.60	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:50 UTC	458	OUT	GET /dist/site.7bdbe456878bd11113ce.js HTTP/1.1 Host: www.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:50 UTC	838	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: application/javascript Content-Length: 154805 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 ETag: "1dacc86512413b5" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202250Z-15b94bb6ff94s8kmu55dtuug0s0000000d1000000000sfp7 x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:50 UTC	15546	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 6d 69 6d 65 63 61 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 31 5d 2c 7b 37 33 31 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 7b 76 61 72 20 72 3d 69 2e 63 61 6c 6c 28 Data Ascii: "use strict";(self.webpackChunkmimecast=self.webpackChunkmimecast\|\|[]).push([[641],{7312:(e,t,i)=>{function r(e,t,i){return(t=function(e){var t=function(e,t){if("object"!=typeof e\|\|null===e)return e;var i=e[Symbol.toPrimitive];if(void 0!==i){var r=i.call(
2024-07-19 20:22:50 UTC	16384	IN	Data Raw: 22 3b 72 65 74 75 72 6e 28 30 2c 76 2e 64 79 29 28 50 7c 7c 28 50 3d 6a 28 5b 22 20 22 2c 22 22 5d 29 29 2c 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6d 61 70 28 28 65 3d 3e 7b 72 65 74 75 72 6e 28 30 2c 76 2e 64 79 29 28 46 7c 7c 28 46 3d 6a 28 5b 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2c 27 22 3e 5c 6e 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 2d 63 61 72 64 20 61 72 74 69 63 6c 65 2d 63 61 72 64 2d 2d 63 6f 6d 70 61 63 74 2d 6d 6f 62 69 6c 65 22 3e 5c 6e 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 2d 63 61 72 64 5f 5f 6c 69 6e 6b 20 6d 63 2d 61 6e 63 68 6f 72 22 20 68 72 65 66 3d 22 27 2c 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 27 2c 27 5c 6e 20 20 20 20 20 20 20 20 20 20 Data Ascii: ";return(0,v.dy)(P\|\|(P=j([" ",""])),null==e?void 0:e.map((e=>{return(0,v.dy)(F\|\|(F=j(['<div class="','">\n <div class="article-card article-card--compact-mobile">\n <a class="article-card__link mc-anchor" href="','">\n ','\n
2024-07-19 20:22:50 UTC	16384	IN	Data Raw: 74 68 69 73 2e 6c 69 73 74 3d 65 2c 74 68 69 73 2e 61 75 74 68 6f 72 73 57 72 61 70 70 65 72 3d 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 75 74 68 6f 72 2d 6c 69 73 74 5f 5f 61 75 74 68 6f 72 2d 63 61 72 64 73 22 29 2c 74 68 69 73 2e 6c 6f 61 64 4d 6f 72 65 42 75 74 74 6f 6e 3d 74 68 69 73 2e 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 75 74 68 6f 72 2d 6c 69 73 74 5f 5f 6c 6f 61 64 2d 6d 6f 72 65 2d 62 75 74 74 6f 6e 22 29 2c 74 68 69 73 2e 61 75 74 68 6f 72 4c 69 73 74 41 72 74 69 63 6c 65 73 4c 69 6e 6b 4c 61 62 65 6c 3d 74 68 69 73 2e 6c 69 73 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 75 74 68 6f 72 2d 6c 69 73 74 2d 61 72 74 69 63 6c 65 73 2d 6c 69 6e 6b 2d 6c 61 62 Data Ascii: this.list=e,this.authorsWrapper=this.list.querySelector(".author-list__author-cards"),this.loadMoreButton=this.list.querySelector(".author-list__load-more-button"),this.authorListArticlesLinkLabel=this.list.getAttribute("data-author-list-articles-link-lab
2024-07-19 20:22:50 UTC	16384	IN	Data Raw: 69 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 3f 74 68 69 73 2e 68 65 61 64 65 72 4e 61 76 49 74 65 6d 49 63 6f 6e 4f 70 65 6e 3a 74 68 69 73 2e 68 65 61 64 65 72 4e 61 76 49 74 65 6d 49 63 6f 6e 43 6c 6f 73 65 64 29 2c 6e 75 6c 6c 3d 3d 69 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 65 3f 74 68 69 73 2e 68 65 61 64 65 72 4e 61 76 49 74 65 6d 49 63 6f 6e 43 6c 6f 73 65 64 3a 74 68 69 73 2e 68 65 61 64 65 72 4e 61 76 49 74 65 6d 49 63 6f 6e 4f 70 65 6e 29 7d 6f 70 65 6e 54 6f 70 4c 65 76 65 6c 4c 69 6e 6b 28 65 29 7b 76 61 72 20 74 2c 69 2c 72 2c 73 3b 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 6c 61 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e 63 6c 61 73 Data Ascii: i\|\|i.classList.add(e?this.headerNavItemIconOpen:this.headerNavItemIconClosed),null==i\|\|i.classList.remove(e?this.headerNavItemIconClosed:this.headerNavItemIconOpen)}openTopLevelLink(e){var t,i,r,s;null==e\|\|null===(t=e.lastElementChild)\|\|void 0===t\|\|t.clas
2024-07-19 20:22:50 UTC	16384	IN	Data Raw: 74 68 69 73 2e 74 6f 67 67 6c 65 49 74 65 6d 2e 63 61 6c 6c 28 74 68 69 73 29 29 29 7d 29 29 7d 63 6c 6f 73 65 28 29 7b 74 68 69 73 2e 74 61 62 42 75 74 74 6f 6e 73 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 65 2e 63 6c 6f 73 65 28 29 7d 29 29 2c 74 68 69 73 2e 73 65 74 4f 70 65 6e 43 6c 61 73 73 28 21 31 29 7d 74 6f 67 67 6c 65 49 74 65 6d 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 69 73 4f 70 65 6e 28 29 3b 74 68 69 73 2e 63 6c 6f 73 65 41 6c 6c 49 74 65 6d 73 28 29 2c 74 68 69 73 2e 73 65 74 4f 70 65 6e 43 6c 61 73 73 28 21 65 29 2c 74 68 69 73 2e 74 61 62 42 75 74 74 6f 6e 73 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 2e 74 6f 67 67 6c 65 54 61 62 28 65 29 7d 29 29 7d 73 65 74 4f 70 65 6e 43 6c 61 73 73 28 65 29 7b 74 68 69 73 2e 63 6f 6d 70 6f Data Ascii: this.toggleItem.call(this)))}))}close(){this.tabButtons.forEach((e=>{e.close()})),this.setOpenClass(!1)}toggleItem(){const e=this.isOpen();this.closeAllItems(),this.setOpenClass(!e),this.tabButtons.forEach((t=>{t.toggleTab(e)}))}setOpenClass(e){this.compo
2024-07-19 20:22:50 UTC	16384	IN	Data Raw: 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 28 74 29 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 69 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 28 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b Data Ascii: mitive must return a primitive value.")}return String(e)}(e);return"symbol"==typeof t?t:String(t)}(t))in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}function Ie(e,t,i){return(t=function(e){var t=function(e,t){
2024-07-19 20:22:50 UTC	16384	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 69 6e 6e 65 72 54 65 78 74 3d 22 44 4e 53 20 52 65 63 6f 72 64 22 2c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 64 6e 73 2d 74 69 74 6c 65 22 29 2c 72 2e 61 70 70 65 6e 64 28 69 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 74 6f 74 61 6c 4c 6f 6f 6b 75 70 73 22 29 2c 65 2e 69 6e 6e 65 72 54 65 78 74 3d 22 54 6f 74 61 6c 20 6c 6f 6f 6b 20 75 70 73 3a 20 22 2b 74 2e 61 6e 61 6c 79 7a 65 64 2e 74 6f 74 61 6c 5f 6c 6f 6f 6b 75 70 73 2c 72 2e 61 70 70 65 6e 64 28 65 29 7d 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6e 61 6c 79 7a 65 64 2e 6c 6f 6f 6b 75 70 73 26 26 6e 75 6c 6c 21 3d 74 2e 61 6e 61 6c Data Ascii: eElement("div"),i=document.createElement("div");i.innerText="DNS Record",i.classList.add("dns-title"),r.append(i),e.classList.add("totalLookups"),e.innerText="Total look ups: "+t.analyzed.total_lookups,r.append(e)}if(null!=t.analyzed.lookups&&null!=t.anal
2024-07-19 20:22:50 UTC	16384	IN	Data Raw: 20 74 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 28 74 29 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 69 2c 65 7d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 72 2c 73 2c 6f 2c 6e 2c 6c 2c 61 2c 63 2c 64 2c 75 3b 28 4f 65 28 74 68 69 73 2c 22 41 70 69 52 6f 75 74 65 50 61 74 68 22 2c 22 2f 61 70 69 2f 64 6d 61 72 63 2d 61 6e 61 6c 79 7a 65 72 2f 62 69 6d 69 2d 72 65 63 6f 72 64 2d 63 68 65 63 6b 65 72 22 29 2c 4f 65 28 74 68 69 73 2c 22 62 69 6d 69 52 65 63 6f 72 64 43 68 65 63 6b Data Ascii: t?t:String(t)}(t))in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}new class{constructor(){var e,t,i,r,s,o,n,l,a,c,d,u;(Oe(this,"ApiRoutePath","/api/dmarc-analyzer/bimi-record-checker"),Oe(this,"bimiRecordCheck
2024-07-19 20:22:50 UTC	16384	IN	Data Raw: 41 6e 73 77 65 72 49 6e 4f 70 74 69 6f 6e 73 28 22 71 75 69 7a 5f 5f 71 75 65 73 74 69 6f 6e 2d 73 6c 69 64 65 2d 32 22 29 26 26 22 2b 31 30 30 30 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 72 65 73 75 6c 74 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 67 65 74 28 22 71 75 69 7a 5f 5f 71 75 65 73 74 69 6f 6e 2d 73 6c 69 64 65 2d 33 22 29 29 26 26 22 4d 69 63 72 6f 73 6f 66 74 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 72 65 73 75 6c 74 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 67 65 74 28 22 71 75 69 7a 5f 5f 71 75 65 73 74 69 6f 6e 2d 73 6c 69 64 65 2d 34 22 29 29 26 26 22 6d 75 6c 74 69 70 6c 65 22 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 72 65 73 Data Ascii: AnswerInOptions("quiz__question-slide-2")&&"+1000"!==(null===(e=this.results)\|\|void 0===e?void 0:e.get("quiz__question-slide-3"))&&"Microsoft"===(null===(t=this.results)\|\|void 0===t?void 0:t.get("quiz__question-slide-4"))&&"multiple"!==(null===(i=this.res
2024-07-19 20:22:50 UTC	8187	IN	Data Raw: 75 73 61 62 6c 65 4e 6f 64 65 73 3a 22 22 2c 69 31 38 6e 3a 7b 73 6c 69 64 65 58 3a 6e 75 6c 6c 21 3d 73 3f 73 3a 22 47 6f 20 74 6f 20 73 6c 69 64 65 20 25 73 22 2c 70 72 65 76 3a 6e 75 6c 6c 21 3d 6f 3f 6f 3a 22 50 72 65 76 69 6f 75 73 20 73 6c 69 64 65 22 2c 6e 65 78 74 3a 6e 75 6c 6c 21 3d 6e 3f 6e 3a 22 4e 65 78 74 20 73 6c 69 64 65 22 7d 7d 29 2c 74 68 69 73 2e 6d 6f 64 61 6c 43 61 72 6f 75 73 65 6c 2e 6d 6f 75 6e 74 28 29 2c 74 68 69 73 2e 70 61 67 65 43 61 72 6f 75 73 65 6c 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 73 6c 69 64 65 43 6c 69 63 6b 65 64 28 65 2c 74 29 7d 29 29 2c 74 68 69 73 2e 70 61 67 65 43 61 72 6f 75 73 65 6c 2e 6f 6e 28 22 69 6e 61 63 74 69 76 65 22 2c 28 65 3d 3e 7b 74 68 69 73 2e 73 6c 69 64 Data Ascii: usableNodes:"",i18n:{slideX:null!=s?s:"Go to slide %s",prev:null!=o?o:"Previous slide",next:null!=n?n:"Next slide"}}),this.modalCarousel.mount(),this.pageCarousel.on("click",((e,t)=>{this.slideClicked(e,t)})),this.pageCarousel.on("inactive",(e=>{this.slid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49879	13.107.246.42	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:50 UTC	725	OUT	GET /dist/2fabfab087ce242c96a0.svg HTTP/1.1 Host: www.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/dist/site.7acaecb637d2a1f6764a.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:50 UTC	714	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/svg+xml Content-Length: 505 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc8651264ef9" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202250Z-15b94bb6ff97fzxn26mqrgy9c00000000c8g00000000q9bu x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-19 20:22:50 UTC	505	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49886	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:50 UTC	640	OUT	GET /api/public/content/3de62109b5794239ac94fc95e68d8718?v=a79d7c27 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	667	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/png Content-Length: 7764695 Connection: close CF-Ray: 8a5d6d03d8b37ce7-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 182 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename="SOECS 2024 Mock-up cover closed.png"; filename*=utf-8''SOECS%202024%20Mock-up%20cover%20closed.png ETag: "0x8DC42861BE65B77" Last-Modified: Tue, 12 Mar 2024 11:18:14 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 135851 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	702	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b b8 00 00 07 d0 08 02 00 00 00 dd 70 85 6d 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 Data Ascii: PNGIHDRpmIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 38 0d e7 e0 12 5c 81 eb 70 17 06 60 18 9e c2 18 bc 86 09 04 41 c8 08 13 61 21 3a 88 11 62 8e d8 22 ce 08 17 99 8e 04 22 61 48 34 92 80 a4 20 e9 88 14 51 22 c5 c8 72 a4 02 a9 42 6a 91 5d 48 23 f2 2d 72 14 39 8d 5c 40 fa 90 db c8 20 32 8a fc 8a bc 47 31 94 81 b2 51 03 d4 02 75 40 b9 a8 1f 1a 8a c6 a0 73 d1 74 34 0f 5d 80 96 a2 6b d1 1a b4 1e 3d 80 b6 a2 a7 d1 4b e8 75 74 00 7d 8a 8e 63 80 d1 31 0e 66 8c d9 61 5c 8c 87 45 60 89 58 1a 26 c7 16 63 e5 58 35 56 8f 35 63 1d 58 37 76 15 1b c0 9e 61 ef 08 24 02 8b 80 13 ec 08 5e 84 10 c2 6c 82 90 90 47 58 4c 58 43 a8 25 ec 23 b4 12 ba 08 57 09 83 84 31 c2 27 22 93 a8 4f b4 25 7a 12 f9 c4 78 62 3a b1 90 58 46 ac 26 ee 21 1e 21 9e 25 5e 27 0e 13 5f 93 48 24 0e c9 92 e4 4e 0a 21 25 90 32 49 0b 49 6b 48 db 48 2d a4 53 Data Ascii: 8\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF&!!%^'_H$N!%2IIkHH-S
2024-07-19 20:22:50 UTC	1272	IN	Data Raw: b3 d8 b8 78 59 f1 e0 22 bf 45 bb 16 23 8b 53 17 77 2e 31 5d 52 ba 64 78 69 f0 d2 7d cb 68 cb b2 96 fd 50 e2 58 52 55 f2 6a 79 dc f2 8e 52 83 d2 a5 a5 43 2b 82 57 34 95 a9 94 c9 cb 6e ae f4 5a b9 63 15 61 95 64 55 ef 6a 97 d5 5b 56 7f 2a 17 95 5f ac 70 ac a8 ae f8 b0 46 b8 e6 e2 57 4e 5f d5 7c f5 79 6d da da de 4a b7 ca ed eb 48 eb a4 eb 6e ac f7 59 bf af 4a bd 6a 41 d5 d0 86 f0 0d ad 1b f1 8d e5 1b 5f 6d 4a de 74 a1 7a 6a f5 8e cd b4 cd ca cd 03 35 61 35 ed 5b cc b6 ac db f2 a1 36 a3 f6 7a 9d 7f 5d cb 56 fd ad ab b7 be d9 26 da d6 bf dd 77 7b f3 0e 83 1d 15 3b de ef 94 ec bc b5 2b 78 57 6b bd 45 7d f5 6e d2 ee 82 dd 8f 1a 62 1b ba bf e6 7e dd b8 47 77 4f c5 9e 8f 7b a5 7b 07 f6 45 ef eb 6a 74 6f 6c dc af bf bf b2 09 6d 52 36 8d 1e 48 3a 70 e5 9b 80 6f da Data Ascii: xY"E#Sw.1]Rdxi}hPXRUjyRC+W4nZcadUj[V*_pFWN_\|ymJHnYJjA_mJtzj5a5[6z]V&w{;+xWkE}nb~GwO{{EjtolmR6H:po
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: db df 6f 55 9d ca 2a 55 09 d5 4a 68 ef bd d6 8e 78 d4 82 77 52 48 2b bd fe 69 55 66 a6 64 25 e6 db 5b 8c f5 d9 fe ad e5 9f 12 24 10 6a 25 17 20 f2 e7 27 f3 7b b5 3c 57 ab 73 b5 5c 56 e6 a9 82 b8 2d 21 bc 72 e2 f5 b5 ee f3 b5 46 1d 8d 01 8a b5 fa 72 98 e7 45 9b 05 5f 0a d6 ff 6d 0f 70 0d 0b 22 08 32 40 49 e9 b3 53 35 5f d5 aa 86 a3 4e ac 9f 9f cb 03 95 05 58 0b a6 80 54 2d 6f 37 b9 63 c9 6a da 12 18 b4 cd 4d 29 80 88 a8 59 2e af f0 dd 77 49 7e d8 35 0f 0e a0 e6 f8 f4 59 90 fe ec bd fa 22 aa 51 65 b1 16 41 41 79 ce f7 7b 7e be 3f e7 fb 25 b1 f6 5e 6b af 88 16 8e 2b 32 00 41 a1 00 59 db fb 1e 02 18 3d 51 00 23 ac 33 db 4a 8a 58 16 37 21 e7 06 9e 63 32 77 3e b6 3a 7c ec 48 ab c7 82 b0 49 a2 b7 42 aa 73 b2 6a 2c 89 25 2f f8 e7 cf 27 f6 1e d1 57 66 fd 7c 7f 7e Data Ascii: oU*UJhxwRH+iUfd%[$j% '{<Ws\V-!rFrE_mp"2@IS5_NXT-o7cjM)Y.wI~5Y"QeAAy{~?%^k+2AY=Q#3JX7!c2w>:\|HIBsj,%/'Wf\|~
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: b0 56 58 8f e5 39 e7 64 56 56 e5 f7 7b 4a f5 d9 b1 d7 b2 0b 9a 99 e7 27 bf 75 ea 9b 41 08 41 b2 da d0 26 89 15 db 8b 1c 2b 36 d7 51 39 ca 38 ed 57 08 7b 7f b8 d6 9f fd 67 7f 8c 05 d9 33 08 07 bb 6b d7 39 7f e7 21 d8 67 62 ad 3e 14 8e bb fa 2a 05 28 06 4c 73 30 9d 55 80 56 ac a0 fd fa 55 ed e9 a3 1a fc 6b 97 e3 aa 6e ab e5 96 55 8d b2 1b c1 8a 3e f8 1c 1c 74 9c 01 b6 83 dd 5b a3 97 a2 13 e6 50 d8 7e f2 8a a8 63 cd cc 3c df 2f 84 cf e7 cf 5a bd a4 24 63 c7 bf 3e 7f ed bd 05 54 e6 b7 4e e9 94 a4 54 66 29 53 80 45 db 1a 43 12 4a 27 0f a1 d8 3b 76 44 84 35 9a b5 f9 8a b5 19 58 8b 04 94 99 79 ce f9 66 e6 cf 4f 55 89 fc 7c 3e 7f fe 7c f6 da 00 4e 65 25 32 91 95 cc d1 8b 46 58 d5 77 3e 4b a4 58 e4 0a 7b 7a 0e 16 2e 84 eb a8 9d a3 24 8f 91 a6 2b 50 7d 9a 22 16 f6 Data Ascii: VX9dVV{J'uAA&+6Q98W{g3k9!gb>*(Ls0UVUknU>t[P~c</Z$c>TNTf)SECJ';vD5XyfOU\|>\|Ne%2FXw>KX{z.$+P}"
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 70 b3 b3 2a 91 55 e5 5c 42 53 39 7c 47 ad f5 91 1a b7 b3 15 4c 0a 30 54 bb d7 8a b5 c9 d2 31 c8 86 63 6f d0 02 33 c9 ab 21 29 60 31 1c 49 5d fd 73 4f 84 7f 52 aa cc d2 a8 b7 49 0d 35 ce 10 8b 9b 1b d1 6c 81 81 f4 9f 44 9c f3 24 ba 5c 85 80 f7 a5 43 aa 88 bd 97 dd 45 e3 16 a5 ca 93 92 ac 1f 0a 25 b1 6e fa d8 7a 80 14 c3 87 ac 1d 72 a7 d2 30 76 95 5c e1 37 5c 0f 90 80 ce 69 70 38 18 9b e3 fe 02 6a d8 04 4f 40 e8 5c 8d 61 45 1f 0d e3 e3 4e 9a 45 c4 75 99 7c 62 6b 52 37 0a 44 95 4e 02 40 42 82 75 e5 e2 95 2a 0b 54 fb 8f ce 78 0d 2e 30 27 42 8d 5b 18 c4 b7 68 3a bc f1 b1 50 26 1f 08 b8 a5 a1 3f d4 fa fe 85 29 fb 57 ef 80 76 7e 78 23 5f 41 44 41 40 e9 a0 9c e2 33 7e 17 a1 6f 55 19 21 17 b8 f0 87 74 64 1f 50 b1 1a ef 25 19 44 a1 6c 8c a3 d5 61 44 b4 5c 57 c1 a2 Data Ascii: pU\BS9\|GL0T1co3!)`1I]sORI5lD$\CE%nzr0v\7\ip8jO@\aENEu\|bkR7DN@BuTx.0'B[h:P&?)Wv~x#_ADA@3~oU!tdP%DlaD\W
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 02 13 82 2d 86 9d 91 d6 55 44 38 bd fe 0a 91 9a 47 08 8b ba b7 e8 86 69 ed 92 c5 10 4d 24 15 8a 5d 70 c1 2d 88 0d bb 98 08 d2 2e 62 eb 3a d1 ff d7 a9 05 a7 5b 16 a4 08 ae 80 f1 37 41 58 30 06 10 99 20 b0 17 17 e3 b3 3f b9 ce 93 f6 c2 c8 1f 66 a7 50 55 46 60 11 42 b1 e1 27 49 e7 6b 5e 1f 49 ae c5 3e fb 65 54 1d 6c a0 8c 31 fc 77 94 74 b0 77 34 e0 d1 c9 30 91 ca 6c d4 60 00 bb aa e5 8d 3e df 93 7f 72 6b c7 5a 1b 3a 06 a3 50 37 ad 2e ab 5e 27 84 20 ab 4e 0b e1 42 b3 40 9a a1 d2 a7 5b 4b 2c 8a cd 8e 1b f1 92 4e 03 8f 7e 90 2b 00 bc 27 2c 4b 11 58 74 8a 41 22 2b 73 20 4b 3b 39 82 30 0c 3c 88 dc 0c c4 ba 64 97 c6 94 89 72 1a a9 6a 2d 36 85 a2 6f c6 12 c4 20 9b f4 3e ca 93 0f e4 a4 07 86 76 6a 8a 24 a3 23 ac 8e f6 a4 eb 5b 82 86 be 01 34 84 0b 56 25 c0 c3 8a b5 Data Ascii: -UD8GiM$]p-.b:[7AX0 ?fPUF`B'Ik^I>eTl1wtw40l`>rkZ:P7.^' NB@[K,N~+',KXtA"+s K;90<drj-6o >vj$#[4V%
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 55 a9 52 d0 a9 ec ca bd 06 22 20 b4 6f 13 81 e8 d2 42 22 0c 84 56 66 25 10 51 e4 0a 41 11 ec 7c 7c 9a 48 f0 d8 31 3c 01 05 3a 98 44 5b 5b 28 85 23 85 38 f0 1a 24 de aa 86 d1 ca 0b 3a 99 69 72 15 c0 15 15 f1 31 1c 44 6a 12 cd 14 54 11 3c 3c 38 63 4a 78 5f 00 2a 93 c3 d5 b9 40 2e ba b4 55 13 ad a0 a3 0f b4 8f 71 03 13 34 bc b8 aa d3 02 ce 17 d8 47 0d d7 d6 9a b1 8c 96 80 de 9b 66 65 ce 35 e1 b0 75 98 0d 04 8b fc b8 3b 40 af 3e 5b 60 7b 11 56 a8 52 85 02 e9 62 a6 55 50 29 fb 0e 94 a3 78 34 c5 70 83 e3 5d e6 4a 15 84 ec 72 cb 07 ef 02 d0 e0 bc 82 d0 91 ce f9 91 e4 fa 7a 60 6d 82 11 87 e9 68 9b 4f 03 00 ac b5 3e 7b 55 55 7d 55 95 b0 6f ea 5b d6 70 03 18 66 90 8e 3b d0 eb 60 fb 53 ed 97 20 56 f5 0a 33 f6 27 a6 ae d2 42 6c df 1f 10 cd f2 8e 15 55 5a 5b ea e4 9b Data Ascii: UR" oB"Vf%QA\|\|H1<:D[[(#8$:ir1DjT<<8cJx_*@.Uq4Gfe5u;@>[`{VRbUP)x4p]Jrz`mhO>{UU}Uo[pf;`S V3'BlUZ[
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: a9 04 d4 2d 22 5e f9 c2 30 f6 a7 ab fa 84 d5 91 dd 68 c5 27 ae 90 63 0b dd 16 3e 6f 17 88 5d e9 00 3e 6a 94 bf 3f 0b 41 4c 0d e0 4d 72 73 69 b8 4c e2 58 f6 3e 0f f2 99 b7 a9 65 56 e2 ed b9 62 45 d8 56 db f0 1d e8 b8 1a b6 ab ae dd 2b c2 56 ec 71 76 fb 7e ec a2 ce f7 42 90 e9 35 ed 4d 69 e2 55 f9 24 fa c0 b8 5c 8e 42 22 a5 5a 36 6a 0c 85 d8 e1 c3 9c dc b5 60 b8 d3 df f6 c0 01 31 b2 ac 92 4e b9 1e 2c a9 ce 37 fd 97 7a bf fe 6d 93 bc af bf 6c 2f d4 76 94 d3 18 e9 a6 e4 c6 c2 82 ee a5 d1 1f 13 4c 0d b9 64 f6 76 a5 2a 2f f9 4d 58 0d b7 be 62 3f 1b ef f6 8c 6e e2 b6 8e c1 97 56 a1 2f 27 d3 18 c9 5a 11 2b ce 65 3e 7b 91 2b c6 9d 69 1e 7f 50 62 d1 c4 8a 21 de b6 a2 ea d4 64 a9 0c 91 fa fd d6 6c a4 93 52 cf e1 f2 f1 cc 0e ba ee cf 6d d0 6f 28 fa 2c f2 a9 c2 c0 c3 Data Ascii: -"^0h'c>o]>j?ALMrsiLX>eVbEV+Vqv~B5MiU$\B"Z6j`1N,7zml/vLdv*/MXb?nV/'Z+e>{+iPb!dlRmo(,
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: fb fe df c5 5a ff d8 a0 47 07 b4 f1 ea 73 2d a9 3d e0 2a 47 93 e2 50 14 81 ca b4 f7 22 73 ce a7 da 2b 1a 0a f2 de 85 69 4c be 11 d7 1f dd c2 db f9 5e dd c8 df 8d 64 68 67 21 46 f1 74 33 f2 0e 81 ab ce c8 86 52 15 93 aa 47 50 7f 9f 1f e5 66 43 3a d6 a5 97 df 89 32 20 20 36 93 a4 ab a1 70 1d 27 d7 2a 1b 3c bd f5 f8 d5 15 3b 71 51 bb 60 4a 3c e7 c7 0d 1e be df 3c a9 f1 9f cd 0d a2 68 07 c9 11 91 11 51 c6 6d bb c1 27 ca 76 b3 04 54 25 9e 26 31 18 6e 41 bb 7d 22 a8 aa ec 36 33 02 a0 ac 59 aa 01 a6 a6 f3 94 bd f7 88 d8 6b 95 ca 26 46 80 69 92 87 e5 3e bb 24 bf df 93 0d 24 24 a6 a9 aa 19 81 6e df 75 57 e6 7a 69 ac 5a 7b b7 70 93 8d ab 5d 54 fc 2d 81 99 0f ee 1d 2c a9 32 4f 1e 36 9a 15 9f 3f 7f 66 35 90 2a a4 0c 01 37 b1 21 82 1e 32 50 c1 b0 ce 57 55 b6 76 8b 69 Data Ascii: ZGs-=GP"s+iL^dhg!Ft3RGPfC:2 6p'<;qQ`J<<hQm'vT%&1nA}"63Yk&Fi>$$$nuWziZ{p]T-,2O6?f5*7!2PWUvi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49887	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:50 UTC	405	OUT	GET /api/public/content/946d853722194c86bdae8da05e63158a?v=dda04a96 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	620	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/svg+xml Content-Length: 1076 Connection: close CF-Ray: 8a5d6d03da7a421c-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 434 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=topnav_plans.svg; filename*=utf-8''topnav_plans.svg ETag: "0x8DBE1BC707C6884" Last-Modified: Fri, 10 Nov 2023 07:12:46 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 127128 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	749	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"> <defs> <style> .cls-1 { fill: #fff; stroke-width: 0px; } </style> </defs> <g i
2024-07-19 20:22:50 UTC	327	IN	Data Raw: 73 2d 31 22 20 64 3d 22 6d 34 39 2e 33 38 2c 36 31 2e 32 39 68 35 2e 36 38 6c 31 30 2e 36 31 2d 39 2e 33 35 68 31 31 2e 35 39 56 31 34 2e 31 35 48 32 34 2e 39 38 76 33 39 2e 36 68 32 34 2e 34 76 37 2e 35 34 5a 6d 2d 31 38 2e 37 38 2d 31 33 2e 31 36 76 2d 32 38 2e 33 35 68 34 31 2e 30 33 76 32 36 2e 35 33 68 2d 38 2e 30 39 6c 2d 38 2e 35 34 2c 37 2e 35 32 76 2d 35 2e 36 39 68 2d 32 34 2e 34 5a 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 6d 35 31 2e 39 2c 32 34 2e 38 33 63 2d 33 2e 31 36 2c 30 2d 35 2e 37 33 2c 32 2e 35 36 2d 35 2e 37 33 2c 35 2e 37 33 2c 30 2c 32 2e 32 37 2c 31 2e 33 32 2c 34 2e 32 32 2c 33 2e 32 33 2c 35 2e 31 35 76 37 2e 31 36 68 35 76 2d 37 2e 31 36 63 31 2e 39 31 2d 2e 39 33 2c 33 Data Ascii: s-1" d="m49.38,61.29h5.68l10.61-9.35h11.59V14.15H24.98v39.6h24.4v7.54Zm-18.78-13.16v-28.35h41.03v26.53h-8.09l-8.54,7.52v-5.69h-24.4Z"/> <path class="cls-1" d="m51.9,24.83c-3.16,0-5.73,2.56-5.73,5.73,0,2.27,1.32,4.22,3.23,5.15v7.16h5v-7.16c1.91-.93,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49888	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:50 UTC	640	OUT	GET /api/public/content/d0b858c3a1444fa29fc6e22f39022a86?v=60b50f99 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	648	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/svg+xml Content-Length: 1360 Connection: close CF-Ray: 8a5d6d05fc800c76-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 434 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_AdvancedEmailSecurity.svg; filename*=utf-8''icon_AdvancedEmailSecurity.svg ETag: "0x8DBEA833BEDC0CB" Last-Modified: Tue, 21 Nov 2023 11:15:57 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128416 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	721	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 31 30 30 34 31 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"> <defs> <style> .cls-1 { fill: #010041; stroke-width: 0px; } </style> </defs> <
2024-07-19 20:22:50 UTC	639	IN	Data Raw: 31 31 2e 38 32 2d 31 31 2e 33 31 2d 31 33 2e 36 36 2d 31 39 2e 33 36 2d 31 2e 38 33 2d 37 2e 39 35 2d 2e 34 31 2d 31 36 2e 33 31 2c 33 2e 39 37 2d 32 33 2e 32 34 2c 33 2e 36 37 2d 35 2e 37 31 2c 38 2e 38 37 2d 31 30 2e 30 39 2c 31 35 2e 31 39 2d 31 32 2e 34 33 6c 31 2e 38 33 2c 34 2e 37 39 63 2d 35 2e 33 2c 32 2e 30 34 2d 39 2e 36 38 2c 35 2e 36 31 2d 31 32 2e 37 34 2c 31 30 2e 34 2d 33 2e 36 37 2c 35 2e 38 31 2d 34 2e 38 39 2c 31 32 2e 37 34 2d 33 2e 33 36 2c 31 39 2e 34 37 2c 31 2e 36 33 2c 36 2e 37 33 2c 35 2e 37 31 2c 31 32 2e 34 33 2c 31 31 2e 35 32 2c 31 36 2e 31 2c 31 32 2e 30 33 2c 37 2e 36 34 2c 32 38 2e 30 33 2c 33 2e 39 37 2c 33 35 2e 36 37 2d 38 2e 30 35 2c 33 2e 36 37 2d 35 2e 38 31 2c 34 2e 38 39 2d 31 32 2e 37 34 2c 33 2e 33 36 2d 31 39 2e Data Ascii: 11.82-11.31-13.66-19.36-1.83-7.95-.41-16.31,3.97-23.24,3.67-5.71,8.87-10.09,15.19-12.43l1.83,4.79c-5.3,2.04-9.68,5.61-12.74,10.4-3.67,5.81-4.89,12.74-3.36,19.47,1.63,6.73,5.71,12.43,11.52,16.1,12.03,7.64,28.03,3.97,35.67-8.05,3.67-5.81,4.89-12.74,3.36-19.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49889	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:50 UTC	405	OUT	GET /api/public/content/2e6624e57dcf401aba62439ed1bf9f1f?v=4c53bcb4 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	636	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/png Content-Length: 8840 Connection: close CF-Ray: 8a5d6d05fa334362-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 434 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_mimecastercentral.png; filename*=utf-8''icon_mimecastercentral.png ETag: "0x8DBD578667AEEEC" Last-Modified: Wed, 25 Oct 2023 16:35:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 124596 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	733	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 22 1d 49 44 41 54 78 01 ed 9d 3d 70 1c c7 95 c7 5f cf 42 16 28 ba 4a ab 93 e4 8f bb 40 c3 c0 65 50 74 95 96 99 32 2e 33 39 12 94 9d 23 42 d9 39 22 19 3a 12 18 f9 1c 91 8c ce 17 09 cc 74 11 c1 e8 e4 48 cb 4c 17 11 ac 32 09 da a7 2a 0d 33 d5 09 2e 81 55 92 40 5b dc ee 7b dd b3 0b ec 2e f6 63 3e 7a 66 ba 7b fe bf 12 44 00 5a 82 e2 ec f4 7f de fb bf d7 af 05 01 30 cb fa 46 4c c3 4e 97 a4 8c 89 a2 2e 29 c5 bf aa 57 89 84 fe bc cb af d0 1f f1 c9 6f e0 ef 93 f9 fe 12 c4 21 bf e6 70 f4 c5 e1 e8 83 bf 2d 92 f4 fb Data Ascii: PNGIHDR,,y}upHYssRGBgAMAa"IDATx=p_B(J@ePt2.39#B9":tHL2*3.U@[{.c>zf{DZ0FLN.)Wo!p-
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 13 f6 a9 de 25 00 aa a1 c7 a2 b5 45 d1 4f d6 49 7d 7d 9f c0 42 10 61 2d 22 4d ff b4 4f d5 23 00 ea 03 69 e2 12 10 61 9d 42 a7 7f 3f ff 3d 49 f5 47 fe e2 67 04 40 bd 74 39 da ba 46 d1 4f bb a4 5e ff 0b d1 01 da 20 26 80 60 4d a2 a3 2a d5 f9 6f fe ec 3d 02 a0 51 d8 82 10 62 93 3a 3f 7d c6 69 22 c6 38 8f 80 60 19 a6 a2 2a f4 54 01 57 d0 07 d7 6e b2 b7 15 73 b4 f5 10 d1 16 3c ac b1 57 f5 31 a1 a7 0a b8 0d 7b 5b 9d 0f 89 da 3d fd b4 c5 11 16 a2 2a e0 15 ec 6d 29 5d 49 a4 36 57 12 5b 1a 61 6d c4 ec 0f dc 25 54 00 81 9f b4 b6 92 18 51 db 88 ce 5f 25 11 3d 20 88 15 f0 17 fd c0 7d c0 f7 f2 35 6a 19 2d 4a 09 47 29 a0 a2 6d fe 62 9d 00 f0 1b 7d 0f bf 97 b6 3f 9c fd 1f a2 c3 e7 d4 02 5a 92 12 9a 14 f0 33 82 b1 0e c2 a4 35 29 62 f8 29 a1 9e ac 90 a6 80 31 01 10 26 69 Data Ascii: %EOI}}Ba-"MO#iaB?=IGg@t9FO^ &`Mo=Qb:?}i"8`TWns<W1{[=*m)]I6W[am%TQ_%= }5j-JG)mb}?Z35)b)1&i
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 33 e8 89 a1 c5 f6 e4 da a1 86 d4 b0 62 c1 72 6c 68 5e a3 53 14 8d 78 6d 8d c4 2b 26 e0 3b 7a eb 8c 2e ba ec 38 31 e4 ee a5 0b 3d 7a 51 59 0b 43 56 2a cf 64 aa 15 ac a6 15 ff 34 35 a7 86 8b e0 9b 2b 92 3a 65 7c 9f 20 5e 3e 31 16 a9 41 63 29 df 22 9a 4a 05 67 a9 38 93 a9 50 b0 1a 31 ff 56 23 c4 0d 92 8f b7 c9 19 58 bc 48 72 da 68 c4 ab 4f c0 35 74 cf d4 7d f6 36 76 9d 3d 3a ab ee aa e0 2a 2a cc 64 aa 13 2c 57 14 ff 34 4e ce aa 4e 19 7b 5e 11 8b 97 d2 5b 81 62 02 35 a3 8d 73 da 25 29 58 a4 be db 75 65 d2 e6 62 9c 0c 0c f6 48 ed 5f a4 0a a8 46 b0 5c 53 fc d3 0c d2 e6 3d d7 99 8c be f4 90 41 8c 74 b6 0f 0b 14 a9 bd d4 34 8f 06 de 1d 40 2a de be cb ff ff 9b e4 1a 15 65 32 15 08 56 4d 7b 05 cb e2 e8 31 46 cb 19 0b 98 b8 84 08 ac 30 09 5f bf 01 49 f5 d0 4b 81 9a Data Ascii: 3brlh^Sxm+&;z.81=zQYCVd45+:e\| ^>1Ac)"Jg8P1V#XHrhO5t}6v=:d,W4NN{^[b5s%)XuebH_F\S=At4@e2VM{1F0_IK
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 22 72 3d 64 d7 37 7d cb a2 aa 45 28 79 2d 3d e0 d7 93 14 31 f4 51 32 d9 59 9a 16 2e 16 2c 54 07 e7 20 de 21 57 e9 6c 5c e1 a8 c2 f7 13 b8 6d a3 a3 16 be 26 e7 dd f7 86 a4 84 fd 32 66 89 5f bc 58 b0 da b3 f9 32 3b ae b6 37 44 1b 1f b1 61 bb 83 88 78 2e 5d 36 3e ee b2 21 ef fa 68 24 9f db 4c ec a2 16 9f c1 b8 40 b0 7e a1 2f 5e 4c 60 96 ae 73 29 86 ae 02 2a b1 4d 60 39 4a 6d bb 2b 5a 58 6f 33 f0 3a bb 30 57 c0 e7 0b 56 b4 d6 27 30 1f 97 7c 2c b3 c7 13 7e 55 66 52 d1 fa 98 5c a3 f3 23 44 57 b3 44 b2 3f f7 db 73 5f ec 5b 09 bf 56 1c f1 b1 da bd 21 bd 38 fa 9a b9 26 5a f0 af 4e b3 40 83 e6 08 56 4f fb 20 7d 02 f3 71 c1 db 83 58 95 c3 3d d1 42 84 75 9a de bc 49 a4 a7 05 6b ed 39 2e de 72 e2 46 7d 2c 6d b0 43 ac ca 63 44 eb c2 4d 6a 1c 73 2f c5 04 66 99 db de 70 Data Ascii: "r=d7}E(y-=1Q2Y.,T !Wl\m&2f_X2;7Dax.]6>!h$L@~/^L`s)*M`9Jm+ZXo3:0WV'0\|,~UfR\#DWD?s_[V!8&ZN@VO }qX=BuIk9.rF},mCcDMjs/fp
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 04 fc c0 9a e7 88 35 57 8c 17 3a 25 b4 f0 c4 68 35 25 af 9f 44 8a e1 0d b2 63 29 85 c7 9a 2b c6 93 64 bc 35 27 21 50 04 0b 4f ca 27 03 c2 f5 f7 81 84 e8 cf 03 b2 06 2a 85 39 49 f4 bf c6 82 85 9c ba 18 76 ae 9b 50 77 08 b8 8d 20 db a9 7b 42 20 0f 89 fe 57 2a 58 e8 bc 2d 8a 9d eb 26 d7 6f 11 70 1b a9 2c bf 47 2a 21 90 9d 51 2b 08 22 ac 32 08 5b 4f 49 5d 2d 84 97 e5 30 03 eb be 13 c6 0b e5 c5 5c af 51 84 15 21 9f 2e 46 42 b6 50 ea 06 01 37 51 74 9b ec 93 10 c8 ce 68 42 46 2a 58 c3 e1 80 40 7e 64 c7 62 64 aa cd 77 f4 64 39 48 42 b4 6f bf c1 57 40 b0 f2 91 4e c8 18 a5 84 28 b3 16 c3 f2 5c 23 25 ab 78 92 83 32 54 15 f9 0e 15 1e 4e b9 48 27 64 88 e3 af c5 f9 2f f9 df 31 81 ec a8 7d 41 b6 c1 fb e0 12 09 bf c7 e7 a8 2a c4 db df f0 4d d4 25 b0 02 ce 3c d4 e3 8b fa Data Ascii: 5W:%h5%Dc)+d5'!PO'9IvPw {B WX-&op,G!Q+"2[OI]-0\Q!.FBP7QthBFX@~dbdwd9HBoW@N(\#%x2TNH'd/1}A*M%<
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: b3 5b 00 39 04 8b da b6 d7 69 40 00 34 89 5c bf 45 a1 23 65 ae c0 20 9f 60 a5 15 9b 01 85 8e 36 db 7d da e5 0f 02 25 f8 73 42 07 79 d7 59 4e c1 a2 76 a4 4a ad 37 db 81 33 84 bc de 54 fe 31 48 39 4c f7 c9 df f5 f6 83 e6 7a 74 2a 07 66 3b 70 8b 30 5b 8a 0a ad b3 fc 11 96 26 64 33 10 66 3b 70 8d 10 07 fb 15 5c 67 c5 22 ac 70 5b 1c 10 5d 01 07 09 6e bd 15 5e 67 c5 22 2c d3 e2 20 73 e7 9f ce a3 04 bc 2b e0 20 81 ad b7 12 59 4c 41 c1 a2 51 c9 35 b4 29 0e 72 87 00 70 91 70 d6 5b 42 25 2a 9f c5 05 2b 34 d5 47 2b 03 70 9a 40 d6 9b c9 62 8a af b3 82 1e d6 98 80 72 eb 8c bb c5 01 68 0e ef d7 db e8 80 90 e2 eb ac 44 84 a5 09 44 f5 11 5d 01 2f f0 7c bd 95 8c ae 34 25 23 2c 4d 00 51 16 a2 2b e0 0d de ae b7 24 3d d1 a8 dc e8 a0 0e 95 e6 ab e7 14 bd 7e 86 b5 af 4f 3e a2 Data Ascii: [9i@4\E#e `6}%sByYNvJ73T1H9Lztf;p0[&d3f;p\g"p[]n^g", s+ YLAQ5)rpp[B%+4G+p@brhDD]/\|4%#,MQ+$=~O>
2024-07-19 20:22:50 UTC	1262	IN	Data Raw: 9f 00 f0 83 c1 68 83 71 42 56 c8 18 69 55 30 9b bd 28 11 b9 82 7c 99 4d 6e 91 e5 09 52 5e ac 74 54 65 bc 33 88 15 f0 0a bd bd ed 01 75 2e 6c 91 15 9e 8c d6 d2 f1 19 91 f3 48 48 7e 7f 9d 1c c1 9d 08 cb b0 52 f1 f9 09 73 f4 41 f1 0a 85 a9 00 de c4 76 1a e0 3d 56 bd ad 85 3b 50 6a db d4 9c 15 c7 04 4b b3 a0 72 58 7a 92 a1 d9 57 a5 cd fd 98 00 08 03 bb 82 32 d5 11 df 7c 45 70 1e ee a4 84 c7 e8 30 55 4e 8f 84 49 f7 06 16 17 2b 93 02 4a 1f 4e c9 05 20 0f 3a 23 f9 92 ef 6f 3b 23 89 25 af b1 f1 b1 f2 66 0d ba 77 00 87 83 11 d6 98 8d 2d 7e 33 3e 1a 99 8c 03 2a 84 4e 01 cf 7c 94 36 81 02 10 30 22 ba 45 f2 91 25 af 89 d7 8d a3 a7 66 3b 2c 58 9a 32 17 ce f8 61 3a 05 44 bb 02 68 0b 7b fc 80 77 32 32 b2 85 e3 82 55 14 2b 5b 10 00 f0 11 e7 8c 72 9b 38 e8 61 95 45 9b eb Data Ascii: hqBViU0(\|MnR^tTe3u.lHH~RsAv=V;PjKrXzW2\|Ep0UNI+JN :#o;#%fw-~3>*N\|60"E%f;,X2a:Dh{w22U+[r8aE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49891	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:50 UTC	405	OUT	GET /api/public/content/a74558d866934fd38d631466eda4fae9?v=31f14de1 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	649	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/png Content-Length: 11899 Connection: close CF-Ray: 8a5d6d064d347288-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 434 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_threat_intelligence_hub.png; filename*=utf-8''icon_threat_intelligence_hub.png ETag: "0x8DBD5625AB11BDA" Last-Modified: Wed, 25 Oct 2023 13:57:40 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 124526 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 06 00 00 00 79 7d 8e 75 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 2e 10 49 44 41 54 78 01 ed 9d 07 7c 54 65 d6 c6 cf 9d 80 d2 94 50 42 53 24 0a 22 a1 48 40 51 54 5c 03 22 e2 5a c0 b2 6b 5b 05 b1 97 5d c0 b5 ae 05 70 17 5d 3f 57 81 b5 00 56 b0 62 5b 41 05 c1 46 40 40 44 20 01 81 04 a4 0c 02 4a 09 10 94 26 92 b9 df fb bc 93 c1 21 a4 cc dc 7b 67 e6 de 99 e7 ff fb 05 92 49 48 c2 94 e7 9e f3 9c f3 9e 63 08 21 65 a9 d1 26 53 4a d2 d2 25 10 c8 14 f1 a5 8b 69 aa bf cd ba 22 06 de 4f 57 5f 81 b7 cc df ff 81 ba 5d f4 ed 95 60 14 ab af 29 2e fd a0 b8 f4 4d dd 6c f8 83 b7 1b 3b 82 Data Ascii: PNGIHDR,,y}upHYssRGBgAMAa.IDATx\|TePBS$"H@QT\"Zk[]p]?WVb[AF@@D J&!{gIHc!e&SJ%i"OW_]`).Ml;
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 14 ac 88 d0 e9 df 08 f5 e4 ea 2f 84 38 4d d0 98 67 03 6a 04 a4 09 a9 1c 5f 5b 15 51 55 9f a0 7c aa ae 42 48 6c c8 56 a2 d5 5f 7c 8d 6a 88 b9 65 86 90 0a 61 84 55 11 c1 f4 0f 3e 55 b6 10 12 3f 98 26 56 02 23 ac 43 40 fa d7 f4 31 09 98 63 d4 07 4d 84 90 f8 92 ae a2 ad 41 e2 6b 9c 2e 66 83 e5 22 45 6c 83 08 83 82 15 0e a2 2a 33 ed 13 f5 5e 6f 21 24 a1 28 0b c2 30 fa 4a 5a e3 1d 2a 4d e4 18 e7 52 28 58 9a 83 a2 2a f6 54 11 b7 80 c5 b5 7d 95 b7 95 a9 a2 ad 45 8c b6 e8 61 85 bc aa 57 84 3d 55 c4 dd 28 6f 2b ed 3a 91 d4 9e 7e 9a c2 11 16 a3 2a e2 29 94 b7 65 a2 92 28 a9 5c 49 4c d1 08 ab 4d a6 f2 07 3e 10 56 00 89 37 49 d9 4a a2 4f 52 0d 5f d6 40 31 7c 79 42 b1 22 de 05 17 dc 3c f5 5c 1e 24 29 46 0a a5 84 a5 29 a0 29 43 d5 07 35 84 10 6f 83 e7 70 ef 60 fb 43 ed Data Ascii: /8Mgj_[QU\|BHlV_\|jeaU>U?&V#C@1cMAk.f"El3^o!$(0JZMR(XT}EaW=U(o+:~)e(\ILM>V7IJOR_@1\|yB"<\$)F))C5op`C
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 4b 1f 74 a6 58 11 42 e2 82 d2 9a 3a d9 95 7d 41 e5 82 65 1a 11 f7 47 10 42 88 6d aa 48 0b 2b 4f 09 99 0e 12 42 e2 4b a5 69 61 b5 0a ff 19 aa 83 25 14 2b 52 39 ad 5a 1d 23 4d 9a 64 48 b5 6a 69 15 7e 4d 20 10 90 1f 7f dc 2c 2b 57 fe 20 84 54 41 28 2d cc 2d ef 93 15 0b 96 ae 0e 9a 42 52 0b 9f cf 27 87 1d 56 5d 6a d4 38 5c 0e 3f fc 30 fd 7e 8b 16 4d 25 3b 3b 4b 8e 3e ba b1 b4 6b db 4a 9a 37 6f 22 99 99 47 49 dd ba 47 48 b4 ec d9 f3 ab ac 58 b1 46 d6 ad db 28 85 85 6b 64 ed 0f 3f 4a 7e 7e 81 ac 5d fb 93 ec db f7 9b fc fa eb 3e d9 b9 73 b7 ec df bf 5f 48 8a 82 26 d2 40 f9 82 55 71 4a c8 25 13 29 45 ad 5a 35 e4 c8 23 eb 48 9d 3a b5 54 d4 d4 42 ce fa 43 17 39 e9 a4 b6 d2 56 09 d4 51 47 35 92 58 b3 61 c3 26 59 b6 6c 95 2c 58 b8 4c 66 cf 5e a8 c4 6c b5 6c db b6 43 Data Ascii: KtXB:}AeGBmH+OBKia%+R9Z#MdHji~M ,+W TA(--BR'V]j8\?0~M%;;K>kJ7o"GIGHXF(kd?J~~]>s_H&@UqJ%)EZ5#H:TBC9VQG5Xa&Yl,XLf^llC
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: ee b9 7b 80 0c 1a d4 4f b7 2b d4 ac 79 38 c5 ca 05 e0 31 c0 79 cc 2e 5d da eb 52 fa a2 45 cb 79 1e 31 a1 34 1c af 44 ab 38 28 58 69 8d 55 85 50 ae 10 12 57 70 ee 6f f4 e8 87 e5 d6 5b ae d0 fe 09 06 ed 79 9d 9f 7f de 29 5f 7f 9d 2f e9 e9 47 ea 14 cb eb 60 d1 46 f7 ee a7 4a 6b 15 71 7d ab 7c ad 1d 3b 76 0a 49 00 69 69 8b 94 8f 95 1f f4 b0 4c 23 9b fe 55 7c 81 a1 3e 64 c8 6d d2 b7 cf d9 e2 34 98 05 f5 e1 87 d3 e5 e8 a3 9b e8 99 58 18 3b e3 34 98 41 35 6b d6 02 99 31 73 be de 7e 93 9b 3b af dc 19 54 10 2d 4c 91 68 df fe 78 39 eb 0f 27 4b d7 ae d9 31 39 a0 8d 9f 3d 6f de 62 25 98 bb b4 17 88 fe 35 a7 c0 fd 77 c9 c5 e7 48 fd fa e9 ca 63 7c 52 6f f9 21 71 c6 0c 68 53 37 98 7b f8 b2 c6 29 bd ea 27 24 a6 20 cd a8 55 ab a6 5c 78 61 8e 4e 03 3b a9 32 ba 53 60 90 1d Data Ascii: {O+y81y.]REy14D8(XiUPWpo[y)_/G`FJkq}\|;vIiiL#U\|>dm4X;4A5k1s~;T-Lhx9'K19=ob%5wHc\|Ro!qhS7{)'$ U\xaN;2S`
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 31 2f 6f 99 14 14 ae d6 91 16 22 39 bb 6d 15 10 ad f6 ed 8e 67 7a 18 3b 16 29 c1 6a 08 c1 e2 e2 54 07 40 4b c1 43 0f dd aa 17 44 a0 af c8 2e 88 32 46 8f 79 5b 1e 57 69 da 9a 35 eb cb fd 1a 54 bf 72 72 ba 48 ff 7e 17 eb 96 00 2b 8c fa ef 6b f2 ea ab 93 0e f8 61 6e 02 a2 05 3f 0b 3e 91 95 fb 14 d1 e7 37 73 f3 a5 50 19 f0 e5 89 07 52 eb e5 cb fd 5a c0 d0 68 6a b7 5f ab 6c 7a 88 65 17 c4 21 0c 2d 58 19 f0 af b2 85 d8 02 62 85 d1 30 d7 0f b8 d4 11 b1 42 39 fe f9 e7 df d1 7e 15 a2 8c 8a 7f 6e 86 5c dc b7 a7 5e 47 6f 05 a4 80 ff f8 c7 c8 03 95 46 b7 01 11 c5 7d 81 91 3b 56 66 d9 43 c4 57 ad 5e 2f df 7d b7 42 57 22 cb 03 d1 d7 a2 45 85 3a 22 c3 62 0f 34 9a da 21 3c 3d 9c 37 ef bb 0a 7f 2e 89 12 c3 28 4c 63 97 bb 7d 30 74 ef a9 27 ef 95 6b af ed e3 88 58 e1 ac da Data Ascii: 1/o"9mgz;)jT@KCD.2Fy[Wi5TrrH~+kan?>7sPRZhj_lze!-Xb0B9~n\^GoF};VfCW^/}BW"E:"b4!<=7.(Lc}0t'kX
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: ba 40 5f 45 1f 7d 6c ac de f5 87 12 bd 55 f0 6f ad ee c4 43 03 23 a2 2c af 1a ef 56 07 23 16 ef d8 e9 88 28 a0 61 f8 ea ab 2f 90 bf ab 2a 9f 9d 2d d6 38 02 f4 cd 37 8b 75 bb 84 13 91 5a 0a 80 a3 39 26 27 8c 55 c1 e7 9f 63 db f1 34 3d 99 d3 ce 04 49 88 d6 65 97 9d 2b 37 df 74 b9 34 6b 96 21 76 80 07 f5 93 c5 3d 81 48 75 bd 9c 16 62 6d 9a 15 30 a2 a6 aa c3 cf 55 11 12 2b 8c bf b6 23 56 a8 10 63 95 da 53 23 c6 39 d2 db 95 22 f0 2c 61 24 20 92 79 f9 e5 0f 64 f2 e4 99 b2 73 a7 bd b5 57 10 2d 4c 1c 40 d5 d1 ce d1 9e 5f 7f fd 4d 2f 3a b5 c2 c9 27 b5 77 64 6e 57 a2 68 79 5c 73 b1 02 22 4a 3b 51 2d d2 c0 90 58 45 db 69 1f 0e 2e 7a 9b 36 15 c9 98 31 6f cb 27 9f 7c 25 24 72 28 58 11 82 ab f3 33 cf be a1 9e 60 33 6d 57 d8 30 6e 04 4f fa db 6f bf d2 b2 68 61 7f e0 96 Data Ascii: @_E}lUoC#,V#(a/*-87uZ9&'Uc4=Ie+7t4k!v=Hubm0U+#VcS#9",a$ ydsW-L@_M/:'wdnWhy\s"J;Q-XEi.z61o'\|%$r(X3`3mW0nOoha
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: af 7e a8 1f 8f b2 20 62 7b fd b5 27 e4 ea ab cf 97 06 0d ec ad 6b 0b 81 c7 e1 be fb 9e 62 64 15 1b fc ea d5 35 2a 24 58 39 ea 4f 6b 03 c2 c9 21 20 d2 42 7a 88 0d 2d 88 8e aa 57 b7 3f 7b 0a a9 1b 22 8e 33 4e ef 2c 45 5b b6 c9 77 4b be 3f f0 39 b4 3f fc ac 22 a3 96 2d 8f 51 a2 d5 5e ac 80 e9 0d a8 18 1e a1 a2 ad 39 5f e7 27 54 b4 1a 35 6a 20 c3 87 0f 94 73 55 c5 d4 8e f9 fd fe ff 3e 93 f1 af 4e 52 8f c7 c1 51 23 56 b5 bd f0 fc 23 ba f2 78 d8 61 ce 1c 02 87 58 dd 7f ff 53 7a a8 df d6 ad 6c 6d 8c 01 f9 4a b0 c6 07 05 cb 97 71 9e fa 33 5b 88 63 40 b4 16 2c 58 a2 ae b4 bf e8 e1 7d 4e 88 16 d2 a2 7a f5 8e 54 91 56 b6 1c d5 ac b1 14 16 ae 3e 70 25 df bb 77 9f d4 a9 5d 4b 09 e4 71 96 a2 2c 80 6a dc 89 27 9e a0 c7 b7 e4 e5 2d 4b 48 7a 88 0a e9 e8 d1 0f cb 79 bd ff Data Ascii: ~ b{'kbd5*$X9Ok! Bz-W?{"3N,E[wK?9?"-Q^9_'T5j sU>NRQ#V#xaXSzlmJq3[c@,X}NzTV>p%w]Kq,j'-KHzy
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: f6 ab 34 a4 6d 56 4b cb c7 6c 48 e4 a0 bf ea f5 37 3e 92 a7 9e 1c 27 6f bf 33 55 57 05 89 0b 30 64 ac 98 45 73 43 1f 1e 2c 58 66 43 e4 21 fd 85 24 14 a4 25 38 1f b8 74 e9 4a d9 f7 db 7e 7d 18 39 3d fd 48 21 b1 01 bd 64 38 7b f8 dc 73 13 0e 14 41 88 4b 30 d3 1e 0f 19 ee a0 4c be 71 b4 f2 b1 4a ee 13 e2 0a d0 55 be 60 c1 52 d9 a4 52 c5 f4 7a 47 ea 21 7e b1 ec a9 4a 35 90 02 4e f9 64 86 1e 63 8c 83 d2 6c 59 70 23 cb ae 0b ff e8 50 57 d7 c8 9a 2e 5c fb e5 3a d0 bd dd ed 8c ce 72 fd f5 97 3a de 25 9e 8a 60 73 f7 1b 6f 7e a4 2b 81 05 05 ab 84 b8 92 5c 31 0b ba 87 df 70 e8 e5 da 97 81 16 f8 ae 42 5c 05 0c f9 c2 e5 ab 65 c5 8a b5 68 a4 53 95 c4 66 8e 1f 3d 49 05 70 02 e0 f5 d7 3f 56 51 d5 eb 7a 9b 0e 2a 82 c4 a5 18 e8 70 2f 9a 1a 7e d3 a1 82 15 ec c7 ea 2f c4 75 Data Ascii: 4mVKlH7>'o3UW0dEsC,XfC!$%8tJ~}9=H!d8{sAK0LqJU`RRzG!~J5NdclYp#PW.\:r:%`so~+\1pB\ehSf=Ip?VQz*p/~/u
2024-07-19 20:22:50 UTC	1369	IN	Data Raw: 83 b1 dc 77 55 16 9b 1e 56 08 e5 65 99 32 58 08 21 a4 2c 0e 9e 3f 76 76 07 b9 91 85 75 60 39 42 08 21 41 1c 8b ae 80 43 11 56 29 9c e4 40 08 09 c7 34 bb 8b 83 38 2b 58 98 97 65 08 0f 46 13 42 82 9b 9c 6d b6 31 1c f2 2d c5 71 d8 e6 40 08 31 94 af 1d e8 e4 b4 60 39 1c 61 01 36 93 12 92 f2 e8 e1 7c ce 8a 15 88 41 84 15 fa ce 1c f2 47 48 8a e2 a8 d1 1e 4e 0c 22 ac 52 cc 00 db 1c 08 49 45 1c 36 da c3 71 a0 d3 bd 22 8a fc e2 cb a8 a7 de e9 2a 84 90 d4 20 98 0a 4e 90 18 11 bb 08 0b 04 0e 1f 2a c1 f9 37 84 90 e4 c7 af 14 6b a4 c4 90 d8 0a 96 ee 80 37 af 13 42 48 f2 a3 fb 30 9d 37 da c3 89 61 4a 18 82 a9 21 21 49 0f 7a ae cc 82 98 37 8e c7 ae 4a 78 10 3c 1c 4d 48 12 e3 0f 1a ed b1 8d ae 40 8c 53 c2 10 4c 0d 09 49 5a f4 6b 3b f6 62 05 e2 90 12 86 60 6a 48 48 d2 61 Data Ascii: wUVe2X!,?vvu`9B!ACV)@48+XeFBm1-q@1`9a6\|AGHN"RIE6q"* N*7k7BH07aJ!!Iz7Jx<MH@SLIZk;b`jHHa
2024-07-19 20:22:50 UTC	227	IN	Data Raw: 6d 12 d1 a3 04 4a cc fc a0 71 ee cb 15 59 9a 2f c4 33 50 b0 3c 8d ae 36 66 ab e8 4b a5 8e d2 51 28 60 15 91 ab 9e e9 8b 18 45 79 1f 0a 56 d2 a1 d2 47 31 b2 c5 30 ce 2a 6d 99 c8 94 d4 c2 af fe ff 18 33 3c 43 47 52 14 a8 a4 82 82 95 f4 84 a2 30 5f 4e 69 14 96 99 44 bd 5f 7e 25 cc b9 2a 72 5a a4 df 97 3d b9 14 a7 e4 86 82 95 b2 68 2f 0c 3d 60 10 af 16 2a 22 c9 94 60 34 96 29 ee c2 af 23 26 43 8a 83 c2 e4 53 82 54 92 9b 8a 6b da 09 05 8b 94 8b 9e 38 a1 de 0c 15 9d f9 d2 c5 07 31 43 6b 85 51 b7 54 d8 24 f8 b9 50 bb 45 f8 fb 15 a1 cd ee f0 e8 c7 5f da 46 80 db 77 e8 f7 03 86 ba 2d a0 3e f6 a9 bf 4b 8a 29 4a a4 2c ff 0f 94 5a 14 65 a0 ce 81 b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: mJqY/3P<6fKQ(`EyVG10m3<CGR0_NiD_~%rZ=h/=`*"`4)#&CSTk81CkQT$PE_Fw->K)J,ZeIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49890	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:50 UTC	640	OUT	GET /api/public/content/4766441092f24c1d8d5cb65f084680c0?v=98bbab41 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:50 UTC	636	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:50 GMT Content-Type: image/svg+xml Content-Length: 1400 Connection: close CF-Ray: 8a5d6d064e758c53-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 434 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename="icon_Email Archive.svg"; filename*=utf-8''icon_Email%20Archive.svg ETag: "0x8DBEA833C35E29E" Last-Modified: Tue, 21 Nov 2023 11:15:57 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128418 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:50 UTC	733	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 31 30 30 34 31 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"> <defs> <style> .cls-1 { fill: #010041; stroke-width: 0px; } </style> </defs> <
2024-07-19 20:22:50 UTC	667	IN	Data Raw: 33 63 2d 2e 30 34 2d 31 2e 33 39 2d 2e 30 36 2d 32 2e 31 36 2d 2e 30 39 2d 32 2e 39 32 5a 6d 2d 36 2e 34 33 2c 38 2e 38 35 6c 2d 39 2e 36 31 2c 34 2e 35 33 2d 39 2e 36 31 2d 34 2e 35 33 2c 33 2e 31 34 2d 31 2e 32 37 2c 36 2e 34 38 2c 33 2e 30 35 2c 36 2e 34 38 2d 33 2e 30 35 2c 33 2e 31 34 2c 31 2e 32 37 5a 6d 2d 33 2e 33 31 2d 31 35 2e 38 38 6c 2d 33 2e 33 32 2c 31 2e 35 36 2d 2e 37 31 2e 33 34 2d 32 2e 32 37 2c 31 2e 30 37 2d 2e 34 32 2d 2e 31 39 2d 32 2e 35 37 2d 31 2e 32 32 2d 2e 31 33 2d 2e 30 35 2d 33 2e 32 2d 31 2e 35 31 2d 33 2e 33 2d 31 2e 35 35 2c 36 2e 35 2d 32 2e 36 34 2c 32 2e 36 39 2d 31 2e 30 39 2e 34 32 2d 2e 31 37 2c 32 2e 32 37 2e 39 33 2c 37 2e 33 34 2c 32 2e 39 37 2d 33 2e 33 31 2c 31 2e 35 35 5a 6d 2d 39 2e 36 38 2d 32 30 2e 37 33 6c Data Ascii: 3c-.04-1.39-.06-2.16-.09-2.92Zm-6.43,8.85l-9.61,4.53-9.61-4.53,3.14-1.27,6.48,3.05,6.48-3.05,3.14,1.27Zm-3.31-15.88l-3.32,1.56-.71.34-2.27,1.07-.42-.19-2.57-1.22-.13-.05-3.2-1.51-3.3-1.55,6.5-2.64,2.69-1.09.42-.17,2.27.93,7.34,2.97-3.31,1.55Zm-9.68-20.73l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49892	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	640	OUT	GET /api/public/content/ba203cf576844201a13385cc94eaf22d?v=2c1b7329 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:51 UTC	646	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:51 GMT Content-Type: image/svg+xml Content-Length: 2530 Connection: close CF-Ray: 8a5d6d0a2ac418bc-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 435 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename="icon_Security awareness.svg"; filename*=utf-8''icon_Security%20awareness.svg ETag: "0x8DBEA833CE12461" Last-Modified: Tue, 21 Nov 2023 11:15:58 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128420 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:51 UTC	723	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 31 30 30 34 31 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"> <defs> <style> .cls-1 { fill: #010041; stroke-width: 0px; } </style> </defs> <
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 34 2d 39 2e 35 34 2d 2e 34 37 2d 2e 38 32 2d 2e 39 34 2d 31 2e 37 37 2d 31 2e 35 33 2d 32 2e 35 39 5a 6d 2d 32 33 2e 37 34 2c 36 2e 32 34 63 31 2e 33 2d 34 2e 34 38 2c 35 2e 34 32 2d 37 2e 36 36 2c 31 30 2e 31 33 2d 37 2e 36 36 2c 33 2e 30 36 2c 30 2c 35 2e 37 37 2c 31 2e 33 2c 37 2e 36 36 2c 33 2e 33 2e 37 31 2e 37 31 2c 31 2e 33 2c 31 2e 35 33 2c 31 2e 37 37 2c 32 2e 34 37 2e 33 35 2e 35 39 2e 35 39 2c 31 2e 31 38 2e 37 31 2c 31 2e 38 38 2c 30 2c 30 2d 32 30 2e 32 36 2c 30 2d 32 30 2e 32 36 2c 30 5a 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 6d 35 38 2e 37 33 2c 32 36 2e 39 34 63 2d 36 2e 33 36 2c 30 2d 31 31 2e Data Ascii: 4-9.54-.47-.82-.94-1.77-1.53-2.59Zm-23.74,6.24c1.3-4.48,5.42-7.66,10.13-7.66,3.06,0,5.77,1.3,7.66,3.3.71.71,1.3,1.53,1.77,2.47.35.59.59,1.18.71,1.88,0,0-20.26,0-20.26,0Z"/> </g> <g> <g> <path class="cls-1" d="m58.73,26.94c-6.36,0-11.
2024-07-19 20:22:51 UTC	438	IN	Data Raw: 2e 31 2d 2e 35 39 2d 34 2e 33 31 2d 2e 38 32 2d 36 2e 35 32 2d 2e 38 32 73 2d 34 2e 34 32 2e 33 35 2d 36 2e 35 32 2e 38 32 63 2d 31 2e 31 36 2e 32 34 2d 32 2e 32 31 2e 37 31 2d 33 2e 32 36 2c 31 2e 31 38 2d 32 2e 32 31 2e 39 34 2d 34 2e 31 39 2c 32 2e 31 32 2d 35 2e 39 34 2c 33 2e 35 33 2d 31 2e 35 31 2c 31 2e 31 38 2d 32 2e 39 31 2c 32 2e 35 39 2d 34 2e 30 38 2c 34 2e 31 32 2d 31 2e 30 35 2c 31 2e 33 2d 31 2e 39 38 2c 32 2e 38 33 2d 32 2e 37 39 2c 34 2e 33 36 2d 2e 39 33 2c 31 2e 38 38 2d 31 2e 36 33 2c 33 2e 37 37 2d 32 2e 31 2c 35 2e 38 39 2d 2e 34 37 2c 31 2e 37 37 2d 2e 35 38 2c 33 2e 36 35 2d 2e 35 38 2c 35 2e 36 35 76 32 2e 39 34 68 35 30 2e 36 35 76 2d 32 2e 39 34 63 30 2d 31 30 2e 36 2d 36 2e 34 2d 31 39 2e 36 37 2d 31 35 2e 36 2d 32 33 2e 35 36 Data Ascii: .1-.59-4.31-.82-6.52-.82s-4.42.35-6.52.82c-1.16.24-2.21.71-3.26,1.18-2.21.94-4.19,2.12-5.94,3.53-1.51,1.18-2.91,2.59-4.08,4.12-1.05,1.3-1.98,2.83-2.79,4.36-.93,1.88-1.63,3.77-2.1,5.89-.47,1.77-.58,3.65-.58,5.65v2.94h50.65v-2.94c0-10.6-6.4-19.67-15.6-23.56

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49893	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	640	OUT	GET /api/public/content/6737d53c3d2a40dd828cc52fd9f972fa?v=df36f5b2 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:51 UTC	649	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:51 GMT Content-Type: image/svg+xml Content-Length: 1470 Connection: close CF-Ray: 8a5d6d0a2932c354-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 95 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_protect-communications.svg; filename*=utf-8''icon_protect-communications.svg ETag: "0x8DBFBBE494840FF" Last-Modified: Wed, 13 Dec 2023 09:31:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 130380 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:51 UTC	720	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 22 20 68 65 69 67 68 74 3d 22 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 2e 33 34 34 37 32 20 31 36 2e 38 39 37 34 43 34 2e 33 34 34 37 32 20 39 2e 35 31 34 34 20 31 30 2e 33 39 34 32 20 33 2e 35 20 31 37 2e 39 32 32 34 20 33 2e 35 43 32 35 2e 34 30 34 37 20 33 2e 35 20 33 31 2e 35 20 39 2e 35 31 30 30 31 20 33 31 2e 35 20 31 36 2e 38 35 36 36 43 33 31 2e 35 20 32 34 2e 32 33 39 36 20 32 35 2e Data Ascii: <svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M4.34472 16.8974C4.34472 9.5144 10.3942 3.5 17.9224 3.5C25.4047 3.5 31.5 9.51001 31.5 16.8566C31.5 24.2396 25.
2024-07-19 20:22:51 UTC	750	IN	Data Raw: 69 6c 6c 3d 22 23 30 31 30 30 34 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 32 35 35 38 20 32 33 2e 37 31 38 37 48 31 31 2e 30 35 30 38 56 31 33 2e 39 31 35 37 48 32 34 2e 32 31 34 34 4c 32 34 2e 32 35 35 38 20 32 33 2e 37 31 38 37 5a 4d 31 32 2e 33 33 34 20 32 32 2e 34 35 32 34 48 32 32 2e 39 33 31 32 56 31 35 2e 32 32 32 37 48 31 32 2e 33 33 34 56 32 32 2e 34 35 32 34 5a 22 20 66 69 6c 6c 3d 22 23 30 31 30 30 34 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 34 34 37 35 20 31 34 2e 39 37 37 37 56 31 31 2e 39 35 35 31 43 32 30 2e 34 34 37 35 20 31 30 2e 34 34 33 38 20 31 39 2e 32 30 35 36 20 39 2e 32 31 38 34 31 20 31 37 2e 36 37 34 20 39 2e 32 31 38 34 31 43 31 36 2e 31 34 32 34 20 39 2e 32 31 38 34 31 20 31 34 2e 39 30 30 35 20 31 30 Data Ascii: ill="#010041"/><path d="M24.2558 23.7187H11.0508V13.9157H24.2144L24.2558 23.7187ZM12.334 22.4524H22.9312V15.2227H12.334V22.4524Z" fill="#010041"/><path d="M20.4475 14.9777V11.9551C20.4475 10.4438 19.2056 9.21841 17.674 9.21841C16.1424 9.21841 14.9005 10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49895	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	405	OUT	GET /api/public/content/d0635f650d1f47db87d21f2928042499?v=ce4369d8 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:51 UTC	616	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:51 GMT Content-Type: image/png Content-Length: 290275 Connection: close CF-Ray: 8a5d6d0a4b5941e9-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 435 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=jointheteam.png; filename*=utf-8''jointheteam.png ETag: "0x8DBDBA5FD5DC282" Last-Modified: Thu, 02 Nov 2023 13:16:56 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 107637 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:51 UTC	753	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ef 00 00 01 22 08 02 00 00 00 5f 9d cd f0 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 e5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDR"_pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rd
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 33 2d 31 31 2d 30 32 54 31 35 3a 31 35 3a 31 35 2b 30 32 3a 30 30 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 62 39 35 61 33 35 65 2d 32 38 61 63 2d 34 37 64 35 2d 61 62 31 39 2d 32 65 63 31 37 38 66 30 39 64 36 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 62 39 35 61 33 35 65 2d 32 38 61 63 2d 34 37 64 35 2d 61 62 31 39 2d 32 65 63 31 37 38 66 30 39 64 36 39 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 62 39 35 61 33 35 65 2d 32 38 61 63 2d 34 37 64 35 2d 61 62 31 39 Data Ascii: 3-11-02T15:15:15+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7b95a35e-28ac-47d5-ab19-2ec178f09d69" xmpMM:DocumentID="xmp.did:7b95a35e-28ac-47d5-ab19-2ec178f09d69" xmpMM:OriginalDocumentID="xmp.did:7b95a35e-28ac-47d5-ab19
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 5b 98 aa 68 25 ad 7e af a7 c3 38 d2 81 52 1a 04 7a 4f 08 6c 1d 11 91 f7 ce 7a 6f ac 71 ce 39 67 9d ad 9d b3 b6 ae 9d 31 ce 56 ce d6 64 0d 7b 67 ad 51 5c db 2a af 8b b2 28 8a c9 6c b9 48 8b 69 05 8e 58 e9 b0 a3 d0 30 13 93 64 70 de 39 e7 44 10 46 fd f5 ce 68 6b b0 b6 de ef 0f ba 49 4b 2a e9 9c 5b 2c d3 c3 a3 e3 77 de 7c e3 cd ef 7d 6b 7a 7e e2 8d 43 40 a1 35 0a b1 ba a8 00 00 80 80 cc 84 42 08 a9 98 81 c8 93 35 4c c4 c0 00 d8 7c 0b 0a c4 30 ee 0e 36 b7 77 ae ed 5c bd d9 5e 5b d3 41 10 45 51 14 45 93 f1 78 72 7a 72 7a f0 58 87 e1 60 7d ab d5 e9 ae 6f 6e 26 49 1c 05 61 a8 35 0a 31 9d cd f6 f7 1f c7 71 9c e8 c0 db fa e8 de db 1f 7d f8 0e 03 32 b0 73 d6 39 4f de 13 79 62 62 ef 89 08 98 01 00 85 6c 2e 28 c0 c5 13 23 04 22 0a 21 50 4a 21 94 10 42 28 a5 a5 d4 4a Data Ascii: [h%~8RzOlzoq9g1Vd{gQ\(lHiX0dp9DFhkIK[,w\|}kz~C@5B5L\|06w\^[AEQExrzrzX`}on&Ia51q}2s9Oybbl.(#"!PJ!B(J
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 0a 82 a0 ae 8a d9 e4 7c 31 9f 11 33 33 4d 66 93 d9 74 4c ce 7d 70 7a ce 27 27 cc c8 c0 4c c4 cd 17 00 30 cc 4f 4e 56 0d 12 01 05 a2 90 02 11 01 44 a8 a4 92 cd 7b 17 42 04 61 14 87 b1 92 52 49 15 85 51 56 64 93 d9 d4 98 9a bc 6f ee 73 46 00 6a 7a 9e 50 5a 77 92 96 46 ee 68 79 ad 1b ed 0e 07 e7 b5 9d e4 c5 12 11 ab fa 64 3c 49 97 65 51 3b a1 b4 64 41 44 c6 d9 30 8c 14 00 7a d7 e9 6d 28 a5 1f 3e 7e fc e0 de 7b f7 ee bd 5b d7 75 18 44 32 8c a4 d4 52 29 6b ed 78 7a 56 d6 86 bc f3 ce 92 f7 e9 6c 06 00 cc 24 a4 6c b5 3a ed 40 f6 93 98 88 c7 69 71 34 99 61 7b a0 55 20 85 04 81 cc c4 44 cd ad 83 52 00 01 11 7b 4f ed a4 75 f9 da cd ed cb 57 f7 f6 2e 55 75 75 7e 3e 36 75 8d 08 3b 9b bb 69 91 7a 63 89 89 ad f5 60 99 01 11 64 10 a2 10 de 19 76 44 44 64 6b 87 f5 64 3e Data Ascii: \|133MftL}pz''L0ONVD{BaRIQVdosFjzPZwFhyd<IeQ;dAD0zm(>~{[uD2R)kxzVl$l:@iq4a{U DR{OuW.Uuu~>6u;izc`dvDDdkd>
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 00 03 35 2b 18 0a 48 d3 a5 75 6e bd 95 fc c4 ed 4b 5d 9b 9d a8 ce bb 69 75 56 59 c7 0c 52 a2 50 8e 3c 78 cf 0c 44 54 19 43 44 05 63 01 0a bb 23 51 97 54 97 67 d3 49 3e 9f 74 46 23 96 81 b3 6e b6 28 3e ba 7f 3f cb 0b a1 02 70 cc d0 ec 77 0c 00 c4 d8 f4 13 cb d4 74 18 2d c5 e7 7b d1 5e 27 b0 c6 2d ad df 7f f3 dd 6e a7 c7 ed 7e 7b b4 13 77 d7 3c 08 f6 be b6 56 28 72 ce 39 d9 7a ee f5 57 e2 4e 7f b2 48 c7 8f 92 a8 a3 9f e3 49 e1 fd 37 3e 78 72 96 97 9b e3 79 e7 ee b7 c6 8f ef 42 55 3c fd f0 83 a3 69 96 2d 96 bf f3 cf fe 1b c1 38 c9 d2 b2 b7 6d db 23 12 5a 20 32 5d 8c 8a cd a7 03 28 a5 6a 3a dd 0a 31 40 5c 95 1e ef 85 94 3a 0c 98 fc 62 b1 9c 65 85 b7 5e 08 bc b4 d6 ff b9 1f fc d4 8b af bc da 1e 44 81 16 89 d4 c1 f6 fa 3b 47 6d 9b ce ad b5 0c 14 68 49 de 55 c6 Data Ascii: 5+HunK]iuVYRP<xDTCDc#QTgI>tF#n(>?pwt-{^'-n~{w<V(r9zWNHI7>xryBU<i-8m#Z 2](j:1@\:be^D;GmhIU
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 98 a6 d5 78 51 cc 96 45 59 33 4a 44 45 52 0a 29 a4 13 cc 64 ea f9 b9 cf 17 e5 f4 74 b6 b6 3d 18 6d 0c 07 83 6e bb bd b3 b1 b6 d6 ef 5d b9 72 e5 d6 0b 2f 3d fa f8 83 f7 df 7d f3 e9 e1 93 2a 4d 81 9c 90 5a 68 dd f0 0d 17 73 f9 b3 39 64 b5 0a ad 16 55 a9 a4 d6 5a 2a 29 e5 64 72 e6 6c bd b9 b5 b5 de eb 6c ad af ad 8d 86 4a 29 67 ad 42 f4 de 97 c6 68 5b 3d 35 d5 72 3a 2e ea 6a ef c6 73 eb 6b 6b 2d ad 9e 7f f9 f5 ce e3 8f 84 50 52 0a 25 a5 8e 12 81 48 cc c0 dc 60 5b ce 39 67 2c 00 34 c5 d4 13 79 67 1b 14 02 1b 32 04 41 4a 4d 44 5a 07 dc d4 7a 44 00 20 ef 9d 31 44 e4 9c 2b cb 1c 01 cf c7 27 c8 58 d5 e5 6c 3e a9 ca ec 9c 38 08 03 ad 35 00 10 80 27 20 00 67 ac 73 b6 21 a5 98 89 89 19 80 9b 89 7b 85 38 21 36 d8 08 62 73 5f 09 25 85 54 52 ca a6 4e 85 61 18 2a e5 ad Data Ascii: xQEY3JDER)dt=mn]r/=}MZhs9dUZ)drllJ)gBh[=5r:.jskk-PR%H`[9g,4yg2AJMDZzD 1D+'Xl>85' gs!{8!6bs_%TRNa*
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 93 32 d7 82 d7 db 2d 22 5a 38 4f de 02 31 a3 67 f2 ac b4 54 aa 99 30 d9 b3 b7 ce 79 7f b6 58 2e f3 a2 b2 26 35 ee c3 49 3e cb cb 65 c3 3a ae b6 67 f6 75 8d 02 85 0e e2 30 5a df dc 61 72 47 87 4f 84 94 cc 74 b2 7f f0 e4 fe c7 e9 72 31 5b 2e ea aa 44 21 c9 21 33 31 a0 90 ca 13 30 33 3b d7 60 16 52 2b 10 52 08 cf ce 97 59 da 74 32 21 15 42 83 00 13 59 bf 98 9c c2 8a af 07 66 28 8c 21 e7 c8 59 42 19 c6 1d f5 b9 17 9e 7b e9 ce 8b 7b 3b 3b ed 4e 2f 69 b5 07 bd fe 9d e7 9e ff 07 ff 9b ff c4 13 a3 40 dd 5d bf 7d a3 55 e4 e9 93 93 93 e5 78 a2 24 9e 2d d2 a3 f3 c9 02 82 f3 6a b1 1e 2a 74 0e 9d 69 85 ea 4b 5b 83 5b bd 64 ea a8 f6 04 88 e4 fc c2 fa 7e 18 1a 4f a5 b1 c4 8c b0 22 36 e2 28 8a 93 f6 62 31 7f 86 cd 5c f0 dc cf d6 5e 00 00 26 0a a2 48 20 9a ba 8c 95 ea 2a Data Ascii: 2-"Z8O1gT0yX.&5I>e:gu0ZarGOtr1[.D!!3103;`R+RYt2!BYf(!YB{{;;N/i@]}Ux$-jtiK[[d~O"6(b1\^&H
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 1f f6 11 f1 0f df fe ee 83 83 a7 ec 28 94 c2 01 d4 d6 7b 57 93 77 e4 3d 03 33 b1 b3 18 46 a1 40 68 45 49 eb 95 1f bd f3 ca ab 67 27 47 65 91 07 2a 22 22 04 f0 e4 1b d6 8e 3c af b4 9b ff a3 af 06 73 44 86 e5 6c 32 4d 53 4f 44 4c 81 50 2f 6d 0d fa a3 f5 d9 7c f2 ce db 6f 7f fd a3 27 d6 d9 1f ba b6 fd d9 28 ce 4f 0e fe f8 ed 7b d6 82 54 52 2a 51 3a 6b 3c ca d5 6a cd 0c a8 a5 f2 e4 51 36 db 0a f0 6a 51 f2 02 25 a0 90 a2 61 b0 84 44 41 80 44 84 42 30 33 91 17 26 65 a1 39 f3 f7 be fe 47 8f ee be f7 ee 2b af be f2 e2 9d d7 9e bf 9d 44 2d cf 44 9e 95 92 08 2c 1d 0a 81 da 2b 27 65 a0 03 47 5e 79 67 8d 12 ca 29 a5 a4 d3 64 0d 10 11 79 22 b2 ce 7a 67 41 06 52 53 3b b6 61 d2 69 77 8b 5e 3f 9d 2f 96 f3 d9 3c cb cb ca 81 16 80 28 2c a2 90 28 50 92 a9 33 73 56 e6 cb 6c Data Ascii: ({Ww=3F@hEIg'Ge""<sDl2MSODLP/m\|o'(O{TRQ:k<jQ6jQ%aDADB03&e9G+D-D,+'eG^yg)dy"zgARS;aiw^?/<(,(P3sVl
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 70 5e bb f9 6c 96 66 f9 72 3e 2f b2 65 96 a6 69 b6 cc 8b bc ae ab a2 aa 2a 53 ad 40 12 22 72 ae c1 b2 89 f9 02 d0 7f 06 42 5e c8 53 11 25 22 68 89 88 28 85 94 4a 4a 29 84 44 29 02 1d 4a 04 6b 0c 33 21 73 80 90 68 39 08 c3 b5 50 0e 3a c9 ce e5 4b 83 4b 37 6a dd da 3c 39 b9 7b f7 ad 87 47 f7 11 28 8a 83 ce b0 bf b1 b9 1d 08 64 e6 f3 59 74 76 52 55 65 b6 58 9c a2 d0 08 e8 bc 15 88 2a 0c a3 38 0e e3 78 30 18 29 ad 10 38 5b 88 aa 2a b3 b2 74 95 91 c6 26 49 d2 1b 6e 0f f6 ae 87 ed d6 6b 9f fb fc b5 2b 57 5a 51 9c c4 d1 a0 db 69 85 91 94 f2 d9 ba 2d c4 aa 66 e3 ea 09 7f c6 40 23 30 af 8c 2a cc 7b c3 d1 17 bf f8 e5 7f fb ab ff 2a d6 01 03 b0 77 4d 53 44 14 3a 0a 07 dd 01 91 5f 64 0b ef 1c 53 41 de 0b 21 88 69 77 73 fb d2 8d 5b 47 c7 27 b5 35 42 88 46 0c 2a 94 22 Data Ascii: p^lfr>/eiS@"rB^S%"h(JJ)D)Jk3!sh9P:KK7j<9{G(dYtvRUeX8x0)8[t&Ink+WZQi-f@#0{wMSD:_dSA!iws[G'5BF"
2024-07-19 20:22:51 UTC	1369	IN	Data Raw: 1b 67 95 6a f7 0f 7c 78 f8 e1 c7 d3 c9 f9 6c 3e f1 de 6d ac 6f 75 c3 f8 d1 a3 8f 9e ec 3f 6c 07 3a 2d ab 15 6a 7b 51 73 6b 6b 9d d6 cc a0 04 ea 46 af 00 d0 0e 42 54 7c 90 57 45 6d 4b c7 44 14 6a f5 ea e6 7a 37 d0 59 59 68 a2 ae 44 2f e5 d3 65 d1 81 85 4a 4b 53 9b 46 a5 74 a1 d6 58 01 d7 17 74 28 af 45 f1 76 2c af db fa e5 4b a3 56 7f b4 2c ef bd 35 59 32 03 01 7c 90 99 c7 69 fd e3 99 19 4d 4b a2 a7 ad 76 12 46 41 98 44 e7 4b 73 58 d6 3a 08 5f fd fc 0f fe ea af fc ca a3 f7 be 8d 52 08 1d 34 6a 3e 72 b6 36 75 23 4d ab 8b 34 6a 75 e2 30 a9 e3 8e cd e6 cc 84 e4 51 28 90 c8 e4 bd 27 ad 51 6b dd 8e c2 24 0c 27 59 e6 bd 07 60 ef 61 a8 c4 46 12 3c f4 36 ab d9 3b 5f 42 4d de 03 a2 29 ab f7 df f8 93 2f fe c8 8f 6f 0e fb 20 f8 c9 c9 d9 f7 bf fb f5 50 c8 51 92 54 25 Data Ascii: gj\|xl>mou?l:-j{QskkFBT\|WEmKDjz7YYhD/eJKSFtXt(Ev,KV,5Y2\|iMKvFADKsX:_R4j>r6u#M4ju0Q('Qk$'Y`aF<6;_BM)/o PQT%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49896	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	640	OUT	GET /api/public/content/088d3c3cdc384092b7542a48ec783d57?v=183f3895 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:51 UTC	639	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:51 GMT Content-Type: image/svg+xml Content-Length: 607 Connection: close CF-Ray: 8a5d6d0a59da1927-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 435 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_protect-your-data.svg; filename*=utf-8''icon_protect-your-data.svg ETag: "0x8DBFBBE49D10BF1" Last-Modified: Wed, 13 Dec 2023 09:31:30 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 130384 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:51 UTC	607	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 22 20 68 65 69 67 68 74 3d 22 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 37 2e 34 30 37 35 20 32 31 2e 38 36 34 36 4c 32 31 2e 31 32 33 38 20 31 38 2e 31 34 35 33 4c 32 32 2e 32 36 32 36 20 31 39 2e 33 30 36 39 4c 31 37 2e 34 30 32 31 20 32 34 2e 31 37 31 35 4c 31 34 2e 34 30 35 32 20 32 31 2e 31 34 33 36 4c 31 35 2e 35 34 39 35 20 31 39 2e 39 38 37 34 4c 31 37 2e 34 30 37 35 20 32 31 2e 38 36 Data Ascii: <svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M17.4075 21.8646L21.1238 18.1453L22.2626 19.3069L17.4021 24.1715L14.4052 21.1436L15.5495 19.9874L17.4075 21.86

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49897	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	640	OUT	GET /api/public/content/42614e9cf56247afa6fa9d9baf3a7d8a?v=4e5ac00d HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:51 UTC	650	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:51 GMT Content-Type: image/svg+xml Content-Length: 1398 Connection: close CF-Ray: 8a5d6d0aa9c0426d-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 435 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_protect-your-employees.svg; filename*=utf-8''icon_protect-your-employees.svg ETag: "0x8DBFBBE498D5624" Last-Modified: Wed, 13 Dec 2023 09:31:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 130382 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:51 UTC	719	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 22 20 68 65 69 67 68 74 3d 22 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 32 2e 34 35 34 32 20 31 36 2e 39 30 37 37 43 32 32 2e 34 35 34 32 20 31 39 2e 36 34 33 36 20 32 30 2e 32 33 36 33 20 32 31 2e 38 36 31 36 20 31 37 2e 35 30 30 34 20 32 31 2e 38 36 31 36 43 31 34 2e 37 36 34 34 20 32 31 2e 38 36 31 36 20 31 32 2e 35 34 36 35 20 31 39 2e 36 34 33 36 20 31 32 2e 35 34 36 35 20 31 36 2e 39 30 Data Ascii: <svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M22.4542 16.9077C22.4542 19.6436 20.2363 21.8616 17.5004 21.8616C14.7644 21.8616 12.5465 19.6436 12.5465 16.90
2024-07-19 20:22:51 UTC	679	IN	Data Raw: 35 30 30 34 20 32 36 2e 38 31 35 34 43 38 2e 36 30 38 36 20 32 36 2e 38 31 35 34 20 31 2e 34 30 30 33 39 20 31 38 2e 34 37 32 31 20 31 2e 34 30 30 33 39 20 31 36 2e 33 38 36 32 43 31 2e 34 30 30 33 39 20 31 36 2e 33 38 36 32 20 38 2e 36 30 38 36 20 37 20 31 37 2e 35 30 30 34 20 37 5a 4d 32 39 2e 35 36 33 34 20 31 37 2e 33 31 38 39 43 32 38 2e 38 37 31 37 20 31 38 2e 30 33 30 31 20 32 37 2e 39 38 33 37 20 31 38 2e 38 37 32 35 20 32 36 2e 39 34 32 37 20 31 39 2e 37 31 30 39 43 32 34 2e 32 33 36 20 32 31 2e 38 39 31 20 32 30 2e 38 39 38 31 20 32 33 2e 37 31 39 32 20 31 37 2e 35 30 30 34 20 32 33 2e 37 31 39 32 43 31 34 2e 30 30 35 34 20 32 33 2e 37 31 39 32 20 31 30 2e 36 34 37 38 20 32 32 2e 30 35 37 34 20 38 2e 30 35 38 30 35 20 31 39 2e 39 37 31 37 43 36 Data Ascii: 5004 26.8154C8.6086 26.8154 1.40039 18.4721 1.40039 16.3862C1.40039 16.3862 8.6086 7 17.5004 7ZM29.5634 17.3189C28.8717 18.0301 27.9837 18.8725 26.9427 19.7109C24.236 21.891 20.8981 23.7192 17.5004 23.7192C14.0054 23.7192 10.6478 22.0574 8.05805 19.9717C6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49898	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	405	OUT	GET /api/public/content/d0b858c3a1444fa29fc6e22f39022a86?v=60b50f99 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:51 UTC	648	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:51 GMT Content-Type: image/svg+xml Content-Length: 1360 Connection: close CF-Ray: 8a5d6d0aafebc3f5-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 435 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_AdvancedEmailSecurity.svg; filename*=utf-8''icon_AdvancedEmailSecurity.svg ETag: "0x8DBEA833BEDC0CB" Last-Modified: Tue, 21 Nov 2023 11:15:57 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128416 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:51 UTC	721	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 31 30 30 34 31 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"> <defs> <style> .cls-1 { fill: #010041; stroke-width: 0px; } </style> </defs> <
2024-07-19 20:22:51 UTC	639	IN	Data Raw: 31 31 2e 38 32 2d 31 31 2e 33 31 2d 31 33 2e 36 36 2d 31 39 2e 33 36 2d 31 2e 38 33 2d 37 2e 39 35 2d 2e 34 31 2d 31 36 2e 33 31 2c 33 2e 39 37 2d 32 33 2e 32 34 2c 33 2e 36 37 2d 35 2e 37 31 2c 38 2e 38 37 2d 31 30 2e 30 39 2c 31 35 2e 31 39 2d 31 32 2e 34 33 6c 31 2e 38 33 2c 34 2e 37 39 63 2d 35 2e 33 2c 32 2e 30 34 2d 39 2e 36 38 2c 35 2e 36 31 2d 31 32 2e 37 34 2c 31 30 2e 34 2d 33 2e 36 37 2c 35 2e 38 31 2d 34 2e 38 39 2c 31 32 2e 37 34 2d 33 2e 33 36 2c 31 39 2e 34 37 2c 31 2e 36 33 2c 36 2e 37 33 2c 35 2e 37 31 2c 31 32 2e 34 33 2c 31 31 2e 35 32 2c 31 36 2e 31 2c 31 32 2e 30 33 2c 37 2e 36 34 2c 32 38 2e 30 33 2c 33 2e 39 37 2c 33 35 2e 36 37 2d 38 2e 30 35 2c 33 2e 36 37 2d 35 2e 38 31 2c 34 2e 38 39 2d 31 32 2e 37 34 2c 33 2e 33 36 2d 31 39 2e Data Ascii: 11.82-11.31-13.66-19.36-1.83-7.95-.41-16.31,3.97-23.24,3.67-5.71,8.87-10.09,15.19-12.43l1.83,4.79c-5.3,2.04-9.68,5.61-12.74,10.4-3.67,5.81-4.89,12.74-3.36,19.47,1.63,6.73,5.71,12.43,11.52,16.1,12.03,7.64,28.03,3.97,35.67-8.05,3.67-5.81,4.89-12.74,3.36-19.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49899	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	405	OUT	GET /api/public/content/4766441092f24c1d8d5cb65f084680c0?v=98bbab41 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:51 UTC	636	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:51 GMT Content-Type: image/svg+xml Content-Length: 1400 Connection: close CF-Ray: 8a5d6d0b09ff43f4-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 435 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename="icon_Email Archive.svg"; filename*=utf-8''icon_Email%20Archive.svg ETag: "0x8DBEA833C35E29E" Last-Modified: Tue, 21 Nov 2023 11:15:57 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128418 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:51 UTC	733	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 31 30 30 34 31 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"> <defs> <style> .cls-1 { fill: #010041; stroke-width: 0px; } </style> </defs> <
2024-07-19 20:22:51 UTC	667	IN	Data Raw: 33 63 2d 2e 30 34 2d 31 2e 33 39 2d 2e 30 36 2d 32 2e 31 36 2d 2e 30 39 2d 32 2e 39 32 5a 6d 2d 36 2e 34 33 2c 38 2e 38 35 6c 2d 39 2e 36 31 2c 34 2e 35 33 2d 39 2e 36 31 2d 34 2e 35 33 2c 33 2e 31 34 2d 31 2e 32 37 2c 36 2e 34 38 2c 33 2e 30 35 2c 36 2e 34 38 2d 33 2e 30 35 2c 33 2e 31 34 2c 31 2e 32 37 5a 6d 2d 33 2e 33 31 2d 31 35 2e 38 38 6c 2d 33 2e 33 32 2c 31 2e 35 36 2d 2e 37 31 2e 33 34 2d 32 2e 32 37 2c 31 2e 30 37 2d 2e 34 32 2d 2e 31 39 2d 32 2e 35 37 2d 31 2e 32 32 2d 2e 31 33 2d 2e 30 35 2d 33 2e 32 2d 31 2e 35 31 2d 33 2e 33 2d 31 2e 35 35 2c 36 2e 35 2d 32 2e 36 34 2c 32 2e 36 39 2d 31 2e 30 39 2e 34 32 2d 2e 31 37 2c 32 2e 32 37 2e 39 33 2c 37 2e 33 34 2c 32 2e 39 37 2d 33 2e 33 31 2c 31 2e 35 35 5a 6d 2d 39 2e 36 38 2d 32 30 2e 37 33 6c Data Ascii: 3c-.04-1.39-.06-2.16-.09-2.92Zm-6.43,8.85l-9.61,4.53-9.61-4.53,3.14-1.27,6.48,3.05,6.48-3.05,3.14,1.27Zm-3.31-15.88l-3.32,1.56-.71.34-2.27,1.07-.42-.19-2.57-1.22-.13-.05-3.2-1.51-3.3-1.55,6.5-2.64,2.69-1.09.42-.17,2.27.93,7.34,2.97-3.31,1.55Zm-9.68-20.73l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49894	13.107.246.60	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	454	OUT	GET /dist/2fabfab087ce242c96a0.svg HTTP/1.1 Host: www.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mimecast#lang=en; ASP.NET_SessionId=fdmghoggbbgflb35zfa3aszp; shell#lang=en
2024-07-19 20:22:51 UTC	734	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:51 GMT Content-Type: image/svg+xml Content-Length: 505 Connection: close Cache-Control: public, max-age=31536000 ETag: "1dacc8651264ef9" Last-Modified: Tue, 02 Jul 2024 13:47:02 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:30d6665f-55ad-49ae-b42d-a3bcbfb24540 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(self), camera=(), microphone=() x-azure-ref: 20240719T202251Z-15b94bb6ff9hrrl62bkz5rrpq000000008fg00000000hqy7 x-fd-int-roxy-purgeid: 71368145 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-19 20:22:51 UTC	505	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49902	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	650	OUT	GET /api/public/content/ee526f84c5ac42b1a8b11c26f7067787?v=aa4c8287&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	660	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 5673 Connection: close CF-Ray: 8a5d6d0efdcf32fa-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_AdOn_IncidentResponse.png; filename*=utf-8''icon_WCircle_AdOn_IncidentResponse.png ETag: "0x8DC1745B8A43C8A" Last-Modified: Wed, 17 Jan 2024 10:18:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 126909 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 15 db 49 44 41 54 78 9c ed 9d 3d 6c 1c c7 15 c7 67 18 17 01 6c 40 97 ca ea 74 4a 54 a5 e1 29 45 60 40 01 78 54 63 75 94 ac 54 69 4e e7 22 85 53 90 54 61 57 31 c5 b8 b2 0b 91 2c 6c 04 2e 7c 64 93 2a 0a c9 54 56 13 9d 80 18 48 10 c0 3a 56 49 00 39 3a 21 8d d2 24 2b 40 01 8c 34 13 fc cf b3 f4 e9 78 1f 3b b3 b3 bb ef cd be 1f 40 9c 28 91 e2 f1 6e fe f3 3e e6 bd 37 4a 09 82 90 0b 9d ef db 85 3c 18 63 5a 4a a9 c6 d8 5f b5 33 7e eb 40 29 95 a4 9f 68 ad fb f2 4e 54 87 88 a8 78 91 34 95 52 78 3c 67 1f 1b f6 b1 08 86 f6 03 02 3b 49 3f 17 91 15 8b 88 28 10 c6 98 b6 15 c7 b2 7d 2c 4a 28 be 0c ad 05 3b Data Ascii: PNGIHDRR:WpHYs.#.#x?vIDATx=lgl@tJT)E`@xTcuTiN"STaW1,l.\|d*TVH:VI9:!$+@4x;@(n>7J<cZJ_3~@)hNTx4Rx<g;I?(},J(;
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: d9 a9 80 52 0e f6 ef ab ed ed 03 15 31 b7 50 7b a7 08 a1 09 09 88 d4 0b 43 1d 08 07 02 9a 15 0b c1 1a 75 6e bd a9 22 e6 88 ca c1 6c e5 22 12 01 85 17 50 8d 84 34 50 4a ad 56 2d a4 4a 45 24 02 2a 4e 40 29 87 87 1f a8 b5 eb 57 54 c4 0c aa 16 52 65 22 12 01 15 2f 20 d0 68 bc a6 fe f0 e0 ae 6a b5 2e a9 88 19 54 29 a4 4a 12 0b 22 20 77 8e 8f be 70 16 d0 78 f6 0e 49 88 d8 9b fd 54 45 94 2e 22 11 90 3b c8 b8 dd b8 f1 4b ef 03 55 b8 73 cd e6 79 15 39 ad aa b2 76 a5 ba 73 f6 d4 19 e7 40 82 83 80 f2 1c a2 22 b1 10 f1 b9 d1 34 f6 cb 3e 47 5a aa a0 91 4e 28 49 40 eb 1b 37 eb 26 a0 f4 1c e9 4e 74 96 c8 ce bc 7e 24 07 a9 e5 09 a8 06 e9 ed 45 74 cb 1a d1 a5 4b 2c 26 95 5a b8 8c 6c 6e 7e ac f6 76 ef 79 bf e6 22 a0 53 2e 97 51 fd 5d 86 88 10 03 91 ad c0 a5 06 ac 0f ac 90 Data Ascii: R1P{Cun"l"P4PJV-JE$*N@)WTRe"/ hj.T)J" wpxITE.";KUsy9vs@"4>GZN(I@7&Nt~$EtK,&Zln~vy"S.Q]
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: dd f9 cc 44 a0 36 ae 8a 2b d8 88 7c 92 31 5d 7e d9 ba 86 bd 9c c1 5d 44 f6 1b c9 b6 7e a3 d9 cc 35 0e 42 cc 20 02 0a 07 5c b3 76 db ed f8 10 c9 1f 86 9d b1 6b 5e ee 1c 75 57 0e 6e 9c 4b 36 2e b2 be 17 d6 99 d1 46 8e 59 7d 14 5d ba 25 8e ae 1c fc 71 d7 74 36 0e 0d 45 40 e1 69 d8 c3 5d 9f 16 fd 58 5c ba 25 6e ae 9c cf 1b 00 97 83 db 61 2a 27 56 da cb ce af af cf 46 48 d5 a5 9b 65 89 56 14 51 d0 40 e6 92 4c c0 4e 89 39 00 42 f1 f1 51 d3 b1 d8 94 59 6c d4 76 15 11 49 57 6e d4 85 e9 78 ab 76 88 09 3c 42 36 7a 8e 6e 1d 33 6b d4 34 c6 b4 32 89 c8 d6 ca 91 ac 50 70 1d fb 84 18 48 dc b8 72 dd ba 8e e3 01 76 0c d6 48 73 6a 01 77 cd c8 31 3c d8 63 cf 70 f8 6c f4 3e b9 80 81 93 4c 32 75 53 5b c7 97 b8 c4 43 b0 42 2e 02 4a 2f fe 15 ca a5 89 71 62 8e 3d 48 94 67 90 67 Data Ascii: D6+\|1]~]D~5B \vk^uWnK6.FY}]%qt6E@i]X\%na*'VFHeVQ@LN9BQYlvIWnxv<B6zn3k42PpHrvHsjw1<cpl>L2uS[CB.J/qb=Hgg
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 86 e2 ea ea ed d2 7f 26 17 8e 1c 2e 33 c6 a6 c9 21 1e 9a 34 38 af 4c f9 47 52 ad e2 6b 6b 57 46 33 07 b2 00 b1 55 91 a5 73 b9 47 a9 4e 24 c9 0b 75 b0 9f 3d 56 65 22 20 f0 d2 1b 3e 59 f6 43 6e 35 40 10 2e 25 40 7b 7b f7 0a 7d 3e 82 2a cc bd be ce c3 95 3b 53 9c 30 29 22 72 19 3a e7 3b 3f 1d 7d 70 a1 38 b6 1d a7 bb 32 29 a4 1d dd 49 34 4f 44 67 be 80 02 eb eb d9 e3 1c 08 48 ac 51 f5 1c 1f 7d e1 94 2d 85 80 98 14 9e 0e e6 8a 08 c9 05 15 c1 35 ee 55 5e ab 28 7c 83 eb 46 76 ab 73 4d 31 e1 8c b7 36 ad 15 82 5c 5c 04 c4 1a f1 e1 61 ff c4 29 d9 82 4d 92 89 2b 97 c9 9d 9b fa 45 14 70 35 f7 62 8d aa 63 73 f3 63 a7 af 67 54 99 3e 1c 2f f7 99 27 a2 97 0e 92 a8 00 01 b9 bc d8 a3 71 bc 25 dc 4c 27 bc 0c 52 da ae ad 29 9d 0e 1b 11 4d 35 30 67 44 a4 b5 3e 52 44 71 71 e9 Data Ascii: &.3!48LGRkkWF3UsGN$u=Ve" >YCn5@.%@{{}>*;S0)"r:;?}p82)I4ODgHQ}-5U^(\|FvsM16\\a)M+Ep5bcscgT>/'q%L'R)M50gD>RDqq
2024-07-19 20:22:52 UTC	857	IN	Data Raw: 25 22 b8 73 8f b8 67 eb 16 b9 79 b0 4c 31 dc 52 8e 5a 37 14 d4 46 ee b6 4d b2 1a fa 6e e2 a0 22 8a 2d 5b 37 0f 08 08 42 c2 c1 26 27 eb 04 c1 a0 44 09 02 8a 34 61 50 78 36 ae 70 11 c5 72 08 eb 5b 29 40 51 50 a9 70 90 a6 a6 5a df 57 e5 fd 42 24 45 c4 b9 d2 3b 04 10 52 ff e1 e0 b4 a2 a0 6c 60 61 10 df 94 5d 76 44 98 c4 1e aa 0e b9 89 28 ba b4 b7 2f a9 98 86 4f 9f a9 93 c1 57 23 cb 15 a2 44 07 e2 c0 c7 85 e6 eb a3 c7 f6 4a eb f4 cf 42 31 e9 ec 52 45 04 8c 31 2d 9b 68 10 66 c4 55 10 d5 f8 e7 a8 83 1b 07 f5 76 e3 b1 cb 64 99 90 50 5c 8b 03 09 11 01 63 0c 2a 19 50 d1 20 08 ac cf 83 42 0d 2a 71 c6 96 98 3b 4d 4f 11 84 00 e0 74 bc ab 4a a0 70 4b 14 63 7d 9d 50 ef 44 42 95 22 42 82 01 19 3b c4 49 82 50 a4 80 70 a0 5a 5a 9d 56 69 22 02 22 24 81 63 45 02 29 11 01 49 Data Ascii: %"sgyL1RZ7FMn"-[7B&'D4aPx6pr[)@QPpZWB$E;Rl`a]vD(/OW#DJB1RE1-hfUvdP\cP Bq;MOtJpKc}PDB"B;IPpZZVi""$cE)I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49903	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	650	OUT	GET /api/public/content/a9f12990a7a64a1f9628ab3ca508a6fa?v=49d01bf6&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	632	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 5543 Connection: close CF-Ray: 8a5d6d0f2c4dc334-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_AdOn_AT.png; filename*=utf-8''icon_WCircle_AdOn_AT.png ETag: "0x8DC17741849D4CD" Last-Modified: Wed, 17 Jan 2024 15:50:57 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 126901 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	737	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 15 59 49 44 41 54 78 9c ed 9d 3d 70 5c 49 b5 c7 bb 55 ce d8 2a 0f 24 6f 33 cb 0b b9 c7 a4 6c 95 24 92 25 42 f2 db 8c 44 16 01 01 04 b2 36 60 23 9e ac 47 04 c1 4a 0a 78 01 01 92 92 97 f1 24 91 6d 82 c6 55 6c ca 8e 72 83 67 b3 7d 09 5c 57 99 94 a6 fe d7 dd 66 3c 9e 8f db 7d bb ef 3d a7 fb fc aa 54 92 77 35 d2 68 a6 ff 7d 3e fa 9c d3 4a 09 82 d0 0a dd ee e1 42 1b 8c 31 43 a5 d4 60 ea 3f 6d 36 7c e8 58 29 55 b9 7f 68 ad 47 f2 4e f4 87 88 28 bd 48 d6 95 52 f8 7c d7 7e 1e d8 cf 29 98 d8 0f 08 ec d6 fd 5b 44 96 16 11 51 24 8c 31 9b 56 1c 0f ec e7 54 42 09 65 62 2d d8 ad fd 3c d2 5a bf b1 66 42 38 Data Ascii: PNGIHDRR:WpHYs.#.#x?vYIDATx=p\IU*$o3l$%BD6`#GJx$mUlrg}\Wf<}=Tw5h}>JB1C`?m6\|X)UhGN(HR\|~)[DQ$1VTBeb-<ZfB8
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 4f e5 68 89 a6 1a e9 04 21 f5 39 d2 d3 ec 2c 91 9d 79 fd a5 94 f2 08 39 96 08 25 17 91 14 93 f2 e5 e2 fc 73 75 71 f1 79 e3 ef 7f 30 fc b6 3a 3e fe 99 22 c4 c3 2e aa bf ef a4 fe 05 a5 4f e2 79 36 c2 15 a9 4a 8d 9e fd fb bd 1c 8f 9f ab 97 d5 3f e6 2e c2 c1 e0 bd fa eb f5 7b ef ab f5 f5 f7 d5 bd f5 ff a8 3f f7 c1 e4 ab af d5 68 44 b6 03 a1 09 68 ee 7b 98 7a 08 4a 52 11 59 df 14 c9 84 ec a9 aa 57 b5 60 c6 b7 cf eb cf 93 c9 d7 f5 87 0f cb 16 ec e6 e6 b0 16 d9 f0 c1 77 d4 c6 e6 83 de 84 c5 8c 01 12 59 c6 98 a4 67 48 77 12 67 e2 b2 1e 67 05 8b 72 7d fd 85 ba be fa a2 fe 3a 25 10 d8 b4 c8 20 22 88 69 67 fb c3 fa b3 b3 60 c2 3b 0c 6d 67 f4 1e 2b 11 d9 44 42 96 99 38 88 05 71 02 84 e3 6b 69 62 52 5b ba f3 af eb b8 05 6c ef 7c 4f 3d de fd 41 fd 59 98 9b b1 7b 96 2a Data Ascii: Oh!9,y9%suqy0:>".Oy6J?.{?hDh{zJRYW`wYgHwggr}:% "ig`;mg+DB8qkibR[l\|O=AY{*
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 4b 6c 4b e4 cb a2 d9 08 ae d4 88 63 72 a1 cb 05 8a 84 8c ef c0 ff eb eb 2f 72 15 11 e2 a2 93 26 ee dc 46 2e ae 1c 84 b2 28 13 e7 5b 3d 5e 6a f9 cf ac 2b 9c 6a b3 63 c2 5c 03 b3 c6 c5 12 61 12 aa 2f 98 4c ba 88 f5 7b fe 6d e9 25 c6 45 70 85 7d 67 73 8f 89 0f df 6c c3 bc f9 0b 6b 5c e2 a1 90 ec d8 b2 37 3f c4 dd c0 28 e3 12 d9 d9 fe d0 fb 31 d7 f9 5a a3 e1 2a 4b 44 f2 d6 6f ec 6a be 56 60 5e 42 61 9a 90 46 bb 52 cb 7f 42 6e 89 18 e7 fb 5a 6d b0 14 51 48 50 8f e6 bd 55 84 54 8e 97 08 36 23 df c2 dd 5b 42 89 98 c8 0c 57 65 e7 36 72 89 87 9a 58 1a 24 17 7c d3 b7 39 50 17 f0 36 b8 6d 03 9b 8c 6b 8c f4 3d 5b 1b e5 9b 88 c1 79 d1 60 7a f6 c2 1d 0e 96 c8 d7 95 6b 72 23 1d c0 f7 f8 f8 ee 10 11 5c 4b 8e 23 a7 f0 1a ba ab 58 9a 06 fd f8 7b 43 6b 15 41 c6 e7 45 d0 c9 Data Ascii: KlKcr/r&F.([=^j+jc\a/L{m%Ep}gslk\7?(1Z*KDojV`^BaFRBnZmQHPUT6#[BWe6rX$\|9P6mk=[y`zkr#\K#X{CkAE
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 8f aa 7a 55 27 7e b8 c4 ac be 68 ad 97 8a e8 96 e3 4e 9c e1 41 5e a3 db 16 b0 50 a9 de ba 30 99 7c 5d 27 7f 90 fc c8 6c de c5 3b 61 cf ac 88 58 c5 45 8e df 9d fd 5c 95 02 16 27 16 26 97 db c1 47 a3 b1 fa ee c3 9f 64 53 31 32 cf 5b 7b 4b 44 dc 92 0b 0e 58 a2 12 dc 3a b8 47 58 90 94 d3 da 8b 40 b5 03 9e 7b 06 56 e9 1d 6f 6d 5e ed 1c bf 77 28 f1 40 0e 2a 37 83 e3 83 83 f5 59 04 04 04 2b ca 3c 56 7a c7 d0 dc 59 f0 4d 24 2f 41 ee 12 77 8a 1f 83 bb 83 6f 04 3f 16 a2 c9 29 ae a8 ec 86 80 51 cf 0c cf fa 50 a9 30 69 22 22 1c 24 3d 51 85 83 37 1b 73 1d fa 74 13 dd ce cd d9 fa 2c 73 ef 10 df 31 bb fc 6b 6e b8 f3 8e 3b a7 b5 be ea e4 e9 30 49 1f 63 11 f7 31 a7 21 67 01 a5 a8 ff eb a3 52 61 d5 9d ad 23 0e 6d 11 5d 66 97 5c fb 40 2e 02 42 0c 89 84 0c 26 08 39 b7 d5 75 Data Ascii: zU'~hNA^P0\|]'l;aXE\'&GdS12[{KDX:GX@{Vom^w(@*7Y+<VzYM$/Awo?)QP0i""$=Q7st,s1kn;0Ic1!gRa#m]f\@.B&9u
2024-07-19 20:22:52 UTC	699	IN	Data Raw: e1 c1 f0 db be 3d 45 88 83 ae d8 89 88 e3 f5 2c 42 96 1c 59 cf 28 19 49 dc 39 87 2d a9 90 f3 23 a1 cf f3 a0 a4 02 4a 2e 22 60 2b 64 83 7b 35 04 21 90 ce 36 f0 a4 ee dc 34 c6 98 33 69 e2 13 3a 4c 24 a0 3a 7b 92 9b 88 90 60 b8 c1 70 9c ae 7e a7 50 ac 80 b6 62 54 67 93 13 11 10 21 09 1d 00 01 75 7a bc d2 a9 88 80 a4 be 85 c4 95 d9 9d b7 e5 24 4f 2c 2c 28 0d da 92 d6 09 21 07 01 f5 62 89 66 ce 90 10 23 c9 61 ac c0 56 40 bd 8a 08 88 90 04 ee 02 ea 5d 44 40 84 24 70 16 50 2f 31 d1 2c 36 15 89 18 a9 b3 94 a4 90 05 7b 14 04 44 c2 12 39 24 fd 2d f8 74 a6 a6 2c 28 65 2b a2 29 21 5d ca ad 13 02 95 83 54 16 ee dc 6c fa 5b 6b 0d d7 8e 84 99 16 48 31 8e 31 68 31 7b 11 39 b4 d6 28 1c 94 21 d4 82 63 64 2d 10 c9 f9 1d 24 45 04 b4 d6 27 b6 1b 51 e6 d9 95 cd 09 bc 93 d8 c3 Data Ascii: =E,BY(I9-#J."`+d{5!643i:L$:{`p~PbTg!uz$O,,(!bf#aV@]D@$pP/1,6{D9$-t,(e+)!]Tl[kH11h1{9(!cd-$E'Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49905	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	650	OUT	GET /api/public/content/05ce22f3f02a4d20874334d3a17ced9b?v=4af23d84&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	656	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 5275 Connection: close CF-Ray: 8a5d6d0f0e10729e-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_AdOn_Colab_Security.png; filename*=utf-8''icon_WCircle_AdOn_Colab_Security.png ETag: "0x8DC1745B8AEC258" Last-Modified: Wed, 17 Jan 2024 10:18:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 126903 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 14 4d 49 44 41 54 78 9c ed 9d 3d 70 1c 45 16 c7 bb 55 ce a0 ca 9b 41 66 99 73 ee 35 29 54 69 45 62 32 d9 98 88 64 b5 04 24 04 92 08 b8 e8 90 74 44 10 20 29 e0 02 02 a4 4d c8 7c 92 88 ce 09 5a 55 41 8a 57 b9 c1 eb 8c 4b 60 5c 05 e9 f5 d5 7f e8 11 eb d5 ce ce 9b 99 9e e9 af f7 ab 52 49 02 69 77 bc 9a ff be d7 ef 53 08 86 61 6a 21 eb fd 3a 53 07 a5 54 57 08 d1 99 fa 4f 3d e2 af 8e 85 10 49 f6 8d 94 72 c4 7f 09 7b b0 88 9a 17 c9 b2 10 02 9f af eb cf 1d fd b9 09 26 fa 03 02 bb c8 be 67 91 35 0b 8b c8 10 4a a9 9e 16 c7 6d fd b9 29 a1 54 65 a2 2d d8 85 fe 3c 92 52 5e 5a 33 a6 3a 2c a2 0a 28 a5 60 Data Ascii: PNGIHDRR:WpHYs.#.#x?vMIDATx=pEUAfs5)TiEb2d$tD )M\|ZUAWK`\RIiwSaj!:STWO=Ir{&g5Jm)Te-<R^Z3:,(`
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 58 40 4c 43 74 6d 45 ed a4 85 e9 3b a8 c4 66 98 a6 c0 00 c9 81 08 d1 12 4d 35 d2 31 4c d3 79 a4 9d e0 2c 91 9e 79 fd 98 4b 79 98 10 4b 84 1a 17 11 17 93 32 16 b9 d3 46 f5 77 1b ee 1c 4f e2 61 6c 81 e6 be 65 af 2d 11 cf 43 a8 46 92 fc 2e ce 47 17 62 7c f1 24 fd 8c ef c7 e3 27 57 7e 6e 79 f9 d5 f4 63 a5 77 5b 74 6f df 4a 3f 77 3a 2f d7 fe bb 05 c6 b8 e9 1c 52 63 22 e2 48 5c 79 86 47 8f c4 c9 e9 f7 e2 f4 e4 87 ca af fb da bd 37 c4 bd b5 37 45 7f fd 6e e5 c7 08 90 a3 26 23 76 8d 88 88 03 09 74 60 65 0e 0e 1e 8a 83 fd 87 e9 d7 a6 80 45 da d8 7c 20 36 36 1e b0 75 6a 38 d0 d0 94 88 10 89 e3 b5 8d 05 c0 e2 6c 6d 7d 29 26 93 5f 44 53 c0 dd db db fb 30 b5 50 91 93 68 b7 6e ec bc 88 f8 1c 54 0c 2c 0e c4 03 f7 ad 2d e0 de 41 4c 91 9f 99 c6 4d 94 06 c9 86 3a 53 99 1c Data Ascii: X@LCtmE;fM51Ly,yKyK2FwOale-CF.Gb\|$'W~nycw[toJ?w:/Rc"H\yG77En&#vt`eE\| 66uj8lm})&_DS0PhnT,-ALM:S
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 0a 9c 9e fc 50 c9 a5 a3 d6 e3 f5 56 9c 28 db ec 95 cd 13 39 1f 95 c3 3b e7 7a ff 6d e1 3b 78 17 2f b2 16 b8 41 a9 87 f7 ec 0c 54 a6 95 00 39 9e 3c 8b 83 73 12 e5 b1 de 1f 7c 5e 6a 4c 17 dc 38 6a 39 91 03 6d e3 0b 13 af d7 72 6a e5 9c 4f b0 66 53 63 7c 67 74 3e 36 96 27 c9 1a da ca b8 7f 78 1d 17 75 bd 52 5f e3 b1 1e cf 45 11 12 44 49 0d 76 38 36 11 08 d6 e8 ca 1f 6c 9e 3b 57 ba c7 9c 69 96 45 a2 c0 cd 0b e1 60 10 49 95 1e 1c 94 df 2c ba e9 a9 f3 19 b2 6b c1 75 40 cc f3 ae 03 01 0e 5c 63 99 e9 ac 9b 1b ef 0a 87 58 a3 ba 73 7c 1e 72 0c b8 3d f3 ce 45 75 9b e4 30 1e 8b 62 69 e0 36 53 03 14 49 16 52 1f fc d9 12 71 63 f9 95 34 7a 97 d5 c0 95 4d e2 3a e6 6d f4 a8 22 62 4b e4 20 a6 bb 4a d3 1a 3d 62 bd 1b 6e 64 fc 7c d9 9c d5 c8 80 c8 5d 03 f5 a4 b3 b3 e9 ae f9 Data Ascii: PV(9;zm;x/AT9<s\|^jL8j9mrjOfSc\|gt>6'xuR_EDIv86l;WiE`I,ku@\cXs\|r=Eu0bi6SIRqc4zM:m"bK J=bnd\|]
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: aa c0 5f 37 ed 6e a0 6f c6 72 d9 bf 13 6c ef f4 6d bf 0e a3 2a 8b 8f 61 8d 36 85 05 f0 62 b9 76 e3 50 0e ce b8 66 8b ee 46 b0 ac dd 7b c3 76 57 31 42 db b9 66 75 d1 a0 12 5a e6 8b 61 1a 04 67 ab bc 6e e3 16 59 18 b1 ce 15 91 56 1e b7 46 68 b8 b3 b5 7d 36 36 1f 88 1f 1f 7f e5 c2 70 98 85 06 a5 68 64 d6 81 d9 6b f1 17 07 fe 90 ad 61 bb 26 b1 d7 eb 8a b3 b3 3d b1 b7 f7 a1 70 00 44 e5 c6 75 44 c4 89 d7 b0 da 9a 8d 0d 21 c1 39 05 6e 56 d7 50 21 68 d6 92 0f cb f3 dd d9 17 2e 9d 2d 0b 8f 35 8b 02 0b 59 94 0e 51 89 9e 88 1c 4a ae c6 83 b6 66 63 6f 06 10 0f a2 91 fd f5 bb e9 cf 63 b0 cb f8 e2 49 fa 1a 20 08 53 f4 18 b0 36 88 3c 76 6f ff 99 4f 72 d8 5d 3e aa 25 a2 29 25 46 2f 22 fc 91 71 a3 c4 00 25 12 d9 b9 fe f2 0b ae 6e 1f 82 12 77 e7 3e d6 f3 e4 8f f4 6b 87 ac Data Ascii: _7norlm*a6bvPfF{vW1BfuZagnYVFh}66phdka&=pDuD!9nVP!h.-5YQJfcocI S6<voOr]>%)%F/"q%nw>k
2024-07-19 20:22:52 UTC	455	IN	Data Raw: 3b 69 a3 1a 3b 88 33 d1 3c 94 52 cb fa 9c c4 85 ab 71 91 c0 1b 71 25 02 e7 a5 25 ca d0 26 9c cf 49 71 f6 02 1d 09 0f 70 5e 44 53 01 07 9c 93 f0 e1 ac 59 67 8c b0 ef 62 04 ce 6b 77 2e c7 bd 43 83 1f 87 c1 c3 22 71 2d ff 13 94 25 9a 75 ef 74 18 3c ea 2d e6 81 71 a2 47 fb 7a 27 20 2f 2d d1 9c ba 3b cc 6f 60 ab e4 27 89 af d6 c7 6b 4b 34 0d fc 66 6d 95 90 53 e2 b3 92 5f 1c f9 6c 7d 82 b1 44 73 4a 86 0e 63 df 4a e1 01 13 6d 7d 82 99 90 eb b5 25 9a 13 c1 43 72 96 2b c2 dd ce fb dc 0c 49 40 41 89 28 03 7f 20 3d b8 1c e1 70 27 cb 44 22 0d 5b df d4 55 28 c1 11 8c 3b 57 b0 a1 62 83 db d0 ad 9d 7b 76 5d ad 79 33 45 f0 22 9a 3a 2f 61 02 2b 8b a9 1d 8e 62 10 4f 54 22 9a 11 d3 ba 16 53 d4 db fc 1a e2 28 26 f1 44 29 a2 39 83 f6 b1 38 88 73 4c f5 98 60 c3 a6 ae b6 8e 32 Data Ascii: ;i;3<Rqq%%&Iqp^DSYgbkw.C"q-%ut<-qGz' /-;o`'kK4fmS_l}DsJcJm}%Cr+I@A( =p'D"[U(;Wb{v]y3E":/a+bOT"S(&D)98sL`2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49900	104.19.177.52	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	545	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	860	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: PzcU3Ivp6w0l3AsetHXgNw== Last-Modified: Thu, 18 Jul 2024 01:41:45 GMT x-ms-request-id: 91efca44-001e-0048-3743-d9a117000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 10 Expires: Sat, 20 Jul 2024 20:22:52 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a5d6d0f0956429e-EWR
2024-07-19 20:22:52 UTC	509	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d Data Ascii: AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 Data Ascii: f(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 Data Ascii: ler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 Data Ascii: nt("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d Data Ascii: ),this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElem
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 Data Ascii: locationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],t
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 79 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 Data Ascii: yer"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData")
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 65 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c Data Ascii: egionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.Rul
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 68 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e Data Ascii: hasIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.on

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49904	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	650	OUT	GET /api/public/content/c69d271971804a34830bdcb0c1cce78f?v=30a21149&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	644	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 4667 Connection: close CF-Ray: 8a5d6d0f2fbb4249-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_Email_Archive.png; filename*=utf-8''icon_WCircle_Email_Archive.png ETag: "0x8DC1774184D56B7" Last-Modified: Wed, 17 Jan 2024 15:50:57 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 131055 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 d2 08 06 00 00 00 3f 99 9e 42 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 11 ed 49 44 41 54 78 9c ed 9d 3f 70 1b c7 15 c6 77 39 6a 93 c0 29 a3 42 90 2b 27 8d 40 cf 24 93 4e a0 32 76 2b 52 ae 2d 82 2e ed b1 49 a5 72 e4 99 90 f4 4c 3c aa 42 32 89 52 9a a0 5d 5b a2 5a 67 22 41 a9 32 f2 8c 05 35 89 d3 58 70 e1 36 06 ed 3e 9b f9 a0 5d ea 08 1d 80 fb b3 77 b7 7f be df 0c 4c 9a 94 88 13 78 1f de db 6f df 7b 2b 05 a9 0d a5 54 5b 08 d1 11 42 b4 84 10 f8 fc 27 89 cf 5b fa 21 a6 3e 9f 66 ac 1f 60 94 f8 1a 3e 3f d1 1f f1 18 4b 29 87 35 fc b3 88 10 42 f2 55 b0 8f 52 0a 62 c1 e3 92 16 49 47 7f 6c 82 a1 16 1a 3e 3e 84 c8 28 30 fb 50 48 76 a2 4c 57 8b a6 ab 45 e3 03 83 84 b8 86 Data Ascii: PNGIHDR?BpHYsIDATx?pw9j)B+'@$N2v+R-.IrL<B2R][Zg"A25Xp6>]wLxo{+T[B'[!>f`>?K)5BURbIGl>>(0PHvLWE
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 60 23 1e a9 ab a4 a8 15 62 89 10 ba 59 b9 4f 44 ea c2 cc f1 08 47 48 ba 3e ca d9 82 43 12 2c 3d 5d 72 e6 bf 90 b4 88 30 cb 8c 90 26 d8 aa a3 41 b0 52 b3 41 97 bd 63 5d 44 48 d3 c0 c9 c3 31 34 7e 09 89 0e 1d 71 8c b1 76 f2 46 de 08 49 bb 25 68 ca a3 43 47 5c 2b 72 5d a9 c2 16 af 6a 8d 84 75 11 45 44 5c 74 f2 2a 69 0c 5c aa a8 bb 95 8d 79 24 2a f3 41 56 b0 2e 42 4a c7 16 71 12 d5 7a c9 b6 90 70 16 11 53 3a e2 03 43 29 e5 b2 73 a9 9d de 2f a2 88 88 2f 74 6c 6e d6 4a 8b 29 1d a2 11 21 51 ee 2f d9 12 12 53 3a 12 75 a5 78 e9 d4 8e 29 1d f1 1c 64 53 5b 8d 46 24 a6 74 24 20 96 a5 94 d8 b0 6d 24 22 b1 8e 8e 84 42 29 e3 61 a9 e4 c1 c7 ec 2f 22 a1 d0 d5 f7 74 7d a9 1d 6b e9 48 a0 8c 85 10 17 8b 18 0f 45 23 12 ca 80 b8 67 44 42 a3 55 d4 78 c8 1d 91 68 30 90 c0 19 17 Data Ascii: `#bYODGH>C,=]r0&ARAc]DH14~qvFI%hCG\+r]juED\ti\y$AV.BJqzpS:C)s//tlnJ)!Q/S:ux)dS[F$t$ m$"B)a/"t}kHE#gDBUxh0
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: f0 af ce 75 c5 b6 db e7 27 d1 fe f2 e5 5f 06 b3 9f 45 b3 a1 a1 74 af 28 88 3c 30 44 10 71 d3 44 64 fa 91 5e fa e9 af ad 18 17 55 4f 75 da 78 eb 03 27 af 31 2f 14 52 09 77 af 6c 65 79 91 34 ee e9 d7 9f a7 8a d8 ac b7 20 a0 2a da ca 21 60 54 88 db a6 af d7 8f d8 32 40 fa e9 53 ff 57 12 0a a9 64 65 39 2a 23 ca ba 7b 8b 30 6b be fd bd f7 cf ac 85 ea 88 3e e6 b9 bf fb ef 3f 27 86 86 89 c6 b6 df 40 86 c3 af f4 30 9a 37 bc b4 d0 b1 46 fa ce 27 e7 ae 29 b3 61 11 f8 c5 df f8 ed 2d ab 96 ef b3 d2 9e b7 c5 d6 e6 f5 d4 ef 57 35 df 1c cf bb b9 f9 e6 a4 26 71 9e 89 01 03 e6 e8 93 e3 ca 52 33 1b d5 fa 35 31 46 44 1a 37 7d 15 21 60 2c 68 5b e9 9e 49 e3 66 89 a8 0a 92 d1 27 cb 5e 94 e9 f5 7a 5a 51 94 f2 e8 54 8c 89 90 88 45 cc cd 55 54 00 b3 d2 b8 aa 78 5e d0 7a 67 f2 bc Data Ascii: u'_Et(<0DqDd^UOux'1/Rwley4 !`T2@SWde9#{0k>?'@07F')a-W5&qR351FD7}!`,h[If'^zZQTEUTx^zg
2024-07-19 20:22:52 UTC	1204	IN	Data Raw: 98 7b ba f7 52 99 05 16 f1 d3 68 30 82 5a bb f6 ee dc 7d a8 e4 e9 7e 10 4b f2 d0 b0 ac 02 da 29 51 87 e7 50 1b c5 c2 cc 6c ee 1a 09 28 a5 5a 38 a9 1d 69 b6 b5 cb 22 a5 c1 bb 3b c4 60 83 45 8d 7e 59 19 5b ae 04 87 68 11 15 1d e0 e2 a2 19 f9 0b 23 92 ae 08 a7 15 ee 20 b6 dc b0 ac 8d 7e f3 fe fe c6 c6 07 d6 a7 bd 5e b8 70 de 95 4a 86 51 e9 88 04 94 52 6d 1d 95 88 63 94 71 da 16 d5 bb ad 57 dc 4a 3e 2f 12 ad 5f 7f d6 91 eb 43 34 ca 2c 24 a0 94 ba 2b 84 70 c6 8b 24 f5 09 6a ba 80 b4 0a 01 b5 32 0e 52 71 a1 ae ae ac 90 b0 9f 84 7d 25 e2 30 45 47 6a cd 03 22 c2 1a 0a 07 7f e1 67 47 20 a0 5c d1 28 97 90 00 37 68 fd a1 aa b4 2b 12 01 e5 8a 46 45 84 c4 b5 92 67 20 d5 83 15 3d 3d 52 ab 29 da ed f3 13 01 a5 0d aa f4 35 1a e5 16 12 50 4a 61 63 8a 93 86 3c a3 69 41 75 Data Ascii: {Rh0Z}~K)QPl(Z8i";`E~Y[h# ~^pJQRmcqWJ>/_C4,$+p$j2Rq}%0EGj"gG \(7h+FEg ==R)5PJac<iAu

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49901	104.17.249.203	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	543	OUT	GET /web-vitals/dist/web-vitals.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	548	IN	HTTP/1.1 302 Found Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /web-vitals@4.2.2/dist/web-vitals.iife.js vary: Accept via: 1.1 fly.io fly-request-id: 01J36A7VR2611KGV0CE0WX1QGJ-lga CF-Cache-Status: HIT Age: 358 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a5d6d0f0c8942d5-EWR
2024-07-19 20:22:52 UTC	69	IN	Data Raw: 33 66 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 77 65 62 2d 76 69 74 61 6c 73 40 34 2e 32 2e 32 2f 64 69 73 74 2f 77 65 62 2d 76 69 74 61 6c 73 2e 69 69 66 65 2e 6a 73 0d 0a Data Ascii: 3fFound. Redirecting to /web-vitals@4.2.2/dist/web-vitals.iife.js
2024-07-19 20:22:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49908	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:51 UTC	405	OUT	GET /api/public/content/ba203cf576844201a13385cc94eaf22d?v=2c1b7329 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	646	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/svg+xml Content-Length: 2530 Connection: close CF-Ray: 8a5d6d0f89978ce3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 436 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename="icon_Security awareness.svg"; filename*=utf-8''icon_Security%20awareness.svg ETag: "0x8DBEA833CE12461" Last-Modified: Tue, 21 Nov 2023 11:15:58 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128420 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	723	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 31 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 31 30 30 34 31 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"> <defs> <style> .cls-1 { fill: #010041; stroke-width: 0px; } </style> </defs> <
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 34 2d 39 2e 35 34 2d 2e 34 37 2d 2e 38 32 2d 2e 39 34 2d 31 2e 37 37 2d 31 2e 35 33 2d 32 2e 35 39 5a 6d 2d 32 33 2e 37 34 2c 36 2e 32 34 63 31 2e 33 2d 34 2e 34 38 2c 35 2e 34 32 2d 37 2e 36 36 2c 31 30 2e 31 33 2d 37 2e 36 36 2c 33 2e 30 36 2c 30 2c 35 2e 37 37 2c 31 2e 33 2c 37 2e 36 36 2c 33 2e 33 2e 37 31 2e 37 31 2c 31 2e 33 2c 31 2e 35 33 2c 31 2e 37 37 2c 32 2e 34 37 2e 33 35 2e 35 39 2e 35 39 2c 31 2e 31 38 2e 37 31 2c 31 2e 38 38 2c 30 2c 30 2d 32 30 2e 32 36 2c 30 2d 32 30 2e 32 36 2c 30 5a 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 6d 35 38 2e 37 33 2c 32 36 2e 39 34 63 2d 36 2e 33 36 2c 30 2d 31 31 2e Data Ascii: 4-9.54-.47-.82-.94-1.77-1.53-2.59Zm-23.74,6.24c1.3-4.48,5.42-7.66,10.13-7.66,3.06,0,5.77,1.3,7.66,3.3.71.71,1.3,1.53,1.77,2.47.35.59.59,1.18.71,1.88,0,0-20.26,0-20.26,0Z"/> </g> <g> <g> <path class="cls-1" d="m58.73,26.94c-6.36,0-11.
2024-07-19 20:22:52 UTC	438	IN	Data Raw: 2e 31 2d 2e 35 39 2d 34 2e 33 31 2d 2e 38 32 2d 36 2e 35 32 2d 2e 38 32 73 2d 34 2e 34 32 2e 33 35 2d 36 2e 35 32 2e 38 32 63 2d 31 2e 31 36 2e 32 34 2d 32 2e 32 31 2e 37 31 2d 33 2e 32 36 2c 31 2e 31 38 2d 32 2e 32 31 2e 39 34 2d 34 2e 31 39 2c 32 2e 31 32 2d 35 2e 39 34 2c 33 2e 35 33 2d 31 2e 35 31 2c 31 2e 31 38 2d 32 2e 39 31 2c 32 2e 35 39 2d 34 2e 30 38 2c 34 2e 31 32 2d 31 2e 30 35 2c 31 2e 33 2d 31 2e 39 38 2c 32 2e 38 33 2d 32 2e 37 39 2c 34 2e 33 36 2d 2e 39 33 2c 31 2e 38 38 2d 31 2e 36 33 2c 33 2e 37 37 2d 32 2e 31 2c 35 2e 38 39 2d 2e 34 37 2c 31 2e 37 37 2d 2e 35 38 2c 33 2e 36 35 2d 2e 35 38 2c 35 2e 36 35 76 32 2e 39 34 68 35 30 2e 36 35 76 2d 32 2e 39 34 63 30 2d 31 30 2e 36 2d 36 2e 34 2d 31 39 2e 36 37 2d 31 35 2e 36 2d 32 33 2e 35 36 Data Ascii: .1-.59-4.31-.82-6.52-.82s-4.42.35-6.52.82c-1.16.24-2.21.71-3.26,1.18-2.21.94-4.19,2.12-5.94,3.53-1.51,1.18-2.91,2.59-4.08,4.12-1.05,1.3-1.98,2.83-2.79,4.36-.93,1.88-1.63,3.77-2.1,5.89-.47,1.77-.58,3.65-.58,5.65v2.94h50.65v-2.94c0-10.6-6.4-19.67-15.6-23.56

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49907	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	405	OUT	GET /api/public/content/6737d53c3d2a40dd828cc52fd9f972fa?v=df36f5b2 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	649	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/svg+xml Content-Length: 1470 Connection: close CF-Ray: 8a5d6d0f8ba919c7-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 96 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_protect-communications.svg; filename*=utf-8''icon_protect-communications.svg ETag: "0x8DBFBBE494840FF" Last-Modified: Wed, 13 Dec 2023 09:31:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 130380 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	720	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 22 20 68 65 69 67 68 74 3d 22 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 2e 33 34 34 37 32 20 31 36 2e 38 39 37 34 43 34 2e 33 34 34 37 32 20 39 2e 35 31 34 34 20 31 30 2e 33 39 34 32 20 33 2e 35 20 31 37 2e 39 32 32 34 20 33 2e 35 43 32 35 2e 34 30 34 37 20 33 2e 35 20 33 31 2e 35 20 39 2e 35 31 30 30 31 20 33 31 2e 35 20 31 36 2e 38 35 36 36 43 33 31 2e 35 20 32 34 2e 32 33 39 36 20 32 35 2e Data Ascii: <svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M4.34472 16.8974C4.34472 9.5144 10.3942 3.5 17.9224 3.5C25.4047 3.5 31.5 9.51001 31.5 16.8566C31.5 24.2396 25.
2024-07-19 20:22:52 UTC	750	IN	Data Raw: 69 6c 6c 3d 22 23 30 31 30 30 34 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 34 2e 32 35 35 38 20 32 33 2e 37 31 38 37 48 31 31 2e 30 35 30 38 56 31 33 2e 39 31 35 37 48 32 34 2e 32 31 34 34 4c 32 34 2e 32 35 35 38 20 32 33 2e 37 31 38 37 5a 4d 31 32 2e 33 33 34 20 32 32 2e 34 35 32 34 48 32 32 2e 39 33 31 32 56 31 35 2e 32 32 32 37 48 31 32 2e 33 33 34 56 32 32 2e 34 35 32 34 5a 22 20 66 69 6c 6c 3d 22 23 30 31 30 30 34 31 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 34 34 37 35 20 31 34 2e 39 37 37 37 56 31 31 2e 39 35 35 31 43 32 30 2e 34 34 37 35 20 31 30 2e 34 34 33 38 20 31 39 2e 32 30 35 36 20 39 2e 32 31 38 34 31 20 31 37 2e 36 37 34 20 39 2e 32 31 38 34 31 43 31 36 2e 31 34 32 34 20 39 2e 32 31 38 34 31 20 31 34 2e 39 30 30 35 20 31 30 Data Ascii: ill="#010041"/><path d="M24.2558 23.7187H11.0508V13.9157H24.2144L24.2558 23.7187ZM12.334 22.4524H22.9312V15.2227H12.334V22.4524Z" fill="#010041"/><path d="M20.4475 14.9777V11.9551C20.4475 10.4438 19.2056 9.21841 17.674 9.21841C16.1424 9.21841 14.9005 10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49910	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	405	OUT	GET /api/public/content/088d3c3cdc384092b7542a48ec783d57?v=183f3895 HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	639	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/svg+xml Content-Length: 607 Connection: close CF-Ray: 8a5d6d0f8eec72ab-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 436 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_protect-your-data.svg; filename*=utf-8''icon_protect-your-data.svg ETag: "0x8DBFBBE49D10BF1" Last-Modified: Wed, 13 Dec 2023 09:31:30 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 130384 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	607	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 22 20 68 65 69 67 68 74 3d 22 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 37 2e 34 30 37 35 20 32 31 2e 38 36 34 36 4c 32 31 2e 31 32 33 38 20 31 38 2e 31 34 35 33 4c 32 32 2e 32 36 32 36 20 31 39 2e 33 30 36 39 4c 31 37 2e 34 30 32 31 20 32 34 2e 31 37 31 35 4c 31 34 2e 34 30 35 32 20 32 31 2e 31 34 33 36 4c 31 35 2e 35 34 39 35 20 31 39 2e 39 38 37 34 4c 31 37 2e 34 30 37 35 20 32 31 2e 38 36 Data Ascii: <svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M17.4075 21.8646L21.1238 18.1453L22.2626 19.3069L17.4021 24.1715L14.4052 21.1436L15.5495 19.9874L17.4075 21.86

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49906	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	405	OUT	GET /api/public/content/42614e9cf56247afa6fa9d9baf3a7d8a?v=4e5ac00d HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	650	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/svg+xml Content-Length: 1398 Connection: close CF-Ray: 8a5d6d0faa854402-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 436 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_protect-your-employees.svg; filename*=utf-8''icon_protect-your-employees.svg ETag: "0x8DBFBBE498D5624" Last-Modified: Wed, 13 Dec 2023 09:31:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 130382 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	719	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 22 20 68 65 69 67 68 74 3d 22 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 32 2e 34 35 34 32 20 31 36 2e 39 30 37 37 43 32 32 2e 34 35 34 32 20 31 39 2e 36 34 33 36 20 32 30 2e 32 33 36 33 20 32 31 2e 38 36 31 36 20 31 37 2e 35 30 30 34 20 32 31 2e 38 36 31 36 43 31 34 2e 37 36 34 34 20 32 31 2e 38 36 31 36 20 31 32 2e 35 34 36 35 20 31 39 2e 36 34 33 36 20 31 32 2e 35 34 36 35 20 31 36 2e 39 30 Data Ascii: <svg width="35" height="35" viewBox="0 0 35 35" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M22.4542 16.9077C22.4542 19.6436 20.2363 21.8616 17.5004 21.8616C14.7644 21.8616 12.5465 19.6436 12.5465 16.90
2024-07-19 20:22:52 UTC	679	IN	Data Raw: 35 30 30 34 20 32 36 2e 38 31 35 34 43 38 2e 36 30 38 36 20 32 36 2e 38 31 35 34 20 31 2e 34 30 30 33 39 20 31 38 2e 34 37 32 31 20 31 2e 34 30 30 33 39 20 31 36 2e 33 38 36 32 43 31 2e 34 30 30 33 39 20 31 36 2e 33 38 36 32 20 38 2e 36 30 38 36 20 37 20 31 37 2e 35 30 30 34 20 37 5a 4d 32 39 2e 35 36 33 34 20 31 37 2e 33 31 38 39 43 32 38 2e 38 37 31 37 20 31 38 2e 30 33 30 31 20 32 37 2e 39 38 33 37 20 31 38 2e 38 37 32 35 20 32 36 2e 39 34 32 37 20 31 39 2e 37 31 30 39 43 32 34 2e 32 33 36 20 32 31 2e 38 39 31 20 32 30 2e 38 39 38 31 20 32 33 2e 37 31 39 32 20 31 37 2e 35 30 30 34 20 32 33 2e 37 31 39 32 43 31 34 2e 30 30 35 34 20 32 33 2e 37 31 39 32 20 31 30 2e 36 34 37 38 20 32 32 2e 30 35 37 34 20 38 2e 30 35 38 30 35 20 31 39 2e 39 37 31 37 43 36 Data Ascii: 5004 26.8154C8.6086 26.8154 1.40039 18.4721 1.40039 16.3862C1.40039 16.3862 8.6086 7 17.5004 7ZM29.5634 17.3189C28.8717 18.0301 27.9837 18.8725 26.9427 19.7109C24.236 21.891 20.8981 23.7192 17.5004 23.7192C14.0054 23.7192 10.6478 22.0574 8.05805 19.9717C6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49911	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	650	OUT	GET /api/public/content/cfbe227215634da29c9efe4570f8f9a1?v=75a0021e&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	638	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 5986 Connection: close CF-Ray: 8a5d6d12dc2d4258-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_AdOn_DMARC.png; filename*=utf-8''icon_WCircle_AdOn_DMARC.png ETag: "0x8DC1745B8AAF24D" Last-Modified: Wed, 17 Jan 2024 10:18:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 126907 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	731	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 17 14 49 44 41 54 78 9c ed 5d 3d 70 1c c9 79 ed 86 9d e9 aa b8 56 62 3a ba a5 7c 91 13 2e 1d a9 4a aa 02 70 c9 c9 0e 44 42 17 d8 e5 04 84 02 27 0a 70 60 20 3b 91 00 48 91 14 08 40 20 05 17 88 d8 c4 19 45 40 91 98 1c 16 55 ba f4 b8 c8 cf be 65 c6 4b 74 73 55 e7 d4 e3 7a a3 1e 68 6f b8 3f f3 f5 74 4f 7f dd fd bd 2a d6 1e 25 62 66 30 db af df f7 df 4a 09 04 82 4e d0 dd 7e 5c d0 05 65 59 8e 94 52 83 b9 ff 69 ab e5 8f 4e 95 52 45 fd 17 ad f5 44 be 89 70 10 12 f9 27 c9 50 29 85 cf 3b e6 73 60 3e 7d 60 66 fe 80 60 37 f5 df 85 64 7e 21 24 72 84 b2 2c b7 0c 39 ee 9b 4f 5f 44 b1 c5 cc 28 d8 8d f9 9c Data Ascii: PNGIHDRR:WpHYs.#.#x?vIDATx]=pyVb:\|.JpDB'p` ;H@ E@UeKtsUzho?tO*%bf0JN~\eYRiNREDp'P);s`>}`f`7d~!$r,9O_D(
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 4e 08 24 f0 84 51 a8 a8 9d 0e 30 7d 07 95 d8 02 81 2f 60 80 e4 9e 4a 51 89 e6 1a e9 04 02 df 79 a4 a3 e4 94 c8 cc bc 7e 29 a5 3c 82 14 4b 84 bc 93 28 f7 62 d2 a2 f8 4a dd 4c ff bb fa ef d9 ec b5 9a bd 7a bd f2 df 0f ee bc a5 46 a3 77 aa ff be 3f fa 7b 35 18 bc d5 cb 73 26 8a 07 7d 54 7f f7 41 22 f8 40 f0 85 92 c7 f5 e4 46 4d a7 9f aa e9 cd a7 ea d5 ec 73 35 99 b8 f9 fe b6 b6 46 ea ce e0 1b 15 b9 b6 36 47 42 ae f6 28 0c 91 66 d1 92 28 f5 79 08 20 cc e5 e5 c7 15 79 5c 11 a6 2d 40 a8 cd ad fb ea d1 c3 ef 56 9f 82 70 39 24 6f 24 4a 35 12 77 79 f1 b1 ba b8 fc 63 f5 09 53 8d 03 60 f2 3d 7c f4 9d 8a 50 f8 14 f4 1b b1 f3 42 a2 d4 02 09 f0 65 ce ce 9e a9 f1 f9 0b 36 c4 59 47 a8 fd fd f7 6f 7d 2b 81 df 40 83 2f 12 bd 4c 21 90 00 33 ed f8 78 dc bb a9 e6 0a f0 a5 76 Data Ascii: N$Q0}/`JQy~)<K(bJLzFw?{5s&}TA"@FMs5F6GB(f(y y\-@Vp9$o$J5wycS`=\|PBe6YGo}+@/L!3xv
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 19 1e da 2a d1 ca 1f ec 1b d4 60 02 cc 38 17 09 4f 1c d8 d5 16 7d cc 6e a3 04 47 5c 38 fa f8 9d a8 66 dd 71 7a 91 3a 3b 25 e2 64 ca 61 77 a3 aa 10 c2 d9 2e 40 52 a2 fb fe 47 4d f5 15 5c 68 9a 75 14 85 9d cd 5e a7 e6 1b ad 34 e9 36 62 30 e5 a8 3b 1b 2a b2 5d 85 99 29 bb 39 ce 58 f5 0d ca 3d 5c 15 88 82 40 6d aa dc 13 57 a3 87 54 25 da 54 4c 40 29 a8 bc 9d 8b e0 a0 05 a1 be 37 25 a8 d0 c7 d0 43 fc 7e 94 0d c2 95 22 e0 9d 52 ee 3b 99 4c 53 ab f2 de a2 92 88 8d 29 47 3d d6 b1 4b 3b 76 d7 a0 42 5f a0 2c 66 97 0b 99 ba 39 9d 9d 3d cb 22 f1 aa 97 d4 ca a1 05 9c 05 30 74 91 62 52 b9 8c 90 81 bc 6d ef 8d 7b f6 45 24 4a 5b 06 08 e7 b2 82 82 e2 9b 0e 87 77 ab f6 f8 d4 a7 a5 2e 22 d1 e3 2e e3 83 5c 02 0b 05 33 06 04 f1 e2 f9 f3 9f a7 34 92 78 a2 b5 de 6e 63 ce b1 f1 Data Ascii: `8O}nG\8fqz:;%daw.@RGM\hu^46b0;])9X=\@mWT%TL@)7%C~"R;LS)G=K;vB_,f9="0tbRm{E$J[w.".\34xnc
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 07 9c 80 1b 17 89 80 fd fd f7 83 a9 11 85 c0 5c 66 3e c4 dc e4 36 25 3c 7b c0 f2 b0 eb 85 24 aa 23 0d 1c 01 bf 88 62 5a 41 8d 5c e5 22 28 c5 b0 be 8f c9 a4 10 3a d6 fc 5a f1 65 14 cf bd 54 89 de f8 3f b9 00 04 a2 66 d5 5d f5 a4 70 e8 b2 8d 59 15 a9 a0 98 e2 01 ab 5a a6 ab 48 c4 32 e9 5a 9b 74 54 47 df 85 59 47 f9 a2 7c 47 e8 28 aa 18 ab 49 37 23 04 68 42 f9 44 cd e2 84 26 89 58 46 e8 6c d5 08 89 bc ae 0b 9b b2 70 a1 7c 3e a3 74 a4 4d e4 15 af 68 61 5b 50 de 5f 20 9f e8 0d b7 a7 49 22 b6 7e 91 8d 1a 01 5d 9b ba 70 3f 8a 19 e5 53 8d 28 aa 18 a3 39 77 4d 78 77 01 83 0a d3 95 24 e2 1c 5c 98 2f db a7 00 04 fa c1 ce 4f 7b 0b 2f 5f 5c fe b1 d3 bd 5c 5d 3b c6 41 2f 53 82 09 1a f0 e0 e7 37 98 be a8 15 82 f5 db 47 a4 8e ba 0b 61 41 21 d0 10 7b e5 02 f5 da 1c ab 28 Data Ascii: \f>6%<{$#bZA\"(:ZeT?f]pYZH2ZtTGYG\|G(I7#hBD&XFlp\|>tMha[P_ I"~]p?S(9wMxw$\/O{/_\\];A/S7GaA!{(
2024-07-19 20:22:52 UTC	1148	IN	Data Raw: 49 34 30 55 0c d1 d6 d4 b9 00 48 84 c5 83 69 a3 f8 f4 4d 2a 2c 6a 90 06 13 6f f0 b9 6a b6 04 16 33 fa a2 6c 17 35 ee 05 22 ad 5b d8 45 f1 d5 6d 40 c6 16 f0 83 ba f6 81 f5 51 9d e0 94 44 40 59 96 48 48 1d 76 b9 46 6a c0 82 c2 89 0c 50 2b 1c 6f 52 9f ce 40 55 84 7a 40 21 26 7d e2 13 a4 c1 10 77 aa c3 6d 93 e4 6c 02 24 5a 16 68 19 9f bf a8 08 d4 65 f3 e8 33 e9 bb 00 13 ad f5 76 97 0b 74 22 11 50 96 25 d4 08 b5 75 82 96 c0 82 7b 35 fb fc 8d 03 ab 7c 0d 69 87 42 a2 8d a3 2b e0 17 22 7a 09 32 d5 89 da 69 c7 88 9e cb 76 15 4b c0 8c 9b 86 26 11 a2 74 88 d6 09 18 03 8a e1 aa 7a 1b 24 72 61 b6 8e c2 13 e8 54 6b dd 79 77 e9 4c a2 dc 83 0c b9 12 29 01 02 15 b6 21 6d 5f 24 92 20 43 24 80 19 d6 b6 cb 36 61 02 01 3b ae 0e 6f b0 a9 58 78 03 86 cd 7b 2e ae 25 88 63 f6 44 Data Ascii: I40UHiM*,joj3l5"[Em@QD@YHHvFjP+oR@Uz@!&}wml$Zhe3vt"P%u{5\|iB+"z2ivK&tz$raTkywL)!m_$ C$6a;oXx{.%cD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49912	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	415	OUT	GET /api/public/content/ee526f84c5ac42b1a8b11c26f7067787?v=aa4c8287&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	660	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 5673 Connection: close CF-Ray: 8a5d6d12fbb2190a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_AdOn_IncidentResponse.png; filename*=utf-8''icon_WCircle_AdOn_IncidentResponse.png ETag: "0x8DC1745B8A43C8A" Last-Modified: Wed, 17 Jan 2024 10:18:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 126909 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 15 db 49 44 41 54 78 9c ed 9d 3d 6c 1c c7 15 c7 67 18 17 01 6c 40 97 ca ea 74 4a 54 a5 e1 29 45 60 40 01 78 54 63 75 94 ac 54 69 4e e7 22 85 53 90 54 61 57 31 c5 b8 b2 0b 91 2c 6c 04 2e 7c 64 93 2a 0a c9 54 56 13 9d 80 18 48 10 c0 3a 56 49 00 39 3a 21 8d d2 24 2b 40 01 8c 34 13 fc cf b3 f4 e9 78 1f 3b b3 b3 bb ef cd be 1f 40 9c 28 91 e2 f1 6e fe f3 3e e6 bd 37 4a 09 82 90 0b 9d ef db 85 3c 18 63 5a 4a a9 c6 d8 5f b5 33 7e eb 40 29 95 a4 9f 68 ad fb f2 4e 54 87 88 a8 78 91 34 95 52 78 3c 67 1f 1b f6 b1 08 86 f6 03 02 3b 49 3f 17 91 15 8b 88 28 10 c6 98 b6 15 c7 b2 7d 2c 4a 28 be 0c ad 05 3b Data Ascii: PNGIHDRR:WpHYs.#.#x?vIDATx=lgl@tJT)E`@xTcuTiN"STaW1,l.\|d*TVH:VI9:!$+@4x;@(n>7J<cZJ_3~@)hNTx4Rx<g;I?(},J(;
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: d9 a9 80 52 0e f6 ef ab ed ed 03 15 31 b7 50 7b a7 08 a1 09 09 88 d4 0b 43 1d 08 07 02 9a 15 0b c1 1a 75 6e bd a9 22 e6 88 ca c1 6c e5 22 12 01 85 17 50 8d 84 34 50 4a ad 56 2d a4 4a 45 24 02 2a 4e 40 29 87 87 1f a8 b5 eb 57 54 c4 0c aa 16 52 65 22 12 01 15 2f 20 d0 68 bc a6 fe f0 e0 ae 6a b5 2e a9 88 19 54 29 a4 4a 12 0b 22 20 77 8e 8f be 70 16 d0 78 f6 0e 49 88 d8 9b fd 54 45 94 2e 22 11 90 3b c8 b8 dd b8 f1 4b ef 03 55 b8 73 cd e6 79 15 39 ad aa b2 76 a5 ba 73 f6 d4 19 e7 40 82 83 80 f2 1c a2 22 b1 10 f1 b9 d1 34 f6 cb 3e 47 5a aa a0 91 4e 28 49 40 eb 1b 37 eb 26 a0 f4 1c e9 4e 74 96 c8 ce bc 7e 24 07 a9 e5 09 a8 06 e9 ed 45 74 cb 1a d1 a5 4b 2c 26 95 5a b8 8c 6c 6e 7e ac f6 76 ef 79 bf e6 22 a0 53 2e 97 51 fd 5d 86 88 10 03 91 ad c0 a5 06 ac 0f ac 90 Data Ascii: R1P{Cun"l"P4PJV-JE$*N@)WTRe"/ hj.T)J" wpxITE.";KUsy9vs@"4>GZN(I@7&Nt~$EtK,&Zln~vy"S.Q]
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: dd f9 cc 44 a0 36 ae 8a 2b d8 88 7c 92 31 5d 7e d9 ba 86 bd 9c c1 5d 44 f6 1b c9 b6 7e a3 d9 cc 35 0e 42 cc 20 02 0a 07 5c b3 76 db ed f8 10 c9 1f 86 9d b1 6b 5e ee 1c 75 57 0e 6e 9c 4b 36 2e b2 be 17 d6 99 d1 46 8e 59 7d 14 5d ba 25 8e ae 1c fc 71 d7 74 36 0e 0d 45 40 e1 69 d8 c3 5d 9f 16 fd 58 5c ba 25 6e ae 9c cf 1b 00 97 83 db 61 2a 27 56 da cb ce af af cf 46 48 d5 a5 9b 65 89 56 14 51 d0 40 e6 92 4c c0 4e 89 39 00 42 f1 f1 51 d3 b1 d8 94 59 6c d4 76 15 11 49 57 6e d4 85 e9 78 ab 76 88 09 3c 42 36 7a 8e 6e 1d 33 6b d4 34 c6 b4 32 89 c8 d6 ca 91 ac 50 70 1d fb 84 18 48 dc b8 72 dd ba 8e e3 01 76 0c d6 48 73 6a 01 77 cd c8 31 3c d8 63 cf 70 f8 6c f4 3e b9 80 81 93 4c 32 75 53 5b c7 97 b8 c4 43 b0 42 2e 02 4a 2f fe 15 ca a5 89 71 62 8e 3d 48 94 67 90 67 Data Ascii: D6+\|1]~]D~5B \vk^uWnK6.FY}]%qt6E@i]X\%na*'VFHeVQ@LN9BQYlvIWnxv<B6zn3k42PpHrvHsjw1<cpl>L2uS[CB.J/qb=Hgg
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 86 e2 ea ea ed d2 7f 26 17 8e 1c 2e 33 c6 a6 c9 21 1e 9a 34 38 af 4c f9 47 52 ad e2 6b 6b 57 46 33 07 b2 00 b1 55 91 a5 73 b9 47 a9 4e 24 c9 0b 75 b0 9f 3d 56 65 22 20 f0 d2 1b 3e 59 f6 43 6e 35 40 10 2e 25 40 7b 7b f7 0a 7d 3e 82 2a cc bd be ce c3 95 3b 53 9c 30 29 22 72 19 3a e7 3b 3f 1d 7d 70 a1 38 b6 1d a7 bb 32 29 a4 1d dd 49 34 4f 44 67 be 80 02 eb eb d9 e3 1c 08 48 ac 51 f5 1c 1f 7d e1 94 2d 85 80 98 14 9e 0e e6 8a 08 c9 05 15 c1 35 ee 55 5e ab 28 7c 83 eb 46 76 ab 73 4d 31 e1 8c b7 36 ad 15 82 5c 5c 04 c4 1a f1 e1 61 ff c4 29 d9 82 4d 92 89 2b 97 c9 9d 9b fa 45 14 70 35 f7 62 8d aa 63 73 f3 63 a7 af 67 54 99 3e 1c 2f f7 99 27 a2 97 0e 92 a8 00 01 b9 bc d8 a3 71 bc 25 dc 4c 27 bc 0c 52 da ae ad 29 9d 0e 1b 11 4d 35 30 67 44 a4 b5 3e 52 44 71 71 e9 Data Ascii: &.3!48LGRkkWF3UsGN$u=Ve" >YCn5@.%@{{}>*;S0)"r:;?}p82)I4ODgHQ}-5U^(\|FvsM16\\a)M+Ep5bcscgT>/'q%L'R)M50gD>RDqq
2024-07-19 20:22:52 UTC	857	IN	Data Raw: 25 22 b8 73 8f b8 67 eb 16 b9 79 b0 4c 31 dc 52 8e 5a 37 14 d4 46 ee b6 4d b2 1a fa 6e e2 a0 22 8a 2d 5b 37 0f 08 08 42 c2 c1 26 27 eb 04 c1 a0 44 09 02 8a 34 61 50 78 36 ae 70 11 c5 72 08 eb 5b 29 40 51 50 a9 70 90 a6 a6 5a df 57 e5 fd 42 24 45 c4 b9 d2 3b 04 10 52 ff e1 e0 b4 a2 a0 6c 60 61 10 df 94 5d 76 44 98 c4 1e aa 0e b9 89 28 ba b4 b7 2f a9 98 86 4f 9f a9 93 c1 57 23 cb 15 a2 44 07 e2 c0 c7 85 e6 eb a3 c7 f6 4a eb f4 cf 42 31 e9 ec 52 45 04 8c 31 2d 9b 68 10 66 c4 55 10 d5 f8 e7 a8 83 1b 07 f5 76 e3 b1 cb 64 99 90 50 5c 8b 03 09 11 01 63 0c 2a 19 50 d1 20 08 ac cf 83 42 0d 2a 71 c6 96 98 3b 4d 4f 11 84 00 e0 74 bc ab 4a a0 70 4b 14 63 7d 9d 50 ef 44 42 95 22 42 82 01 19 3b c4 49 82 50 a4 80 70 a0 5a 5a 9d 56 69 22 02 22 24 81 63 45 02 29 11 01 49 Data Ascii: %"sgyL1RZ7FMn"-[7B&'D4aPx6pr[)@QPpZWB$E;Rl`a]vD(/OW#DJB1RE1-hfUvdP\cP Bq;MOtJpKc}PDB"B;IPpZZVi""$cE)I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49913	104.17.249.203	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	549	OUT	GET /web-vitals@4.2.2/dist/web-vitals.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	575	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"1c28-4f+2/GWZhXlozjo2GiBA+7VB9Ow" via: 1.1 fly.io fly-request-id: 01J30YP2QR0PY0S379DF22CM0X-lga CF-Cache-Status: HIT Age: 180247 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a5d6d12d9b32369-EWR
2024-07-19 20:22:52 UTC	794	IN	Data Raw: 31 63 32 38 0d 0a 76 61 72 20 77 65 62 56 69 74 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 72 2c 69 2c 6f 2c 61 3d 2d 31 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 70 65 72 73 69 73 74 65 64 26 26 28 61 3d 6e 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 6e 29 29 7d 29 2c 21 30 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 Data Ascii: 1c28var webVitals=function(e){"use strict";var n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){var e=self.performance&&performance.getEntriesByType&&performance.getEntriesByType
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 73 65 72 76 65 72 2e 73 75 70 70 6f 72 74 65 64 45 6e 74 72 79 54 79 70 65 73 2e 69 6e 63 6c 75 64 65 73 28 65 29 29 7b 76 61 72 20 72 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 74 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: server.supportedEntryTypes.includes(e)){var r=new PerformanceObserver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e){}},l=function(e,n,t,r){var i,o;return fun
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 3d 43 28 29 2c 69 3d 66 28 22 46 43 50 22 29 2c 6f 3d 64 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 73 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 74 28 21 30 29 29 29 7d 29 Data Ascii: b=function(e,n){n=n\|\|{},L((function(){var t,r=C(),i=f("FCP"),o=d("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-s(),0),i.entries.push(e),t(!0)))})
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 42 2e 64 65 6c 65 74 65 28 65 2e 69 64 29 7d 29 29 7d 7d 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 73 65 6c 66 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 7c 7c 73 65 6c 66 2e 73 65 74 54 69 6d 65 6f 75 74 2c 74 3d 2d 31 3b 72 65 74 75 72 6e 20 65 3d 6d 28 65 29 2c 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 65 28 29 3a 28 74 3d 6e 28 65 29 2c 76 28 65 29 29 2c 74 7d 2c 4f 3d 5b 32 30 30 2c 35 30 30 5d 2c 6a 3d 5b 32 35 30 30 2c 34 65 33 5d 2c 56 3d 7b 7d 2c 5f 3d 5b 38 30 30 2c 31 38 30 30 5d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 4c 28 28 66 75 6e 63 74 69 Data Ascii: eturn B.delete(e.id)}))}}},q=function(e){var n=self.requestIdleCallback\|\|self.setTimeout,t=-1;return e=m(e),"hidden"===document.visibilityState?e():(t=n(e),v(e)),t},O=[200,500],j=[2500,4e3],V={},_=[800,1800],z=function e(n){document.prerendering?L((functi
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 68 61 64 52 65 63 65 6e 74 49 6e 70 75 74 29 7b 76 61 72 20 6e 3d 6f 5b 30 5d 2c 74 3d 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 26 26 65 2e 73 74 61 72 74 54 69 6d 65 2d 74 2e 73 74 61 72 74 54 69 6d 65 3c 31 65 33 26 26 65 2e 73 74 61 72 74 54 69 6d 65 2d 6e 2e 73 74 61 72 74 54 69 6d 65 3c 35 65 33 3f 28 69 2b 3d 65 2e 76 61 6c 75 65 2c 6f 2e 70 75 73 68 28 65 29 29 3a 28 69 3d 65 2e 76 61 6c 75 65 2c 6f 3d 5b 65 5d 29 7d 7d 29 29 2c 69 3e 72 2e 76 61 6c 75 65 26 26 28 72 2e 76 61 6c 75 65 3d 69 2c 72 2e 65 6e 74 72 69 65 73 3d 6f 2c 74 28 29 29 7d 2c 75 3d 64 28 22 6c 61 79 6f 75 74 2d 73 68 69 66 74 22 2c 61 29 3b 75 26 26 28 74 3d 6c 28 65 2c 72 2c 77 2c 6e 2e 72 65 70 Data Ascii: orEach((function(e){if(!e.hadRecentInput){var n=o[0],t=o[o.length-1];i&&e.startTime-t.startTime<1e3&&e.startTime-n.startTime<5e3?(i+=e.value,o.push(e)):(i=e.value,o=[e])}})),i>r.value&&(r.value=i,r.entries=o,t())},u=d("layout-shift",a);u&&(t=l(e,r,w,n.rep
2024-07-19 20:22:52 UTC	946	IN	Data Raw: 29 7b 52 3d 4d 28 29 2c 44 2e 6c 65 6e 67 74 68 3d 30 2c 42 2e 63 6c 65 61 72 28 29 2c 69 3d 66 28 22 49 4e 50 22 29 2c 72 3d 6c 28 65 2c 69 2c 4f 2c 6e 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 7d 29 29 29 7d 29 29 29 7d 2c 65 2e 6f 6e 4c 43 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 3d 43 28 29 2c 69 3d 66 28 22 4c 43 50 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 7c 7c 28 65 3d 65 2e 73 6c 69 63 65 28 2d 31 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 Data Ascii: ){R=M(),D.length=0,B.clear(),i=f("INP"),r=l(e,i,O,n.reportAllChanges)})))})))},e.onLCP=function(e,n){n=n\|\|{},L((function(){var t,r=C(),i=f("LCP"),o=function(e){n.reportAllChanges\|\|(e=e.slice(-1)),e.forEach((function(e){e.startTime<r.firstHiddenTime&&(i.va
2024-07-19 20:22:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49916	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	650	OUT	GET /api/public/content/482db570fe8e449fb6b1e2d90dfda927?v=dd6313bd&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	636	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 185156 Connection: close CF-Ray: 8a5d6d132cc44231-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=InsiderRiskProtection.png; filename*=utf-8''InsiderRiskProtection.png ETag: "0x8DC1813FC842770" Last-Modified: Thu, 18 Jan 2024 10:55:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 114271 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	733	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 34 00 00 03 16 08 06 00 00 00 27 16 c3 4a 00 00 0a 2c 69 43 43 50 69 63 63 00 00 48 89 9d 53 77 58 53 77 17 3e f7 de ec c1 4a 88 80 8c b0 97 6c 81 00 22 23 ec 21 53 96 a8 c4 24 40 18 21 86 04 dc 03 11 15 ac 28 2a b2 14 45 aa 02 16 ac 96 21 75 22 8a 83 82 a8 e0 b6 20 45 44 ad c5 2a 2e 1c 7d a2 cf d3 da 3e fd be af 5f df 3f ee 7d 9f f3 3b e7 de df 79 df 73 00 68 01 21 22 71 16 aa 02 90 29 96 49 23 fd bd d9 71 f1 09 6c 62 0f a0 40 06 02 d8 01 f0 f8 d9 92 d0 28 bf 68 00 80 40 5f 2e 3b 3b d2 df 1b fe 84 97 03 80 28 de 57 ad 02 c2 d9 6c f8 ff a0 ca 97 48 65 00 48 38 00 38 08 84 d9 7c 00 24 1f 00 32 72 65 12 45 7c 1c 00 98 0b d2 15 1c c5 29 b8 34 2e 3e 01 00 d5 50 f0 94 cf 7c da a7 9c cf dc 53 c1 05 99 62 Data Ascii: PNGIHDR4'J,iCCPiccHSwXSw>Jl"#!S$@!(E!u" ED.}>_?};ysh!"q)I#qlb@(h@_.;;(WlHeH88\|$2reE\|)4.>P\|Sb
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 7b 90 3a e4 5b e4 28 72 1a b9 80 f4 21 37 91 21 64 0c f9 15 79 8b 62 28 0d 65 a2 3a a8 09 6a 83 72 50 2f 34 18 8d 46 e7 a2 29 e8 42 74 09 9a 8f 6e 42 cb d0 1a f4 20 da 82 9e 46 2f a1 fd e8 20 fa 18 9d c0 00 a3 62 2c 4c 1f b3 c2 38 18 17 0b c3 12 b0 64 4c 8a ad c0 0a b1 52 ac 06 6b c4 da b1 2e ec 2a 36 88 3d c1 de e0 08 38 06 8e 8d b3 c2 b9 e1 02 70 b3 71 7c dc 42 dc 0a dc 46 5c 05 ee 00 ae 05 d7 89 bb 8a 1b c2 8d e3 3e e0 e9 78 6d bc 25 de 15 1f 88 8f c3 a7 e0 73 f1 05 f8 52 fc 3e 7c 33 fe 2c be 1f 3f 82 7f 49 20 10 58 04 53 82 33 21 80 10 4f 48 23 2c 25 6c 24 ec 24 34 11 4e 11 fa 08 c3 84 09 22 91 a8 49 b4 24 ba 13 c3 88 3c a2 8c 58 40 2c 27 1e 24 9e 24 5e 21 8e 10 5f 93 a8 24 3d 92 3d c9 8f 94 40 12 93 f2 48 a5 a4 7a d2 09 d2 15 d2 28 69 92 ac 42 36 26 Data Ascii: {:[(r!7!dyb(e:jrP/4F)BtnB F/ b,L8dLRk.*6=8pq\|BF\>xm%sR>\|3,?I XS3!OH#,%l$$4N"I$<X@,'$$^!_$==@Hz(iB6&
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: a9 40 5a 70 7d 9d db ba ea f5 b8 f5 a2 f5 3d 1b 1c 36 94 6f f8 50 28 28 bc 58 64 5b 54 5a f4 6e 23 7f e3 c5 af ec be 2a fb ea e3 a6 e4 4d 3d c5 4e c5 bb 36 13 36 8b 37 0f 6c f1 d8 72 a0 44 b5 64 49 c9 f0 d6 d0 ad 2d db d8 db 0a b7 bd d8 3e 7f fb 85 d2 e9 a5 d5 3b 28 3b e4 3b 06 cb 42 ca da ca 8d ca 37 97 bf ab 48 ad e8 af f4 ae 6c aa d2 ae da 50 f5 6a a7 60 e7 95 5d 9e bb 1a ab 75 aa 8b aa df ee 16 ed be b1 c7 7f 4f 4b 8d 49 4d e9 5e c2 de 9c bd 0f 6a 63 6a bb be e6 7c 5d b7 4f 6b 5f d1 be f7 fb c5 fb 07 0f 44 1e e8 ac 73 ae ab ab d7 ae 2f 6e 40 1b e4 0d 63 07 13 0f 5e fe c6 e7 9b b6 46 ab c6 3d 4d ac a6 a2 43 70 48 7e e8 d1 b7 49 df 0e 1c 0e 3e dc 71 84 73 a4 f1 3b e3 ef aa 9a 19 cd 85 2d 48 cb e2 96 f1 d6 d4 d6 c1 b6 f8 b6 be a3 41 47 3b da dd da 9b bf Data Ascii: @Zp}=6oP((Xd[TZn#*M=N667lrDdI->;(;;B7HlPj`]uOKIM^jcj\|]Ok_Ds/n@c^F=MCpH~I>qs;-HAG;
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 9c 32 ca 86 c3 a8 a8 b4 8e 10 4f 71 9a ba 25 e3 92 33 f6 b3 40 a8 01 18 62 64 fb f4 f4 11 53 9f 5e 3e c3 82 23 9d 9c ce 3e f8 0c ed 91 84 d4 06 59 ea 38 92 f3 49 16 c8 b2 3d d2 7a f2 a5 f2 95 3a 05 b8 7a a0 02 82 11 33 0f 14 33 22 22 38 2f 75 5e aa 37 ed 7d ce 62 dd 74 cb e0 f2 45 2a 5d 09 8e a2 9a 50 42 a3 a8 06 91 29 25 3b ff 25 12 e3 23 35 f8 38 c4 bb e9 e6 f3 41 22 4a b8 7e ae 4e c9 a3 0b 9e 7c 95 22 6b 79 59 a0 96 8c e0 7a 44 0c 09 ac d7 b6 8e 31 94 43 f3 73 79 a4 b2 b1 7a 50 e5 87 7b fc f9 ae 27 54 9f 50 22 11 da 7e be 08 87 44 6e b2 34 dc 39 a2 33 d2 24 30 d4 f9 91 46 37 ca 91 81 f5 c9 9a c8 50 69 d4 ef d2 7f 25 35 8a 6a 41 09 8d 22 eb ad 65 3e e2 22 91 19 6a 01 48 6b 24 f8 88 87 b4 80 86 44 08 24 a2 12 8a 50 8f bd cf 4b 89 f3 a5 25 6e 59 12 2c 9f Data Ascii: 2Oq%3@bdS^>#>Y8I=z:z33""8/u^7}btE*]PB)%;%#58A"J~N\|"kyYzD1CsyzP{'TP"~Dn493$0F7Pi%5jA"e>"jHk$D$PK%nY,
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: ea 83 21 5b db 62 64 34 32 0a 85 42 df 4b 2f bd 74 ef f3 cf 3f ff f9 93 4e 3a e9 96 91 d6 47 51 7f 50 42 a3 c8 9a cc e0 e3 b2 bf 8b 2f be f8 8c c3 0f 3f fc 2b 33 67 ce dc 39 d4 5b 5c 89 e1 a4 a8 5f 64 45 4c d2 e6 4f 6b d0 25 bf 63 e4 4a 91 1d 57 9e 44 5e 62 48 11 96 ef 43 d6 63 30 8b ed 3d 95 96 a9 67 64 bd 65 2c 6d 9d 69 cb c4 12 1a e9 b7 44 7e 7c d1 d1 b4 fd 35 eb b1 13 8a d1 dc cf 93 fb d4 de de be 76 f9 f2 e5 5f 39 fc f0 c3 7f 34 d2 3a 29 ea 0b 4a 68 14 72 07 19 98 3d 7d a4 26 88 cc 5c 76 d9 65 ef 3c ea a8 a3 be 32 61 c2 84 c9 92 17 b9 d2 3d d2 58 9e a2 f1 90 26 ba e2 cb 1b 4b b0 a4 68 0a 17 35 a1 08 8a 9b 87 33 c8 42 c8 0f 4e ab 86 17 bb 1a 86 5e 25 c6 a4 a2 3a 90 22 94 31 84 9e ca 2f c9 f2 11 76 df b8 71 11 12 cd 94 ca e3 3c 58 9f 46 42 d6 64 ba ab Data Ascii: ![bd42BK/t?N:GQPB/?+3g9[\_dELOk%cJWD^bHCc0=gde,miD~\|5v_94:)Jhr=}&\ve<2a=X&Kh53BN^%:"1/vq<XFBd
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 80 eb 0d bd b6 34 e5 1a 1d 1e 92 d9 3c 71 e2 c4 bd 86 55 21 45 dd 41 09 8d c2 05 b5 ad 0c ff a6 22 34 43 08 cd cc 99 33 c7 b4 b5 b5 cd 30 27 39 43 89 db 52 93 40 da 4a 90 06 b1 e5 74 eb cb e8 46 48 e4 25 44 06 67 f8 4b 1e 6c 8e 7c 60 7d 70 7e 6e fb 19 de 5e 83 c7 18 47 20 30 79 e2 b6 e9 60 54 ba 75 46 8d bd fa 84 af 4f 70 8e 2a 2a 2f 75 3e 4d 14 04 eb 95 f4 69 ce d1 e0 73 36 54 12 f1 0f 19 0f a1 64 be d1 e0 6b 8f 96 96 96 e9 c3 a6 8c a2 2e a1 84 46 e1 46 67 40 88 c4 60 88 db cf 5a 5a 5a 9a 9b 9b 9b c7 4b 8b 1c b7 d5 c7 67 50 a5 25 35 b1 c6 97 7a d6 ea 17 31 86 85 4f 46 c8 d6 36 89 90 fb a2 8f dc 98 48 8e 5d 32 e3 23 12 14 a9 e2 b6 97 71 c4 29 94 c8 f8 64 b9 f9 2b 81 3a 22 6a 07 9c 93 a9 52 42 12 d2 17 29 d9 ee f8 f0 d5 87 f3 fb b6 9d 85 10 9b d8 c8 a5 e4 Data Ascii: 4<qU!EA"4C30'9CR@JtFH%DgKl\|`}p~n^G 0y`TuFOp**/u>Mis6Tdk.FFg@`ZZZKgP%5z1OF6H]2#q)d+:"jRB)
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: bd c3 81 7a d1 b3 56 30 5c 06 82 2f ea 11 1a f9 48 fe bb 86 15 65 78 61 c3 8c 1b 5f 6e 94 c6 2d 87 f3 53 9e 68 ae af 61 43 91 1b d7 d2 35 86 18 89 da d7 47 16 69 9d 4a 21 ce 2b aa 5c 72 cc 11 16 f7 9c 14 cd 91 a2 1d 5c c4 c4 cd cf 11 7f 2c 87 da 6d 10 ba 7e 69 ff 56 28 b2 85 12 9a 06 84 e7 63 9a 12 b9 c1 e7 d9 99 bb b3 b3 d3 3e 3f 93 06 9c e7 cd 56 28 78 f8 42 3c bc 92 4e 95 1a be c3 65 7c a9 07 2f 0e 95 6c e1 08 89 fc 49 69 21 9e 5b ca 9b 4d c9 93 3c b8 d2 b6 2f c9 e0 f3 b5 0b 17 15 a2 ea e1 b6 ec b8 f5 61 99 31 fa 63 28 d9 19 7a 2f 6a 59 2e 17 85 93 fa 8a 4f 06 8e e8 84 46 08 43 fb 0e 26 50 95 02 8f 63 ae 0d 42 75 d4 31 a0 50 6c 87 12 1a 85 41 31 30 ea e2 fe 17 c9 50 73 73 f3 10 23 85 5b 6c a8 f4 98 28 0d b5 dd 66 b8 17 fe ac 16 3c 45 75 10 62 e8 f8 b6 Data Ascii: zV0\/Hexa_n-ShaC5GiJ!+\r\,m~iV(c>?V(xB<Ne\|/lIi![M</a1c(z/jY.OFC&PcBu1PlA10Pss#[l(f<Eub
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 64 87 00 e7 64 51 28 46 23 f4 19 9a c6 86 7d de 25 30 9f 8f 00 97 91 9c e6 e6 66 bb bb cd 47 60 5c a3 07 2f 1e 64 25 c2 ab 5e a9 74 4a a6 2f e4 2f d5 61 f3 f4 f7 43 cf b2 e5 f6 7f 2e b7 bd 49 8a c5 02 e4 9a 9a a0 65 8f 05 90 1b 7c 36 42 42 f7 f2 a7 61 db d2 87 a1 7f dd 46 28 f6 f5 02 e4 f2 d0 3c 6d 2a b4 2e dc 1d c6 1d b0 c4 30 42 18 ed 18 0e 72 e9 23 1f 69 ca fb e0 23 1f 12 31 08 35 ea a9 c8 0e 37 8e 24 e2 83 af 97 bb 16 f3 3f 71 52 84 1a 9f 6e 5e 29 ca ca 79 a2 a5 39 41 22 48 be 31 1c 83 7a 33 02 47 4a df 18 72 e2 1b 27 a1 0e 87 4a e7 8f 50 f2 e7 23 e3 31 32 b8 31 c8 39 1f d2 40 5c bf ea f4 99 d0 7a 8e 2e 29 86 07 4a 68 14 21 08 25 3d a5 28 8e 79 c0 d7 fe 60 3c b4 21 9e 23 6a 51 a4 bc 66 38 bf 4f 96 b4 58 06 91 9e ce 6d b0 ea 3f 3e 57 ba 60 cc 0a e7 5c Data Ascii: ddQ(F#}%0fG`\/d%^tJ//aC.Ie\|6BBaF(<m*.0Br#i#157$?qRn^)y9A"H1z3GJr'JP#1219@\z.)Jh!%=(y`<!#jQf8OXm?>W`\
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 7e 90 cf c3 f8 63 8f 14 e5 8f dd 67 2f 68 4e 08 8f f9 d2 fc 13 4f 0d 79 f6 a6 9e 11 6b 70 c6 e6 4f 13 31 49 83 34 7d 87 f2 fc 72 11 cc 44 37 ca b0 0a 25 f3 ae 1c 89 20 50 a4 2e 96 48 f9 9c 03 38 1f 55 a7 74 2f 24 02 c8 5d 67 ad 78 99 47 3b b2 68 67 8e 54 64 5d 0f 96 25 8d 01 ac 5f 48 1f 74 f3 e0 f5 8f 8b c2 60 1d a4 36 e0 ae c3 97 37 84 58 d5 22 74 0c 2b 42 a0 84 a6 81 50 dc 3e 2b 64 35 8b e5 b8 b4 a6 a6 a6 a2 34 79 fa 3c 70 d8 d0 f3 79 ca 2a d9 f2 12 02 8e 5c 0d a4 f9 e5 f6 3e f7 7c e9 77 d3 d4 a9 d0 bc c3 4c 6f 99 d6 3d 17 0c 46 74 00 fa 5f 59 07 7d 01 cf e9 28 b6 df 2f 7c af aa 01 ce 38 c1 3a b8 79 b0 91 82 fb 56 28 79 a1 8c 31 ca 88 f2 6d c1 c1 7a 50 84 0a eb 2e 19 7e 3e 83 8a ba 16 7c 1d ae 3e f2 d8 93 3d f8 d4 f9 91 24 da 8d 0c df 5c 8c fb 2c 57 96 Data Ascii: ~cg/hNOykpO1I4}rD7% P.H8Ut/$]gxG;hgTd]%_Ht`67X"t+BP>+d54y<py*\>\|wLo=Ft_Y}(/\|8:yV(y1mzP.~>\|>=$\,W
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 6d 63 4b c7 fd 5b b7 bf 20 60 48 5e 47 e7 82 21 40 ce 71 d3 d4 c9 19 e9 ab f0 b5 3d 05 a9 0f c5 1a 21 54 19 ce 68 93 d2 30 21 c0 63 8e 1a 6b 5c 54 03 93 17 4e 4f a9 1d 38 03 11 47 67 a8 f1 ea 12 1e fc db 57 4f 1a e0 88 95 82 6e a3 2c e1 23 da a1 24 97 bb 77 3e d2 e0 d3 0d f7 3f 6a dd 4a 3e f2 f8 e0 83 0f 42 47 47 07 4c 9d 3a 15 26 4c 98 00 33 66 cc 80 e7 9f 7f 1e 9e 7b ee 39 af d3 0e d7 47 b5 07 d5 0e 21 f7 23 94 b8 a7 c5 48 8d 19 1d ab 0a 1f 94 d0 34 2e 24 62 43 e5 0d 89 de 94 d0 de de ee 7c f6 66 e8 f6 15 ca 8b cc 6d 2f f0 1d 53 e5 7c db 4f b8 7c 31 28 ab 6f 7b e2 90 7c f9 b1 63 a1 69 d2 a4 52 23 f6 af 0f 7b fd 72 ff a6 f6 ed f2 f2 79 68 9a 3e 3d b5 ae 0a 3f 62 23 2b 69 cb 4a 32 a4 ed 27 92 97 99 33 0e 29 92 e0 8e 3f 4e 2e 76 36 48 f5 53 46 a4 5b 1f 95 Data Ascii: mcK[ `H^G!@q=!Th0!ck\TNO8GgWOn,#$w>?jJ>BGGL:&L3f{9G!#H4.$bC\|fm/S\|O\|1(o{\|ciR#{ryh>=?b#+iJ2'3)?N.v6HSF[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49917	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	650	OUT	GET /api/public/content/56afca39b49f4d2cbd39cc7efa7fa0f4?v=34b2edca&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	626	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 285998 Connection: close CF-Ray: 8a5d6d1349e48cba-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=AT_integration-1.png; filename*=utf-8''AT_integration-1.png ETag: "0x8DC1815BEA3DBCC" Last-Modified: Thu, 18 Jan 2024 11:08:05 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 122008 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 f5 00 00 03 d3 08 06 00 00 00 f1 4e 29 d2 00 00 00 09 70 48 59 73 00 00 1e c2 00 00 1e c2 01 6e d0 75 3e 00 00 20 00 49 44 41 54 78 9c ec 9d 09 b8 1c 45 b9 f7 df 59 cf be 24 27 c9 c9 be 03 61 5f 05 44 41 44 16 01 11 04 44 44 c1 ed de eb 82 7a f1 5e b8 a8 5c 14 57 dc 10 50 51 14 94 4f af a0 e2 02 08 b2 c8 12 42 c2 be 05 08 81 90 10 42 12 b2 6f 27 67 5f 66 e6 7b aa 7a aa a7 ba a6 aa ba 7a ce 9c 65 3c ff 1f 4f 38 33 dd 55 d5 d5 dd d5 3d f5 7f df b7 aa 62 b9 5c 8e 00 00 00 00 00 00 00 00 00 50 79 c4 47 ba 02 00 00 00 00 00 00 00 00 00 28 0d 88 7a 00 00 00 00 00 00 00 00 a0 42 81 a8 07 00 00 00 00 00 00 00 00 2a 14 88 7a 00 00 00 00 00 00 00 00 a0 42 81 a8 07 00 00 00 00 00 00 00 00 2a 14 88 7a 00 00 00 Data Ascii: PNGIHDRN)pHYsnu> IDATxEY$'a_DADDDz^\WPQOBBo'g_f{zze<O83U=b\PyG(zBzBz
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 8f 7b b6 7b f6 99 88 b2 f9 fd 71 91 2f 93 c9 f0 bf 89 44 22 90 47 7c 96 cb 90 8f 27 fe 26 12 89 6c 36 9b 8d 67 b3 d9 40 3d d8 77 86 7c 7c 79 bf 7a ee a2 de f2 39 b0 32 e2 f1 78 36 97 cb f9 15 10 c7 96 d3 8b ef a2 cc 7c 1a 9e 4f 77 4d 55 d8 35 60 f5 14 79 45 fd 6d f5 95 3f ab d7 48 77 1c 53 b9 ba f3 91 cf 49 5c 43 76 1d 32 99 4c c0 11 23 e7 b3 5d 5f b9 3d c8 f7 59 57 57 f6 99 5d 0f 96 4e be 77 f9 bc fc a6 b2 fb ad 9e 9b e9 7e ab 6d 98 95 c1 ee 8b 7c 1d 74 75 51 eb a5 ab 67 2c 16 cb b2 b6 2c d7 51 ba ff 81 6b ca d2 e6 b7 c5 75 d7 4d ae ab 38 0f f6 79 60 60 c0 bf 16 6a 3b d3 dd 37 f5 ba e8 da 5b d8 33 ad 5e 4f f6 59 6e 63 61 d7 46 d7 0e 74 f5 50 f3 cb f5 12 c7 12 f5 30 95 ad 2b 43 7d 5f 88 fd 86 7b 18 d8 6e bb a6 a6 f3 08 2b 57 77 7d e4 67 de 76 ad 6c ef 28 Data Ascii: {{q/D"G\|'&l6g@=w\|\|yz92x6\|OwMU5`yEm?HwSI\Cv2L#]_=YWW]Nw~m\|tuQg,,QkuM8y``j;7[3^OYncaFtP0+C}_{n+Ww}gvl(
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 0d cd 97 cb 54 3f ab b8 1a 75 c3 ca 89 ca 58 15 f9 31 4d 5b c9 37 cd 4c 7b 47 db c2 b6 b6 dd 1f df 6f bf 7d de 8a 5a 2e 44 3d 00 00 00 30 04 94 bb b3 f2 f4 53 cf 4e 68 6e 6e fe ea b8 f1 2d 9f a3 1c 55 d9 c6 55 9a 3a 7e 51 44 bd 8b b7 5d 4c 30 64 0c ed 54 44 7d c5 74 e2 c2 62 93 e5 6d 32 a3 5e fd 44 c7 16 11 60 0c bf b7 84 e5 fb a2 5b 0a b1 0f 8a 7d 79 76 b9 60 7e 5f e4 4b e1 fd 45 a2 a5 a0 86 82 a2 5f 16 cf 3a e1 55 2a 61 51 01 ba 7d 51 07 f4 97 c1 9b 1f d6 84 73 11 9b b4 d1 73 3f 12 83 a9 6d 42 3d ac 3e 2e 06 9f b0 08 10 53 db 52 ca 34 bd 9b 73 06 8f bf 56 54 1b c4 7e 29 b8 8a fe 31 c7 50 b7 e1 98 d9 70 c4 ee 41 5f 5f df b6 1d 3b 77 5c b8 6e dd da bf 1e 7f fc 71 ce 5e 7b 88 7a 00 00 00 60 08 28 67 07 e9 c9 27 9e 3e 78 f2 94 c9 7f a8 af 6b dc 4b dd 57 e4 Data Ascii: T?uX1M[7L{Go}Z.D=0SNhnn-UU:~QD]L0dTD}tbm2^D`[}yv`~_KE_:U*aQ}Qss?mB=>.SR4sVT~)1PpA__;w\nq^{z`(g'>xkKW
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 9d 38 5b 3a 1d 26 23 80 b7 51 4a 27 26 40 93 66 cb 17 de 58 bf 8c e1 10 ed 36 6c 87 57 c5 ba fc 57 75 83 9a dc a3 aa b7 df f1 74 8b c6 fe 9b f6 0f 12 97 eb ef 32 fe 5e 7c 56 c3 eb 83 21 fb 9e 18 29 a4 93 2e 58 60 cd 7a 55 6c 17 d7 45 08 7f 3f 12 40 f6 5e 8a b6 cd 1b 9e 46 50 c7 1c 3d bd ea b8 78 b1 df 45 70 eb bc b2 43 80 a9 74 9b f0 d6 79 ee 55 91 2f fe aa 81 2c 3a bb 56 c9 ed 4b 5a de cd 19 9d c0 f6 0f 66 98 2c cf 64 88 d1 88 73 35 5d 20 3a 44 67 00 90 cb 92 df 8d 16 91 ea bf 63 f3 6d 96 6f 93 f6 19 af 89 d4 06 ad 42 3b 78 b0 e0 b9 58 de fd fe f1 35 46 05 53 04 80 ce bb ff 2f e9 81 77 31 c4 b9 a0 33 f2 69 da 2c 7f ee 62 44 f5 75 8d c7 bf be ea 8d 6b 68 14 02 51 0f 00 00 00 48 fc e3 1f 77 4f 9f 38 b1 f5 86 89 13 27 55 31 31 2f 4f 8c a7 76 dc 6c de 77 f1 Data Ascii: 8[:&#QJ'&@fX6lWWut2^\|V!).X`zUlE?@^FP=xEpCtyU/,:VKZf,ds5] :DgcmoB;xX5FS/w13i,bDukhQHwO8'U11/Ovlw
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 4d c7 36 44 6b 98 86 52 08 23 94 ef 9d 37 45 06 48 c3 4b 8a 0c 57 da aa 15 1b 0e 74 ef f0 52 c5 75 98 31 c1 96 46 ad 1f 04 be 44 fe 9a a5 d3 e9 09 8d 0d 8d 17 d1 28 01 a2 1e 00 00 c0 98 e7 8e db ef 9c df d2 d2 f2 d1 a6 a6 e6 18 eb bc 64 b2 85 c9 f1 54 6c 13 1a 99 44 b3 2e af cd 20 20 fe ea 26 d8 d3 ed e7 fb a4 89 cd 54 e3 82 29 bd 5a df a1 ee b8 0d 49 c8 be 4e 84 cb aa 47 a4 31 a9 20 55 75 0a 67 ad 5c a0 21 cd 50 8c 8f 77 c5 b4 84 9d 7a 2c 39 9d fc 59 7c 8f 62 68 51 87 75 c8 47 12 f3 2e c4 34 ed ce f3 d8 0b e1 63 10 a2 be 97 3c 70 c0 68 e1 f6 6a da 30 a1 27 8b ae a8 42 56 37 66 3b ac 7e 61 45 1a 9a 6e e0 92 48 db e4 a6 a8 da a5 44 39 25 b5 b6 72 bf 07 5c bd ef 62 9b 4b 34 86 4b c4 85 cb 76 55 78 fb 46 26 c5 f0 a4 1e 4b 7d b7 fa bb 0a e5 8a fc fe 3d d5 08 Data Ascii: M6DkR#7EHKWtRu1FD(dTlD. &T)ZING1 Uug\!Pwz,9Y\|bhQuG.4c<phj0'BV7f;~aEnHD9%r\bK4KvUxF&K}=
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: cb 87 6c ab fb 55 03 80 fc d7 3f 8c a9 2a 6e 35 76 6f 6d ba 6b 66 bb 57 ba b4 ba eb 6f 0a af b7 1d 5f 35 d8 28 c2 b5 30 49 a3 a5 3c d9 f0 a3 6c 93 af 89 3c 4c cb 37 c2 8a 7d ea 31 4d f5 08 1c d6 6c e0 75 8d 08 93 b7 45 99 e3 c5 25 6a 60 54 87 d4 c7 4a 98 00 33 6a f9 9c 5c ac b1 b1 f1 84 f6 dd dd 23 1a 86 00 51 0f 00 00 60 cc d2 df d7 3f 2f 16 8b cd ac af ab d7 0a 1e d3 38 74 93 47 c3 d4 69 92 bd 96 3a af bf 3a d6 de 26 d4 5d 43 fd fd 7a 2a a2 aa 78 02 a7 e2 71 fe 91 c7 5d aa b1 d4 25 78 ff cb 8e ed 14 64 57 a5 10 8f 81 9e b9 46 fc 47 89 57 76 3c f5 52 a3 18 5c 84 bc 4b e4 84 ce 7b af d6 cf 34 cb be ba a4 9d ec 79 e7 97 4b 0a b5 17 61 f9 22 a5 7f 29 3d 17 a6 54 3f f9 d9 32 08 66 eb 49 4b de 59 1d 3a 4f bc ad e3 af 0b dd 76 11 a6 36 51 68 4a 27 09 75 d5 b6 Data Ascii: lU?n5vomkfWo_5(0I<l<L7}1MluE%j`TJ3j\#Q`?/8tGi::&]Czxq]%xdWFGWv<R\K{4yKa")=T?2fIKY:Ov6QhJ'u
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 44 a9 5e 7e 5d c7 4c fd ab 1b 2a a0 96 69 3a 9f a2 63 68 c2 b6 75 d7 6a b0 93 e2 0d c9 9a ed 61 45 0a d7 a4 ec 9d 57 bd 26 15 9d 4b 00 00 20 00 49 44 41 54 f5 b2 da 51 bd f5 3a c5 a4 7a f2 25 85 35 d4 1d cb b0 c8 05 5d 78 bd c8 17 25 9a 42 3d 4e 51 08 bf 3f 16 b9 b0 7c 5d 60 72 be a2 67 4a 35 16 08 a1 22 5f f6 7c 98 7e 41 d9 14 42 f3 d5 b0 68 dd d8 68 35 84 da 24 e6 c2 c4 bf ce cb 6b 33 10 94 7a cf c3 c2 c9 2d e8 9a b2 da cc e5 a6 af 36 63 11 11 a1 36 e5 a2 2a 2a c7 b3 57 6a 08 3d b0 a6 a8 06 53 e8 be 7a 6d 75 f7 df 24 f2 d5 e8 0f b9 2d fb 49 35 86 21 c3 77 35 8f ff 1b 60 10 e2 b2 f7 de 25 4a 2c 78 ea 66 03 af 29 92 cb c5 d3 3f 9a 89 95 31 8a c0 e5 70 f1 78 b2 86 46 10 88 7a 00 00 00 63 96 6c 2e 97 b6 4d f2 a6 62 12 ca 6a 1a dd 77 5b 87 c8 34 16 de 24 f6 Data Ascii: D^~]Li:chujaEW&K IDATQ:z%5]x%B=NQ?\|]`rgJ5"_\|~ABhh5$k3z-6c6*Wj=Szmu$-I5!w5`%J,xf)?1pxFzcl.Mbjw[4$
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 00 30 66 49 26 93 94 cd 65 f3 df c2 bd c2 3a a1 6d 1a a3 a8 23 2c 84 5e 16 e8 a6 4e 90 7a 0c b5 a3 a5 96 25 d2 d8 c2 f1 6d 46 06 55 dc 7b de 22 c9 f0 a0 86 66 2b de 1c 57 c1 ee 82 53 27 b2 1c 61 ec 36 81 ae 0a 7b d5 dd 29 d0 29 9d 90 e3 84 8d 51 b7 11 b6 54 9d ea 71 b7 a5 b1 19 00 6c 13 df e9 bc f6 ba 30 ff 42 f9 22 ea a3 f0 57 5b b6 1c f1 22 8e e3 b7 33 c5 e3 59 70 23 2b ea 55 ba 59 42 70 a9 22 50 fe ac 7a 99 55 91 a6 8a bb b0 b6 59 8a e0 14 65 97 09 5d 13 0d 54 c3 f0 dd 66 04 50 bd f7 ba 6d 91 ce 20 aa 71 24 0c 97 68 01 d3 d0 0a 5d 24 80 d8 2e fe 99 ea a6 89 02 f1 df c3 01 83 96 6c a0 2a 18 a0 0a d1 25 62 97 c6 f8 20 f2 4a f5 50 8d bc 26 c2 84 bc 6d 78 57 14 6f ba 6d 48 9a a9 1c 9d 51 ba 12 c8 8d f0 d0 01 88 7a 00 00 00 63 96 82 63 c6 5b a7 de 28 76 42 Data Ascii: 0fI&e:m#,^Nz%mFU{"f+WS'a6{))QTql0B"W["3Yp#+UYBp"PzUYe]TfPm q$h]$.l*%b JP&mxWomHQzcc[(vB
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: e5 a5 b6 c2 84 b9 8b 17 43 dd a6 13 f4 a6 ce bf ae 03 66 32 10 e8 ca d0 d5 51 ed 3c aa 65 eb c4 b4 2d 3c 33 6a a7 2a 20 f2 f2 3d 7c 9b f0 56 d7 3a 1f 31 74 0e 5d 79 9b e9 b3 9c 4e 16 f2 23 74 2a 61 e3 e7 cb 51 be 3a 7e de df a6 ac 94 c0 c4 83 a7 6b 58 3b 92 fa ca 6a 14 03 df 26 66 f8 56 0d 22 42 88 0b e1 13 b0 04 04 f7 a9 db fc 32 45 94 40 5e 98 15 79 d3 e5 ed 7a a1 15 d8 2e 6f 0b a4 93 ea 61 ca 5f 44 a9 f7 c9 d4 20 4b b7 61 95 52 86 20 1e 8f 51 3c ee bd 67 85 21 a7 9c 8f 40 e0 5d 99 f5 5a 99 f7 de f2 8f a8 c4 0f 94 67 ee 08 35 8f f8 1e 88 3a 32 ec 77 d9 ae 1e cf 76 0c db b1 5d de b1 ae 06 57 5d 7e 53 bd 4a 25 58 8e 78 ff 8b af de 27 d6 9c d4 68 82 d8 28 f6 a2 0f 07 10 f5 00 00 00 c6 2c c9 64 2a 34 fc de 34 76 30 2c 24 df 65 cc a1 2c 98 75 df 75 e5 84 95 Data Ascii: Cf2Q<e-<3j* =\|V:1t]yN#taQ:~kX;j&fV"B2E@^yz.oa_D KaR Q<g!@]Zg5:2wv]W]~SJ%Xx'h(,d44v0,$e,uu
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: a7 92 34 90 61 a1 f8 d9 fc 84 89 21 51 0b 9a 7a b0 2c 39 d6 ae 6a d2 5c d0 47 c1 55 9c ea f6 b9 08 fe a8 75 d0 bd 9f d5 f6 1e f6 9b a2 7b 47 cb db 5d 8c 59 ba ba c9 a8 cf 94 ae 2e 2e c6 12 97 fd 36 43 b9 8e da da 6a de 0e d8 8a 36 b2 c7 bc 1c 6d b6 52 84 3f 44 3d 00 00 80 31 4b 3c 3f f3 bd 6b 98 a0 a9 43 e7 1a 76 68 12 cc 61 5e 44 5d 47 5f e7 f9 b3 75 02 c3 3a 6e 36 a1 a1 e6 97 85 51 18 d6 6b 23 8d 9f f7 eb ad cc 78 9f 60 13 5e 89 ce a4 3a 5e 5b 33 83 f4 60 88 32 39 5f 68 3a 9b b7 5e f5 f0 0b e1 af 13 fa 4a 79 c3 39 81 60 d8 f5 d4 ee 97 04 3d fb cc bc f4 a9 64 82 aa aa 52 45 06 24 15 9d 60 56 bf 9b 0c 67 61 02 59 4d a7 4b 2f 3f 37 ba f6 1d c5 d0 a6 fb 1e f6 4c ba 1c 2b 2c dd 50 89 18 d7 e7 dd 85 ea 9a 2a de 36 98 f8 2a f2 32 1b f2 14 c4 bc 27 e8 33 d9 01 Data Ascii: 4a!Qz,9j\GUu{G]Y..6Cj6mR?D=1K<?kCvha^D]G_u:n6Qk#x`^:^[3`29_h:^Jy9`=dRE$`VgaYMK/?7L+,P62'3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49914	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	650	OUT	GET /api/public/content/b310bf37eca948cbac2e2b1e79015256?v=aa212b94&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	632	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 179707 Connection: close CF-Ray: 8a5d6d13487343a3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=Colab_AiInspections.png; filename*=utf-8''Colab_AiInspections.png ETag: "0x8DC1817D468FA55" Last-Modified: Thu, 18 Jan 2024 11:23:00 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 122238 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	737	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 34 00 00 03 16 08 06 00 00 00 27 16 c3 4a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec 5d 07 9c 54 c5 fd ff 6e bb db 6b 70 77 f4 0e 02 52 44 45 01 11 2b 02 12 ac 28 58 f0 6f 89 31 c6 d8 a3 c6 18 12 25 1a 63 ec 89 bd c4 82 1a a3 41 13 14 3b a2 51 54 50 01 91 22 bd f7 76 b4 e3 fa d6 ff e7 37 6f df ee ec ec cc 7b 6f ef 76 8f 03 e6 cb e7 d8 dd f7 a6 bd f7 66 de fc be f3 2b e3 8a 46 a3 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 38 10 e1 de df 0d d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 a8 2f 34 a1 d1 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 38 60 a1 09 8d 86 86 86 86 86 86 86 86 86 86 c6 01 0b 4d 68 34 34 34 34 34 34 34 34 34 34 34 0e 58 68 42 a3 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 Data Ascii: PNGIHDR4'JpHYs.#.#x?v IDATx]TnkpwRDE+(Xo1%cA;QTP"v7o{ovf+F8/48`Mh44444444444XhB
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 7e 65 d5 70 f9 cc 9f 7c 7a e3 1e 02 51 76 2f e8 b6 c5 6e 76 2c 9f 79 7f 93 5a 2c 96 4b e5 b9 5d 89 32 e8 1a d9 b9 08 4b 48 d7 6d dc 6b 17 7b 2c ec 72 5c 2e 76 dd f4 3d 12 01 dc 6e f3 79 70 f5 9a b7 9d 15 65 de 5b 2a 2b 92 74 1f cd f2 e3 d7 14 e5 9f 83 59 42 b2 ac 4c 75 1a 79 b9 fa 62 29 22 61 f3 3a 52 bb 10 6b 56 fc 5e 27 d7 19 13 ab 58 9f 31 eb 63 d7 19 49 f4 37 a3 3e 6a 7b e2 d9 25 da 61 de a7 44 bf f1 78 dc 49 fd c5 a8 2f 8a 70 d8 38 47 df 8d 3e 62 b4 c3 b8 0f 89 fc c9 6d 37 8e 99 7d ca 68 5b 34 7e bf e8 b8 79 2f cd fb 17 0e 1b f7 9a ae 89 3e a9 5e fa a4 f3 74 ce 6c 5f e2 9e 24 df e7 a4 be 26 f4 d3 c4 b3 48 1d 37 c9 f7 d4 68 97 2c bd 39 b6 a8 1d 7c ff e1 cf db c9 e2 aa fa 53 61 f4 3d 55 da 44 39 32 5e 96 fe 7d 49 af 9d 99 e2 c5 c9 e5 24 da c6 e7 11 f3 Data Ascii: ~ep\|zQv/nv,yZ,K]2KHmk{,r\.v=nype[*+tYBLuyb)"a:RkV^'X1cI7>j{%aDxI/p8G>bm7}h[4~y/>^tl_$&H7h,9\|Sa=UD92^}I$
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: d9 e6 59 97 cb 95 93 f4 f6 63 da 16 f6 25 f1 9b 3f 97 f8 91 5c 60 26 6c c4 55 65 28 db a0 d1 d4 90 09 21 c0 89 4f 88 5d 3e a7 64 c7 6c 2f af 41 b1 0a 0e 60 96 2d cb c7 a7 95 d5 2f 1e 57 f9 e7 c8 d2 8b 5a 21 95 f9 1a ff af b1 ee bb 46 ec fe 65 61 51 27 9d 32 ad c8 85 78 4e 66 fe 65 a6 53 91 20 93 fc c8 88 8f 8c 78 88 e9 44 42 24 92 28 bb 6b 15 eb e3 db 62 87 b4 35 43 4d b1 af 9b da 18 97 c2 14 8d d7 d6 c8 3e 33 78 49 d1 a8 cb 53 5c 52 32 61 c1 fc 85 3d 32 57 aa c6 c1 0a 4d 68 34 b2 8a fc bc bc 6b fd fe bc 9e 29 6f bd d8 a6 89 52 0d 8d 6c 09 c8 ce 9f 26 1d 02 c2 97 c1 e7 53 69 86 34 f6 3b 64 26 53 e9 38 f7 cb a0 f2 2b a9 6f 3e 91 a4 c8 4c c3 64 44 44 24 2d 4e 7c 46 ac c8 8e d8 36 99 d9 9a f9 db ca 1f c5 8a 78 f1 c4 4a ac a7 3e a8 8f 29 5a 63 a3 a9 08 9f d9 Data Ascii: Yc%?\`&lUe(!O]>dl/A`-/WZ!FeaQ'2xNfeS xDB$(kb5CM>3xIS\R2a=2WMh4k)oRl&Si4;d&S8+o>LdDD$-N\|F6xJ>)Zc
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: fc 78 64 c4 c5 2e a0 80 ca ec 4d 76 1d e9 b4 d3 aa fd fb 15 a6 16 46 46 76 c4 34 3c 9c 34 db c9 eb 9a 5e 53 1a 1a 16 d0 84 46 23 6b 70 b9 dc 82 6f 8c 69 6a 66 12 12 33 58 00 4b ad 2a 25 91 56 e5 27 93 89 bd 69 32 91 4f e3 80 81 9d 26 82 90 ae 49 95 15 d9 10 cb 95 a5 b3 32 19 b3 22 1c bc 16 47 6c b3 8a 18 f1 d7 27 33 63 93 69 8a 54 f7 c8 ee 3e 38 31 61 73 72 5e a3 f1 51 5f 21 5a d4 b2 a8 4c cb c4 fd 69 c4 63 aa f4 e9 90 09 99 39 9a 78 6d b2 7d 6c 64 ed b0 8b 76 a6 2a db 89 79 1d 4b 6b 8e bb a6 3e 07 f1 c4 85 37 39 93 68 6a d8 35 89 a4 47 84 1e fa 1a 19 80 37 13 85 68 68 88 08 06 42 91 68 34 22 bc f1 b8 9f f1 ef 9c 99 19 3b ce f9 d4 24 db a7 a5 7f 93 1b d3 df 46 5a 44 76 c3 73 1e 72 c8 e0 bd 74 4a 56 d2 d1 f4 38 09 26 60 a5 51 e1 8f 59 f9 cc c8 88 92 ca 9c Data Ascii: xd.MvFFv4<4^SF#kpoijf3XK%V'i2O&I2"Gl'3ciT>81asr^Q_!ZLic9xm}ldvyKk>79hj5G7hhBh4";$FZDvsrtJV8&`QY
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: b5 33 2b b3 32 0b b3 22 33 e2 98 11 f3 13 dc 6c 31 c4 c3 de 05 81 40 2d f6 ee ad 42 65 55 25 02 75 b5 08 86 82 f1 b2 3c 1e 22 3b 86 d6 46 6c bb ec b7 f1 61 ce 5d f4 9f 27 f6 97 03 20 df 48 6f 9e 8a 46 b0 af 7c 27 16 2c d8 88 05 0b be c6 cb 2f fb d0 a6 6d 57 0c 3e ae 3f 86 0e 1d 82 53 4f 19 84 92 52 22 47 40 6d 4d 10 a1 10 2d d8 34 41 c4 e7 6d ee 98 39 9f f3 f3 bd d5 dc 2f 2b d3 a6 eb 1f 2c 63 43 23 7b d0 84 46 23 2b f0 e5 e4 ba a5 cb 37 f1 17 bf 69 62 26 7b 91 09 07 e2 44 47 f2 42 a3 c9 c5 4d 82 a9 27 4e 66 9c 84 c8 b4 9a b0 32 85 74 ec a3 1b 52 de a1 07 17 23 1f 3e 1f 09 0e 60 c2 a0 0a 52 62 13 35 c8 8c df ef 63 5d ca ec 33 fb d3 e4 46 06 3b 9f 02 ab d5 6f 3b 8d 8b 95 93 b2 93 7e 26 96 a5 2a 23 9d be de d0 31 79 a0 8d 0f 23 0a 7d 94 bd b7 dc 6e 1f 13 62 Data Ascii: 3+2"3l1@-BeU%u<";Fla]' HoF\|',/mW>?SOR"G@mM-4Am9/+,cC#{F#+7ib&{DGBM'Nf2tR#>`Rb5c]3F;o;~&*#1y#}nb
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 38 eb 1b 56 6d 75 4a 46 9c c2 6a b5 5a 56 87 ac 2d 62 bb f8 bc 76 5a 4c d1 d4 46 96 d7 49 fb c5 ef b2 df fc 31 ab e7 2f 0a 9e 87 ca 18 23 8d 63 53 84 dd b3 72 92 5f 46 26 ec 08 ad 95 59 a4 cf e7 65 7b c4 6c de bc 01 1b 37 ad 63 7e 32 a4 8d 21 47 7f 59 1d 2a b3 46 3e 1d 3f 76 ec da 90 2e c4 eb b7 5a 30 31 ea 8f d0 ce 6a 31 8d 4d 31 3e fc e8 6d 8c 1a 75 39 5e 7a 69 12 3c 5e 17 33 43 b3 23 54 2c f4 b4 45 18 fb 06 9b af 59 dd 06 93 b4 98 55 88 9f e6 77 07 da 9e 43 65 fc 6b d4 1f 9a d0 68 64 05 3e 9f 8f 54 27 c6 0f 97 e2 2d 25 7b d9 99 ab 5e b2 c9 22 be 22 c6 bf f8 d5 ab 6e 4e 56 e1 f5 4b 72 ff 22 33 84 c0 81 4f 11 8b 33 61 f6 91 e8 7e 6b 6b 3a a6 90 76 7e 28 76 69 ac f2 c8 56 a4 55 5a 13 95 4f 81 6c 95 bb 21 ed d3 88 df d9 b4 4c 99 1a 0b 76 a6 60 4e f2 ab cc Data Ascii: 8VmuJFjZV-bvZLFI1/#cSr_F&Ye{l7c~2!GY*F>?v.Z01j1M1>mu9^zi<^3C#T,EYUwCekhd>T'-%{^""nNVKr"3O3a~kk:v~(viVUZOl!Lv`N
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 48 5c bf 41 a8 5c ae 0d e8 d1 63 10 26 4e 7c 02 1d 3a b4 44 55 65 20 46 60 f6 13 64 9a 15 d5 31 82 c5 bb db 98 f3 23 55 2d 5a 16 6b 42 a3 a1 84 26 34 1a 59 c1 0f 73 7e ec da b1 63 a7 59 5e af b7 b5 ad 2a 59 24 38 b2 63 fc 9b 30 f6 61 a5 a1 a9 af 80 a3 49 cf a1 ab a1 91 97 9d f9 d5 6c 3b 82 d3 70 82 e7 4c f3 63 65 06 27 d3 0a 89 f9 ed c8 8f 58 8f 1d 91 92 b5 2f 9d fc e9 d6 d9 14 71 20 13 1a a7 24 de ea 7c 92 c9 19 a2 f0 92 b6 24 c7 87 9d bb 76 62 07 db 57 26 cc c8 47 7d c6 8f 79 8e fe 82 a1 20 23 2b f9 f9 f9 28 2a 6c 8e 82 82 02 e4 e6 f8 99 76 26 1c 09 b3 67 40 30 89 8c 95 86 52 04 4f 34 28 49 6e ae 8f 45 24 33 d3 87 42 51 2c 58 b0 08 1f 7d f4 35 3e 99 3a 1d db b7 2d a3 d9 0c 40 8b 98 49 9a b5 f9 a9 aa 0d 86 cb ea 06 b4 68 d1 1d 6f bc f1 0f f4 ec d9 01 d5 Data Ascii: H\A\c&N\|:DUe F`d1#U-ZkB&4Ys~cY^Y$8c0aIl;pLce'X/q $\|$vbW&G}y #+(lv&g@0RO4(InE$3BQ,X}5>:-@Iho
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 9e 50 ec 34 35 aa 95 34 7a 69 ee dc b9 1b 8f 3c f8 34 36 6c d8 c2 48 d6 c9 a7 1c 87 eb 6f fa 25 3b 6f ae e8 39 85 15 b9 e2 5f d0 54 6e e2 77 22 8a 4e 63 42 9c 98 d3 bd d6 03 c9 87 c6 4a e6 e0 05 05 a7 93 a8 99 a7 3e f7 cc 89 b9 98 d8 16 aa 47 26 e0 ab 8e f1 04 44 76 9c cf 23 d3 e6 f0 65 8b 69 45 0d 8d 78 0f ac 56 ad f9 f3 4e c7 a9 78 8c bf 2f b4 22 9f 0d 82 62 77 0d 99 42 53 f3 a1 c9 04 54 66 58 29 44 14 51 14 16 f8 b1 6b d7 3e 7c 3a ed 2b a6 45 c9 cb cb 8b 2b fb 4d d4 d6 06 51 5a 5a 88 c3 0f ef c0 06 3b 11 94 f8 da 99 cb cd 7c 61 42 a1 00 9a 35 2b 41 9b 36 ed 91 e7 37 fc 6e 58 0d 36 fe 3b e6 71 11 aa 05 34 d5 b8 e2 cf 89 df cd df b2 ba 22 94 0e 2e 14 16 e5 b2 df 5f 7e 39 0b 77 de f9 00 b6 6d 5b 06 97 ab 23 85 49 60 1a 18 d5 62 9e b4 fc e8 1a 0c 1a 74 36 Data Ascii: P454zi<46lHo%;o9_Tnw"NcBJ>G&Dv#eiExVNx/"bwBSTfX)DQk>\|:+E+MQZZ;\|aB5+A67nX6;q4"._~9wm[#I`bt6
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: cd 9c 39 3f 61 fc f8 1b 48 7f 80 29 ef 0d c7 8c 6f 5e 8d 4f 6a eb 36 6c 41 75 d5 56 54 56 55 b3 f4 2b 57 ac 62 42 a1 69 6e 46 42 14 11 9c cb 2e bf 13 df 7f f7 16 00 3f 19 5c e0 5f ff 7a 0a bf ff fd 03 b8 f1 c6 cb 94 9a 05 f3 da 68 df 38 af 97 9b 24 eb 02 c8 cd cd 91 0a 6a 81 60 08 cf 3f ff 10 56 ac 58 86 f3 cf 3f 3d e9 bc 61 d6 97 4c 7e 44 21 8f bf af e2 39 3e 5f 63 80 9f 00 d3 25 37 2c 8f cb 85 29 ef 7e 8c 17 9e 7b 1d 67 9f 3b 12 1d 3a b6 41 80 99 ad 98 e5 27 ba a7 37 c7 c7 b4 38 ff 7d fb 03 e4 e6 e6 62 fc 9d 37 27 3d 03 be 4c 93 f4 99 44 e4 f5 d7 3f c0 e7 9f bf ce 36 d8 eb 7f cc 87 e8 d1 bd 0b 4b 5b 5d 5d 8b 5f 5c 75 17 22 e1 e5 38 a2 df 19 18 39 f2 04 bc f6 da 03 98 3b 77 1e 2e ba e8 8c 78 79 e6 15 52 8b 48 68 67 ab fb e1 30 5b c5 e6 05 27 ea 47 fc ce Data Ascii: 9?aH)o^Oj6lAuVTVU+WbBinFB.?\_zh8$j`?VX?=aL~D!9>_c%7,)~{g;:A'78}b7'=LD?6K[]]_\u"89;w.xyRHhg0['G
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 6a c4 eb 4b 94 43 ed 6d 81 48 78 03 6e ba f9 2f f8 e0 fd 67 91 e7 cf 41 4d 6d c0 11 51 69 14 4d 4e aa 22 4e 87 6c d6 48 0b 9a d0 68 64 05 15 95 95 28 2e 2e a6 e5 d6 64 7b d8 a8 43 1f 1a 96 8e db 87 26 7e 32 55 48 b4 0b 0a 60 82 84 93 b2 b2 9d f8 e7 2b 6f 63 f3 e6 6d e8 77 64 1f fc fc 17 17 b1 15 d6 0d 1b 36 e3 b9 a7 27 62 f3 a6 2d d8 b3 67 1f 1e 7d e8 59 5c f6 f3 0b 50 51 5e 81 bf fe e5 31 b4 ef d0 06 27 9f 32 d8 f2 9a c5 d5 6d 12 70 df 99 fc 01 5a b6 ea 8f b3 cf 3e 0d af be f2 10 a6 bc f7 25 23 34 4e 51 52 d2 9c d9 4d 57 ec 5b 87 97 5f 9e 84 71 97 8c c6 ac 59 73 d9 39 0a 5f 7a f3 6f ee c7 07 ef bf 80 c3 0e 3b 19 9d 3b d3 66 6a cf 63 e1 4f 6b f0 e9 d4 97 d9 75 ac 59 b3 18 7f 18 ff 10 0b 01 3a 66 ec 75 38 f1 c4 63 b0 64 c9 7c bc fa da 07 8c d0 d0 ea f6 f4 Data Ascii: jKCmHxn/gAMmQiMN"NlHhd(..d{C&~2UH`+ocmwd6'b-g}Y\PQ^1'2mpZ>%#4NQRMW[_qYs9_zo;;fjcOkuY:fu8cd\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49915	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	415	OUT	GET /api/public/content/05ce22f3f02a4d20874334d3a17ced9b?v=4af23d84&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	656	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 5275 Connection: close CF-Ray: 8a5d6d133ac37d02-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_AdOn_Colab_Security.png; filename*=utf-8''icon_WCircle_AdOn_Colab_Security.png ETag: "0x8DC1745B8AEC258" Last-Modified: Wed, 17 Jan 2024 10:18:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 126903 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 14 4d 49 44 41 54 78 9c ed 9d 3d 70 1c 45 16 c7 bb 55 ce a0 ca 9b 41 66 99 73 ee 35 29 54 69 45 62 32 d9 98 88 64 b5 04 24 04 92 08 b8 e8 90 74 44 10 20 29 e0 02 02 a4 4d c8 7c 92 88 ce 09 5a 55 41 8a 57 b9 c1 eb 8c 4b 60 5c 05 e9 f5 d5 7f e8 11 eb d5 ce ce 9b 99 9e e9 af f7 ab 52 49 02 69 77 bc 9a ff be d7 ef 53 08 86 61 6a 21 eb fd 3a 53 07 a5 54 57 08 d1 99 fa 4f 3d e2 af 8e 85 10 49 f6 8d 94 72 c4 7f 09 7b b0 88 9a 17 c9 b2 10 02 9f af eb cf 1d fd b9 09 26 fa 03 02 bb c8 be 67 91 35 0b 8b c8 10 4a a9 9e 16 c7 6d fd b9 29 a1 54 65 a2 2d d8 85 fe 3c 92 52 5e 5a 33 a6 3a 2c a2 0a 28 a5 60 Data Ascii: PNGIHDRR:WpHYs.#.#x?vMIDATx=pEUAfs5)TiEb2d$tD )M\|ZUAWK`\RIiwSaj!:STWO=Ir{&g5Jm)Te-<R^Z3:,(`
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 58 40 4c 43 74 6d 45 ed a4 85 e9 3b a8 c4 66 98 a6 c0 00 c9 81 08 d1 12 4d 35 d2 31 4c d3 79 a4 9d e0 2c 91 9e 79 fd 98 4b 79 98 10 4b 84 1a 17 11 17 93 32 16 b9 d3 46 f5 77 1b ee 1c 4f e2 61 6c 81 e6 be 65 af 2d 11 cf 43 a8 46 92 fc 2e ce 47 17 62 7c f1 24 fd 8c ef c7 e3 27 57 7e 6e 79 f9 d5 f4 63 a5 77 5b 74 6f df 4a 3f 77 3a 2f d7 fe bb 05 c6 b8 e9 1c 52 63 22 e2 48 5c 79 86 47 8f c4 c9 e9 f7 e2 f4 e4 87 ca af fb da bd 37 c4 bd b5 37 45 7f fd 6e e5 c7 08 90 a3 26 23 76 8d 88 88 03 09 74 60 65 0e 0e 1e 8a 83 fd 87 e9 d7 a6 80 45 da d8 7c 20 36 36 1e b0 75 6a 38 d0 d0 94 88 10 89 e3 b5 8d 05 c0 e2 6c 6d 7d 29 26 93 5f 44 53 c0 dd db db fb 30 b5 50 91 93 68 b7 6e ec bc 88 f8 1c 54 0c 2c 0e c4 03 f7 ad 2d e0 de 41 4c 91 9f 99 c6 4d 94 06 c9 86 3a 53 99 1c Data Ascii: X@LCtmE;fM51Ly,yKyK2FwOale-CF.Gb\|$'W~nycw[toJ?w:/Rc"H\yG77En&#vt`eE\| 66uj8lm})&_DS0PhnT,-ALM:S
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 0a 9c 9e fc 50 c9 a5 a3 d6 e3 f5 56 9c 28 db ec 95 cd 13 39 1f 95 c3 3b e7 7a ff 6d e1 3b 78 17 2f b2 16 b8 41 a9 87 f7 ec 0c 54 a6 95 00 39 9e 3c 8b 83 73 12 e5 b1 de 1f 7c 5e 6a 4c 17 dc 38 6a 39 91 03 6d e3 0b 13 af d7 72 6a e5 9c 4f b0 66 53 63 7c 67 74 3e 36 96 27 c9 1a da ca b8 7f 78 1d 17 75 bd 52 5f e3 b1 1e cf 45 11 12 44 49 0d 76 38 36 11 08 d6 e8 ca 1f 6c 9e 3b 57 ba c7 9c 69 96 45 a2 c0 cd 0b e1 60 10 49 95 1e 1c 94 df 2c ba e9 a9 f3 19 b2 6b c1 75 40 cc f3 ae 03 01 0e 5c 63 99 e9 ac 9b 1b ef 0a 87 58 a3 ba 73 7c 1e 72 0c b8 3d f3 ce 45 75 9b e4 30 1e 8b 62 69 e0 36 53 03 14 49 16 52 1f fc d9 12 71 63 f9 95 34 7a 97 d5 c0 95 4d e2 3a e6 6d f4 a8 22 62 4b e4 20 a6 bb 4a d3 1a 3d 62 bd 1b 6e 64 fc 7c d9 9c d5 c8 80 c8 5d 03 f5 a4 b3 b3 e9 ae f9 Data Ascii: PV(9;zm;x/AT9<s\|^jL8j9mrjOfSc\|gt>6'xuR_EDIv86l;WiE`I,ku@\cXs\|r=Eu0bi6SIRqc4zM:m"bK J=bnd\|]
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: aa c0 5f 37 ed 6e a0 6f c6 72 d9 bf 13 6c ef f4 6d bf 0e a3 2a 8b 8f 61 8d 36 85 05 f0 62 b9 76 e3 50 0e ce b8 66 8b ee 46 b0 ac dd 7b c3 76 57 31 42 db b9 66 75 d1 a0 12 5a e6 8b 61 1a 04 67 ab bc 6e e3 16 59 18 b1 ce 15 91 56 1e b7 46 68 b8 b3 b5 7d 36 36 1f 88 1f 1f 7f e5 c2 70 98 85 06 a5 68 64 d6 81 d9 6b f1 17 07 fe 90 ad 61 bb 26 b1 d7 eb 8a b3 b3 3d b1 b7 f7 a1 70 00 44 e5 c6 75 44 c4 89 d7 b0 da 9a 8d 0d 21 c1 39 05 6e 56 d7 50 21 68 d6 92 0f cb f3 dd d9 17 2e 9d 2d 0b 8f 35 8b 02 0b 59 94 0e 51 89 9e 88 1c 4a ae c6 83 b6 66 63 6f 06 10 0f a2 91 fd f5 bb e9 cf 63 b0 cb f8 e2 49 fa 1a 20 08 53 f4 18 b0 36 88 3c 76 6f ff 99 4f 72 d8 5d 3e aa 25 a2 29 25 46 2f 22 fc 91 71 a3 c4 00 25 12 d9 b9 fe f2 0b ae 6e 1f 82 12 77 e7 3e d6 f3 e4 8f f4 6b 87 ac Data Ascii: _7norlm*a6bvPfF{vW1BfuZagnYVFh}66phdka&=pDuD!9nVP!h.-5YQJfcocI S6<voOr]>%)%F/"q%nw>k
2024-07-19 20:22:52 UTC	455	IN	Data Raw: 3b 69 a3 1a 3b 88 33 d1 3c 94 52 cb fa 9c c4 85 ab 71 91 c0 1b 71 25 02 e7 a5 25 ca d0 26 9c cf 49 71 f6 02 1d 09 0f 70 5e 44 53 01 07 9c 93 f0 e1 ac 59 67 8c b0 ef 62 04 ce 6b 77 2e c7 bd 43 83 1f 87 c1 c3 22 71 2d ff 13 94 25 9a 75 ef 74 18 3c ea 2d e6 81 71 a2 47 fb 7a 27 20 2f 2d d1 9c ba 3b cc 6f 60 ab e4 27 89 af d6 c7 6b 4b 34 0d fc 66 6d 95 90 53 e2 b3 92 5f 1c f9 6c 7d 82 b1 44 73 4a 86 0e 63 df 4a e1 01 13 6d 7d 82 99 90 eb b5 25 9a 13 c1 43 72 96 2b c2 dd ce fb dc 0c 49 40 41 89 28 03 7f 20 3d b8 1c e1 70 27 cb 44 22 0d 5b df d4 55 28 c1 11 8c 3b 57 b0 a1 62 83 db d0 ad 9d 7b 76 5d ad 79 33 45 f0 22 9a 3a 2f 61 02 2b 8b a9 1d 8e 62 10 4f 54 22 9a 11 d3 ba 16 53 d4 db fc 1a e2 28 26 f1 44 29 a2 39 83 f6 b1 38 88 73 4c f5 98 60 c3 a6 ae b6 8e 32 Data Ascii: ;i;3<Rqq%%&Iqp^DSYgbkw.C"q-%ut<-qGz' /-;o`'kK4fmS_l}DsJcJm}%Cr+I@A( =p'D"[U(;Wb{v]y3E":/a+bOT"S(&D)98sL`2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49918	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	415	OUT	GET /api/public/content/a9f12990a7a64a1f9628ab3ca508a6fa?v=49d01bf6&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	632	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 5543 Connection: close CF-Ray: 8a5d6d13a8164346-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_AdOn_AT.png; filename*=utf-8''icon_WCircle_AdOn_AT.png ETag: "0x8DC17741849D4CD" Last-Modified: Wed, 17 Jan 2024 15:50:57 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 126901 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	737	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 15 59 49 44 41 54 78 9c ed 9d 3d 70 5c 49 b5 c7 bb 55 ce d8 2a 0f 24 6f 33 cb 0b b9 c7 a4 6c 95 24 92 25 42 f2 db 8c 44 16 01 01 04 b2 36 60 23 9e ac 47 04 c1 4a 0a 78 01 01 92 92 97 f1 24 91 6d 82 c6 55 6c ca 8e 72 83 67 b3 7d 09 5c 57 99 94 a6 fe d7 dd 66 3c 9e 8f db 7d bb ef 3d a7 fb fc aa 54 92 77 35 d2 68 a6 ff 7d 3e fa 9c d3 4a 09 82 d0 0a dd ee e1 42 1b 8c 31 43 a5 d4 60 ea 3f 6d 36 7c e8 58 29 55 b9 7f 68 ad 47 f2 4e f4 87 88 28 bd 48 d6 95 52 f8 7c d7 7e 1e d8 cf 29 98 d8 0f 08 ec d6 fd 5b 44 96 16 11 51 24 8c 31 9b 56 1c 0f ec e7 54 42 09 65 62 2d d8 ad fd 3c d2 5a bf b1 66 42 38 Data Ascii: PNGIHDRR:WpHYs.#.#x?vYIDATx=p\IU*$o3l$%BD6`#GJx$mUlrg}\Wf<}=Tw5h}>JB1C`?m6\|X)UhGN(HR\|~)[DQ$1VTBeb-<ZfB8
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 4f e5 68 89 a6 1a e9 04 21 f5 39 d2 d3 ec 2c 91 9d 79 fd a5 94 f2 08 39 96 08 25 17 91 14 93 f2 e5 e2 fc 73 75 71 f1 79 e3 ef 7f 30 fc b6 3a 3e fe 99 22 c4 c3 2e aa bf ef a4 fe 05 a5 4f e2 79 36 c2 15 a9 4a 8d 9e fd fb bd 1c 8f 9f ab 97 d5 3f e6 2e c2 c1 e0 bd fa eb f5 7b ef ab f5 f5 f7 d5 bd f5 ff a8 3f f7 c1 e4 ab af d5 68 44 b6 03 a1 09 68 ee 7b 98 7a 08 4a 52 11 59 df 14 c9 84 ec a9 aa 57 b5 60 c6 b7 cf eb cf 93 c9 d7 f5 87 0f cb 16 ec e6 e6 b0 16 d9 f0 c1 77 d4 c6 e6 83 de 84 c5 8c 01 12 59 c6 98 a4 67 48 77 12 67 e2 b2 1e 67 05 8b 72 7d fd 85 ba be fa a2 fe 3a 25 10 d8 b4 c8 20 22 88 69 67 fb c3 fa b3 b3 60 c2 3b 0c 6d 67 f4 1e 2b 11 d9 44 42 96 99 38 88 05 71 02 84 e3 6b 69 62 52 5b ba f3 af eb b8 05 6c ef 7c 4f 3d de fd 41 fd 59 98 9b b1 7b 96 2a Data Ascii: Oh!9,y9%suqy0:>".Oy6J?.{?hDh{zJRYW`wYgHwggr}:% "ig`;mg+DB8qkibR[l\|O=AY{*
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 4b 6c 4b e4 cb a2 d9 08 ae d4 88 63 72 a1 cb 05 8a 84 8c ef c0 ff eb eb 2f 72 15 11 e2 a2 93 26 ee dc 46 2e ae 1c 84 b2 28 13 e7 5b 3d 5e 6a f9 cf ac 2b 9c 6a b3 63 c2 5c 03 b3 c6 c5 12 61 12 aa 2f 98 4c ba 88 f5 7b fe 6d e9 25 c6 45 70 85 7d 67 73 8f 89 0f df 6c c3 bc f9 0b 6b 5c e2 a1 90 ec d8 b2 37 3f c4 dd c0 28 e3 12 d9 d9 fe d0 fb 31 d7 f9 5a a3 e1 2a 4b 44 f2 d6 6f ec 6a be 56 60 5e 42 61 9a 90 46 bb 52 cb 7f 42 6e 89 18 e7 fb 5a 6d b0 14 51 48 50 8f e6 bd 55 84 54 8e 97 08 36 23 df c2 dd 5b 42 89 98 c8 0c 57 65 e7 36 72 89 87 9a 58 1a 24 17 7c d3 b7 39 50 17 f0 36 b8 6d 03 9b 8c 6b 8c f4 3d 5b 1b e5 9b 88 c1 79 d1 60 7a f6 c2 1d 0e 96 c8 d7 95 6b 72 23 1d c0 f7 f8 f8 ee 10 11 5c 4b 8e 23 a7 f0 1a ba ab 58 9a 06 fd f8 7b 43 6b 15 41 c6 e7 45 d0 c9 Data Ascii: KlKcr/r&F.([=^j+jc\a/L{m%Ep}gslk\7?(1Z*KDojV`^BaFRBnZmQHPUT6#[BWe6rX$\|9P6mk=[y`zkr#\K#X{CkAE
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 8f aa 7a 55 27 7e b8 c4 ac be 68 ad 97 8a e8 96 e3 4e 9c e1 41 5e a3 db 16 b0 50 a9 de ba 30 99 7c 5d 27 7f 90 fc c8 6c de c5 3b 61 cf ac 88 58 c5 45 8e df 9d fd 5c 95 02 16 27 16 26 97 db c1 47 a3 b1 fa ee c3 9f 64 53 31 32 cf 5b 7b 4b 44 dc 92 0b 0e 58 a2 12 dc 3a b8 47 58 90 94 d3 da 8b 40 b5 03 9e 7b 06 56 e9 1d 6f 6d 5e ed 1c bf 77 28 f1 40 0e 2a 37 83 e3 83 83 f5 59 04 04 04 2b ca 3c 56 7a c7 d0 dc 59 f0 4d 24 2f 41 ee 12 77 8a 1f 83 bb 83 6f 04 3f 16 a2 c9 29 ae a8 ec 86 80 51 cf 0c cf fa 50 a9 30 69 22 22 1c 24 3d 51 85 83 37 1b 73 1d fa 74 13 dd ce cd d9 fa 2c 73 ef 10 df 31 bb fc 6b 6e b8 f3 8e 3b a7 b5 be ea e4 e9 30 49 1f 63 11 f7 31 a7 21 67 01 a5 a8 ff eb a3 52 61 d5 9d ad 23 0e 6d 11 5d 66 97 5c fb 40 2e 02 42 0c 89 84 0c 26 08 39 b7 d5 75 Data Ascii: zU'~hNA^P0\|]'l;aXE\'&GdS12[{KDX:GX@{Vom^w(@*7Y+<VzYM$/Awo?)QP0i""$=Q7st,s1kn;0Ic1!gRa#m]f\@.B&9u
2024-07-19 20:22:52 UTC	699	IN	Data Raw: e1 c1 f0 db be 3d 45 88 83 ae d8 89 88 e3 f5 2c 42 96 1c 59 cf 28 19 49 dc 39 87 2d a9 90 f3 23 a1 cf f3 a0 a4 02 4a 2e 22 60 2b 64 83 7b 35 04 21 90 ce 36 f0 a4 ee dc 34 c6 98 33 69 e2 13 3a 4c 24 a0 3a 7b 92 9b 88 90 60 b8 c1 70 9c ae 7e a7 50 ac 80 b6 62 54 67 93 13 11 10 21 09 1d 00 01 75 7a bc d2 a9 88 80 a4 be 85 c4 95 d9 9d b7 e5 24 4f 2c 2c 28 0d da 92 d6 09 21 07 01 f5 62 89 66 ce 90 10 23 c9 61 ac c0 56 40 bd 8a 08 88 90 04 ee 02 ea 5d 44 40 84 24 70 16 50 2f 31 d1 2c 36 15 89 18 a9 b3 94 a4 90 05 7b 14 04 44 c2 12 39 24 fd 2d f8 74 a6 a6 2c 28 65 2b a2 29 21 5d ca ad 13 02 95 83 54 16 ee dc 6c fa 5b 6b 0d d7 8e 84 99 16 48 31 8e 31 68 31 7b 11 39 b4 d6 28 1c 94 21 d4 82 63 64 2d 10 c9 f9 1d 24 45 04 b4 d6 27 b6 1b 51 e6 d9 95 cd 09 bc 93 d8 c3 Data Ascii: =E,BY(I9-#J."`+d{5!643i:L$:{`p~PbTg!uz$O,,(!bf#aV@]D@$pP/1,6{D9$-t,(e+)!]Tl[kH11h1{9(!cd-$E'Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49920	104.19.177.52	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	633	OUT	GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.mimecast.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a5d6d13adc9c452-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 20962 Cache-Control: public, max-age=86400 Expires: Sat, 20 Jul 2024 20:22:52 GMT Last-Modified: Tue, 28 May 2024 13:54:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: RX0cE7g6EtlUXTvyZZtysg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9dbee240-701e-0004-1a06-b1b4eb000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-19 20:22:52 UTC	467	IN	Data Raw: 31 31 61 62 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 35 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 33 65 32 30 Data Ascii: 11ab{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202405.1.0","OptanonDataJSON":"3e20
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 66 61 63 30 64 2d 37 37 39 34 2d 37 36 66 64 2d 39 30 31 38 2d 35 38 38 34 36 38 31 33 36 32 32 65 22 2c 22 4e 61 6d 65 22 3a 22 45 75 72 6f 70 65 61 6e 20 55 6e 69 6f 6e 20 28 45 55 29 2c 20 55 4b 20 26 20 43 48 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 6e 6f 22 2c 22 64 65 22 2c 22 66 69 22 2c 22 62 65 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 68 72 22 2c 22 6c 76 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 6d 63 22 2c 22 73 69 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 63 68 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c Data Ascii: t":[{"Id":"018fac0d-7794-76fd-9018-58846813622e","Name":"European Union (EU), UK & CH","Countries":["no","de","fi","be","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","mc","si","sk","mf","sm","gb","yt","ie","gf","ee","mq","ch","mt","gp","is","it","gr",
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 68 22 2c 22 67 69 22 2c 22 67 6c 22 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d Data Ascii: h","gi","gl","gm","gn","gq","gs","gt","gu","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","m
2024-07-19 20:22:52 UTC	1326	IN	Data Raw: 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 38 54 31 33 3a 35 34 3a 35 38 2e 32 36 30 31 38 33 34 34 33 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 38 54 31 33 3a 35 34 3a 35 38 2e 32 36 30 31 39 35 38 30 33 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 Data Ascii: Type":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion":"1","createdTime":"2024-05-28T13:54:58.260183443","updatedTime":"2024-05-28T13:54:58.260195803","cmpId":"28","cmpVersion":"1","consentScree
2024-07-19 20:22:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49919	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	415	OUT	GET /api/public/content/c69d271971804a34830bdcb0c1cce78f?v=30a21149&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	644	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: image/png Content-Length: 4667 Connection: close CF-Ray: 8a5d6d13bd9fc44a-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 203 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_Email_Archive.png; filename*=utf-8''icon_WCircle_Email_Archive.png ETag: "0x8DC1774184D56B7" Last-Modified: Wed, 17 Jan 2024 15:50:57 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 131055 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:52 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 d2 08 06 00 00 00 3f 99 9e 42 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 11 ed 49 44 41 54 78 9c ed 9d 3f 70 1b c7 15 c6 77 39 6a 93 c0 29 a3 42 90 2b 27 8d 40 cf 24 93 4e a0 32 76 2b 52 ae 2d 82 2e ed b1 49 a5 72 e4 99 90 f4 4c 3c aa 42 32 89 52 9a a0 5d 5b a2 5a 67 22 41 a9 32 f2 8c 05 35 89 d3 58 70 e1 36 06 ed 3e 9b f9 a0 5d ea 08 1d 80 fb b3 77 b7 7f be df 0c 4c 9a 94 88 13 78 1f de db 6f df 7b 2b 05 a9 0d a5 54 5b 08 d1 11 42 b4 84 10 f8 fc 27 89 cf 5b fa 21 a6 3e 9f 66 ac 1f 60 94 f8 1a 3e 3f d1 1f f1 18 4b 29 87 35 fc b3 88 10 42 f2 55 b0 8f 52 0a 62 c1 e3 92 16 49 47 7f 6c 82 a1 16 1a 3e 3e 84 c8 28 30 fb 50 48 76 a2 4c 57 8b a6 ab 45 e3 03 83 84 b8 86 Data Ascii: PNGIHDR?BpHYsIDATx?pw9j)B+'@$N2v+R-.IrL<B2R][Zg"A25Xp6>]wLxo{+T[B'[!>f`>?K)5BURbIGl>>(0PHvLWE
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 60 23 1e a9 ab a4 a8 15 62 89 10 ba 59 b9 4f 44 ea c2 cc f1 08 47 48 ba 3e ca d9 82 43 12 2c 3d 5d 72 e6 bf 90 b4 88 30 cb 8c 90 26 d8 aa a3 41 b0 52 b3 41 97 bd 63 5d 44 48 d3 c0 c9 c3 31 34 7e 09 89 0e 1d 71 8c b1 76 f2 46 de 08 49 bb 25 68 ca a3 43 47 5c 2b 72 5d a9 c2 16 af 6a 8d 84 75 11 45 44 5c 74 f2 2a 69 0c 5c aa a8 bb 95 8d 79 24 2a f3 41 56 b0 2e 42 4a c7 16 71 12 d5 7a c9 b6 90 70 16 11 53 3a e2 03 43 29 e5 b2 73 a9 9d de 2f a2 88 88 2f 74 6c 6e d6 4a 8b 29 1d a2 11 21 51 ee 2f d9 12 12 53 3a 12 75 a5 78 e9 d4 8e 29 1d f1 1c 64 53 5b 8d 46 24 a6 74 24 20 96 a5 94 d8 b0 6d 24 22 b1 8e 8e 84 42 29 e3 61 a9 e4 c1 c7 ec 2f 22 a1 d0 d5 f7 74 7d a9 1d 6b e9 48 a0 8c 85 10 17 8b 18 0f 45 23 12 ca 80 b8 67 44 42 a3 55 d4 78 c8 1d 91 68 30 90 c0 19 17 Data Ascii: `#bYODGH>C,=]r0&ARAc]DH14~qvFI%hCG\+r]juED\ti\y$AV.BJqzpS:C)s//tlnJ)!Q/S:ux)dS[F$t$ m$"B)a/"t}kHE#gDBUxh0
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: f0 af ce 75 c5 b6 db e7 27 d1 fe f2 e5 5f 06 b3 9f 45 b3 a1 a1 74 af 28 88 3c 30 44 10 71 d3 44 64 fa 91 5e fa e9 af ad 18 17 55 4f 75 da 78 eb 03 27 af 31 2f 14 52 09 77 af 6c 65 79 91 34 ee e9 d7 9f a7 8a d8 ac b7 20 a0 2a da ca 21 60 54 88 db a6 af d7 8f d8 32 40 fa e9 53 ff 57 12 0a a9 64 65 39 2a 23 ca ba 7b 8b 30 6b be fd bd f7 cf ac 85 ea 88 3e e6 b9 bf fb ef 3f 27 86 86 89 c6 b6 df 40 86 c3 af f4 30 9a 37 bc b4 d0 b1 46 fa ce 27 e7 ae 29 b3 61 11 f8 c5 df f8 ed 2d ab 96 ef b3 d2 9e b7 c5 d6 e6 f5 d4 ef 57 35 df 1c cf bb b9 f9 e6 a4 26 71 9e 89 01 03 e6 e8 93 e3 ca 52 33 1b d5 fa 35 31 46 44 1a 37 7d 15 21 60 2c 68 5b e9 9e 49 e3 66 89 a8 0a 92 d1 27 cb 5e 94 e9 f5 7a 5a 51 94 f2 e8 54 8c 89 90 88 45 cc cd 55 54 00 b3 d2 b8 aa 78 5e d0 7a 67 f2 bc Data Ascii: u'_Et(<0DqDd^UOux'1/Rwley4 !`T2@SWde9#{0k>?'@07F')a-W5&qR351FD7}!`,h[If'^zZQTEUTx^zg
2024-07-19 20:22:52 UTC	1204	IN	Data Raw: 98 7b ba f7 52 99 05 16 f1 d3 68 30 82 5a bb f6 ee dc 7d a8 e4 e9 7e 10 4b f2 d0 b0 ac 02 da 29 51 87 e7 50 1b c5 c2 cc 6c ee 1a 09 28 a5 5a 38 a9 1d 69 b6 b5 cb 22 a5 c1 bb 3b c4 60 83 45 8d 7e 59 19 5b ae 04 87 68 11 15 1d e0 e2 a2 19 f9 0b 23 92 ae 08 a7 15 ee 20 b6 dc b0 ac 8d 7e f3 fe fe c6 c6 07 d6 a7 bd 5e b8 70 de 95 4a 86 51 e9 88 04 94 52 6d 1d 95 88 63 94 71 da 16 d5 bb ad 57 dc 4a 3e 2f 12 ad 5f 7f d6 91 eb 43 34 ca 2c 24 a0 94 ba 2b 84 70 c6 8b 24 f5 09 6a ba 80 b4 0a 01 b5 32 0e 52 71 a1 ae ae ac 90 b0 9f 84 7d 25 e2 30 45 47 6a cd 03 22 c2 1a 0a 07 7f e1 67 47 20 a0 5c d1 28 97 90 00 37 68 fd a1 aa b4 2b 12 01 e5 8a 46 45 84 c4 b5 92 67 20 d5 83 15 3d 3d 52 ab 29 da ed f3 13 01 a5 0d aa f4 35 1a e5 16 12 50 4a 61 63 8a 93 86 3c a3 69 41 75 Data Ascii: {Rh0Z}~K)QPl(Z8i";`E~Y[h# ~^pJQRmcqWJ>/_C4,$+p$j2Rq}%0EGj"gG \(7h+FEg ==R)5PJac<iAu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49921	104.19.177.52	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:52 UTC	369	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:52 UTC	859	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: PzcU3Ivp6w0l3AsetHXgNw== Last-Modified: Thu, 18 Jul 2024 01:41:45 GMT x-ms-request-id: 91efca44-001e-0048-3743-d9a117000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2 Expires: Sat, 20 Jul 2024 20:22:52 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a5d6d13d97ac477-EWR
2024-07-19 20:22:52 UTC	510	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d Data Ascii: T","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d Data Ascii: (!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!=
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b Data Ascii: er,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 Data Ascii: t("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 Data Ascii: ,this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptEleme
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 Data Ascii: ocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],th
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b Data Ascii: er"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 Data Ascii: gionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.Rule
2024-07-19 20:22:52 UTC	1369	IN	Data Raw: 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 Data Ascii: asIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49923	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	650	OUT	GET /api/public/content/e1028a80bdb54d0489c0b0775d7a8ebd?v=465a9fc1&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:53 UTC	630	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: image/png Content-Length: 160709 Connection: close CF-Ray: 8a5d6d172b70726e-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 204 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=archive_compliance.png; filename*=utf-8''archive_compliance.png ETag: "0x8DC1813661EB9B4" Last-Modified: Thu, 18 Jan 2024 10:51:17 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 121968 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:53 UTC	739	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 90 00 00 03 7e 08 06 00 00 00 63 02 e4 d6 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec 9d 07 bc 24 45 b9 f6 df ee 89 67 4e dc 73 ce e6 1c c1 25 87 25 47 89 97 ac 48 10 23 28 22 2b dc 0f 2f c1 80 82 78 bd 28 5e c1 4b 50 11 ae 82 70 15 04 61 45 41 10 24 2d 61 61 97 20 ec 02 0b bb 80 ec 2e 9b e3 89 93 fb fb 55 f5 f4 9c 9e 3e d5 dd d5 33 d3 67 d2 f3 d7 c3 ce 74 57 57 55 77 d7 74 d7 53 ef 5b 6f 29 9a a6 11 00 00 00 00 00 00 00 00 e0 86 ea 9a 02 00 00 00 00 00 00 00 00 80 80 04 00 00 00 00 00 00 00 20 0b 2c 90 00 00 00 00 00 00 00 00 a4 80 80 04 00 00 00 00 00 00 00 20 05 04 24 00 00 00 00 00 00 00 00 29 20 20 01 00 00 00 00 00 00 00 48 01 01 09 00 00 00 Data Ascii: PNGIHDR~cpHYs.#.#x?v IDATx$EgNs%%GH#("+/x(^KPpaEA$-aa .U>3gtWWUwtS[o) , $) H
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 02 12 00 00 00 00 00 00 00 80 14 10 90 00 00 00 00 00 00 00 00 a4 80 80 04 00 00 00 00 00 00 00 20 05 04 24 00 00 00 00 00 00 00 00 29 20 20 01 00 00 00 00 00 00 00 48 01 01 09 00 00 00 00 00 00 00 40 0a 08 48 00 00 00 00 00 00 00 00 52 40 40 02 00 00 00 00 00 00 00 90 02 02 12 00 00 00 00 00 00 00 80 14 10 90 00 00 00 00 00 00 00 00 a4 80 80 04 00 00 00 00 00 00 00 20 05 04 24 00 00 00 00 00 00 00 00 29 20 20 01 00 00 00 00 00 00 00 48 01 01 09 00 00 00 00 00 00 00 40 0a 08 48 00 00 00 00 00 00 00 00 52 40 40 02 00 00 00 00 00 00 00 90 02 02 12 00 00 00 00 00 00 00 80 14 10 90 00 00 00 00 00 00 00 00 a4 80 80 04 00 00 00 00 00 00 00 20 05 04 24 00 00 00 00 00 00 00 00 29 20 20 01 00 00 00 00 00 00 00 48 01 01 09 00 00 00 00 00 00 00 40 0a 08 48 00 00 00 Data Ascii: $) H@HR@@ $) H@HR@@ $) H@H
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: b3 d9 7c 47 48 bf 8d bc d7 a3 99 3b a6 7c 8f a2 29 fa 67 a6 b0 8c 6d 85 e5 0c 3f 36 a7 c4 78 9f 4b 31 89 08 46 3e 8f a1 fe 99 49 40 e6 3b fe b9 7c 86 f2 e4 3d 4c d6 47 d5 33 cb ab 3e 21 bc 7f 9c cb 2d d7 31 55 34 26 20 59 d5 14 cb 61 c3 9b 30 2b 77 48 98 b2 bc 86 ea 98 97 9e f9 7d 46 7d 58 f5 8c 34 f9 fe b5 7e 8a b9 6b 68 be 76 5c b1 e6 bf e4 f2 30 52 e5 ff 93 57 e9 43 bf 35 e3 3a e7 8e 19 ca 24 77 4d 4c 77 27 d7 a3 d6 6b 6a 2a ab 30 db a1 1d ec ca 18 5d 66 cb 15 d1 cf d5 d4 4d cf 6d b6 dc 4f fd 9e 0d bf 2f ba 98 63 f7 2f d7 1e f2 22 76 f8 79 2a b9 3a 69 bc 27 5e 70 22 a2 cf 96 f3 ca 5d 70 43 c4 e4 c4 94 29 af 82 6a 99 8f cf 1d c3 5a 4b fe 5c f4 1d a2 f3 d1 f7 71 71 3a bc 15 0a eb 65 5c 43 76 7e 86 88 cd 5f 1b d3 9d 33 6e b3 a0 ec 5c c3 28 ac 8f 21 3a cd Data Ascii: \|GH;\|)gm?6xK1F>I@;\|=LG3>!-1U4& Ya0+wH}F}X4~khv\0RWC5:$wMLw'kj0]fMmO/c/"vy:i'^p"]pC)jZK\qq:e\Cv~_3n\(!:
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 9f af 74 55 00 00 00 34 06 98 03 39 02 fc e9 fe 07 02 53 a7 4d 3b 70 ea d4 69 8f 2a 8a da c2 1c bf 1a 0e d1 7c c8 02 d7 d7 61 cb 7a 17 8a 4c f3 9c 49 d1 3c 46 2f 0b 9a db cd 8f f4 ba 44 88 62 57 00 00 23 1f 54 c7 cd 65 d5 2d 3f 37 b7 55 a7 cf 10 9b 95 27 91 18 78 7f ed ba 75 47 ed bb ef de 1f 55 ba 2e 00 00 00 ea 1b 58 20 47 80 c9 53 a6 4c ef ee ea be a1 61 c5 a3 21 12 6d e7 44 4a 0a 30 99 4b e7 34 07 d2 5c 9c d5 52 09 0d 08 6a 18 b3 58 f4 db c5 d4 1a 3c 07 e2 b1 3a 88 36 35 4d eb e8 e8 b8 f6 2f 7f 79 38 50 e9 ba 00 00 00 a8 6f 20 20 47 80 48 38 7c 58 6b 6b eb 5e de d7 4c ac 43 cc d7 20 2f 2a 2d 93 14 87 b9 a1 e6 82 ec e4 8f b3 e6 69 39 c6 2c 22 65 84 a1 ac f5 d1 9c 67 c1 76 73 10 1d d1 67 00 4a 47 46 18 ba 89 39 63 7e a4 61 39 74 5a d6 c3 9c de 6d a9 10 Data Ascii: tU49SM;pi\|azLI<F/DbW#Te-?7U'xuGU.X GSLa!mDJ0K4\RjX<:65M/y8Po GH8\|Xkk^LC /-i9,"egvsgJGF9c~a9tZm
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: fa 91 7c bb 39 8d 28 1f f2 16 8c c7 bc cd eb ad 85 2e 04 55 8a 48 b8 59 b7 d9 45 53 b5 3b de 2e 8d 35 0f 08 3f 7f c1 3b 08 00 00 80 1f 40 40 fa 04 3a 46 23 8c 9b 58 14 46 4d 75 09 8c 63 4e e3 15 d7 63 2c cb 79 98 b7 c3 6a 00 2a 80 c8 9a 28 da 67 dd 66 e7 de 2a b2 2c da 59 39 ed ca 90 ad 2f 10 a1 52 30 88 57 3c 00 00 80 f2 83 09 f6 3e a1 aa 0a dc 87 ea 01 b7 79 8d 5e a3 be 02 50 e3 20 e0 4d 6d 80 71 28 00 00 00 7e 81 e1 49 bf c0 e0 78 f5 60 f2 6e 75 dc 6f 87 93 45 d3 bc 5f da bd d5 12 40 87 f7 f4 30 07 12 54 16 2f cb 78 58 b7 39 cd 85 74 da 07 31 ea 7b 14 56 1f 4b 00 00 00 d0 a8 40 40 fa 04 e6 40 8e 14 a2 08 38 16 44 da cc 4b 60 1c bb 7e b5 55 30 5a e7 54 4a 97 05 73 25 a8 6d 17 d7 72 e5 0b 00 00 00 80 ea 07 2e ac a0 f1 b0 f6 7d 65 97 f1 90 b5 60 7a 99 ff Data Ascii: \|9(.UHYES;.5?;@@:F#XFMucNc,yj(gf,Y9/R0W<>y^P Mmq(~Ix`nuoE_@0T/xX9t1{VK@@@8DK`~U0ZTJs%mr.}e`z
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 36 d2 9a 8f a5 e6 c9 f0 94 af cb 02 8e d6 4e 9d 30 6f 87 e5 36 7c 74 09 0d 51 56 ef 74 c2 c8 50 f5 e2 71 30 99 a2 ad bd 09 de 1e b8 d5 d1 69 8e ae d7 81 aa 80 c2 2d 9a d9 9e 41 ea 6c 63 22 52 e5 41 79 8a 25 12 09 d1 f2 e5 2b e8 92 6f 7e 9d 26 8c 9f 43 a3 c7 74 53 36 93 a5 b5 6b d7 53 57 d7 28 3a e0 80 bd 29 18 d4 9b b6 1a 20 ea ef 8b f3 f6 dd dc 1c e1 c7 a7 d3 1a 25 e2 49 7e 8e a1 50 88 22 d1 20 c5 07 53 14 0e 07 89 3d 16 e3 83 69 ca 64 b2 d4 d2 1a e1 a2 8c 89 33 e6 71 c1 2e 43 3e 70 10 0b 16 14 0c d0 7f fe f0 67 f4 c6 1b 6f d1 4d 37 5f 47 bf bb f3 5e fa f1 4f ae a6 39 73 f6 e1 16 d2 74 2a 4d 5b b6 6c a1 a9 53 a7 d0 1e 7b ce a5 50 58 2f 87 09 4f 96 d7 e0 40 8a bb 70 36 b7 46 f8 e5 ee eb 1b e4 57 3d 16 8b f2 7a 0f f4 27 29 9b cd 52 24 12 a6 50 58 7f ce f6 Data Ascii: 6N0o6\|tQVtPq0i-Alc"RAy%+o~&CtS6kSW(:) %I~P" S=id3q.C>pgoM7_G^O9st*M[lS{PX/O@p6FW=z')R$PX
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 1e 7b 82 8e 3a fa 48 2e d8 ce 39 e7 ab d4 da da 42 4b 5e 79 8a be f7 bd cb e9 5b df fa 36 bd b5 ec 3d 6e 9d 64 c4 62 31 5e f6 97 be f8 75 5a bd fa 63 ba f7 de df d2 f7 be 77 19 dd 78 e3 7f d3 6d bf be 8b a7 61 d6 ce e5 ef 2e a3 13 4e 38 96 ee fd e3 ef 68 cb 96 ad f4 8d 6f 5c ce 6f eb 8d ff 73 1b dd 71 c7 1d f4 c0 03 bf a3 85 0b 1f a5 85 0b 5f e0 42 37 10 d4 c5 ef fe fb cf a3 0f 3f 5c 45 1b d6 6f cd bb c7 96 0f b6 86 28 5e f1 00 00 00 ca 0f de 2e 3e a1 47 eb 2f cd 1d c9 e8 38 d5 e5 5f 7e c5 0a 89 34 e5 ba 16 e6 bc 54 55 ff 33 3e db 95 67 a4 33 d2 98 b7 1b 69 45 69 44 c7 c8 d6 51 32 2d ac 98 d5 0b 13 6f 6c a9 0e b6 c6 63 a1 e5 d1 2c 12 f3 43 07 e5 2d 5c 51 a8 77 20 45 e9 6c 46 8f da 5a 24 aa 1a e4 ae 9e 2b 56 7e 40 2b 56 ac a4 0f 3f fc 88 b2 d9 0c 0d 0e 0e Data Ascii: {:H.9BK^y[6=ndb1^uZcwxma.N8ho\osq_B7?\Eo(^.>G/8_~4TU3>g3iEiDQ2-olc,C-\Qw ElFZ$+V~@+V?
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: d9 31 f1 f8 36 fa eb 5f ff 46 4f 3f fd 1c 3d fa b7 27 69 c1 83 7f a3 4d 1b b7 50 94 cd 8f a4 3e ee 4e aa a7 cd 50 26 bb 2d 2f 20 8f ff b7 a3 69 f3 e6 2d b4 e6 e3 77 e9 e4 53 4e e0 42 f3 d0 43 0f a0 b9 9f 98 47 e7 9e 7b 21 3d f9 8f 67 e9 a1 3f 3f 4a c7 1c 7d 1a 77 6d 65 73 20 e3 89 ad 7c e9 92 29 53 c7 d3 de 7b 1d 46 17 5f 7c 29 3d f5 e4 73 74 f3 4d b7 d3 c2 e7 1e a3 0b e7 9f cf f3 6e 6b 6b a1 b7 df 5e 46 b7 fe ea 4e fa fb 63 4f d1 55 57 fd 88 f6 df ef 20 fa c4 dc 59 74 ce 67 cf a4 bf 3f fe 20 fd fc 86 5f d1 a2 17 17 d3 d9 67 9d 47 d7 5e 7b 3d b7 3e 32 3e f8 e0 43 ee e6 3b 79 f2 24 6e cd 2d 27 4c 94 63 0e 24 00 00 00 3f 80 05 d2 27 78 47 d6 a3 4b a2 19 36 80 ce 5c 59 ab 0f f3 b9 f8 ed ce aa 95 c9 ad 55 93 74 7d 1d 4a 20 72 53 d5 ef 65 2e a5 e5 b3 f9 18 6b Data Ascii: 16_FO?='iMP>NP&-/ i-wSNBCG{!=g??J}wmes \|)S{F_\|)=stMnkk^FNcOUW Ytg? _gG^{=>2>C;y$n-'Lc$?'xGK6\YUt}J rSe.k
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: af f1 0c 8d 27 12 b9 fd 7a 7a e3 73 2a 9d e1 79 0f 5d 37 3d fd 40 6e a9 0d e3 a7 c7 d2 a4 d2 b9 ba e6 ca 4e a7 32 74 ea a9 27 52 5f 7f 1f ff cc e7 78 a6 b3 05 8f 02 76 fd e3 c6 35 63 2f dd 90 4a 3d 3d 83 7c dd 49 b6 24 48 7c 30 cd ad aa 7e 3c eb f1 fe 00 00 00 e0 07 10 90 3e a1 f0 b5 df ea a3 d3 0f 3c 22 72 41 ad 44 1e 75 44 2d 2c 4c c2 25 9a a6 07 d1 a9 96 da e6 05 ad 07 fd e8 27 76 41 a8 84 db 99 b8 ec 4d d0 e1 47 1c cc bf f6 f6 c6 8b 0a 08 64 47 a9 d1 9c d9 b5 1d 8c a7 68 fe 37 ce cd d7 cf 58 c7 d5 09 26 4c f7 de 7b 37 da 77 de 6e 34 38 90 e2 96 59 7f 84 1e 06 20 01 00 00 f8 03 04 a4 4f 54 47 f7 11 54 4c a8 55 81 2b 25 18 79 74 e7 d5 ea ba f7 d5 55 1b 77 f2 62 32 17 0b 89 b9 8b 32 4a 15 8f 7e c4 e7 65 75 f2 5a 3f 96 8e b9 d1 e6 eb e5 db 40 91 fd fa b6 Data Ascii: 'zzs*y]7=@nN2t'R_xv5c/J==\|I$H\|0~<><"rADuD-,L%'vAMGdGh7X&L{7wn48Y OTGTLU+%ytUwb22J~euZ?@
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 00 80 13 10 90 3e a1 f7 f9 eb c7 15 aa e1 29 56 bc b9 89 3f 51 b0 9c 91 9c af 58 45 73 23 dd 96 f8 b0 2e f7 61 5e e8 a2 9a c8 64 89 a2 91 20 05 e3 6c 91 78 66 8d 2b 57 ce 4e 01 74 0a 45 24 13 8d cd 31 dd 45 34 5d c4 3c 38 e6 f6 c9 78 fd b5 a5 d4 d9 d9 41 a9 54 8a bb 9c ae 5c f9 21 85 43 11 6e e5 db b6 75 07 ad 5b b7 41 77 51 55 88 fa fa fb 68 cd 9a f5 5c 3c 2e 59 bc 94 16 2e 7c 89 4e fb d4 71 34 30 10 a7 07 fe f4 30 17 78 87 1d be 1f af db f2 e5 2b e9 d0 c3 f6 a3 f1 e3 c6 d2 93 4f 3e 4f a3 47 77 d3 dc 5d 66 51 7f bf 2e 20 59 da a6 58 94 36 ac df 48 6f fc f3 1d 4a 26 53 bc 4e e9 74 86 06 fa 07 28 1c d6 2d 8b 1b 37 6e e6 75 33 2c 95 db 77 f4 d0 da b5 1b 28 18 54 e8 c9 7f bc c0 c5 e3 69 a7 1d 47 1b 37 6e a3 bf fe f5 51 ea ea 6a e7 65 31 37 d6 b6 d6 66 3a ec Data Ascii: >)V?QXEs#.a^d lxf+WNtE$1E4]<8xAT\!Cnu[AwQUh\<.Y.\|Nq400x+O>OGw]fQ. YX6HoJ&SNt(-7nu3,w(TiG7nQje17f:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49922	104.17.247.203	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	373	OUT	GET /web-vitals@4.2.2/dist/web-vitals.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:53 UTC	575	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"1c28-4f+2/GWZhXlozjo2GiBA+7VB9Ow" via: 1.1 fly.io fly-request-id: 01J30YP2QR0PY0S379DF22CM0X-lga CF-Cache-Status: HIT Age: 180248 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a5d6d17587c7ca0-EWR
2024-07-19 20:22:53 UTC	794	IN	Data Raw: 31 63 32 38 0d 0a 76 61 72 20 77 65 62 56 69 74 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 72 2c 69 2c 6f 2c 61 3d 2d 31 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 73 68 6f 77 22 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 70 65 72 73 69 73 74 65 64 26 26 28 61 3d 6e 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 6e 29 29 7d 29 2c 21 30 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 73 65 6c 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 Data Ascii: 1c28var webVitals=function(e){"use strict";var n,t,r,i,o,a=-1,c=function(e){addEventListener("pageshow",(function(n){n.persisted&&(a=n.timeStamp,e(n))}),!0)},u=function(){var e=self.performance&&performance.getEntriesByType&&performance.getEntriesByType
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 73 65 72 76 65 72 2e 73 75 70 70 6f 72 74 65 64 45 6e 74 72 79 54 79 70 65 73 2e 69 6e 63 6c 75 64 65 73 28 65 29 29 7b 76 61 72 20 72 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 74 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: server.supportedEntryTypes.includes(e)){var r=new PerformanceObserver((function(e){Promise.resolve().then((function(){n(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},t\|\|{})),r}}catch(e){}},l=function(e,n,t,r){var i,o;return fun
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 3d 43 28 29 2c 69 3d 66 28 22 46 43 50 22 29 2c 6f 3d 64 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 73 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 74 28 21 30 29 29 29 7d 29 Data Ascii: b=function(e,n){n=n\|\|{},L((function(){var t,r=C(),i=f("FCP"),o=d("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-s(),0),i.entries.push(e),t(!0)))})
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 42 2e 64 65 6c 65 74 65 28 65 2e 69 64 29 7d 29 29 7d 7d 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 73 65 6c 66 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 7c 7c 73 65 6c 66 2e 73 65 74 54 69 6d 65 6f 75 74 2c 74 3d 2d 31 3b 72 65 74 75 72 6e 20 65 3d 6d 28 65 29 2c 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 65 28 29 3a 28 74 3d 6e 28 65 29 2c 76 28 65 29 29 2c 74 7d 2c 4f 3d 5b 32 30 30 2c 35 30 30 5d 2c 6a 3d 5b 32 35 30 30 2c 34 65 33 5d 2c 56 3d 7b 7d 2c 5f 3d 5b 38 30 30 2c 31 38 30 30 5d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 4c 28 28 66 75 6e 63 74 69 Data Ascii: eturn B.delete(e.id)}))}}},q=function(e){var n=self.requestIdleCallback\|\|self.setTimeout,t=-1;return e=m(e),"hidden"===document.visibilityState?e():(t=n(e),v(e)),t},O=[200,500],j=[2500,4e3],V={},_=[800,1800],z=function e(n){document.prerendering?L((functi
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 68 61 64 52 65 63 65 6e 74 49 6e 70 75 74 29 7b 76 61 72 20 6e 3d 6f 5b 30 5d 2c 74 3d 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 26 26 65 2e 73 74 61 72 74 54 69 6d 65 2d 74 2e 73 74 61 72 74 54 69 6d 65 3c 31 65 33 26 26 65 2e 73 74 61 72 74 54 69 6d 65 2d 6e 2e 73 74 61 72 74 54 69 6d 65 3c 35 65 33 3f 28 69 2b 3d 65 2e 76 61 6c 75 65 2c 6f 2e 70 75 73 68 28 65 29 29 3a 28 69 3d 65 2e 76 61 6c 75 65 2c 6f 3d 5b 65 5d 29 7d 7d 29 29 2c 69 3e 72 2e 76 61 6c 75 65 26 26 28 72 2e 76 61 6c 75 65 3d 69 2c 72 2e 65 6e 74 72 69 65 73 3d 6f 2c 74 28 29 29 7d 2c 75 3d 64 28 22 6c 61 79 6f 75 74 2d 73 68 69 66 74 22 2c 61 29 3b 75 26 26 28 74 3d 6c 28 65 2c 72 2c 77 2c 6e 2e 72 65 70 Data Ascii: orEach((function(e){if(!e.hadRecentInput){var n=o[0],t=o[o.length-1];i&&e.startTime-t.startTime<1e3&&e.startTime-n.startTime<5e3?(i+=e.value,o.push(e)):(i=e.value,o=[e])}})),i>r.value&&(r.value=i,r.entries=o,t())},u=d("layout-shift",a);u&&(t=l(e,r,w,n.rep
2024-07-19 20:22:53 UTC	946	IN	Data Raw: 29 7b 52 3d 4d 28 29 2c 44 2e 6c 65 6e 67 74 68 3d 30 2c 42 2e 63 6c 65 61 72 28 29 2c 69 3d 66 28 22 49 4e 50 22 29 2c 72 3d 6c 28 65 2c 69 2c 4f 2c 6e 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 29 7d 29 29 29 7d 29 29 29 7d 2c 65 2e 6f 6e 4c 43 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 3d 6e 7c 7c 7b 7d 2c 4c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 3d 43 28 29 2c 69 3d 66 28 22 4c 43 50 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 72 65 70 6f 72 74 41 6c 6c 43 68 61 6e 67 65 73 7c 7c 28 65 3d 65 2e 73 6c 69 63 65 28 2d 31 29 29 2c 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 Data Ascii: ){R=M(),D.length=0,B.clear(),i=f("INP"),r=l(e,i,O,n.reportAllChanges)})))})))},e.onLCP=function(e,n){n=n\|\|{},L((function(){var t,r=C(),i=f("LCP"),o=function(e){n.reportAllChanges\|\|(e=e.slice(-1)),e.forEach((function(e){e.startTime<r.firstHiddenTime&&(i.va
2024-07-19 20:22:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49924	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	415	OUT	GET /api/public/content/cfbe227215634da29c9efe4570f8f9a1?v=75a0021e&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:53 UTC	638	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: image/png Content-Length: 5986 Connection: close CF-Ray: 8a5d6d174e660f3f-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 204 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=icon_WCircle_AdOn_DMARC.png; filename*=utf-8''icon_WCircle_AdOn_DMARC.png ETag: "0x8DC1745B8AAF24D" Last-Modified: Wed, 17 Jan 2024 10:18:59 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 126907 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:53 UTC	731	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 17 14 49 44 41 54 78 9c ed 5d 3d 70 1c c9 79 ed 86 9d e9 aa b8 56 62 3a ba a5 7c 91 13 2e 1d a9 4a aa 02 70 c9 c9 0e 44 42 17 d8 e5 04 84 02 27 0a 70 60 20 3b 91 00 48 91 14 08 40 20 05 17 88 d8 c4 19 45 40 91 98 1c 16 55 ba f4 b8 c8 cf be 65 c6 4b 74 73 55 e7 d4 e3 7a a3 1e 68 6f b8 3f f3 f5 74 4f 7f dd fd bd 2a d6 1e 25 62 66 30 db af df f7 df 4a 09 04 82 4e d0 dd 7e 5c d0 05 65 59 8e 94 52 83 b9 ff 69 ab e5 8f 4e 95 52 45 fd 17 ad f5 44 be 89 70 10 12 f9 27 c9 50 29 85 cf 3b e6 73 60 3e 7d 60 66 fe 80 60 37 f5 df 85 64 7e 21 24 72 84 b2 2c b7 0c 39 ee 9b 4f 5f 44 b1 c5 cc 28 d8 8d f9 9c Data Ascii: PNGIHDRR:WpHYs.#.#x?vIDATx]=pyVb:\|.JpDB'p` ;H@ E@UeKtsUzho?tO*%bf0JN~\eYRiNREDp'P);s`>}`f`7d~!$r,9O_D(
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 4e 08 24 f0 84 51 a8 a8 9d 0e 30 7d 07 95 d8 02 81 2f 60 80 e4 9e 4a 51 89 e6 1a e9 04 02 df 79 a4 a3 e4 94 c8 cc bc 7e 29 a5 3c 82 14 4b 84 bc 93 28 f7 62 d2 a2 f8 4a dd 4c ff bb fa ef d9 ec b5 9a bd 7a bd f2 df 0f ee bc a5 46 a3 77 aa ff be 3f fa 7b 35 18 bc d5 cb 73 26 8a 07 7d 54 7f f7 41 22 f8 40 f0 85 92 c7 f5 e4 46 4d a7 9f aa e9 cd a7 ea d5 ec 73 35 99 b8 f9 fe b6 b6 46 ea ce e0 1b 15 b9 b6 36 47 42 ae f6 28 0c 91 66 d1 92 28 f5 79 08 20 cc e5 e5 c7 15 79 5c 11 a6 2d 40 a8 cd ad fb ea d1 c3 ef 56 9f 82 70 39 24 6f 24 4a 35 12 77 79 f1 b1 ba b8 fc 63 f5 09 53 8d 03 60 f2 3d 7c f4 9d 8a 50 f8 14 f4 1b b1 f3 42 a2 d4 02 09 f0 65 ce ce 9e a9 f1 f9 0b 36 c4 59 47 a8 fd fd f7 6f 7d 2b 81 df 40 83 2f 12 bd 4c 21 90 00 33 ed f8 78 dc bb a9 e6 0a f0 a5 76 Data Ascii: N$Q0}/`JQy~)<K(bJLzFw?{5s&}TA"@FMs5F6GB(f(y y\-@Vp9$o$J5wycS`=\|PBe6YGo}+@/L!3xv
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 19 1e da 2a d1 ca 1f ec 1b d4 60 02 cc 38 17 09 4f 1c d8 d5 16 7d cc 6e a3 04 47 5c 38 fa f8 9d a8 66 dd 71 7a 91 3a 3b 25 e2 64 ca 61 77 a3 aa 10 c2 d9 2e 40 52 a2 fb fe 47 4d f5 15 5c 68 9a 75 14 85 9d cd 5e a7 e6 1b ad 34 e9 36 62 30 e5 a8 3b 1b 2a b2 5d 85 99 29 bb 39 ce 58 f5 0d ca 3d 5c 15 88 82 40 6d aa dc 13 57 a3 87 54 25 da 54 4c 40 29 a8 bc 9d 8b e0 a0 05 a1 be 37 25 a8 d0 c7 d0 43 fc 7e 94 0d c2 95 22 e0 9d 52 ee 3b 99 4c 53 ab f2 de a2 92 88 8d 29 47 3d d6 b1 4b 3b 76 d7 a0 42 5f a0 2c 66 97 0b 99 ba 39 9d 9d 3d cb 22 f1 aa 97 d4 ca a1 05 9c 05 30 74 91 62 52 b9 8c 90 81 bc 6d ef 8d 7b f6 45 24 4a 5b 06 08 e7 b2 82 82 e2 9b 0e 87 77 ab f6 f8 d4 a7 a5 2e 22 d1 e3 2e e3 83 5c 02 0b 05 33 06 04 f1 e2 f9 f3 9f a7 34 92 78 a2 b5 de 6e 63 ce b1 f1 Data Ascii: `8O}nG\8fqz:;%daw.@RGM\hu^46b0;])9X=\@mWT%TL@)7%C~"R;LS)G=K;vB_,f9="0tbRm{E$J[w.".\34xnc
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 07 9c 80 1b 17 89 80 fd fd f7 83 a9 11 85 c0 5c 66 3e c4 dc e4 36 25 3c 7b c0 f2 b0 eb 85 24 aa 23 0d 1c 01 bf 88 62 5a 41 8d 5c e5 22 28 c5 b0 be 8f c9 a4 10 3a d6 fc 5a f1 65 14 cf bd 54 89 de f8 3f b9 00 04 a2 66 d5 5d f5 a4 70 e8 b2 8d 59 15 a9 a0 98 e2 01 ab 5a a6 ab 48 c4 32 e9 5a 9b 74 54 47 df 85 59 47 f9 a2 7c 47 e8 28 aa 18 ab 49 37 23 04 68 42 f9 44 cd e2 84 26 89 58 46 e8 6c d5 08 89 bc ae 0b 9b b2 70 a1 7c 3e a3 74 a4 4d e4 15 af 68 61 5b 50 de 5f 20 9f e8 0d b7 a7 49 22 b6 7e 91 8d 1a 01 5d 9b ba 70 3f 8a 19 e5 53 8d 28 aa 18 a3 39 77 4d 78 77 01 83 0a d3 95 24 e2 1c 5c 98 2f db a7 00 04 fa c1 ce 4f 7b 0b 2f 5f 5c fe b1 d3 bd 5c 5d 3b c6 41 2f 53 82 09 1a f0 e0 e7 37 98 be a8 15 82 f5 db 47 a4 8e ba 0b 61 41 21 d0 10 7b e5 02 f5 da 1c ab 28 Data Ascii: \f>6%<{$#bZA\"(:ZeT?f]pYZH2ZtTGYG\|G(I7#hBD&XFlp\|>tMha[P_ I"~]p?S(9wMxw$\/O{/_\\];A/S7GaA!{(
2024-07-19 20:22:53 UTC	1148	IN	Data Raw: 49 34 30 55 0c d1 d6 d4 b9 00 48 84 c5 83 69 a3 f8 f4 4d 2a 2c 6a 90 06 13 6f f0 b9 6a b6 04 16 33 fa a2 6c 17 35 ee 05 22 ad 5b d8 45 f1 d5 6d 40 c6 16 f0 83 ba f6 81 f5 51 9d e0 94 44 40 59 96 48 48 1d 76 b9 46 6a c0 82 c2 89 0c 50 2b 1c 6f 52 9f ce 40 55 84 7a 40 21 26 7d e2 13 a4 c1 10 77 aa c3 6d 93 e4 6c 02 24 5a 16 68 19 9f bf a8 08 d4 65 f3 e8 33 e9 bb 00 13 ad f5 76 97 0b 74 22 11 50 96 25 d4 08 b5 75 82 96 c0 82 7b 35 fb fc 8d 03 ab 7c 0d 69 87 42 a2 8d a3 2b e0 17 22 7a 09 32 d5 89 da 69 c7 88 9e cb 76 15 4b c0 8c 9b 86 26 11 a2 74 88 d6 09 18 03 8a e1 aa 7a 1b 24 72 61 b6 8e c2 13 e8 54 6b dd 79 77 e9 4c a2 dc 83 0c b9 12 29 01 02 15 b6 21 6d 5f 24 92 20 43 24 80 19 d6 b6 cb 36 61 02 01 3b ae 0e 6f b0 a9 58 78 03 86 cd 7b 2e ae 25 88 63 f6 44 Data Ascii: I40UHiM*,joj3l5"[Em@QD@YHHvFjP+oR@Uz@!&}wml$Zhe3vt"P%u{5\|iB+"z2ivK&tz$raTkywL)!m_$ C$6a;oXx{.%cD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49925	104.19.177.52	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	427	OUT	GET /consent/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93/3e20a8fc-e9f6-44d7-a3a1-cb59bb69dc93.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:53 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8a5d6d17ed160f67-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 49302 Cache-Control: public, max-age=86400 Expires: Sat, 20 Jul 2024 20:22:53 GMT Last-Modified: Tue, 28 May 2024 13:54:58 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: RX0cE7g6EtlUXTvyZZtysg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 170e04c5-001e-00aa-2c06-b19786000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-07-19 20:22:53 UTC	467	IN	Data Raw: 31 31 61 62 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 35 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 33 65 32 30 Data Ascii: 11ab{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202405.1.0","OptanonDataJSON":"3e20
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 66 61 63 30 64 2d 37 37 39 34 2d 37 36 66 64 2d 39 30 31 38 2d 35 38 38 34 36 38 31 33 36 32 32 65 22 2c 22 4e 61 6d 65 22 3a 22 45 75 72 6f 70 65 61 6e 20 55 6e 69 6f 6e 20 28 45 55 29 2c 20 55 4b 20 26 20 43 48 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 6e 6f 22 2c 22 64 65 22 2c 22 66 69 22 2c 22 62 65 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 68 72 22 2c 22 6c 76 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 6d 63 22 2c 22 73 69 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 63 68 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c Data Ascii: t":[{"Id":"018fac0d-7794-76fd-9018-58846813622e","Name":"European Union (EU), UK & CH","Countries":["no","de","fi","be","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","mc","si","sk","mf","sm","gb","yt","ie","gf","ee","mq","ch","mt","gp","is","it","gr",
2024-07-19 20:22:53 UTC	1369	IN	Data Raw: 68 22 2c 22 67 69 22 2c 22 67 6c 22 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d Data Ascii: h","gi","gl","gm","gn","gq","gs","gt","gu","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","m
2024-07-19 20:22:53 UTC	1326	IN	Data Raw: 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 38 54 31 33 3a 35 34 3a 35 38 2e 32 36 30 31 38 33 34 34 33 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 38 54 31 33 3a 35 34 3a 35 38 2e 32 36 30 31 39 35 38 30 33 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 Data Ascii: Type":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersion":"1","createdTime":"2024-05-28T13:54:58.260183443","updatedTime":"2024-05-28T13:54:58.260195803","cmpId":"28","cmpVersion":"1","consentScree
2024-07-19 20:22:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49926	104.18.32.137	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.mimecast.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:53 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a5d6d17fa474332-EWR
2024-07-19 20:22:53 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49928	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	415	OUT	GET /api/public/content/482db570fe8e449fb6b1e2d90dfda927?v=dd6313bd&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	636	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: image/png Content-Length: 185156 Connection: close CF-Ray: 8a5d6d19f9399e16-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 204 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=InsiderRiskProtection.png; filename*=utf-8''InsiderRiskProtection.png ETag: "0x8DC1813FC842770" Last-Modified: Thu, 18 Jan 2024 10:55:29 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 114271 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 34 00 00 03 16 08 06 00 00 00 27 16 c3 4a 00 00 0a 2c 69 43 43 50 69 63 63 00 00 48 89 9d 53 77 58 53 77 17 3e f7 de ec c1 4a 88 80 8c b0 97 6c 81 00 22 23 ec 21 53 96 a8 c4 24 40 18 21 86 04 dc 03 11 15 ac 28 2a b2 14 45 aa 02 16 ac 96 21 75 22 8a 83 82 a8 e0 b6 20 45 44 ad c5 2a 2e 1c 7d a2 cf d3 da 3e fd be af 5f df 3f ee 7d 9f f3 3b e7 de df 79 df 73 00 68 01 21 22 71 16 aa 02 90 29 96 49 23 fd bd d9 71 f1 09 6c 62 0f a0 40 06 02 d8 01 f0 f8 d9 92 d0 28 bf 68 00 80 40 5f 2e 3b 3b d2 df 1b fe 84 97 03 80 28 de 57 ad 02 c2 d9 6c f8 ff a0 ca 97 48 65 00 48 38 00 38 08 84 d9 7c 00 24 1f 00 32 72 65 12 45 7c 1c 00 98 0b d2 15 1c c5 29 b8 34 2e 3e 01 00 d5 50 f0 94 cf 7c da a7 9c cf dc 53 c1 05 99 62 Data Ascii: PNGIHDR4'J,iCCPiccHSwXSw>Jl"#!S$@!(E!u" ED.}>_?};ysh!"q)I#qlb@(h@_.;;(WlHeH88\|$2reE\|)4.>P\|Sb
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: ef d1 ef d1 9f 34 30 35 98 6d 90 67 d0 64 70 d7 90 62 c8 31 4c 36 dc 66 d8 61 38 6e a4 67 14 6a b4 cc a8 c1 e8 96 31 d9 98 63 9c 6a bc c3 b8 cb f8 95 89 a9 49 ac c9 3a 93 56 93 87 a6 1a a6 81 a6 4b 4c 1b 4c ef 98 d1 cd 3c cc 16 9a d5 98 5d 33 27 98 73 cc d3 cd 77 9a 5f b6 40 2d 1c 2d 52 2d 2a 2d 7a 2d 51 4b 27 4b 91 e5 4e cb be 69 f8 69 2e d3 c4 d3 6a a6 5d b7 a2 59 79 59 e5 58 35 58 0d 59 b3 ac 43 ac f3 ac 5b ad 9f da 18 d9 24 d8 6c b1 e9 b2 f9 60 eb 68 9b 61 5b 6b 7b db 4e cd 2e c8 2e cf ae dd ee 57 7b 0b 7b be 7d a5 fd 35 07 ba 83 9f c3 4a 87 36 87 67 d3 2d a7 0b a7 ef 9a 7e c3 91 e1 18 ea b8 ce b1 c3 f1 bd 93 b3 93 d4 a9 d1 69 cc d9 c8 39 c9 b9 ca f9 3a 87 c9 09 e7 6c e4 9c 77 c1 bb 78 bb ac 74 39 e6 f2 c6 d5 c9 55 e6 7a d8 f5 17 37 2b b7 74 b7 7a b7 Data Ascii: 405mgdpb1L6fa8ngj1cjI:VKLL<]3'sw_@--R-*-z-QK'KNii.j]YyYX5XYC[$l`ha[k{N..W{{}5J6g-~i9:lwxt9Uz7+tz
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 26 99 2c 82 09 42 22 83 12 ca bb 5a 6d 9c f9 7f dd bb 6f d4 53 5b 55 dd fd e6 cd ee cc 4e fd be 6f bf 9d d7 af bb ba 5e bf 0e f5 ab ea f7 5e ae 58 2c 82 42 a1 50 28 14 0a 85 42 a1 50 d4 23 f2 23 ad 80 42 a1 50 28 14 0a 85 42 a1 50 a4 85 12 1a 85 42 a1 50 28 14 0a 85 42 51 b7 50 42 a3 50 28 14 0a 85 42 a1 50 28 ea 16 4a 68 14 0a 85 42 a1 50 28 14 0a 45 dd 42 09 8d 42 a1 50 28 14 0a 85 42 a1 a8 5b 28 a1 51 28 14 0a 85 42 a1 50 28 14 75 0b 25 34 0a 85 42 a1 50 28 14 0a 85 a2 6e a1 84 46 a1 50 28 14 0a 85 42 a1 50 d4 2d 94 d0 28 14 0a 85 42 a1 50 28 14 8a ba 85 12 1a 85 42 a1 50 28 14 0a 85 42 51 b7 50 42 a3 50 28 14 0a 85 42 a1 50 28 ea 16 cd 23 ad 80 42 c1 21 97 cb e5 cc ff 62 b1 58 74 8f 13 b8 e9 c9 6f 85 42 a1 50 28 14 0a 45 63 c1 18 82 23 ad 83 a2 41 81 Data Ascii: &,B"ZmoS[UNo^^X,BP(BP##BP(BPBP(BQPBP(BP(JhBP(EBBP(B[(Q(BP(u%4BP(nFP(BP-(BP(BP(BQPBP(BP(#B!bXtoBP(Ec#A
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 13 95 09 21 2f e4 b9 79 f3 e6 35 bd e3 1d ef d8 79 c1 82 05 0b 66 cf 9e bd ff f8 f1 e3 17 34 37 37 8f cf e5 72 cd e6 45 29 a1 df 8d 33 df 5c 33 ff 0b 85 82 55 35 39 96 60 f2 e6 f3 f9 a8 89 de c8 0e 7d 81 0b ce 1b 53 96 42 f2 ad bd 90 73 ce 77 f9 6c 03 9a 7a 93 6b 4d d2 dc f3 ae 6e 89 9c c1 b4 92 f3 23 c9 ef 96 73 ae cd 2e 9e e6 7f 7f 7f bf 3d 97 cf e7 b1 8e a5 7c c9 bd 45 b2 4a 0b b0 73 ef 4b 72 07 ef 6d a9 7c a2 a3 c9 e3 ea 8a fb 0c d6 97 d3 1f a7 51 cd ec 1a 22 a6 3d 8d 4e ee b1 a9 5f 92 c3 d5 23 d5 9f 9c c3 f5 e1 73 e6 d8 3d 1f 78 4d 51 a0 ea f1 f5 6f 4a ef 90 73 94 bc e4 de ba e9 89 0c 6a ae 70 fb 43 d2 1e 6e df 4b ea 4e ea 1a bc 87 6e 7f 1b a2 0b ee 63 ee b8 30 e9 c4 3d 12 c7 bd ef 3e 71 72 f1 dc 85 f5 72 ae ad 24 9f bb 7f c9 75 27 72 dc fb e2 b6 0d Data Ascii: !/y5yf477rE)3\3U59`}SBswlzkMn#s.=\|EJsKrm\|Q"=N_#s=xMQoJsjpCnKNnc0=>qrr$u'r
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: b7 b5 d2 05 ee 77 54 df a3 88 07 47 d2 dd fa 25 62 24 b5 45 6c 74 36 d6 a9 a2 7d 5d c6 a4 49 93 76 98 3d 7b f6 a7 af b9 e6 9a 1d 82 6e 80 a2 a1 a1 84 46 11 fa 12 00 89 c8 e0 b4 12 3e fe f1 8f 1f bf 70 e1 c2 21 1e 96 18 cf 72 48 58 3e 66 61 e0 0c d2 ac b6 10 28 b2 07 e5 8d 0d bd e7 be 3e 13 b3 d5 44 2a e7 db 1a c6 6d 5f c3 a4 45 da b2 85 d3 28 b2 83 75 a3 b6 e1 25 c7 be ad 36 1c f1 a2 b6 8d 55 62 9c 71 e3 b0 96 50 2b c6 67 35 f4 88 19 4b 3e 87 13 45 a6 29 32 8e 65 49 e3 cd fd c3 7d 8f 8b 30 52 db d0 dc ff d4 78 e5 c6 6f 28 b1 09 59 5b b8 fc 54 b9 10 70 c4 70 b4 60 f6 ec d9 47 4e 99 32 e5 ac 91 d6 43 51 fb 50 42 a3 a0 80 49 0a 3e e7 4b b3 c7 7b ec b1 47 cb e2 c5 8b cf 69 6d 6d 1d eb 66 e6 bc ca a5 c2 81 1e bd 32 05 52 1a 41 b5 6a 3c 8d 56 a4 6d ef d0 ed 24 Data Ascii: wTG%b$Elt6}]Iv={nF>p!rHX>fa(>D*m_E(u%6UbqP+g5K>E)2eI}0Rxo(Y[Tpp`GN2CQPBI>K{Gimmf2RAj<Vm$
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 18 91 b5 34 d9 8e a6 45 a9 96 20 79 4d 63 10 13 1d f4 d5 15 1b cd 71 eb a7 88 10 36 da 28 d2 2f 19 75 9c ec 34 46 14 f6 6a 53 fa 48 08 cd 8b a3 b8 59 c8 8c c5 68 36 be d2 8c 93 34 73 31 b7 ad 8b 3b 96 b6 45 62 fd a5 48 8a 6f 6c 26 75 71 63 8a bb 16 f7 bf 14 41 f1 45 9a 42 1c 1e d2 b9 d1 dc 37 43 a0 eb a9 c2 87 66 6f 0e 45 a3 bd 0c 20 e6 59 19 5c a6 54 b6 b7 b7 57 0c b3 53 93 3d 47 7a aa e9 c9 d2 49 b2 76 11 ba 65 ab d2 85 5e f2 d6 72 75 51 e7 25 43 cc a7 3b 45 4e f0 6f 69 1b 18 37 96 a8 c8 0c 75 cd a1 63 d1 97 87 8b fe 84 c8 f7 6d e7 91 f2 67 85 2c 09 eb 70 83 ea 1f 31 24 b1 5a 3a 49 f5 62 9d a5 a8 4a c8 18 95 22 86 52 7f cd 7a b7 00 ee 2f b1 fd c7 bd 36 29 32 3b da 31 1a b7 e0 29 aa 07 8d d0 28 24 44 6f 35 e3 ca e2 45 02 1b 6f 5c 34 a7 92 49 dc 37 09 52 Data Ascii: 4E yMcq6(/u4FjSHYh64s1;EbHol&uqcAEB7CfoE Y\TWS=GzIve^ruQ%C;ENoi7ucmg,p1$Z:IbJ"Rz/6)2;1)($Do5Eo\4I7R
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: eb 72 0a 45 d2 3f cd 77 99 ba ba ba ec ff 04 63 c7 8e 35 c4 bf 94 47 32 84 a4 88 8c 91 db d7 d7 57 4a 6f 6d 6d 85 96 96 96 21 06 1a 37 8e 5c 23 cc ad cb c8 dc b6 6d 5b 29 cd bc b9 b0 ad ad 6d c8 78 a6 f4 c4 e7 dd 7a 4d 1b 18 b9 85 42 c1 1e 1b b9 e3 c6 8d 83 a6 a6 a6 54 63 cd d5 c1 b4 45 6f 6f 6f 49 46 d2 16 95 a2 bb bb 1b 7a 7a 7a c0 dd 52 6b 74 ae 14 a6 8d 8d ce c9 35 24 6d 61 fe 87 80 eb 2f a6 6d 71 7f 33 72 8d de a1 e0 64 27 6d 9c c0 f4 61 d3 97 43 e4 19 e0 3e 89 db 22 41 d2 16 1c a4 fe ec 1e e3 36 c6 6d 41 95 a1 e4 51 4e b3 ce ce ce b2 36 36 7d cd f4 39 3c 96 b9 5d 05 54 e4 65 b8 d6 1a 5d d7 14 a3 0d 1a a1 69 30 10 5b ce d2 46 66 0c 28 97 89 95 d1 dd dd 5d 46 6a 9c fa b1 3e ac a7 97 5b f8 38 cf 57 e8 42 10 ea 4d c4 3a ab 87 28 5b d4 12 49 8c dd 02 12 Data Ascii: rE?wc5G2WJomm!7\#m[)mxzMBTcEoooIFzzzRkt5$ma/mq3rd'maC>"A6mAQN66}9<]Te]i0[Ff(]Fj>[8WBM:([I
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 7d 57 d2 8f 2b 4f c9 c7 1e 6b 5f c4 10 93 7c 6c 88 e1 68 0b 55 07 a7 97 14 39 71 d3 30 51 c2 32 31 09 92 08 15 75 3f 25 63 4d 22 66 b1 50 a3 70 f8 da c6 77 4f b9 28 06 ee 1f 78 ee a7 ce 87 44 e9 a4 a8 92 34 2e b2 70 88 50 63 c4 07 8a fc c4 10 7d 49 6e 2d a3 d6 f5 53 d4 06 74 cb 59 63 22 e7 49 0b 7d b6 86 43 b1 a5 a5 25 47 2d 54 38 fa 42 19 56 d4 36 84 e4 3c 36 d4 a8 45 2b 64 91 90 48 90 74 6c f3 b7 8d 83 9d be f3 55 80 42 11 8a 85 7e 58 fb ad 1f 40 61 c3 46 6f a3 6c bc f0 f7 00 bd db df 80 d3 34 6b 26 cc f8 e8 07 60 ec fe fb da 67 6f 0c 89 e9 5e b6 1c 36 5e f4 07 e8 5a fa 48 89 d4 ac ff d9 f9 30 e7 a0 57 41 a5 a8 e5 6d 38 b5 ba 28 87 18 3a 3e f8 22 18 dc b5 63 8f 31 d7 cf 2b d1 17 8f 23 ac 8b 3b 46 92 71 2b 19 81 9c 2e 21 79 39 af 3c 3e f6 8d d1 d8 7e 5e Data Ascii: }W+Ok_\|lhU9q0Q21u?%cM"fPpwO(xD4.pPc}In-StYc"I}C%G-T8BV6<6E+dHtlUB~X@aFol4k&`go^6^ZH0WAm8(:>"c1+#;Fq+.!y9<>~^
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: e4 88 df e2 4c d4 db db cb 7a 64 39 8f ab fb df 35 d4 70 94 c7 2d c7 4d fe d2 82 47 95 77 8d 4e 0e fc 39 87 db 11 79 0a 9d db a0 b0 6d db f6 84 a6 b0 61 97 6f 73 de 9e 66 f4 eb e9 85 58 e8 82 51 59 bb 64 d9 7e 1c e9 08 e9 73 14 89 88 d9 02 e3 8b b8 48 5e 71 8a 54 60 dd 28 c3 cc cd c7 e9 18 eb 40 88 75 54 d4 42 ff 0f bd 47 95 d6 51 8b f0 45 06 39 c4 44 29 a8 fa 42 c9 87 34 be dc 63 2e 02 8a e5 50 72 a9 08 29 e7 54 08 59 b7 46 03 6a 65 6c 2a 46 17 34 42 a3 90 90 73 a2 31 c9 ec e3 46 66 a8 19 c9 e6 35 cf d0 24 7b 5e a9 c8 4c 92 ee 9e e7 3c 62 d4 62 c0 19 63 98 0c 49 d1 17 4a 56 da e8 86 14 ae b2 64 c6 bc e1 ac 94 e0 df 66 37 90 88 5e 02 a0 ef e1 f7 42 32 9e 71 7b 27 f9 dd 63 2e 5f 35 e1 23 dd 18 3e e3 ca 4d e7 a2 3b 9c 7c 4a 36 47 a6 28 5d a9 31 e5 a6 e3 68 Data Ascii: Lzd95p-MGwN9ymaosfXQYd~sH^qT`(@uTBGQE9D)B4c.Pr)TYFjel*F4Bs1Ff5${^L<bbcIJVdf7^B2q{'c._5#>M;\|J6G(]1h
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 96 9c 23 8a 70 84 b4 35 57 c6 47 80 a8 b1 41 cd e7 d2 fd 93 fa 31 26 30 ee 1f ae 47 22 f0 92 2e ee 79 4c 6a f0 b1 e4 d8 c3 75 87 c2 47 e6 6b 85 1c 51 63 5c a1 c0 50 42 a3 08 99 01 93 e0 82 7b ec fe c7 e9 65 0f 45 96 4e 12 93 3a 67 70 b9 13 3c 2e 43 1d bb 65 63 bc 58 94 b7 2c 1e 03 6f 39 b3 92 98 6d 11 e3 0e 3a 60 30 e7 00 a9 d9 7c d9 95 a2 c4 2d 57 5e 0b c5 8e 8e 92 bc b1 af da af 02 fd 14 59 23 c6 70 08 89 1c 48 e5 42 a3 0a 52 9d 94 31 e6 33 36 39 b2 8f 8d 34 ce 49 c1 39 0e 5c 9d 7c 24 0a cb e5 3c fe 21 f7 83 22 4a be eb f6 21 b4 fd 14 d5 41 08 91 e6 ee 85 2f e2 41 f5 49 ce 91 80 fb 38 47 78 62 9c 73 dc 7a e9 eb f7 be a8 8e 0f 69 09 bc 12 7f c5 48 43 09 4d e3 21 ad bb b1 48 10 1b 2a 8f ad c3 ec 31 36 ff b1 97 18 1b 15 dc e4 cd 79 da 42 bc ea 94 17 8d cb Data Ascii: #p5WGA1&0G".yLjuGkQc\PB{eEN:gp<.CecX,o9m:`0\|-W^Y#pHBR13694I9\\|$<!"J!A/AI8GxbsziHCM!H*16yB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49927	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	650	OUT	GET /api/public/content/1ffcb3e6423047f494f2570a804948ac?v=b159a002&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	626	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: image/png Content-Length: 318087 Connection: close CF-Ray: 8a5d6d1a1fa4c43b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 204 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=DMARC_monitoring.png; filename*=utf-8''DMARC_monitoring.png ETag: "0x8DC1814EBCE800D" Last-Modified: Thu, 18 Jan 2024 11:02:11 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 122150 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	743	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 f0 00 00 05 d2 08 06 00 00 00 57 5e ce 4a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 07 9c 1c d5 9d e8 fb 7f 55 75 9e 3c ca 02 64 21 a2 40 12 c1 02 13 4d b0 0d 18 30 0e 18 7b cd ee 3a ac d7 01 db f7 da bb eb b7 7b 77 d7 ef dd fb ee 7d f7 ed de 0d 0e 5c 67 e3 c5 eb 5d db 78 6d 32 58 64 0c 08 90 04 92 90 44 12 49 20 50 44 59 93 3b dd cf 39 3d 35 53 5d 53 d5 55 dd d3 33 5d 3d f3 fb da 83 46 dd 95 ba ba ea a8 ea 7f fe f5 3f 46 b1 58 14 00 00 00 00 00 00 00 00 10 2d 66 a3 37 00 00 00 00 00 00 00 00 00 8c 45 00 1f 00 00 00 00 00 00 00 80 08 22 80 0f 00 00 00 00 00 00 00 40 04 11 c0 07 00 00 00 00 00 00 00 20 82 08 e0 03 00 00 00 00 00 00 00 10 41 04 Data Ascii: PNGIHDRW^JpHYs.#.#x?v IDATxUu<d!@M0{:{w}\g]xm2XdDI PDY;9=5S]SU3]=F?FX-f7E"@ A
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 44 10 01 7c 00 00 00 00 00 00 00 00 22 88 00 3e 00 00 00 00 00 00 00 00 11 44 00 1f 00 00 00 00 00 00 00 80 08 22 80 0f 00 00 00 00 00 00 00 40 04 11 c0 07 00 00 00 00 00 00 00 20 82 08 e0 03 00 00 00 00 00 00 00 10 41 04 f0 01 00 00 00 00 00 00 00 88 20 02 f8 00 00 00 00 00 00 00 00 44 10 01 7c 00 00 00 00 00 00 00 00 22 88 00 3e 00 00 00 00 00 00 00 00 11 44 00 1f 00 00 00 00 00 00 00 80 08 22 80 0f 00 00 00 00 00 00 00 40 04 11 c0 07 00 00 00 00 00 00 00 20 82 08 e0 03 00 00 00 00 00 00 00 10 41 04 f0 01 00 00 00 00 00 00 00 88 20 02 f8 00 00 00 00 00 00 00 00 44 10 01 7c 00 00 00 00 00 00 00 00 22 88 00 3e 00 00 00 00 00 00 00 00 11 44 00 1f 00 00 00 00 00 00 00 80 08 22 80 0f 00 00 00 00 00 00 00 40 04 11 c0 07 00 00 00 00 00 Data Ascii: D\|">D"@ A D\|">D"@ A D\|">D"@
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 75 7f 4e 8f af 2e 90 77 7b 36 f6 fc f5 5a 5e a5 76 c4 ab 9d f1 6a 57 fd e6 f5 9a ce bf 6d 0c bf 5d 6e 05 fd 6f 48 d1 71 9e 99 a1 e6 1f fd 7c 63 1b a3 d2 fe b3 f7 a1 d7 b5 d1 e8 49 ab d6 6f 7f bf a6 a5 cf 84 80 35 0f 9f 2b ae 63 aa 36 f6 b1 a4 3e bf f7 b2 4a c7 5f 61 f8 7c 9b 98 7c a5 62 b1 98 2f 16 8b 43 c5 62 71 a0 28 c5 9e 42 5e 0e 64 73 83 bb f3 b9 c2 16 31 8a 1b fb fb fa 5f 3e ed f4 53 0f 4f c8 ca 01 00 00 30 ad 10 c0 87 ac 5f b7 21 5e 14 51 01 fa f9 b1 58 7c 7e 2c 16 3b d2 b4 cc 23 2c cb 9a 65 99 56 87 69 4a ab 61 58 29 d3 34 2c 15 cb b0 03 09 9e 81 a9 1a 6f 44 27 4f 29 d0 a0 02 0c 85 e1 b8 87 8e 51 8e 6b 5b dd 51 a8 b0 0b 2b 05 76 54 fc a5 b4 0d 91 dc 61 15 d4 f2 99 fd 82 2d d5 ef b7 a0 60 81 33 48 10 c9 7d 3b e1 cf 3f b9 82 9b 21 95 ef 37 7b 23 8b Data Ascii: uN.w{6Z^vjWm]noHq\|cIo5+c6>J_a\|\|b/Cbq(B^ds1_>SO0_!^QX\|~,;#,eViJaX)4,oD'O)Qk[Q+vTa-`3H};?!7{#
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: d2 9f 6c 69 69 b9 2c 91 48 1c 61 88 11 af 14 e1 0a 9b 75 ef f7 7e 10 6e 80 9b 44 a5 82 d9 95 be 76 6a e0 d7 b8 bb 1d 41 ab 71 54 29 af d7 72 46 96 37 9c 15 ef 1e 07 43 bd 52 1e a6 2b 5f e7 98 7e 1d 67 87 c0 e8 c2 cb 57 e6 0c ee 57 2b 4c c6 3f 22 d1 84 f0 ed 34 31 67 e7 5b 50 00 df dd 29 e6 d7 49 e6 71 4d e1 77 0d 5a e9 7d bf c1 b2 2b cd 47 f2 01 9a 26 23 5f 0a 43 83 43 83 db fa fb 07 7f 37 38 30 70 c3 d0 d0 d0 f3 4b 97 9d 9c 6d f4 f6 01 00 00 a0 b1 08 e0 37 b9 c7 57 3e 11 4f 24 93 c7 b7 b4 b4 5e d9 d6 da fa fe 74 26 73 9a 65 5a 6d 6a 50 da 30 8f a7 db 08 e0 4f 63 04 f0 27 79 77 13 c0 27 80 3f b5 10 c0 9f 82 08 e0 03 8d 54 2c 14 0b 87 fb fb fb 56 1e 3a 74 e8 5f 0e 1c 38 f0 f0 59 67 9d b9 8f af 04 00 00 60 fa 22 80 df c4 6e bd e5 36 6b d6 ec d9 4b ba ba ba Data Ascii: lii,Hau~nDvjAqT)rF7CR+_~gWW+L?"41g[P)IqMwZ}+G&#_CC780pKm7W>O$^t&seZmjP0Oc'yw'?T,V:t_8Yg`"n6kK
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 00 00 4c 23 c3 1d 4a 46 26 dd b2 a0 b3 b3 f3 cf 12 89 f8 55 1b 36 6c ca 34 7a bb 00 00 00 30 71 08 e0 47 d8 91 47 1e b5 ac ad ad e3 6f 3b 3b ba cf 6f 6d 6b 8b 25 93 29 7d d1 9e cf 97 67 de 03 00 00 00 98 fa 1c f7 00 66 4b 4b cb 49 9d 9d 9d 7f 9e 88 c7 df bd 61 c3 a6 78 a3 b7 0d 00 00 00 13 83 00 7e 44 dd 7d d7 8a 99 99 4c e6 53 5d 9d 1d 17 b6 b4 b4 26 53 c9 b4 7e 64 36 28 66 af 1e 1b 77 fe 8c 07 9d 04 40 e3 19 ae ff d5 32 6f ad 9c f5 ee c3 2c cb f9 ae 6e 7f ec 9f 31 13 4e 40 e1 14 bf 75 a1 e1 0c d7 8f f3 f5 a2 eb 27 8c 5a e6 41 84 ce 11 75 21 53 87 04 84 91 b2 80 75 4e 66 20 39 02 4d 43 9f cf 46 bc b5 a5 f5 b4 74 ba e5 93 86 61 1c db e8 4d 02 00 00 c0 c4 20 80 1f 41 2b 7e 77 6f 3c 1e 8f 5d d6 d6 da 76 59 26 d3 da 92 4a a7 c4 34 0d 9d 79 af 06 ac ad f5 e6 Data Ascii: L#JF&U6l4z0qGGo;;omk%)}gfKKIax~D}LS]&S~d6(fw@2o,n1N@u'ZAu!SuNf 9MCFtaM A+~wo<]vY&J4y
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 8c 1f 7e 7d cc 75 40 15 65 b4 a6 eb 35 04 d7 4f cd 41 1d 9a f1 b8 d5 16 8f c7 4f 5d b7 6e 43 a6 d1 db 03 00 00 80 fa 20 80 1f 01 b3 66 ce 6e 8d c5 13 57 24 13 89 d3 12 c9 64 22 16 8b eb d7 55 f9 1c 6a 8d 02 00 00 00 08 c3 34 ad 78 3a 95 3e 2d 11 8f 2d 67 8f 01 00 00 4c 0d 04 f0 23 a1 38 2b 99 48 9e 11 8b 27 66 c6 ac b8 11 8f c7 74 a6 93 2e 9f 43 5d 68 00 00 00 00 a1 9e 94 30 8d 64 2a bd 20 91 4c 5e bc 6e dd 33 64 e1 03 00 00 4c 01 b1 46 6f 00 44 4c cb 5a 18 8b c7 16 c5 62 b1 44 3c 1e 2f 2b 39 63 0b 13 c8 57 d3 57 2a 67 63 97 bf 09 aa 4f ef ae 89 ef 7e df bd 5c c0 97 bb c6 85 f3 f0 ac e6 d0 a1 56 46 64 d8 65 72 ec d2 3b 61 ca 7b b9 a7 b1 e7 f5 6b 57 bc da b1 f2 6a 4c ae d2 17 65 13 3a 4a 6f b8 5f 2b 5f 89 ff 7b d5 b6 6b 95 96 55 cd 32 68 4f 4b bb d1 b9 5b Data Ascii: ~}u@e5OAO]nC fnW$d"Uj4x:>--gL#8+H'ft.C]h0d* L^n3dLFoDLZbD</+9cWW*gcO~\VFder;a{kWjLe:Jo_+_{kU2hOK[
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: da 21 c3 b7 5d 70 05 f2 86 33 71 c7 b4 19 d5 b4 8d ee 92 1a 51 0e e6 f3 54 80 f7 6e 19 fe 33 ec b7 15 b1 6f 15 4a a5 12 3b 7e e7 a7 d7 df 9d ed 86 ba de 08 da bb e3 28 af 15 36 b8 4f c2 01 26 83 3a ce 4c 53 55 d1 89 a5 f3 f9 7c 9a bd 0e 00 00 d0 bc 08 e0 37 4e 77 a1 50 98 65 1a 46 d2 34 0d a3 94 7d 3f 7a f3 67 67 9a fa 05 bd eb c1 33 48 16 22 93 be da 7a f5 93 35 58 9c d7 b6 93 91 3f 05 f8 d5 b6 f0 ab 7f 41 2d 8c 49 51 4d e6 7c 98 32 13 61 a6 1d 1d 29 c4 6f 22 47 10 df eb 75 f7 6b ce 3f bd 4a 72 b8 a7 0d 93 e9 eb 35 3f 26 45 d0 91 44 1f e0 14 e1 55 c7 de 6f 9a a0 e9 86 a7 2d fb e7 c4 a3 bd 70 07 e6 ed b6 cb ef fa c6 79 3d d2 88 f1 7c 00 fb 50 13 31 2c d3 34 93 ea 87 bd 02 00 00 d0 bc cc 46 6f c0 74 65 9a 66 77 2c 66 a9 fa f7 31 67 a0 1e 00 00 00 00 ea 40 Data Ascii: !]p3qQTn3oJ;~(6O&:LSU\|7NwPeF4}?zgg3H"z5X?A-IQM\|2a)o"Guk?Jr5?&EDUo-py=\|P1,4Fotefw,f1g@
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 8b 7a 60 db 28 5c 83 03 00 00 00 5e 08 e0 37 88 69 9a 7a 30 2d 95 d5 3e 5a f7 78 f2 b7 23 5c dd 57 91 98 65 ea 9b 9c 5a 97 55 cd b6 54 53 af da 5d 73 3a 6c 0d 59 af 75 87 9d ae da 65 03 08 27 4c 1b 12 76 dc 0e bf b6 21 4c 1d eb a0 f7 dc 65 75 82 da ae b0 ed 4b 14 da 13 da 38 44 49 d0 39 5e eb 75 47 35 03 cc d6 32 48 ae f3 bd 4a db 59 6b 47 61 94 da 8a 28 6c cb 78 c5 13 a6 e4 73 a5 52 3a 53 e0 e3 00 00 00 60 0a 22 80 df 20 b9 5c 5e 62 31 43 57 ce d1 c1 a0 e1 7a 3a 13 99 e9 15 34 a0 9a fd de d8 9b b1 a2 c4 13 56 cd eb ab d7 b4 13 7d 93 38 91 03 d2 4e a5 1b 5d a0 11 26 fa dc a9 14 88 73 ab b6 9d 76 06 f0 e8 28 04 a2 cd 2b e0 3e 19 4f 08 56 73 0d 52 e9 3a ae 1e db 51 cf e5 35 4b 52 8d 4a 52 c9 66 55 29 9d e9 f3 b9 01 00 00 d0 3c 08 e0 37 48 3e 5f 10 43 f2 23 Data Ascii: z`(\^7iz0->Zx#\WeZUTS]s:lYue'Lv!LeuK8DI9^uG52HJYkGa(lxsR:S`" \^b1CWz:4V}8N]&sv(+>OVsR:Q5KRJRfU)<7H>_C#
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: d7 ea ac f1 08 04 ea 01 00 00 00 00 00 00 00 d1 41 06 7e 83 14 8b c5 42 51 8a ba de 8b 5d f6 a5 94 cc 14 9d cc 7b dd ad 30 b2 6d e3 2f 49 11 b4 8c 30 19 ec d5 6e 47 98 ec d7 5a b2 c9 dc cb 9b cc 52 43 00 a4 61 63 71 84 6d 53 fc da 33 af cc 58 bf 2c d8 4a 6d a2 b3 6d 0a 9b 35 eb b5 0d 64 cb 02 b5 ab 94 0d 5f cd 7c 95 e6 f5 7a da a6 9e e3 73 78 09 93 49 5f cf 71 84 00 00 00 00 54 46 00 bf 41 2c 2b 66 59 96 55 34 4d b3 68 07 53 d4 7d cf 48 80 25 02 81 7c bb 06 7e bd 6a b5 8e 27 70 56 cb 63 d9 ce b2 14 ee 20 7b d8 c0 98 73 5a af c7 ce fd fe 0e 20 9a 82 82 e4 36 af 36 c0 ef 7d af e9 82 ca e1 f8 bd 36 fa ef 41 f9 78 1e 5e 6d 71 98 b6 ca eb 3d 4a 5e 00 f5 51 a9 fd 08 3a 1f c3 5c 37 b8 af 5d bc 96 eb 0c ea fb 75 ea f9 6d 77 50 27 60 d0 b5 52 98 75 01 00 00 00 18 Data Ascii: A~BQ]{0m/I0nGZRCacqmS3X,Jmm5d_\|zsxI_qTFA,+fYU4MhS}H%\|~j'pVc {sZ 66}6Ax^mq=J^Q:\7]umwP'`Ru
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 75 26 d0 89 d1 58 07 0e 1c 92 7d 7b f7 eb 27 7d f2 f9 bc cc 98 d9 2d 1d 1d 6d 32 1d 44 e5 a9 a6 b7 df de 23 07 f6 1f 94 1d 3b 76 4b 47 47 bb 74 75 75 c8 cc 59 33 24 9d 4e f9 06 d7 0a 05 f5 7b c1 b3 86 b5 fd 5a a1 50 18 fd bb 7a cb a8 5c b3 de bd 2c 35 7f d8 7a d7 ce 69 fd 96 df d3 d3 2b 7b f7 ec 97 1d 3b 76 e9 d2 70 b3 67 cf 94 8e ce 36 e9 ec ec a8 b8 6c b7 de de 3e 79 7b f7 5e d9 b5 f3 6d 19 1c 1c 94 39 73 67 49 77 77 97 cc 9a 3d 43 ea 7d 6e ec d9 b3 47 76 ed dc a3 3f ff fc 79 73 a4 6b 46 a7 74 75 75 56 b5 1c b5 6f 76 ed da 23 83 03 03 23 9f b1 ad bd 4d ba bb ab 5b ce db 6f ef 95 83 07 0e e9 fd d7 de d1 2e dd 5d 9d 32 73 56 77 d9 71 02 d8 6d 85 d7 f9 e4 3e 8f 2b 8d a7 e1 37 c6 86 5f 2d fc 6a c6 0c 8a 22 02 ff 00 00 00 68 76 04 f0 27 d7 48 98 65 70 60 50 Data Ascii: u&X}{'}-m2D#;vKGGtuuY3$N{ZPz\,5zi+{;vpg6l>y{^m9sgIww=C}nGv?yskFtuuVov##M[o.]2sVwqm>+7_-j"hv'Hep`P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49930	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	415	OUT	GET /api/public/content/b310bf37eca948cbac2e2b1e79015256?v=aa212b94&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	632	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: image/png Content-Length: 179707 Connection: close CF-Ray: 8a5d6d1a280980cd-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 204 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=Colab_AiInspections.png; filename*=utf-8''Colab_AiInspections.png ETag: "0x8DC1817D468FA55" Last-Modified: Thu, 18 Jan 2024 11:23:00 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 122238 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 34 00 00 03 16 08 06 00 00 00 27 16 c3 4a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec 5d 07 9c 54 c5 fd ff 6e bb db 6b 70 77 f4 0e 02 52 44 45 01 11 2b 02 12 ac 28 58 f0 6f 89 31 c6 d8 a3 c6 18 12 25 1a 63 ec 89 bd c4 82 1a a3 41 13 14 3b a2 51 54 50 01 91 22 bd f7 76 b4 e3 fa d6 ff e7 37 6f df ee ec ec cc 7b 6f ef 76 8f 03 e6 cb e7 d8 dd f7 a6 bd f7 66 de fc be f3 2b e3 8a 46 a3 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 38 10 e1 de df 0d d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 a8 2f 34 a1 d1 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 38 60 a1 09 8d 86 86 86 86 86 86 86 86 86 86 c6 01 0b 4d 68 34 34 34 34 34 34 34 34 34 34 34 0e 58 68 42 a3 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 Data Ascii: PNGIHDR4'JpHYs.#.#x?v IDATx]TnkpwRDE+(Xo1%cA;QTP"v7o{ovf+F8/48`Mh44444444444XhB
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: c4 5e 99 e8 9c c8 d4 83 f4 c4 2c 06 aa f6 55 94 7f 52 56 56 76 e3 a0 41 03 b6 a7 57 82 86 86 01 4d 68 34 1a 1d f3 e6 2d 38 bb 4d 9b b6 cf e7 e4 e4 b4 8f b3 14 4d 2a 34 32 44 3a 9c 90 91 86 a6 51 11 19 d9 71 82 95 59 86 5d 5e 27 f9 ad 88 8b 8c f8 c8 f2 a6 0b 27 82 59 43 09 92 c6 fe 83 53 8d 8d 4a 73 22 4b 23 4b 57 1f 0d 8c 98 de ae 9c fa 12 1a 3b b0 ba 99 59 ac fd 62 81 93 32 9a 14 81 11 cc 8a a5 df 65 bf eb 8b 28 10 0c 06 77 ee d9 b3 73 7c ef 3e bd 5e ce 40 89 1a 87 18 34 a1 d1 68 54 2c 59 bc ec 9e 56 ad db fc d1 e5 72 f9 6c 49 4c dc 79 c6 81 76 46 13 a2 83 0e 99 22 26 f5 4d 9f 8e 96 86 20 92 88 74 ca b5 d2 ec f0 e5 59 91 97 74 48 91 58 7e 36 c9 4b ba 69 9b 8c 39 ce 21 64 32 56 df 3a eb 9b 27 5d 42 63 f5 dd 8a fc a8 ce a7 ad 79 11 c8 4f 3a 64 28 13 c4 a9 Data Ascii: ^,URVVvAWMh4-8MM*42D:QqY]^''YCSJs"K#KW;Yb2e(ws\|>^@4hT,YVrlILyvF"&M tYtHX~6Ki9!d2V:']BcyO:d(
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: b1 28 d5 a3 e7 d6 2b 33 6d 86 46 ef 03 9f d7 d7 d2 eb f5 9d 5f ff 52 34 0e 05 68 42 a3 91 15 4c 9e fc ae a7 a8 b0 f0 b2 28 5c 1e 83 b8 88 6f 7a fa 8f 73 f2 57 be 28 2d f6 a0 11 b5 37 76 a4 22 9b da 18 ad e9 69 52 3e 34 56 82 b8 cc e4 8b 3f ae 32 f7 b2 12 b4 65 ce f6 22 21 10 eb 55 f9 b1 38 11 fe ad 08 9b 98 47 75 0f 64 65 88 fe 36 32 13 b8 fa 20 1d a2 a8 32 63 d3 1a 92 ec c1 49 04 32 bb 3c 76 26 64 bc 70 ef 54 c3 63 55 97 aa 0e 31 14 b3 2c 30 41 3a 24 2e ed 36 c7 ad a4 d3 8b f6 b6 5f 21 5e 8a 49 42 cc e3 e6 1a a4 78 de 3c ae 22 44 e6 67 03 2f 39 1a 8d ba 0b 8b 0a 47 36 ac 14 8d 83 1d 9a d0 68 64 05 9d 3b 75 2e cc cb 2f 38 2e 61 3d 16 b3 3a 33 c1 47 3a 63 2f c4 f8 2c 90 38 6e fa da f0 b0 f2 79 71 32 51 34 c5 c9 44 23 6d d4 d7 21 dd 69 d9 56 bf 45 a4 a3 65 Data Ascii: (+3mF_R4hBL(\ozsW(-7v"iR>4V?2e"!U8Gude62 2cI2<v&dpTcU1,0A:$.6_!^IBx<"Dg/9G6hd;u./8.a=:3G:c/,8nyq2Q4D#m!iVEe
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: ea 6a 03 09 33 b1 14 c1 31 b6 da ee e2 0e 24 91 18 96 80 3b 6e 51 51 bc 7c 53 ad 1d 65 24 c6 e3 f5 c0 e3 51 47 bb d1 68 fa 10 9d 7d 89 d4 44 c2 51 84 82 61 e3 b8 29 e0 34 c4 5f 26 ce 7d 5d 70 7b dd f0 b8 8d 59 97 7e 9b f5 aa da 66 75 5e 96 36 25 3d d7 75 19 29 93 6d 32 cb f5 7f ab 70 ca 32 8d 8c fc 72 53 f3 3a cd 6f a5 05 12 d3 d9 05 16 48 4b 30 93 09 56 56 6b 1d 59 e1 39 16 fb 61 a5 5d 14 09 c9 51 44 42 24 1c 67 4e 8b 2b f6 49 51 88 df 1f 66 4c 76 24 4a a6 cd 51 8d 2d 95 86 c3 ca d1 de ce 09 df eb f5 c6 db 48 04 a3 2e 50 83 ba 40 00 81 40 00 a1 60 00 81 60 80 1d 0f 87 43 71 32 43 8b 2a 84 f6 ed 5b e2 a9 a7 5f c7 c2 05 53 01 14 c7 2c f8 73 01 f8 51 54 54 88 96 2d 4b 50 da a2 04 9d 3b b7 43 ef 5e 5d d0 ad 5b 57 f4 ec d9 09 5d ba b4 4f ba d6 ea aa 80 e5 b5 Data Ascii: j31$;nQQ\|Se$QGh}DQa)4_&}]p{Y~fu^6%=u)m2p2rS:oHK0VVkY9a]QDB$gN+IQfLv$JQ-H.P@@``Cq2C*[_S,sQTT-KP;C^][W]O
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 51 43 cb 08 4e 0a 81 e1 df 80 82 f9 59 d4 08 00 e0 cb f1 a6 ac b2 d7 67 85 f7 40 31 e9 3a 50 da d9 18 20 81 c2 eb f3 20 14 a6 c8 43 f2 09 50 34 3b 23 1f 2b ea 37 99 d6 cc d8 69 4a d2 21 38 32 73 1a b1 0e 91 e4 a8 84 3c 95 96 46 ac 87 3f 66 0a 6d aa be a6 32 1f b2 ca 23 96 af 6a 83 ec 5a 0e 76 44 63 5a 43 5f ae 87 69 1c 9b ca 25 a7 43 66 f8 67 a6 22 29 76 f9 cc df 7c 3e 55 9f 17 fb 05 bb 87 cc 64 cc 83 40 a0 0e bb f6 ec c4 de bd bb d8 77 82 d7 eb 53 d6 c5 97 e1 94 c4 19 69 79 3b ab f4 11 bf 0e a6 bd 69 ce 82 0b 44 23 75 f8 e6 9b 69 98 31 e3 73 1c 79 e4 60 5c 7d f5 c5 38 fb ec 61 28 2c f2 b3 08 69 c1 50 a8 e9 68 6c 64 f3 79 d4 01 f1 d1 d0 c8 02 f4 c6 9a 1a 59 41 4d 6d 0d b3 19 ae 97 8e 9a d9 62 08 e6 69 49 c9 13 6f 45 12 02 64 93 a8 95 b9 97 b2 25 19 76 ca Data Ascii: QCNYg@1:P CP4;#+7iJ!82s<F?fm2#jZvDcZC_i%Cfg")v\|>Ud@wSiy;iD#ui1sy`\}8a(,iPhldyYAMmbiIoEd%v
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 1e 56 02 7e 63 c3 4a 0b e1 c4 14 cd c9 ea b5 cc bc 45 4c 23 2b d3 4e 43 22 23 06 2a 02 a2 6a 3f df 06 2b ed 8c 4c 8b 23 d3 ea c8 ae d1 09 ea 33 be 64 2b fa 32 1c 8c e3 37 9b e3 c7 8a 88 da 41 d6 ff ec c8 ab 2a 3d df 3f 89 b8 d4 05 ea b0 75 eb 46 54 54 ec 63 e4 86 7c 68 44 cd 3d 9f 4f 6c 97 99 4e d5 1f c8 cc 8b 82 86 10 79 a1 ef 14 35 8d e6 1e 0a 05 4d 9a 21 0a 2c 42 be 9b 5e 77 2e 06 0d 3c 1a e1 50 35 db 44 b3 b2 aa 1a e5 7b 2b 51 be 8f 48 4d 15 80 3d 40 94 22 ac f9 63 fb cf e4 02 ae 58 b8 78 07 26 af ea 71 4f 73 21 85 7c ee 8a da da 1d f8 ed 6d b7 60 f1 a2 eb 70 d7 5d 37 30 13 b4 ca 8a 5a 67 26 80 8d c5 12 52 e6 f6 78 03 92 8f c9 9a 63 9e 6b 1a d3 84 46 13 87 ab a9 08 14 1a 07 17 be f9 66 66 d7 1e dd 7b cc f2 e5 e4 b4 4e 39 c9 77 39 ab 97 58 0a b8 83 2c Data Ascii: V~cJEL#+NC"#j?+L#3d+27A=?uFTTc\|hD=OlNy5M!,B^w.<P5D{+QHM=@"cXx&qOs!\|m`p]70Zg&RxckFff{N9w9X,
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 21 32 b3 74 c9 6a cc f9 61 21 aa ab 83 58 b3 a6 0c 81 40 88 69 3c c4 ba c5 be c9 7f 27 72 14 a0 20 35 d1 28 4a 4a 5a a0 04 5a 46 ee 00 00 20 00 49 44 41 54 73 e7 6e e8 d8 a1 33 0a 0a 8a 0c f2 18 08 c4 fc 67 9c 05 f0 10 8f 99 e3 46 35 0e e3 6d 8c 4d 76 35 35 75 cc 71 bf ba 2a 80 a2 22 3f c6 8e fd 19 26 4f 7e 1e cf 3d ff 04 8e 3e 7a 30 5c ae 6d 88 46 76 82 02 85 f2 34 c4 2c 5f a6 09 4b d4 49 1b 72 76 44 65 e5 0e 8c 1b f7 2b ac 5c b9 19 05 85 b9 8d 67 76 a6 32 27 93 9d 17 65 00 31 6d 7c ee cf 70 1b 35 0e 5a 68 42 a3 91 1d b0 ad 8e 25 2f 2b 99 b6 26 be 62 13 63 32 e6 ef a4 55 1a 93 dc 24 de 70 a2 b0 95 ae 69 80 55 3a 8a 64 c3 ff d9 5f 6e 66 cd 92 0e 35 a8 84 11 15 92 27 71 e7 f9 1a d2 b6 74 04 72 99 26 c2 e9 6a 2b 7f 6d 2a 02 c2 0b 70 32 22 22 6a 5b 64 75 58 Data Ascii: !2tja!X@i<'r 5(JJZZF IDATsn3gF5mMv55uq"?&O~=>z0\mFv4,_KIrvDe+\gv2'e1m\|p5ZhB%/+&bc2U$piU:d_nf5'qtr&j+mp2""j[duX
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 3b b0 fe 40 e3 d6 4a bb a2 6a bf 8a a8 a8 f2 f3 69 ac 48 3a ff 5b ec cb ee d8 fc 46 f7 81 e6 bb 1e 3d 3b 63 cc 98 b3 b1 72 e5 0e ac 5d 3b 2b b6 39 27 ed bf 93 6a 3e 2a 5b 64 30 ca 6d 86 cd 9b 67 61 c7 0e 2f 86 0d 1b c4 e6 ce 30 8d cb 58 04 48 2b c2 92 35 cd 8d 5d b1 82 0c 60 bc 4b c2 c1 82 82 bc fb b3 d3 20 8d 83 01 c6 b6 b5 1a 1a 99 ee 58 24 39 d2 db 48 a6 62 96 7d 47 ec b7 74 b5 26 f6 83 a5 17 4f c6 8a b0 d9 37 43 96 c6 04 ff f2 7f f5 95 49 f0 e7 e6 e0 a9 67 1e 88 9f ef 77 54 1f fc fc d2 1b f0 dd b7 3f 60 c8 09 03 93 ca b2 16 b4 8d 73 6f bc f1 31 b6 6e dd 84 a1 43 4f c0 c0 81 fd e2 79 ef be fb 09 bc f3 ee bf f1 e6 1b af 60 c0 80 23 70 c6 99 d7 a1 ae ae 0e ef 4d 79 0a 2d 5b 96 c6 b5 36 34 4f fd f3 f5 c9 58 b0 60 31 0b 2d 3a ea 8c 91 38 f5 94 fe 29 c2 a7 Data Ascii: ;@JjiH:[F=;cr];+9'j>*[d0mga/0XH+5]`K X$9Hb}Gt&O7CIgwT?`so1nCOy`#pMy-[64OX`1-:8)
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 1b 80 f9 f3 26 e3 cb e9 b3 f0 a7 09 37 e1 b3 cf be 63 84 86 f0 e8 a3 2f e2 dd 77 a7 b2 70 a0 c3 87 0f c1 84 09 b7 a2 59 b3 7c bc f7 fe 17 f8 fb df 1e c6 af ae b9 81 39 d3 ee da b9 87 ed 6c fd bf ff bd 87 9b 6f fe 2d ce 3a 6b 28 cb 7f f9 15 77 62 dd ba 15 78 f1 85 87 b0 6b d7 1e 2c 5b b6 02 55 55 55 6c a3 b7 79 f3 56 e2 ef 7f 7f 1a 0b 17 ae 45 f7 ee 2d 70 f9 e5 3f c7 f9 e7 0f 65 f7 6e f3 e6 5d 78 e0 c1 27 31 e3 9b 1f 51 5c 9c 87 8b c7 9d 87 eb ae fd 3f 76 6e de fc a5 78 ec ef cf 61 ce 9c 15 38 fc f0 b6 f8 cd 6f 6e c4 b0 61 03 95 82 41 43 04 25 3b a4 4b 66 cc 7e f1 cd 57 b3 70 c4 91 bd 71 ef 5f 7f af 14 c6 78 d0 b3 9b 33 7b 3e bb 77 64 2e 63 42 b6 42 6b e6 2f 29 69 c6 84 0d 72 fe 25 4d de 3d 77 5f cf ce 7d f0 c1 17 88 84 d7 b0 73 ad 62 82 fa d2 a5 eb b0 6c Data Ascii: &7c/wpY\|9lo-:k(wbxk,[UUUlyVE-p?en]x'1Q\?vnxa8onaAC%;Kf~Wpq_x3{>wd.cBBk/)ir%M=w_}sbl
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 0d 58 b3 fa 2b 78 7d 3d b1 6d db 3a 3c fa e8 1f b0 7e fd 26 3c f2 c8 ef 50 52 5c 8c ad 5b 96 e1 a1 87 9e 84 db 9d 8f 48 64 13 96 2e 9d 81 76 6d 4b 30 7a f4 70 5c 79 e5 04 2c 5d fa 11 80 36 d8 bc 65 1f 3e ff 7c 0a 23 90 ab 56 0d 60 6d 99 35 7b 21 d6 af fb 1a 4b 96 2c 86 db dd 1c 91 c8 56 ac 5c f9 1d 8a 8a 0a 71 cd 35 17 e2 ea 6b ee c5 ac ef df 66 f7 6d fb f6 6a cc 9c 39 95 e5 6f d9 b2 3d cb ff e4 53 6f e0 b1 bf df 85 d6 ad fb a3 7b f7 6e f8 f4 d3 b7 30 7b f6 42 7c 32 f5 35 b4 6d d3 f2 a0 23 35 99 04 2d e6 84 23 51 fc 30 f7 27 a6 3d 26 c2 ab 7e 17 f0 13 88 31 51 54 56 56 a2 7d fb d6 38 e6 e8 23 41 0b 68 75 a4 d1 13 f6 6e 11 cb 93 99 8b c9 88 87 6a 4e b1 f2 8b 11 cd 6e 55 f5 8a 75 a8 ea 4d 94 ed 66 7e 35 d4 95 46 8e 1c 82 89 13 9f c1 55 57 dd 80 68 64 07 5c Data Ascii: X+x}=m:<~&<PR\[Hd.vmK0zp\y,]6e>\|#V`m5{!K,V\q5kfmj9o=So{n0{B\|25m#5-#Q0'=&~1QTVV}8#AhunjNnUuMf~5FUWhd\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49929	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	650	OUT	GET /api/public/content/1850fe2511d74a93bd0d286ea69d6bc8?v=d9cfd148&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	634	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: image/jpeg Content-Length: 254461 Connection: close CF-Ray: 8a5d6d1a1d100f8f-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 231 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=AI_inline_03.jpg; filename*=utf-8''AI_inline_03.jpg ETag: "0x8DC65FF35099F0F" Last-Modified: Fri, 26 Apr 2024 14:43:16 GMT Vary: Accept-Encoding api-supported-versions: 1.0 Cf-Bgj: h2pri ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 138327 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 80 07 00 00 03 a0 04 00 01 00 00 00 00 05 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d Data Ascii: ExifIIV^(ifHH02100100C%# , #&'))-0-
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: af bd 55 c6 de 3d 29 73 49 40 a5 76 ee c6 81 cd 25 49 10 39 e8 69 bd 5a 91 36 d0 0d 47 cd 4b 45 31 35 72 3a 3b 53 cf 4a 6e 29 0b 94 68 a0 d3 88 e2 92 82 79 6c 36 91 ba 53 9b a5 26 32 28 25 ae 83 0d 3b 38 14 bb 71 48 dd 29 a1 5a c3 4d 21 a7 51 56 67 61 94 d6 a9 0f bd 27 1d a8 13 43 05 06 9c dd 69 28 26 dd 06 d2 9e 94 b4 55 0a c3 29 bd ea 43 49 41 2d 0c 3d 69 a3 ad 4b 47 7a 64 b8 5c 8f a5 25 29 1c d2 53 32 12 93 02 97 14 50 26 ae 32 92 a5 3d 0d 47 4c cd c4 69 e9 49 c7 6a 7f 6a 4a 6c 86 86 0a 53 4e a3 19 a6 2b 32 33 48 46 6a 43 d7 14 51 72 5c 48 c0 c5 2f 63 4f 61 c0 a6 d3 25 c6 c4 54 86 a5 34 84 e2 82 1c 48 e9 31 cd 49 c9 a5 a6 89 6a e3 31 46 05 3e 8a 02 c3 29 c3 a5 21 19 34 a2 81 a4 30 8e 4d 25 3c 8e 69 76 d3 b9 3c a4 23 ef 54 94 ea 28 12 8d 88 e8 55 a9 15 Data Ascii: U=)sI@v%I9iZ6GKE15r:;SJn)hyl6S&2(%;8qH)ZM!QVga'Ci(&U)CIA-=iKGzd\%)S2P&2=GLiIjjJlSN+23HFjCQr\H/cOa%T4H1Ij1F>)!40M%<iv<#T(U
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: f5 8d 39 c6 de 99 a5 8c 0f 2f 0b 9e 4e 68 52 1a 30 a5 72 29 cc 46 dc 28 e0 76 f4 ac da 36 43 88 5f 2d 76 2e 14 1f cc d4 83 e6 6e 07 22 9b 93 b4 67 a5 3a 3c 07 23 1d 7b d2 35 81 23 12 08 de db 8e 7f 2a 73 85 0f 9e bb a9 a0 fc e4 b7 38 e2 9c 08 57 6d a7 23 d2 93 36 5b 8f 0f e5 83 b3 e6 07 8c d4 83 e6 43 bd b0 7a e2 a3 7c 15 05 3e 9f 4a 54 c0 5c 70 cd ea 6a 1a 35 4c 91 b0 02 9c 36 07 a5 3c 60 61 57 a1 a8 97 b6 f2 70 69 c0 e5 b2 47 23 f5 a8 66 a8 91 72 18 87 23 6f 5a 9b 1e 58 ca 36 76 f3 f3 74 6c d4 2d 92 00 c7 cc dc af b1 a0 29 0a ca 79 04 7e b5 99 aa 63 d1 4b 3e dd d8 63 c8 14 f1 f2 46 99 20 48 0f 3e b4 91 05 54 39 1f 30 c7 cd 4b 26 ec 90 4a 80 3a 7a 9a 9d 0b b8 f6 88 ac 66 55 04 13 eb 4c 46 19 04 8e 40 c6 69 fe 73 34 6a 83 0a 17 8c f7 34 cd ab 19 3d cb 7a Data Ascii: 9/NhR0r)F(v6C_-v.n"g:<#{5#*s8Wm#6[Cz\|>JT\pj5L6<`aWpiG#fr#oZX6vtl-)y~cK>cF H>T90K&J:zfULF@is4j4=z
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: c5 03 8c 9f c2 9d 83 eb 46 0d 4f 33 2f 94 50 0e cc 67 8c d2 1c 67 a5 38 74 a3 8f 4a 2e c7 61 9f 89 a3 8e c4 d2 d3 94 7c b4 86 27 1e 94 b4 51 40 07 5e 32 38 f6 a2 8a 5c 1f 5a 00 4a 29 48 e4 9c f6 ed 49 8c f1 40 08 69 7b 50 78 c5 1c 1e f8 a0 42 13 d3 02 93 80 c1 8d 18 e3 83 9a 07 a1 1d 68 01 ac 01 3b 42 e4 1e fd ea 5b 1b bb ad 26 65 92 c2 67 55 cf 29 9f e7 4d 52 0e 78 1b bd e9 aa a4 38 23 25 8d 09 d8 ce a5 35 3d 1a 3d 03 49 f1 4d a6 a5 0a c7 a8 2a db 5c 8e 3c c5 e3 3e d5 ac e8 f8 56 8c 06 46 19 5d 9c e0 7e 15 e4 f3 44 24 61 c6 1f d4 f4 ad 2d 2f 5d be d3 08 0a e6 48 57 b0 e6 9a 69 9e 55 6c bf 95 b7 4c f4 48 db 39 04 f2 0d 36 70 06 0b 0e 7b 56 7e 97 e2 0b 0d 41 93 05 22 b9 7e 06 fe 33 f8 d6 b4 f0 cc a7 6c 83 72 b8 c8 60 c1 82 fe 22 99 e7 4d 38 3f 7d 58 ac 4e Data Ascii: FO3/Pgg8tJ.a\|'Q@^28\ZJ)HI@i{PxBh;B[&egU)MRx8#%5==IM*\<>VF]~D$a-/]HWiUlLH96p{V~A"~3lr`"M8?}XN
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: c9 e5 fa fc d5 a3 e1 cd 3c 3c 82 ee e0 2e ce 40 07 bd 63 56 57 f7 51 e9 65 d8 09 e3 2a aa 71 45 df 0f e9 a2 cd 05 c4 b8 33 b8 3d 47 00 56 a2 8c 28 e4 9a 45 18 50 3b 0a 77 1d ab ce 9c ef a2 d8 fd 5b 05 84 86 1a 92 85 35 6b 0d 61 4d 34 e7 3c 54 25 8e 31 50 6f 39 58 47 6e 4d 57 95 c0 3c 9c 66 9c ed cd 46 8b e6 5c 2a 9f 5a 69 1c 35 66 db b2 ea 5f d3 90 2a 97 23 a8 ab 0a 09 62 47 7a 55 8f 66 17 b0 e2 97 85 3c 1a 96 cf 5a 8d 2e 48 a8 8d 23 9a 76 68 ef 48 05 49 aa 24 a6 e0 d3 ba d3 71 ef 52 5b 19 83 e9 4f 51 eb 46 0d 29 e9 40 28 8d 3f 77 02 95 73 de 80 0e 69 d5 37 1a 88 8d d2 9a 7a 53 e9 09 e3 a5 21 8d 14 10 69 45 3b 34 02 43 30 68 02 9c d4 80 d0 2b 0d 60 78 a6 e0 d4 a7 9e 94 d2 28 13 5d 46 60 d1 83 4f 14 1a 42 b0 cc 1a 30 7d 29 f4 50 3e 52 32 0e 68 a7 9e b4 d3 Data Ascii: <<.@cVWQeqE3=GV(EP;w[5kaM4<T%1Po9XGnMW<fF\Zi5f_*#bGzUf<Z.H#vhHI$qR[OQF)@(?wsi7zS!iE;4C0h+`x(]F`OB0})P>R2h
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: f1 a6 ea 9f f2 3c 0f fa eb 47 83 0f fc 54 16 87 d1 8d 26 aa 47 fc 26 fc 74 f3 85 3e 86 6b e0 5e a7 63 a8 f2 d7 67 b6 df eb d6 a8 00 41 61 f8 62 ae de 8e 6e 4a 9e ab 8a a4 ae c7 69 3f 78 9e be 94 a7 b9 ea a2 75 42 10 3a f1 9e 39 a3 cc 3e 5b 7c a3 6f 7f fe b5 3a 18 99 ef 12 38 8b 30 27 e6 03 b8 ef 53 ea a2 38 ae 9d 20 24 45 8e 95 0d 3b 5c d6 3b 10 64 ed 40 a0 f1 fa d3 86 54 e7 3c 0e de b4 46 0b 12 cc c4 e3 a0 a4 07 e6 f6 a4 69 1d 09 62 6c a9 00 60 75 a9 13 3e 58 07 ad 31 0f ef 00 51 85 c6 79 a9 37 06 2c 07 5c 54 33 78 e8 87 05 23 e5 07 8a 92 db 08 71 d4 63 83 55 e1 18 c8 39 df fc aa 75 2a c1 54 0e 7b 9a 84 6f 16 3e 36 04 91 d7 3c 67 b0 a9 82 8d 8a 09 f9 fa 75 eb 50 2e 12 53 b5 4e 07 4f 7a 95 e3 cc 91 ed 38 67 3d 7d 29 6c 6b 10 51 92 14 f3 93 c5 3a 3c 65 b7 Data Ascii: <GT&G&t>k^cgAabnJi?xuB:9>[\|o:80'S8 $E;\;d@T<Fibl`u>X1Qy7,\T3x#qcU9u*T{o>6<guP.SNOz8g=})lkQ:<e
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 69 8f 14 a9 f7 e3 70 3d 71 47 23 46 9e d2 32 d8 6d 14 9f 5e 3e bc 51 90 46 43 29 fa 1a 4d 0d 4d 01 a4 e4 37 3d 28 04 7a d3 98 64 71 40 9b be a3 18 1d dc 52 e0 ed e7 ad 21 38 fa d1 bb 8e f9 a0 9d 13 12 8c 1a 45 07 a9 a7 e7 b5 36 25 a8 dc 1a 29 d9 a4 c5 03 1b 4b 49 9a 51 cd 08 96 84 cd 37 b5 3b 14 64 91 d2 a8 97 e6 45 45 2e 29 42 9a 64 08 7a 52 60 d3 f0 69 3b 66 98 9a 1b 4a c3 2a 29 71 91 41 ce ce 06 6a 89 68 45 46 66 08 01 2d e8 29 a4 11 8c 82 3e b5 76 d5 94 5c a4 92 3e 17 1c 30 ec 69 35 27 8e 59 40 85 83 00 06 4f ad 4d f5 13 89 4e 91 b8 c6 69 d8 db f7 b8 a0 81 c1 eb 4f 42 6d a1 19 06 9c 23 6e 0e 29 f8 24 7a 52 ed 2a 71 bb b5 17 17 28 c7 e9 ee 7f 95 34 fb 53 d9 73 8e 68 58 f3 8c 7a f3 45 c5 61 85 4e 33 4e 44 ce 0e 29 db 30 ad cf 19 a7 ed c4 7c 35 17 1a 48 Data Ascii: ip=qG#F2m^>QFC)MM7=(zdq@R!8E6%)KIQ7;dEE.)BdzR`i;fJ)qAjhEFf-)>v\>0i5'Y@OMNiOBm#n)$zRq(4SshXzEaN3ND)0\|5H
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 15 49 89 57 53 2e 59 fa 1c 1a 82 e2 e6 53 26 33 85 53 c7 b5 34 5c 38 72 dc 12 7b 9a e5 67 d6 e1 92 84 11 60 31 47 04 1e 33 f8 d4 a9 39 00 6e e7 0d 55 45 d1 20 87 55 23 e9 4f 13 46 5b 1f 38 19 cf 1d 2a 1b 4c eb ba 66 b2 4c 0b 7c 98 22 ad c6 f9 c1 18 c5 66 db 05 66 26 37 51 f4 e2 ad 42 08 50 5b a8 e4 57 34 e2 73 cd 23 52 ca 62 92 ab 0f 5e 6b 4b c5 37 4c fa 65 b5 b8 c9 69 18 3e 3d bd 6b 2f 4f 5d ee be 68 fd d9 3c d2 5f de 2d dd fa 92 df bb 84 14 18 f4 06 ab 0f 0f 7b 53 c6 c6 a5 74 fb 11 ff 00 1a 82 7e 51 db df d2 90 60 49 c7 e1 4d 40 a5 65 28 c7 ae 00 3d 70 69 41 2c 39 ea 38 15 dd 6e e7 0a 63 a3 6c b0 e3 a9 35 9b e2 57 ff 00 8a 67 52 e3 8f 21 ff 00 95 5f 3d 03 0e 08 35 9f e2 4c ff 00 c2 3b a9 9f 5b 67 fe 55 51 5a 99 62 1f ee a5 e8 cf 22 cf 26 9b 4a 78 24 52 Data Ascii: IWS.YS&3S4\8r{g`1G39nUE U#OF[8*LfL\|"ff&7QBP[W4s#Rb^kK7Lei>=k/O]h<_-{St~Q`IM@e(=piA,98ncl5WgR!_=5L;[gUQZb"&Jx$R
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: b0 94 80 8c 77 a7 62 99 8a 60 c4 02 96 94 e3 3c 50 46 29 91 6b 09 4a 71 b3 00 73 40 19 a5 db 8e e2 98 5a e3 01 ed 83 4a a7 6a b7 3f 88 a7 b2 95 50 72 3e 61 da 9b d4 75 e0 74 14 5c 9b 58 44 6d a3 6e 01 53 d8 fa d0 c0 7f 00 03 d7 14 37 40 3a 7b d2 b8 f9 70 ad 9a 09 68 46 46 ea 48 38 e2 95 81 18 1c 66 9e 09 ed 8c 50 57 7b 82 7a d2 0b 0c c7 1e e2 94 26 14 1c f2 7a d3 f6 8d bc 77 a1 47 3c f6 a2 e4 b5 d0 8f 61 6e a0 0f a5 1b 70 31 53 1e 5b 00 53 59 48 34 11 6b 0d c2 a9 53 8c fa e6 91 d7 7c c1 73 85 f6 a9 40 1d 1a 9e 63 55 4f 7a 2e 0d 5d 68 40 c8 37 85 e7 14 32 e3 e9 4f 63 f3 0d b9 e2 8d 8e cc bc 71 4a e4 d8 68 5e 29 42 8c 54 8c 00 93 6f 4f 4a 40 01 f5 a2 e3 b0 d0 31 4b b4 00 7d e9 c1 49 3c 53 b6 6e 1c 03 4a e3 48 69 8c 80 0f a5 3d 50 85 c8 3f 9d 3b 69 3c 66 9d Data Ascii: wb`<PF)kJqs@ZJj?Pr>aut\XDmnS7@:{phFFH8fPW{z&zwG<anp1S[SYH4kS\|s@cUOz.]h@72OcqJh^)BToOJ@1K}I<SnJHi=P?;i<f
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 78 f9 70 47 51 48 b8 b2 45 dc 70 3d 69 d8 c3 e4 9a 66 3f 77 9e 77 7a 53 a3 1f de 07 d6 93 46 f1 68 95 81 d9 f7 b0 de b5 28 91 4c 1b 5b 24 8e f5 10 20 b6 70 76 f4 a7 2a ae 33 9e 2a 1a 36 8b d4 95 09 41 cb 12 7d 69 4b 6e 8d db 8c ff 00 9e 95 1e ef 9b 1d 41 a7 03 c0 04 74 3c 54 b3 54 c7 c9 21 62 81 4e 5c 70 49 a9 63 20 4c 55 94 96 27 93 eb 55 cb 6d 52 42 e4 b3 13 8f 6a 99 08 24 a8 05 03 7e 62 a6 c6 a9 99 1a bc 44 4c 65 51 84 63 c8 f4 35 48 71 d6 ba 5f 91 c0 8a 51 c2 f0 4f ad 66 de 69 72 2a 79 b0 8d c9 9e 99 ac 27 4d de e8 f7 70 58 e8 b4 a1 37 aa 33 41 14 fe 29 8c 8c 87 0d c5 39 79 ac 39 4f 62 32 4f 61 db b1 f7 78 f7 06 ae 5a df cb 09 00 fc eb d3 06 aa c3 13 cb 81 18 2c 49 c7 15 b3 a7 e9 e2 dd bc cb a1 f3 03 95 1d 8d 3e 4b 99 56 af 0a 71 f7 99 b2 d2 ad ad ba Data Ascii: xpGQHEp=if?wwzSFh(L[$ pv36A}iKnAt<TT!bN\pIc LU'UmRBj$~bDLeQc5Hq_QOfir*y'MpX73A)9y9Ob2OaxZ,I>KVq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49931	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	650	OUT	GET /api/public/content/beb87be3865e4deeb2dd8bf265849d5d?v=53ad9bb6&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	619	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: image/jpeg Content-Length: 111976 Connection: close CF-Ray: 8a5d6d1a1fd07271-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 185 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=Resources_62.jpg; filename*=utf-8''Resources_62.jpg ETag: "0x8DC1807BABE2EA0" Last-Modified: Thu, 18 Jan 2024 09:27:45 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 119892 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: ff d8 ff e1 17 8a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 12 00 00 01 03 00 01 00 00 00 00 20 00 00 01 01 03 00 01 00 00 00 58 15 00 00 02 01 03 00 03 00 00 00 e6 00 00 00 03 01 03 00 01 00 00 00 01 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 0e 01 02 00 5c 00 00 00 ec 00 00 00 0f 01 02 00 06 00 00 00 48 01 00 00 10 01 02 00 0d 00 00 00 4e 01 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 5c 01 00 00 1b 01 05 00 01 00 00 00 64 01 00 00 1c 01 03 00 01 00 00 00 01 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 3c 00 00 00 6c 01 00 00 32 01 02 00 14 00 00 00 a8 01 00 00 3b 01 02 00 0d 00 00 00 bc 01 00 00 69 87 04 00 01 00 00 00 ca 01 00 00 4c 04 00 00 08 00 08 00 08 00 48 61 70 70 79 20 77 Data Ascii: ExifII* X\HN\d(1<l2;iLHappy w
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 0c 0c 0c ff c0 00 11 08 00 6b 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 Data Ascii: k"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 76 dd 53 8d 56 59 fd 66 bd bb ac 6f f8 4a ad b2 a5 ea 5d 1a 9a db 8e e7 37 86 dd 66 c8 32 36 b9 db ff 00 cd f7 2b 18 e5 71 20 f4 68 e6 85 48 11 d5 d1 55 72 2f 63 2e 73 09 20 86 6e d3 c1 5a 55 ef c3 6d d6 17 9f ce 6e cf 91 4e 0c 7e 4b 7a bf aa 32 cd 5c 09 1f 1d 4a af d4 07 eb 56 7f 53 fb d5 b6 e2 c6 3b 68 9d 18 44 7c 02 ad 9e 27 25 e7 f9 08 8d d4 76 79 4f ac 03 f4 d6 ff 00 c7 e3 ff 00 d4 d6 97 d7 91 ee e9 ff 00 d4 b7 f2 d4 a7 d7 e0 5a f2 78 39 18 df 88 ad 2f af 0d d7 a7 ff 00 56 d1 ff 00 9e 91 3b 22 3b bf ff d1 ea 18 35 47 6a 0b 01 46 6a 95 89 b3 57 21 59 c9 d3 0d ff 00 05 56 a3 a8 56 72 bf a1 bc 79 04 d2 b8 6c f9 df ed 7c 5a be b4 5f 5d 8c b8 9f b1 55 51 0d a9 ce 93 5b 9f 75 8e 1b 3d de 96 c7 ff 00 39 fe 91 75 1d 23 29 b9 b8 b5 e5 31 ae 0d bf f4 8d 0e 6e Data Ascii: vSVYfoJ]7f26+q hHUr/c.s nZUmnN~Kz2\JVS;hD\|'%vyOZx9/V;";5GjFjW!YVVryl\|Z_]UQ[u=9u#)1n
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 5c a7 4f ea d9 78 96 30 d3 63 81 69 d0 72 3f cd fa 3f d8 5d 8e 0e 6b ba a5 25 d4 07 0b eb fe 7a 96 09 23 f9 6d 6c 6e f4 ff 00 f3 da 38 cc 32 ee 4f 15 7a bc 59 7e 25 c8 64 e5 89 cb 8a 31 38 2f a7 f9 1f ef 5f e8 71 3b 3f b3 32 1a c6 b1 97 62 b5 8c 68 6b 43 ad 71 d0 08 09 0c 3b d9 ff 00 6a 70 87 c6 c2 b0 af f5 da 4b 4b dc d2 39 69 10 7e e2 15 0b ac bc 7f 85 77 de ac dd 38 dc 36 f5 19 38 f6 d9 5b 58 73 b0 58 03 da e3 ef 33 ed 3b a3 94 4e b7 65 19 38 f5 8a 72 31 9c ea da e9 dd 73 1b cc 77 77 f5 57 0b 75 99 27 fc 3b fe f4 21 6d 9f 9f 6b de 3c 1c e2 42 1c 49 e0 7f ff d3 e0 8d 90 a3 eb 20 da f8 71 08 5b ca 7b 13 70 5d e6 88 db 55 16 b9 19 8e 49 4d e6 58 8a d7 2a 6d 71 46 61 29 5a ee 16 ed 6f 32 b4 70 ae db 6b 1d e0 e0 7f 15 93 59 21 5c a1 f0 53 81 44 a3 a2 b3 1b Data Ascii: \Ox0cir??]k%z#mln82OzY~%d18/_q;?2bhkCq;jpKK9i~w868[XsX3;Ne8r1swwWu';!mk<BI q[{p]UIMX*mqFa)Zo2pkY!\SD
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 96 43 4d 1a 11 90 ba 3a 3f ff d5 f2 f4 94 ed d9 23 6e df 3d 9b bf f4 62 82 2b 0b 20 88 db 83 78 d5 74 1d 0b 67 a6 dd 9f 62 f3 9d fb ff 00 b7 eb 28 75 df b3 ee 3b ff 00 66 ee ed e9 7a fe af cf d1 fd 12 49 a1 d0 b9 0c cb 23 44 66 65 4a cf ef a7 fa fd ea 4d f9 a0 b8 71 3a d5 e4 8f 15 6e 8b 5a 48 d5 62 d5 3f ca fc 15 dc 69 91 f4 bf 04 97 0b 7a 8c 17 52 ca 9d 53 b0 4e 7d 99 65 b4 d2 d1 71 c7 d8 e3 fe 17 d7 87 6c da b5 70 6b e8 bf 56 70 3d 5e a7 96 dc fc c2 fd ef 75 ae 2e a5 8f 23 6b be c9 51 3b 5d 63 5a dd 9e be cf 52 c5 ce 65 7f c8 77 cc f6 fe b7 f6 36 fe 72 a1 d2 fe cf f6 ba 37 7d 97 d6 da 36 fe d6 f5 ff 00 f6 5f d3 fd 4f 6f ee 7a a8 48 02 45 98 8d 3a fc cc d8 e5 21 03 51 c9 2d 7a 13 1c 5f cb fb af 45 77 d7 4c 1c ab e6 8d e4 17 7e 8a aa ab 71 73 be 50 b2 b2 Data Ascii: CM:?#n=b+ xtgb(u;fzI#DfeJMq:nZHb?izRSN}eqlpkVp=^u.#kQ;]cZRew6r7}6_OozHE:!Q-z_EwL~qsP
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 70 6c 75 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 75 73 65 70 6c 75 73 2e 6f 72 67 2f 6c 64 66 2f 78 6d 70 2f 31 2e 30 2f 22 20 70 68 6f 74 6f 73 68 6f 70 3a 53 6f 75 72 63 65 3d 22 44 69 67 69 74 61 6c 20 56 69 73 69 6f 6e 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 69 74 79 3d 22 42 65 72 6c 69 6e 22 20 70 68 6f 74 6f 73 68 6f 70 3a 41 75 74 68 6f 72 73 50 6f 73 69 74 69 6f 6e 3d 22 43 6f 6e 74 72 69 62 75 74 6f 72 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 70 79 72 69 67 68 74 46 6c 61 67 3d 22 74 72 75 65 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 75 6e 74 72 79 3d 22 47 65 72 Data Ascii: :stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:plus="http://ns.useplus.org/ldf/xmp/1.0/" photoshop:Source="Digital Vision" photoshop:City="Berlin" photoshop:AuthorsPosition="Contributor" photoshop:CopyrightFlag="true" photoshop:Country="Ger
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 70 3a 64 32 65 66 36 36 62 31 2d 34 37 37 63 2d 31 33 34 65 2d 62 32 35 38 2d 37 36 31 33 38 39 35 34 39 35 62 39 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 30 62 37 30 30 64 66 2d 65 32 38 35 2d 34 62 34 62 2d 62 31 34 30 2d 62 63 64 66 39 35 64 37 33 39 64 61 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 45 38 37 30 43 44 31 35 44 44 37 41 30 37 37 32 41 45 45 39 42 43 38 34 45 33 34 41 41 37 31 34 22 3e 20 3c 64 63 3a 74 69 74 6c 65 3e 20 3c 72 64 66 3a 41 6c 74 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 31 32 39 31 33 37 30 31 31 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c Data Ascii: p:d2ef66b1-477c-134e-b258-7613895495b9" xmpMM:InstanceID="xmp.iid:70b700df-e285-4b4b-b140-bcdf95d739da" xmpMM:OriginalDocumentID="E870CD15DD7A0772AEE9BC84E34AA714"> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">1291370118</rdf:li> </rdf:Alt> </dc:titl
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 20 28 32 30 32 33 30 38 33 30 2e 6d 2e 32 33 30 38 20 66 38 36 61 30 32 39 29 20 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 70 68 6f 74 6f 73 68 6f 70 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 64 65 72 69 76 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 63 6f Data Ascii: vt:softwareAgent="Adobe Photoshop 25.1 (20230830.m.2308 f86a029) (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from application/vnd.adobe.photoshop to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="co
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49932	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:53 UTC	415	OUT	GET /api/public/content/56afca39b49f4d2cbd39cc7efa7fa0f4?v=34b2edca&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	626	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:53 GMT Content-Type: image/png Content-Length: 285998 Connection: close CF-Ray: 8a5d6d1a6fbd0f70-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 204 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=AT_integration-1.png; filename*=utf-8''AT_integration-1.png ETag: "0x8DC1815BEA3DBCC" Last-Modified: Thu, 18 Jan 2024 11:08:05 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 122008 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 f5 00 00 03 d3 08 06 00 00 00 f1 4e 29 d2 00 00 00 09 70 48 59 73 00 00 1e c2 00 00 1e c2 01 6e d0 75 3e 00 00 20 00 49 44 41 54 78 9c ec 9d 09 b8 1c 45 b9 f7 df 59 cf be 24 27 c9 c9 be 03 61 5f 05 44 41 44 16 01 11 04 44 44 c1 ed de eb 82 7a f1 5e b8 a8 5c 14 57 dc 10 50 51 14 94 4f af a0 e2 02 08 b2 c8 12 42 c2 be 05 08 81 90 10 42 12 b2 6f 27 67 5f 66 e6 7b aa 7a aa a7 ba a6 aa ba 7a ce 9c 65 3c ff 1f 4f 38 33 dd 55 d5 d5 dd d5 3d f5 7f df b7 aa 62 b9 5c 8e 00 00 00 00 00 00 00 00 00 50 79 c4 47 ba 02 00 00 00 00 00 00 00 00 00 28 0d 88 7a 00 00 00 00 00 00 00 00 a0 42 81 a8 07 00 00 00 00 00 00 00 00 2a 14 88 7a 00 00 00 00 00 00 00 00 a0 42 81 a8 07 00 00 00 00 00 00 00 00 2a 14 88 7a 00 00 00 Data Ascii: PNGIHDRN)pHYsnu> IDATxEY$'a_DADDDz^\WPQOBBo'g_f{zze<O83U=b\PyG(zBzBz
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 8f 7b b6 7b f6 99 88 b2 f9 fd 71 91 2f 93 c9 f0 bf 89 44 22 90 47 7c 96 cb 90 8f 27 fe 26 12 89 6c 36 9b 8d 67 b3 d9 40 3d d8 77 86 7c 7c 79 bf 7a ee a2 de f2 39 b0 32 e2 f1 78 36 97 cb f9 15 10 c7 96 d3 8b ef a2 cc 7c 1a 9e 4f 77 4d 55 d8 35 60 f5 14 79 45 fd 6d f5 95 3f ab d7 48 77 1c 53 b9 ba f3 91 cf 49 5c 43 76 1d 32 99 4c c0 11 23 e7 b3 5d 5f b9 3d c8 f7 59 57 57 f6 99 5d 0f 96 4e be 77 f9 bc fc a6 b2 fb ad 9e 9b e9 7e ab 6d 98 95 c1 ee 8b 7c 1d 74 75 51 eb a5 ab 67 2c 16 cb b2 b6 2c d7 51 ba ff 81 6b ca d2 e6 b7 c5 75 d7 4d ae ab 38 0f f6 79 60 60 c0 bf 16 6a 3b d3 dd 37 f5 ba e8 da 5b d8 33 ad 5e 4f f6 59 6e 63 61 d7 46 d7 0e 74 f5 50 f3 cb f5 12 c7 12 f5 30 95 ad 2b 43 7d 5f 88 fd 86 7b 18 d8 6e bb a6 a6 f3 08 2b 57 77 7d e4 67 de 76 ad 6c ef 28 Data Ascii: {{q/D"G\|'&l6g@=w\|\|yz92x6\|OwMU5`yEm?HwSI\Cv2L#]_=YWW]Nw~m\|tuQg,,QkuM8y``j;7[3^OYncaFtP0+C}_{n+Ww}gvl(
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 0d cd 97 cb 54 3f ab b8 1a 75 c3 ca 89 ca 58 15 f9 31 4d 5b c9 37 cd 4c 7b 47 db c2 b6 b6 dd 1f df 6f bf 7d de 8a 5a 2e 44 3d 00 00 00 30 04 94 bb b3 f2 f4 53 cf 4e 68 6e 6e fe ea b8 f1 2d 9f a3 1c 55 d9 c6 55 9a 3a 7e 51 44 bd 8b b7 5d 4c 30 64 0c ed 54 44 7d c5 74 e2 c2 62 93 e5 6d 32 a3 5e fd 44 c7 16 11 60 0c bf b7 84 e5 fb a2 5b 0a b1 0f 8a 7d 79 76 b9 60 7e 5f e4 4b e1 fd 45 a2 a5 a0 86 82 a2 5f 16 cf 3a e1 55 2a 61 51 01 ba 7d 51 07 f4 97 c1 9b 1f d6 84 73 11 9b b4 d1 73 3f 12 83 a9 6d 42 3d ac 3e 2e 06 9f b0 08 10 53 db 52 ca 34 bd 9b 73 06 8f bf 56 54 1b c4 7e 29 b8 8a fe 31 c7 50 b7 e1 98 d9 70 c4 ee 41 5f 5f df b6 1d 3b 77 5c b8 6e dd da bf 1e 7f fc 71 ce 5e 7b 88 7a 00 00 00 60 08 28 67 07 e9 c9 27 9e 3e 78 f2 94 c9 7f a8 af 6b dc 4b dd 57 e4 Data Ascii: T?uX1M[7L{Go}Z.D=0SNhnn-UU:~QD]L0dTD}tbm2^D`[}yv`~_KE_:U*aQ}Qss?mB=>.SR4sVT~)1PpA__;w\nq^{z`(g'>xkKW
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 9d 38 5b 3a 1d 26 23 80 b7 51 4a 27 26 40 93 66 cb 17 de 58 bf 8c e1 10 ed 36 6c 87 57 c5 ba fc 57 75 83 9a dc a3 aa b7 df f1 74 8b c6 fe 9b f6 0f 12 97 eb ef 32 fe 5e 7c 56 c3 eb 83 21 fb 9e 18 29 a4 93 2e 58 60 cd 7a 55 6c 17 d7 45 08 7f 3f 12 40 f6 5e 8a b6 cd 1b 9e 46 50 c7 1c 3d bd ea b8 78 b1 df 45 70 eb bc b2 43 80 a9 74 9b f0 d6 79 ee 55 91 2f fe aa 81 2c 3a bb 56 c9 ed 4b 5a de cd 19 9d c0 f6 0f 66 98 2c cf 64 88 d1 88 73 35 5d 20 3a 44 67 00 90 cb 92 df 8d 16 91 ea bf 63 f3 6d 96 6f 93 f6 19 af 89 d4 06 ad 42 3b 78 b0 e0 b9 58 de fd fe f1 35 46 05 53 04 80 ce bb ff 2f e9 81 77 31 c4 b9 a0 33 f2 69 da 2c 7f ee 62 44 f5 75 8d c7 bf be ea 8d 6b 68 14 02 51 0f 00 00 00 48 fc e3 1f 77 4f 9f 38 b1 f5 86 89 13 27 55 31 31 2f 4f 8c a7 76 dc 6c de 77 f1 Data Ascii: 8[:&#QJ'&@fX6lWWut2^\|V!).X`zUlE?@^FP=xEpCtyU/,:VKZf,ds5] :DgcmoB;xX5FS/w13i,bDukhQHwO8'U11/Ovlw
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 4d c7 36 44 6b 98 86 52 08 23 94 ef 9d 37 45 06 48 c3 4b 8a 0c 57 da aa 15 1b 0e 74 ef f0 52 c5 75 98 31 c1 96 46 ad 1f 04 be 44 fe 9a a5 d3 e9 09 8d 0d 8d 17 d1 28 01 a2 1e 00 00 c0 98 e7 8e db ef 9c df d2 d2 f2 d1 a6 a6 e6 18 eb bc 64 b2 85 c9 f1 54 6c 13 1a 99 44 b3 2e af cd 20 20 fe ea 26 d8 d3 ed e7 fb a4 89 cd 54 e3 82 29 bd 5a df a1 ee b8 0d 49 c8 be 4e 84 cb aa 47 a4 31 a9 20 55 75 0a 67 ad 5c a0 21 cd 50 8c 8f 77 c5 b4 84 9d 7a 2c 39 9d fc 59 7c 8f 62 68 51 87 75 c8 47 12 f3 2e c4 34 ed ce f3 d8 0b e1 63 10 a2 be 97 3c 70 c0 68 e1 f6 6a da 30 a1 27 8b ae a8 42 56 37 66 3b ac 7e 61 45 1a 9a 6e e0 92 48 db e4 a6 a8 da a5 44 39 25 b5 b6 72 bf 07 5c bd ef 62 9b 4b 34 86 4b c4 85 cb 76 55 78 fb 46 26 c5 f0 a4 1e 4b 7d b7 fa bb 0a e5 8a fc fe 3d d5 08 Data Ascii: M6DkR#7EHKWtRu1FD(dTlD. &T)ZING1 Uug\!Pwz,9Y\|bhQuG.4c<phj0'BV7f;~aEnHD9%r\bK4KvUxF&K}=
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: cb 87 6c ab fb 55 03 80 fc d7 3f 8c a9 2a 6e 35 76 6f 6d ba 6b 66 bb 57 ba b4 ba eb 6f 0a af b7 1d 5f 35 d8 28 c2 b5 30 49 a3 a5 3c d9 f0 a3 6c 93 af 89 3c 4c cb 37 c2 8a 7d ea 31 4d f5 08 1c d6 6c e0 75 8d 08 93 b7 45 99 e3 c5 25 6a 60 54 87 d4 c7 4a 98 00 33 6a f9 9c 5c ac b1 b1 f1 84 f6 dd dd 23 1a 86 00 51 0f 00 00 60 cc d2 df d7 3f 2f 16 8b cd ac af ab d7 0a 1e d3 38 74 93 47 c3 d4 69 92 bd 96 3a af bf 3a d6 de 26 d4 5d 43 fd fd 7a 2a a2 aa 78 02 a7 e2 71 fe 91 c7 5d aa b1 d4 25 78 ff cb 8e ed 14 64 57 a5 10 8f 81 9e b9 46 fc 47 89 57 76 3c f5 52 a3 18 5c 84 bc 4b e4 84 ce 7b af d6 cf 34 cb be ba a4 9d ec 79 e7 97 4b 0a b5 17 61 f9 22 a5 7f 29 3d 17 a6 54 3f f9 d9 32 08 66 eb 49 4b de 59 1d 3a 4f bc ad e3 af 0b dd 76 11 a6 36 51 68 4a 27 09 75 d5 b6 Data Ascii: lU?n5vomkfWo_5(0I<l<L7}1MluE%j`TJ3j\#Q`?/8tGi::&]Czxq]%xdWFGWv<R\K{4yKa")=T?2fIKY:Ov6QhJ'u
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 44 a9 5e 7e 5d c7 4c fd ab 1b 2a a0 96 69 3a 9f a2 63 68 c2 b6 75 d7 6a b0 93 e2 0d c9 9a ed 61 45 0a d7 a4 ec 9d 57 bd 26 15 9d 4b 00 00 20 00 49 44 41 54 f5 b2 da 51 bd f5 3a c5 a4 7a f2 25 85 35 d4 1d cb b0 c8 05 5d 78 bd c8 17 25 9a 42 3d 4e 51 08 bf 3f 16 b9 b0 7c 5d 60 72 be a2 67 4a 35 16 08 a1 22 5f f6 7c 98 7e 41 d9 14 42 f3 d5 b0 68 dd d8 68 35 84 da 24 e6 c2 c4 bf ce cb 6b 33 10 94 7a cf c3 c2 c9 2d e8 9a b2 da cc e5 a6 af 36 63 11 11 a1 36 e5 a2 2a 2a c7 b3 57 6a 08 3d b0 a6 a8 06 53 e8 be 7a 6d 75 f7 df 24 f2 d5 e8 0f b9 2d fb 49 35 86 21 c3 77 35 8f ff 1b 60 10 e2 b2 f7 de 25 4a 2c 78 ea 66 03 af 29 92 cb c5 d3 3f 9a 89 95 31 8a c0 e5 70 f1 78 b2 86 46 10 88 7a 00 00 00 63 96 6c 2e 97 b6 4d f2 a6 62 12 ca 6a 1a dd 77 5b 87 c8 34 16 de 24 f6 Data Ascii: D^~]Li:chujaEW&K IDATQ:z%5]x%B=NQ?\|]`rgJ5"_\|~ABhh5$k3z-6c6*Wj=Szmu$-I5!w5`%J,xf)?1pxFzcl.Mbjw[4$
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 00 30 66 49 26 93 94 cd 65 f3 df c2 bd c2 3a a1 6d 1a a3 a8 23 2c 84 5e 16 e8 a6 4e 90 7a 0c b5 a3 a5 96 25 d2 d8 c2 f1 6d 46 06 55 dc 7b de 22 c9 f0 a0 86 66 2b de 1c 57 c1 ee 82 53 27 b2 1c 61 ec 36 81 ae 0a 7b d5 dd 29 d0 29 9d 90 e3 84 8d 51 b7 11 b6 54 9d ea 71 b7 a5 b1 19 00 6c 13 df e9 bc f6 ba 30 ff 42 f9 22 ea a3 f0 57 5b b6 1c f1 22 8e e3 b7 33 c5 e3 59 70 23 2b ea 55 ba 59 42 70 a9 22 50 fe ac 7a 99 55 91 a6 8a bb b0 b6 59 8a e0 14 65 97 09 5d 13 0d 54 c3 f0 dd 66 04 50 bd f7 ba 6d 91 ce 20 aa 71 24 0c 97 68 01 d3 d0 0a 5d 24 80 d8 2e fe 99 ea a6 89 02 f1 df c3 01 83 96 6c a0 2a 18 a0 0a d1 25 62 97 c6 f8 20 f2 4a f5 50 8d bc 26 c2 84 bc 6d 78 57 14 6f ba 6d 48 9a a9 1c 9d 51 ba 12 c8 8d f0 d0 01 88 7a 00 00 00 63 96 82 63 c6 5b a7 de 28 76 42 Data Ascii: 0fI&e:m#,^Nz%mFU{"f+WS'a6{))QTql0B"W["3Yp#+UYBp"PzUYe]TfPm q$h]$.l*%b JP&mxWomHQzcc[(vB
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: e5 a5 b6 c2 84 b9 8b 17 43 dd a6 13 f4 a6 ce bf ae 03 66 32 10 e8 ca d0 d5 51 ed 3c aa 65 eb c4 b4 2d 3c 33 6a a7 2a 20 f2 f2 3d 7c 9b f0 56 d7 3a 1f 31 74 0e 5d 79 9b e9 b3 9c 4e 16 f2 23 74 2a 61 e3 e7 cb 51 be 3a 7e de df a6 ac 94 c0 c4 83 a7 6b 58 3b 92 fa ca 6a 14 03 df 26 66 f8 56 0d 22 42 88 0b e1 13 b0 04 04 f7 a9 db fc 32 45 94 40 5e 98 15 79 d3 e5 ed 7a a1 15 d8 2e 6f 0b a4 93 ea 61 ca 5f 44 a9 f7 c9 d4 20 4b b7 61 95 52 86 20 1e 8f 51 3c ee bd 67 85 21 a7 9c 8f 40 e0 5d 99 f5 5a 99 f7 de f2 8f a8 c4 0f 94 67 ee 08 35 8f f8 1e 88 3a 32 ec 77 d9 ae 1e cf 76 0c db b1 5d de b1 ae 06 57 5d 7e 53 bd 4a 25 58 8e 78 ff 8b af de 27 d6 9c d4 68 82 d8 28 f6 a2 0f 07 10 f5 00 00 00 c6 2c c9 64 2a 34 fc de 34 76 30 2c 24 df 65 cc a1 2c 98 75 df 75 e5 84 95 Data Ascii: Cf2Q<e-<3j* =\|V:1t]yN#taQ:~kX;j&fV"B2E@^yz.oa_D KaR Q<g!@]Zg5:2wv]W]~SJ%Xx'h(,d44v0,$e,uu
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: a7 92 34 90 61 a1 f8 d9 fc 84 89 21 51 0b 9a 7a b0 2c 39 d6 ae 6a d2 5c d0 47 c1 55 9c ea f6 b9 08 fe a8 75 d0 bd 9f d5 f6 1e f6 9b a2 7b 47 cb db 5d 8c 59 ba ba c9 a8 cf 94 ae 2e 2e c6 12 97 fd 36 43 b9 8e da da 6a de 0e d8 8a 36 b2 c7 bc 1c 6d b6 52 84 3f 44 3d 00 00 80 31 4b 3c 3f f3 bd 6b 98 a0 a9 43 e7 1a 76 68 12 cc 61 5e 44 5d 47 5f e7 f9 b3 75 02 c3 3a 6e 36 a1 a1 e6 97 85 51 18 d6 6b 23 8d 9f f7 eb ad cc 78 9f 60 13 5e 89 ce a4 3a 5e 5b 33 83 f4 60 88 32 39 5f 68 3a 9b b7 5e f5 f0 0b e1 af 13 fa 4a 79 c3 39 81 60 d8 f5 d4 ee 97 04 3d fb cc bc f4 a9 64 82 aa aa 52 45 06 24 15 9d 60 56 bf 9b 0c 67 61 02 59 4d a7 4b 2f 3f 37 ba f6 1d c5 d0 a6 fb 1e f6 4c ba 1c 2b 2c dd 50 89 18 d7 e7 dd 85 ea 9a 2a de 36 98 f8 2a f2 32 1b f2 14 c4 bc 27 e8 33 d9 01 Data Ascii: 4a!Qz,9j\GUu{G]Y..6Cj6mR?D=1K<?kCvha^D]G_u:n6Qk#x`^:^[3`29_h:^Jy9`=dRE$`VgaYMK/?7L+,P62'3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49933	104.19.177.52	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	558	OUT	GET /scripttemplates/202405.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:54 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: FvJhOHkAv4E9FRANYIql4g== Last-Modified: Tue, 16 Jul 2024 22:01:48 GMT x-ms-request-id: 1588e6db-901e-0002-1ccc-d79170000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 79991 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8a5d6d1d8f33333c-EWR
2024-07-19 20:22:54 UTC	554	IN	Data Raw: 37 63 37 31 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 35 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c71/** * onetrust-banner-sdk * v202405.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 Data Ascii: otype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return ne
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 Data Ascii: l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=ar
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 59 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 59 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 59 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d Data Ascii: ceof z)return t._state=3,t._value=e,void Y(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,Y(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._value=t,Y(e)}function Y(e){2===e._state&&0==
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 7a 2e 72 61 63 65 3d 66 75 6e 63 Data Ascii: eturn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(function(e,t){t(o)})},z.race=func
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 Data Ascii: e:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 Data Ascii: .initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 Data Ascii: e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=oe=oe\|\|{})[e.Purpose=1
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d Data Ascii: l"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=ge=ge\|\|{}).Host="Host",e.GenVendor="GenVen",(e=Ce=Ce\|\|{}
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 Data Ascii: granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(e=_e=_e\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49934	172.64.155.119	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	249	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:54 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8a5d6d1d6b427d16-EWR
2024-07-19 20:22:54 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49936	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	650	OUT	GET /api/public/content/9cfe697b6d3f4044a0dca3699fa70406?v=83c5c7da&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	620	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:54 GMT Content-Type: image/png Content-Length: 3471 Connection: close CF-Ray: 8a5d6d1d9a160ce5-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 186 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=R_Channel_icon.png; filename*=utf-8''R_Channel_icon.png ETag: "0x8DC4E6A6B3A8E66" Last-Modified: Wed, 27 Mar 2024 14:30:15 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128551 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	749	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0d 41 49 44 41 54 78 9c ed 9d 3d 6c 56 d7 19 c7 af 3f b0 f9 72 54 da a1 29 43 94 2a 55 32 36 15 23 91 60 23 03 20 55 b0 38 1d 20 43 c8 c0 94 0f c9 59 90 b1 32 21 35 6d 3a 64 28 2c 30 04 2f 44 8a 4a 06 e8 52 23 91 ad 96 5c a9 aa d4 a8 95 32 01 1d da a6 b1 f9 b0 8d ed e8 7f 5f 5f d7 31 7e 5f bf f7 3c e7 de 7b ce b9 bf df 00 81 f0 7e f8 7d 9f ff 79 3e ce 73 9e 33 f0 df 43 47 d7 32 00 70 65 6a d0 f9 a1 00 90 83 88 00 8c 20 22 00 23 88 08 c0 08 22 02 30 82 88 00 8c 20 22 00 23 88 08 c0 08 22 02 30 82 88 00 8c 20 22 00 23 88 08 c0 08 22 02 30 82 88 00 8c 20 22 00 23 88 08 c0 08 22 02 30 82 88 00 Data Ascii: PNGIHDRR:WpHYsAIDATx=lV?rT)C*U26#`# U8 CY2!5m:d(,0/DJR#\2__1~_<{~}y>s3CG2pej "#"0 "#"0 "#"0 "#"0
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 56 be fa a7 73 c2 2d 01 f9 5e d5 55 00 e9 34 9a fe 2b ff f3 d0 cb 2f e5 62 f5 19 86 0d 1f 7a 35 cf 8f da 54 68 48 4e 44 fa 12 43 09 81 94 27 e4 86 5b b2 6a d7 69 1e f5 e3 45 97 be b8 95 2d cf 7c d9 b3 0c 2d b1 ea 35 47 8e 1f f3 f2 ba 7b de 3d 9f bf 5e 5b 36 63 93 2b 71 3f 77 73 da 5b 03 a6 0f 24 a2 85 b7 df a9 fd 67 90 78 b4 87 55 56 c0 c5 22 64 15 d3 93 cb d7 da d2 6b 97 56 89 5b 61 5c 48 02 12 32 c6 32 06 a9 50 c8 f2 33 68 f5 97 68 1f 5d 74 db b7 2a 44 af 1e 39 0b bb cf 9d 69 4d 91 21 19 11 e9 0b 53 33 66 88 94 29 32 58 7e 06 b5 e0 48 00 3e 3a 28 16 a7 6f e4 cf 65 09 c9 46 c7 4f 67 6d 20 99 9c 48 85 04 eb ca a7 a4 7b e9 e6 ed 0d 23 d4 f3 e9 60 9b f2 05 8b 77 50 e2 2e 6f b4 93 71 eb df b9 26 f9 32 f6 87 ef 5f f0 da 35 a1 f7 ab e7 54 e9 da 85 d1 f1 53 ad Data Ascii: Vs-^U4+/bz5ThHNDC'[jiE-\|-5G{=^[6c+q?ws[$gxUV"dkV[a\H22P3hh]t*D9iM!S3f)2X~H>:(oeFOgm H{#`wP.oq&2_5TS
2024-07-19 20:22:54 UTC	1353	IN	Data Raw: dc 0a 9d 7c 08 48 25 57 6d fe 55 d1 0c 29 71 aa 7b 7c fe 8d b7 92 3f 37 e3 9a ef ed 89 74 bf ab 5f 06 43 2f 67 5b 51 7c 5e 47 a9 b8 d8 40 6d 4b d3 65 19 46 c7 4f 77 42 f2 44 67 d6 05 2b 22 5f b7 68 d7 d9 8a 5f 94 79 eb bc ee 24 16 86 54 1c fa f4 4a 92 23 85 83 15 91 25 c7 28 04 d4 54 2c ae 02 81 eb 45 60 29 33 b0 be c1 ac 05 32 25 06 53 f4 42 2a 20 34 9d 9f 28 4f 22 b4 db 1e 35 0d a7 24 a4 e1 d4 bc 90 8f f2 b5 2f 14 da 29 8c a9 7b 52 a9 aa 62 f2 c2 1a 6a a9 c5 64 a7 8d e4 8d 99 72 eb 47 30 d4 d9 5d 75 d8 b5 77 72 22 7f 9d 62 6f 2c 66 82 2b 71 eb cb 93 cb 77 41 c6 a2 2a 59 48 54 71 ac 61 3b 24 1a 6d 1c 6b 03 d9 d7 46 a7 36 94 65 e8 6a b5 aa ea fd 3f b9 7c 2d f7 da 11 33 15 9c 27 1a 39 71 cc f9 b1 21 ae 6a 32 68 4d 21 aa 62 1f a9 98 70 a4 b0 b1 8a 0e 81 a2 Data Ascii: \|H%WmU)q{\|?7t_C/g[Q\|^G@mKeFOwBDg+"_h_y$TJ#%(T,E`)32%SB* 4(O"5$/){RbjdrG0]uwr"bo,f+qwA*YHTqa;$mkF6ej?\|-3'9q!j2hM!bp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49937	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	415	OUT	GET /api/public/content/e1028a80bdb54d0489c0b0775d7a8ebd?v=465a9fc1&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	630	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:54 GMT Content-Type: image/png Content-Length: 160709 Connection: close CF-Ray: 8a5d6d1d88641a48-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 205 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=archive_compliance.png; filename*=utf-8''archive_compliance.png ETag: "0x8DC1813661EB9B4" Last-Modified: Thu, 18 Jan 2024 10:51:17 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 121968 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 90 00 00 03 7e 08 06 00 00 00 63 02 e4 d6 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec 9d 07 bc 24 45 b9 f6 df ee 89 67 4e dc 73 ce e6 1c c1 25 87 25 47 89 97 ac 48 10 23 28 22 2b dc 0f 2f c1 80 82 78 bd 28 5e c1 4b 50 11 ae 82 70 15 04 61 45 41 10 24 2d 61 61 97 20 ec 02 0b bb 80 ec 2e 9b e3 89 93 fb fb 55 f5 f4 9c 9e 3e d5 dd d5 33 d3 67 d2 f3 d7 c3 ce 74 57 57 55 77 d7 74 d7 53 ef 5b 6f 29 9a a6 11 00 00 00 00 00 00 00 00 e0 86 ea 9a 02 00 00 00 00 00 00 00 00 80 80 04 00 00 00 00 00 00 00 20 0b 2c 90 00 00 00 00 00 00 00 00 a4 80 80 04 00 00 00 00 00 00 00 20 05 04 24 00 00 00 00 00 00 00 00 29 20 20 01 00 00 00 00 00 00 00 48 01 01 09 00 00 00 Data Ascii: PNGIHDR~cpHYs.#.#x?v IDATx$EgNs%%GH#("+/x(^KPpaEA$-aa .U>3gtWWUwtS[o) , $) H
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: e0 e5 97 5f 69 57 88 da 89 b4 18 df a0 b0 ff 2b a4 06 d4 4c 3a 9d 09 04 02 81 8c a2 28 7c 97 a6 69 a4 69 ec 43 36 90 d5 34 0a 04 d4 8c a6 e9 fb 54 f6 0f 4f c7 12 10 a5 52 e9 fc b1 ec 2f 93 49 07 14 52 33 d9 6c 26 a0 aa fa 36 35 10 cc e8 79 ea f9 6a 5a 96 1f 93 2f 27 97 25 4b 9f cd ea 1b d8 f1 bc 92 7c 9f 9a 61 09 35 ca 06 14 45 e5 f9 a8 aa 9a 51 f3 f5 cd 9d a4 42 bc 7c 9e 77 96 d5 9d 97 45 aa 1a cc a8 7c b8 23 97 5f ee 3f fa 39 b2 cf 2c a1 42 ac 84 4c 26 13 d0 cf 45 df 1f e4 f5 24 62 d7 81 d5 4f cb 66 02 7a 79 1a a9 b9 f3 66 75 66 c7 b1 fd fc aa f2 73 09 64 58 9a 4c 3a 13 60 f9 ea 45 f2 8b 4e 01 35 90 e1 45 b3 73 ca 66 03 fc ba f2 f4 fa 75 c8 6a d9 00 db 17 50 83 19 45 25 9e 07 bf 0f aa ca 8f cb 66 b3 01 56 14 2f 9f f4 7a f3 3a 66 32 01 e3 de 18 d7 44 bf Data Ascii: _iW+L:(\|iiC64TOR/IR3l&65yjZ/'%K\|a5EQB\|wE\|#_?9,BL&E$bOfzyfufsdXL:`EN5EsfujPE%fV/z:f2D
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: c0 c0 93 f1 78 fc b9 dd 77 df f5 2f 1e 8a 00 00 00 00 7c 05 02 b2 4a 58 bc f8 95 f1 d1 68 f4 98 e6 e6 e6 2f 34 c7 9a f7 0a 04 83 a3 14 dd d7 93 aa 1e 91 80 2c 4c 60 ec 34 89 3d 45 dc 6f 34 0f d2 5b 0f 37 d2 da 1d 27 fa 5c 56 2a 20 fc 40 c3 23 23 c8 45 82 92 21 12 9e b2 98 85 a5 f5 b3 d7 bc 40 91 28 d9 54 2a 99 de d6 3f d0 f7 6c 3c 1e ff 43 7c 30 fe c8 3e fb ee 95 c2 f5 04 00 00 50 49 20 20 2b cc d3 4f 3f 1b ed ea ec 3c a2 b9 b9 f9 ff b5 b6 b6 1d ac aa 6a 2b d5 02 56 2b a0 fc 81 43 42 d2 8c 75 18 df 29 5b 51 3a 2f c7 3a 69 5c 57 d0 69 06 23 83 c0 8d d7 36 9d 5b 1a 6b 9e e6 7c 8d cf 76 79 8a 80 88 1c 59 14 45 d3 52 a9 f4 96 9e 9e 1d 0b fa fa 7a 7f b1 d7 de 7b be 31 c2 55 00 00 00 00 f2 40 40 56 90 97 5f 5a dc de d2 d2 7a 61 77 f7 e8 6f a9 aa da 51 09 cf c6 Data Ascii: xw/\|JXh/4,L`4=Eo4[7'\V* @##E!@(T*?l<C\|0>PI +O?<j+V+CBu)[Q:/:i\Wi#6[k\|vyYERz{1U@@V_ZzawoQ
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 27 57 53 59 cc 6e ae e6 ef c5 e4 29 0c b0 03 c0 c8 23 63 41 74 72 87 2d 57 19 32 79 80 72 a3 29 b1 a6 d8 ae 44 34 11 d7 16 00 00 80 1f 40 40 fa c4 4b 2f bd 1c 0b 05 43 d3 02 81 40 7d b9 11 95 1a 09 48 e6 78 c5 08 a0 63 16 65 36 c7 b9 b9 a0 1a 69 9c e6 3a 1a 65 3a e5 2f 85 55 79 da f9 dc 02 50 7d 98 e7 2f 8a 82 e5 88 e6 3d 8a 8e 95 15 96 5e c5 23 c4 a6 e4 75 d2 d8 e0 65 b0 2b 93 cd ee e2 e9 02 03 00 00 00 92 40 40 fa 84 aa aa 73 c2 e1 f0 2c 45 51 71 8d cd c8 2c 65 22 5c ea 83 7f b1 5f 56 a3 1c 86 8c b2 1a 43 e0 b2 0a ea 1b d9 39 90 76 a2 d2 ab cb 2b e6 55 4a 5e 27 45 25 45 51 42 44 da 9c bb ee ba ab be 06 30 01 00 00 54 05 10 37 3e 11 0c 86 a6 04 83 81 d1 d9 6c b6 be cc 4e a5 ae 65 29 65 81 54 4c c2 31 a7 10 d9 67 d1 b1 76 96 44 51 e4 55 ab db ab 39 42 ab Data Ascii: 'WSYn)#cAtr-W2yr)D4@@K/C@}Hxce6i:e:/UyP}/=^#ue+@@s,EQq,e"\_VC9v+UJ^'E%EQBD0T7>lNe)eTL1gvDQU9B
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: a7 e0 ea b1 f0 00 6e a1 54 28 18 50 28 12 0e 50 34 14 a4 70 30 e0 2a 24 4b 5d 2e c3 6c 7d 74 ca 43 24 f8 dc 96 fe 30 be 5b eb e8 f5 bb 5d f9 8d 0e f3 82 09 04 02 95 ae 06 00 00 80 3a 04 02 d2 27 34 6e 45 c8 16 af 9b 98 d5 81 77 da 2c 88 5c 22 eb 78 09 41 25 27 20 75 41 2e 91 5e f0 29 97 91 fd 41 e6 80 3c d6 20 3d e6 e3 ed 5c 6c ad f3 30 f9 0d 94 9b bb c8 6f df b0 80 3c 7a 77 58 46 42 b2 e5 62 b2 e5 d4 9a 32 73 4a 41 d1 04 b8 8b b5 42 03 89 14 f5 c7 53 94 4c 67 f9 35 67 ed 9c fd e9 dd 7d b1 1b 36 bb 35 2c 7d 32 95 a1 7e 25 4d d1 48 80 5a a2 21 0a 05 03 dc 72 e9 b7 3d d2 4e b8 71 d7 5a c1 9c 45 d1 3e 51 1e c6 7e 61 5e 1a 51 38 1a e2 1f 13 f1 c4 88 b6 cb 40 40 f5 65 39 26 96 5f 38 1c e2 e2 6e 70 30 9e 7f c6 95 1b 3e b8 90 c9 f8 92 37 00 00 80 c6 06 02 d2 27 Data Ascii: nT(P(P4p0*$K].l}tC$0[]:'4nEw,\"xA%' uA.^)A< =\l0o<zwXFBb2sJABSLg5g}65,}2~%MHZ!r=NqZE>Q~a^Q8@@e9&_8np0>7'
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: a9 ad ad 83 c6 8d ef e2 42 91 d5 9f b9 d7 76 74 74 50 38 1c a6 77 97 af a4 99 33 67 e6 5c 53 13 79 b1 ca ce 75 70 70 90 66 cd 9e 96 bf 96 bf f8 c5 0d b4 f7 5e 07 d3 7d 7f fc 0b 9d 79 d6 29 94 48 a4 ca fa ce 60 f5 36 44 2e 00 00 00 50 4e 20 20 7d 82 af d7 86 f9 27 a5 59 0b bd ac 03 69 4d 63 97 de c9 f2 29 ea bc 99 d3 5b 8f f5 22 fc ac 69 30 b8 50 f7 30 b1 98 ce 64 b9 db aa f1 5d c7 9f c1 13 e6 ad c0 5c 59 b7 f7 c7 69 54 6b 13 29 25 ac 19 69 44 91 6e 6f 6f cb 6f e3 5e 11 61 a2 ef 7e f7 1a ea eb eb a3 1d 3b 7a 68 d7 dd 76 a1 9b 6e fa 31 dd f5 bb 7b e8 fa eb 7f c9 8f 9b 38 71 3c dd 70 c3 b5 b4 f3 27 66 d1 1b 8b 96 d2 25 df fc 16 1d b0 ff 3c fa e8 a3 55 f4 c6 9b cb e8 5b 57 7c 93 5b dc 6e bf fd 2e 5a bf 7e 03 5d 70 c1 b9 74 d9 e5 17 f3 b9 bc 69 16 54 28 e7 6e Data Ascii: BvttP8w3g\Syuppf^}y)H`6D.PN }'YiMc)["i0P0d]\YiTk)%iDnooo^a~;zhvn1{8q<p'f%<U[W\|[n.Z~]ptiT(n
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 45 5d 59 24 56 e6 3a cb d6 99 6c 8f 45 d9 03 c5 73 1e cc 8a d8 db b7 95 ae b8 e2 06 3a f4 b0 03 0a f6 c5 07 93 94 4c ea 1b 3c 24 fe 00 00 20 00 49 44 41 54 73 3a 99 d0 db b6 6d 3b ed b3 cf de f9 fd 2d 2d 2d d4 1c eb a6 35 6b d6 d0 94 29 93 f8 15 61 cb 56 30 7a 76 f4 50 28 18 e5 f3 01 59 5b df b6 75 9b 7e c5 4c d1 a6 d9 35 63 41 76 b2 99 0c 05 4d 6b 89 f0 c0 34 aa 4a bf be ed 26 ea e8 68 2d f8 ed 24 78 00 9a 00 6d df 9e 2b a7 a7 8f 54 35 ca 5d 6d 99 65 73 cf 3d 77 a7 a7 9e 7a 96 96 2f 7f 8f 26 4d 9c 44 e3 27 74 d3 4b 2f 2d a6 a6 68 27 bd f0 c2 22 7a e2 89 a7 f8 ef 6e df 7d 0e a7 9d 76 9a cd a3 a2 32 82 c1 20 ad 5d cb 44 6a 0b 9f e7 68 30 73 d6 34 7e 3c 23 12 65 c1 80 86 e6 1a 32 d1 d9 1c 6b a1 0f de ff 17 45 22 11 ea d9 b4 89 7e 7e c3 2f 28 99 48 53 73 4b Data Ascii: E]Y$V:lEs:L<$ IDATs:m;---5k)aV0zvP(Y[u~L5cAvMk4J&h-$xm+T5]mes=wz/&MD'tK/-h'"zn}v2 ]Djh0s4~<#e2kE"~~/(HSsK
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: e6 02 57 57 cb 81 b8 a5 13 ed 93 dd 66 de 6e 20 73 8c 79 bf 35 bd 79 cd 48 6b 9e 35 be fc 87 55 62 97 5b 3e 65 b2 1a 75 b4 44 a8 39 1a ca cd 0d 1d 59 58 14 d4 fe 78 92 b6 f7 b1 28 a8 5e 8e 74 bb 12 de af 10 73 5b 0d 2a 0a 75 b6 45 8b 72 63 95 82 47 40 0d f2 79 86 cc f8 d7 b3 63 07 75 76 e9 ae 9d fd fd 09 87 e3 72 83 32 82 3a 31 1b 32 cb 8f cd 8b 3c e6 a8 53 e8 88 23 0f a5 ab ae be 9c e2 83 29 6e dd d5 c5 a3 de 7a 98 ab 2a 0b 7e a3 aa 81 5c 84 63 b1 3b 39 b3 c4 b1 f9 86 c6 f2 24 c9 64 9a a7 6c 6d 8d f2 fd db b6 f6 72 61 d8 14 0b f1 b9 8a 83 f1 04 cf d7 c8 a7 b9 25 92 4b d7 43 2d 2d cd 14 0a 07 f8 fa 93 cc a5 f7 0b 9f bf 90 12 c9 41 ba ef be 3b a9 b7 77 80 5a 5b 75 77 54 36 8f 32 12 0d f3 34 4c 68 f7 f5 f5 53 67 d7 90 50 7e f6 99 45 74 de 79 f3 e9 f1 27 1e Data Ascii: WWfn sy5yHk5Ub[>euD9YXx(^ts[uErcG@ycuvr2:12<S#)nz~\c;9$dlmra%KC--A;wZ[uwT624LhSgP~Ety'
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 93 60 2b a7 28 93 71 af ad 01 6a d1 02 69 10 1c b1 00 5a 6e 57 48 23 55 55 28 18 50 98 1e 93 86 ad a9 98 48 24 e9 a3 7f ad a5 64 32 c9 bf f3 ed c1 00 ed d8 d1 43 ab 57 ad e7 df bd ba 47 06 83 2a 17 71 cf 2d 5c 4c ab 56 ad a1 48 d4 7e 06 05 2b 6b fd 86 cd fc 2f 10 0c 14 94 c7 ca df be bd 77 68 bb 87 6b 1d 8d 06 e9 83 0f 3f a2 e7 16 2e e1 eb 3c b2 3f 83 5a 17 8c 56 f4 80 4e 43 d1 65 01 00 00 80 72 01 01 e9 77 48 c6 3a 76 37 ac 0a ac 56 39 3f f2 34 5b fa 9c 10 2d f7 51 ec b2 22 4e 65 d9 59 2e 65 ea 28 4a 2b 7b dd bc e4 5f 04 86 ec b2 96 50 4b bf 20 76 29 43 41 b5 60 d5 96 32 e5 6c ba 3a e6 75 26 ed ef 47 96 34 0a 06 54 3e 98 e5 45 1c b1 75 1a b7 6d db 4e f7 dd f7 10 6d df de c3 bf 1b db 97 2f 7f 8f 1e 7a e8 31 9e 27 b3 02 72 0b 65 0e e6 ba 6b fe ce 84 5d 90 Data Ascii: `+(qjiZnWH#UU(PH$d2CWG*q-\LVH~+k/whk?.<?ZVNCerwH:v7V9?4[-Q"NeY.e(J+{_PK v)CA`2l:u&G4T>EumNm/z1'rek]
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: f9 86 b6 e6 28 85 02 6a 51 d6 47 06 b3 ea 31 97 d1 cf 7c e6 54 9a 38 69 34 25 e2 29 6e 59 7c 69 d1 6b f4 c6 1b 6f e7 ca d1 17 aa 1f 6a de fa 87 64 22 4d 87 1f b1 3f df 7f ff 7d 7f e5 42 66 af bd 76 a1 e3 8e 3f 8c 92 c9 34 77 ad 8d 44 72 4b 81 f0 c0 36 43 f3 f4 78 e8 1b 45 5f b2 63 fb f6 1d b4 d3 9c 99 74 e6 59 27 f1 f2 83 c1 20 9f 5b fe db df de 4b fd 03 83 05 75 30 e6 2f 1a 75 60 96 df 13 4f 3c 9a 1f f3 fb ff fb 33 af e3 7e fb ed c5 eb f5 de bb 1a 17 9e 4c 5c 05 82 2a b7 88 b2 e0 3a 22 64 82 eb 78 dd 0e 00 00 00 d4 3a 10 90 3e a1 cf 3b 2a ad 6b cb 3b 45 b0 3e 95 4e 31 d7 d0 49 38 ba 95 21 b2 26 9a ff 15 2d 0b 62 16 92 22 41 69 cd cf 29 8d 5b 5d 7c 6e 53 95 74 2d ad 96 40 28 ac 16 cc 2e d6 d1 12 a1 4d db 07 29 93 65 73 12 15 df 6d b1 4c 38 31 e1 da 1c 09 Data Ascii: (jQG1\|T8i4%)nY\|ikojd"M?}Bfv?4wDrK6CxE_ctY' [Ku0/u`O<3~L\:"dx:>;k;E>N1I8!&-b"Ai)[]\|nSt-@(.M)esmL81

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49935	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 77 68 72 73 76 34 39 64 74 45 4b 78 4d 6b 4f 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 37 38 34 36 38 63 34 32 61 32 32 35 63 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: whrsv49dtEKxMkOm.1Context: 9a78468c42a225c7
2024-07-19 20:22:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-19 20:22:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 77 68 72 73 76 34 39 64 74 45 4b 78 4d 6b 4f 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 37 38 34 36 38 63 34 32 61 32 32 35 63 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 6b 45 75 64 4c 4c 72 42 4b 6b 34 70 59 36 31 2b 77 37 76 53 48 7a 67 61 70 6b 70 38 69 48 64 64 38 77 4c 37 58 4a 56 45 49 2b 56 63 6d 52 67 78 4d 70 71 77 59 50 49 48 75 33 68 6e 69 43 64 50 43 66 4b 56 67 56 33 79 7a 35 39 6e 4f 58 44 61 52 4e 7a 56 71 4a 50 55 58 32 4f 58 6c 39 55 46 32 66 2b 34 46 77 59 36 4c 58 63 2f Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: whrsv49dtEKxMkOm.2Context: 9a78468c42a225c7<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARkEudLLrBKk4pY61+w7vSHzgapkp8iHdd8wL7XJVEI+VcmRgxMpqwYPIHu3hniCdPCfKVgV3yz59nOXDaRNzVqJPUX2OXl9UF2f+4FwY6LXc/
2024-07-19 20:22:54 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 77 68 72 73 76 34 39 64 74 45 4b 78 4d 6b 4f 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 61 37 38 34 36 38 63 34 32 61 32 32 35 63 37 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: whrsv49dtEKxMkOm.3Context: 9a78468c42a225c7
2024-07-19 20:22:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-19 20:22:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 70 45 30 30 67 62 68 72 7a 30 71 6e 55 71 6a 6a 43 63 67 43 76 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: pE00gbhrz0qnUqjjCcgCvg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49939	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	598	OUT	GET /api/public/content/75013efacc6a4fe5b9de645b642dfa78?v=0e57c20b HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.mimecast.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-07-19 20:22:55 UTC	663	IN	HTTP/1.1 206 Partial Content Date: Fri, 19 Jul 2024 20:22:55 GMT Content-Type: video/mp4 Content-Length: 5410798 Connection: close Content-Range: bytes 0-5410797/5410798 CF-Ray: 8a5d6d213c98434a-EWR CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename="AI header small-v90.mp4"; filename*=utf-8''AI%20header%20small-v90.mp4 ETag: "0x8DCA69418AE07AD" Last-Modified: Wed, 17 Jul 2024 19:10:17 GMT api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 141664 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:55 UTC	706	IN	Data Raw: 00 00 00 18 66 74 79 70 6d 70 34 32 00 00 00 00 6d 70 34 32 6d 70 34 31 00 00 36 2c 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 e2 bd be b8 e2 bd be c3 00 01 5f 90 00 1b 73 80 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 21 c8 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 e2 bd be b8 e2 bd be b8 00 00 00 01 00 00 00 00 00 1b 6b 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 80 00 00 04 38 00 00 00 00 00 24 65 64 74 73 00 00 00 1c 65 6c 73 Data Ascii: ftypmp42mp42mp416,moovlmvhd_s@!trak\tkhdk@8$edtsels
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 00 00 09 00 00 00 01 00 00 09 70 73 74 73 7a 00 00 00 00 00 00 00 00 00 00 02 57 00 00 4c db 00 00 10 2c 00 00 05 3e 00 00 13 16 00 00 03 94 00 00 18 0d 00 00 04 4d 00 00 0d 6a 00 00 04 3f 00 00 0b d6 00 00 04 2c 00 00 0d 05 00 00 04 ca 00 00 0e 21 00 00 04 11 00 00 12 f0 00 00 04 5a 00 00 18 ad 00 00 04 fe 00 00 24 af 00 00 05 de 00 00 22 8d 00 00 05 59 00 00 2a 99 00 00 06 3b 00 00 35 5f 00 00 06 aa 00 00 36 ec 00 00 06 b6 00 00 32 c2 00 00 06 bd 00 00 4e e1 00 00 07 ae 00 00 3a a7 00 00 07 75 00 00 36 64 00 00 07 b7 00 00 1e 11 00 00 07 bb 00 00 3c 98 00 00 09 81 00 00 33 f1 00 00 09 15 00 00 1d d5 00 00 09 b2 00 00 3b 85 00 00 0d 4b 00 00 33 58 00 00 0c f8 00 00 32 bc 00 00 0d c8 00 00 32 e6 00 00 13 0b 00 00 1e 74 00 00 13 da 00 00 3d 26 00 00 15 4f Data Ascii: pstszWL,>Mj?,!Z$"Y*;5_62N:u6d<3;K3X22t=&O
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 28 b7 00 00 0a 3f 00 00 26 c8 00 00 09 98 00 00 27 c8 00 00 09 c8 00 00 27 7f 00 00 0a 32 00 00 27 6a 00 00 09 cb 00 00 26 ee 00 00 0b 6d 00 00 27 27 00 00 0b 78 00 00 24 43 00 00 0b 62 00 00 32 76 00 00 0b 82 00 00 20 a2 00 00 0a f8 00 00 31 bc 00 00 0b 8f 00 00 1f 34 00 00 0a d8 00 00 1c ef 00 00 e0 fe 00 00 16 ce 00 00 0a 39 00 00 1c b4 00 00 0d d0 00 00 21 38 00 00 0f 3c 00 00 23 2c 00 00 0f 31 00 00 23 e0 00 00 0f c3 00 00 23 c6 00 00 0f e7 00 00 24 59 00 00 0f ff 00 00 25 45 00 00 0c 33 00 00 25 a7 00 00 0c 6e 00 00 25 d9 00 00 0a 7d 00 00 27 94 00 00 0a c9 00 00 28 ff 00 00 0a d7 00 00 2b 1d 00 00 0b 0f 00 00 2b c8 00 00 0a f6 00 00 2b 21 00 00 0a b0 00 00 2a 70 00 00 0a 5b 00 00 2e 1a 00 00 0a 84 00 00 2c db 00 00 0a 9d 00 00 2f 64 00 00 0a ab 00 Data Ascii: (?&''2'j&m''x$Cb2v 149!8<#,1##$Y%E3%n%}'(+++!*p[.,/d
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 63 73 64 74 70 00 00 00 00 00 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 00 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 00 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 00 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 08 00 00 00 08 00 08 00 Data Ascii: csdtp
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 02 00 00 03 e8 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 Data Ascii:
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 02 00 00 03 e8 00 Data Ascii:
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 00 01 00 00 00 00 00 00 00 01 00 00 07 d0 00 00 Data Ascii:
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 00 01 00 00 00 00 13 2e 6d 64 69 61 00 00 00 20 6d 64 68 64 00 00 00 00 e2 bd be b9 e2 bd be b9 00 00 bb 80 00 0e a4 00 15 c7 00 00 00 00 00 44 68 64 6c 72 00 00 00 00 00 00 00 00 73 6f 75 6e 00 00 00 00 00 00 00 00 00 00 00 00 23 4d 61 69 6e 63 6f 6e 63 65 70 74 20 4d 50 34 20 53 6f 75 6e 64 20 4d 65 64 69 61 20 48 61 6e 64 6c 65 72 00 00 12 c2 6d 69 6e 66 00 00 00 10 73 6d 68 64 00 00 00 00 00 00 00 00 00 00 00 33 68 64 6c 72 00 00 00 00 00 00 00 00 61 6c 69 73 00 00 00 00 00 00 00 00 00 00 00 00 41 6c 69 61 73 20 44 61 74 61 20 48 61 6e 64 6c 65 72 00 00 00 00 24 64 69 6e 66 00 00 00 1c 64 72 65 66 00 00 00 00 00 00 00 01 00 00 00 0c 75 72 6c 20 00 00 00 01 00 00 12 53 73 74 62 6c 00 00 00 5b 73 74 73 64 00 00 00 00 00 00 00 01 00 00 00 4b 6d 70 34 61 Data Ascii: .mdia mdhdDhdlrsoun#Mainconcept MP4 Sound Media Handlerminfsmhd3hdlralisAlias Data Handler$dinfdrefurl Sstbl[stsdKmp4a
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 Data Ascii: MONONNNOOMONONNNONONNOMPMONONNNOOMONONNNONONNOMPMONONNNOOMONONNN
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4d 00 00 03 50 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4f 00 00 03 4d 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4f 00 00 03 4e 00 00 03 4e 00 00 03 4f 00 00 03 Data Ascii: OOMONONNNONONNOMPMONONNNOOMONONNNONONNOMPMONONNNOOMONONNNONONNO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49938	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	650	OUT	GET /api/public/content/e662e5cd49944cccb74def0f296c65b0?v=c9b9ee8b&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mimecast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	614	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:54 GMT Content-Type: image/png Content-Length: 2817 Connection: close CF-Ray: 8a5d6d213a8543d9-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 186 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=R_Tech_icon.png; filename*=utf-8''R_Tech_icon.png ETag: "0x8DC4E6A6BEF44FF" Last-Modified: Wed, 27 Mar 2024 14:30:16 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128554 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	755	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a b3 49 44 41 54 78 9c ed dd 3f 6c 5d d5 1d c0 f1 e3 67 c7 0e 90 0c 6e 07 88 a7 4a 8d d2 31 ad 3c 16 89 d0 a1 30 40 a5 2a 2c 4e 87 d2 21 e9 c0 d4 52 89 2e 08 3f 31 54 91 a0 b4 43 86 c2 02 4b b2 80 d4 ca 19 92 ed 59 4a d5 a1 7a 52 18 1b 05 c9 53 92 4e 41 75 c8 1f ff ad 7e d7 5c f3 f2 fc e7 dd 73 ce 7d f7 fe 7e e7 7c 3f 92 09 98 d8 cf 82 f7 cd b9 f7 dc 73 cf 9d b8 3f 7f 66 d1 01 08 d5 9b 72 ce bd 17 fc e5 00 5c 87 ff 06 40 1c 22 02 22 11 11 10 89 88 80 48 44 04 44 22 22 20 12 11 01 91 88 08 88 44 44 40 24 22 02 22 11 11 10 89 88 80 48 44 04 44 22 22 20 12 11 a1 71 93 a7 4e 16 1f a9 20 22 34 Data Ascii: PNGIHDRR:WpHYsIDATx?l]gnJ1<0@*,N!R.?1TCKYJzRSNAu~\s}~\|?s?fr\@""HDD"" DD@$""HDD"" qN "4
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 42 fb 8a e8 87 8b 17 bd 43 9a c8 64 34 22 22 05 b4 07 54 92 49 07 df 51 6e fa f5 57 5c ea 88 a8 65 56 02 12 f2 1a 32 22 f9 e8 9c d8 99 3e 4f 19 11 b5 c8 52 40 83 af 29 33 7f 3e a6 13 1f 8d 88 a8 25 16 03 2a 3d b9 f2 b9 d7 ef 9f 8a b8 de 64 01 11 b5 c0 72 40 42 5e d7 67 92 61 92 c3 39 d4 c9 7a 40 a5 f5 de 3f bd 7e ff 54 c2 a3 11 23 51 c3 e4 fc 20 e6 da 49 b9 bf 41 db 7c 2f c0 76 e6 e2 d7 e3 69 45 44 0d 93 08 42 2e 5c 96 9e fb e0 7d 35 87 47 3e d3 dd 9d 1a 16 b5 6a 45 44 2d 08 b9 70 a9 f1 f6 70 0d 23 a2 06 44 d4 92 14 42 92 5b 2b 40 44 ad 4a 21 24 10 51 eb 2c 87 d4 99 7b be 95 d7 d5 86 c3 39 05 ac 86 94 f2 64 81 0f 22 52 c2 62 48 1c 4a ee 20 22 45 2c 85 24 af e3 73 bd 6b a3 e2 63 5a 2c 22 22 65 ac 84 e4 bb 02 61 eb ee 3d 97 2a 22 52 c8 42 48 33 e7 ce 7a 5d Data Ascii: BCd4""TIQnW\eV2">OR@)3>%=dr@B^ga9z@?~T#Q IA\|/viEDB.\}5G>jED-pp#DB[+@DJ!$Q,{9d"RbHJ "E,$skcZ,""ea="RBH3z]
2024-07-19 20:22:54 UTC	693	IN	Data Raw: 2b 61 2b 01 e4 fc e8 f8 e5 4f a2 46 25 59 0d 21 df 23 74 43 7d c1 75 20 db 26 ee cf 9f d9 76 c6 c9 79 88 bc 91 63 14 5b 6a 5d fe a2 38 3c dc ba 73 f8 ac 9f 8c 5e 3b 93 14 67 a3 17 b8 12 90 79 5d f3 11 8d e3 f9 ac c5 f4 f9 9d 7b 6e f3 d6 57 4f 7d be 33 f7 7c f1 7a 75 ad 0c 27 a0 24 d8 8e a8 ed 07 1c c7 20 a0 64 74 cd 9e 13 11 10 b4 30 19 11 01 41 13 73 11 59 0e 48 2e 0e c7 3c d6 05 3a 99 7a c8 97 e5 80 64 33 7d b9 a6 85 f4 98 89 c8 6a 40 32 ea 3c fa f3 25 76 35 4d 98 89 c3 b9 3a d6 a3 35 fd 50 ae f2 76 8d d5 5f 9d 27 a0 c4 a9 1f 89 ea 5c d0 b9 b6 74 bd 58 59 30 ee 3d 17 e4 c2 ad 6c 4c e2 7b cf 13 6c 52 7d 9d 68 5c 2b a2 25 22 59 6d 20 ab 0e ea 24 d1 c8 12 a4 26 9e 42 01 35 ba 6a 47 a2 71 de 52 20 6f 76 f9 90 ef 2d 1b c8 cb 03 c3 42 83 92 ef 23 4f 9d a8 b2 Data Ascii: +a+OF%Y!#tC}u &vyc[j]8<s^;gy]{nWO}3\|zu'$ dt0AsYH.<:zd3}j@2<%v5M:5Pv_'\tXY0=lL{lR}h\+%"Ym $&B5jGqR ov-B#O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49940	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	415	OUT	GET /api/public/content/1ffcb3e6423047f494f2570a804948ac?v=b159a002&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:54 UTC	626	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:54 GMT Content-Type: image/png Content-Length: 318087 Connection: close CF-Ray: 8a5d6d214f586a4f-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 205 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=DMARC_monitoring.png; filename*=utf-8''DMARC_monitoring.png ETag: "0x8DC1814EBCE800D" Last-Modified: Thu, 18 Jan 2024 11:02:11 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 122150 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:54 UTC	743	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 f0 00 00 05 d2 08 06 00 00 00 57 5e ce 4a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ec dd 07 9c 1c d5 9d e8 fb 7f 55 75 9e 3c ca 02 64 21 a2 40 12 c1 02 13 4d b0 0d 18 30 0e 18 7b cd ee 3a ac d7 01 db f7 da bb eb b7 7b 77 d7 ef dd fb ee 7d f7 ed de 0d 0e 5c 67 e3 c5 eb 5d db 78 6d 32 58 64 0c 08 90 04 92 90 44 12 49 20 50 44 59 93 3b dd cf 39 3d 35 53 5d 53 d5 55 dd d3 33 5d 3d f3 fb da 83 46 dd 95 ba ba ea a8 ea 7f fe f5 3f 46 b1 58 14 00 00 00 00 00 00 00 00 10 2d 66 a3 37 00 00 00 00 00 00 00 00 00 8c 45 00 1f 00 00 00 00 00 00 00 80 08 22 80 0f 00 00 00 00 00 00 00 40 04 11 c0 07 00 00 00 00 00 00 00 20 82 08 e0 03 00 00 00 00 00 00 00 10 41 04 Data Ascii: PNGIHDRW^JpHYs.#.#x?v IDATxUu<d!@M0{:{w}\g]xm2XdDI PDY;9=5S]SU3]=F?FX-f7E"@ A
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 44 10 01 7c 00 00 00 00 00 00 00 00 22 88 00 3e 00 00 00 00 00 00 00 00 11 44 00 1f 00 00 00 00 00 00 00 80 08 22 80 0f 00 00 00 00 00 00 00 40 04 11 c0 07 00 00 00 00 00 00 00 20 82 08 e0 03 00 00 00 00 00 00 00 10 41 04 f0 01 00 00 00 00 00 00 00 88 20 02 f8 00 00 00 00 00 00 00 00 44 10 01 7c 00 00 00 00 00 00 00 00 22 88 00 3e 00 00 00 00 00 00 00 00 11 44 00 1f 00 00 00 00 00 00 00 80 08 22 80 0f 00 00 00 00 00 00 00 40 04 11 c0 07 00 00 00 00 00 00 00 20 82 08 e0 03 00 00 00 00 00 00 00 10 41 04 f0 01 00 00 00 00 00 00 00 88 20 02 f8 00 00 00 00 00 00 00 00 44 10 01 7c 00 00 00 00 00 00 00 00 22 88 00 3e 00 00 00 00 00 00 00 00 11 44 00 1f 00 00 00 00 00 00 00 80 08 22 80 0f 00 00 00 00 00 00 00 40 04 11 c0 07 00 00 00 00 00 Data Ascii: D\|">D"@ A D\|">D"@ A D\|">D"@
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 75 7f 4e 8f af 2e 90 77 7b 36 f6 fc f5 5a 5e a5 76 c4 ab 9d f1 6a 57 fd e6 f5 9a ce bf 6d 0c bf 5d 6e 05 fd 6f 48 d1 71 9e 99 a1 e6 1f fd 7c 63 1b a3 d2 fe b3 f7 a1 d7 b5 d1 e8 49 ab d6 6f 7f bf a6 a5 cf 84 80 35 0f 9f 2b ae 63 aa 36 f6 b1 a4 3e bf f7 b2 4a c7 5f 61 f8 7c 9b 98 7c a5 62 b1 98 2f 16 8b 43 c5 62 71 a0 28 c5 9e 42 5e 0e 64 73 83 bb f3 b9 c2 16 31 8a 1b fb fb fa 5f 3e ed f4 53 0f 4f c8 ca 01 00 00 30 ad 10 c0 87 ac 5f b7 21 5e 14 51 01 fa f9 b1 58 7c 7e 2c 16 3b d2 b4 cc 23 2c cb 9a 65 99 56 87 69 4a ab 61 58 29 d3 34 2c 15 cb b0 03 09 9e 81 a9 1a 6f 44 27 4f 29 d0 a0 02 0c 85 e1 b8 87 8e 51 8e 6b 5b dd 51 a8 b0 0b 2b 05 76 54 fc a5 b4 0d 91 dc 61 15 d4 f2 99 fd 82 2d d5 ef b7 a0 60 81 33 48 10 c9 7d 3b e1 cf 3f b9 82 9b 21 95 ef 37 7b 23 8b Data Ascii: uN.w{6Z^vjWm]noHq\|cIo5+c6>J_a\|\|b/Cbq(B^ds1_>SO0_!^QX\|~,;#,eViJaX)4,oD'O)Qk[Q+vTa-`3H};?!7{#
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: d2 9f 6c 69 69 b9 2c 91 48 1c 61 88 11 af 14 e1 0a 9b 75 ef f7 7e 10 6e 80 9b 44 a5 82 d9 95 be 76 6a e0 d7 b8 bb 1d 41 ab 71 54 29 af d7 72 46 96 37 9c 15 ef 1e 07 43 bd 52 1e a6 2b 5f e7 98 7e 1d 67 87 c0 e8 c2 cb 57 e6 0c ee 57 2b 4c c6 3f 22 d1 84 f0 ed 34 31 67 e7 5b 50 00 df dd 29 e6 d7 49 e6 71 4d e1 77 0d 5a e9 7d bf c1 b2 2b cd 47 f2 01 9a 26 23 5f 0a 43 83 43 83 db fa fb 07 7f 37 38 30 70 c3 d0 d0 d0 f3 4b 97 9d 9c 6d f4 f6 01 00 00 a0 b1 08 e0 37 b9 c7 57 3e 11 4f 24 93 c7 b7 b4 b4 5e d9 d6 da fa fe 74 26 73 9a 65 5a 6d 6a 50 da 30 8f a7 db 08 e0 4f 63 04 f0 27 79 77 13 c0 27 80 3f b5 10 c0 9f 82 08 e0 03 8d 54 2c 14 0b 87 fb fb fb 56 1e 3a 74 e8 5f 0e 1c 38 f0 f0 59 67 9d b9 8f af 04 00 00 60 fa 22 80 df c4 6e bd e5 36 6b d6 ec d9 4b ba ba ba Data Ascii: lii,Hau~nDvjAqT)rF7CR+_~gWW+L?"41g[P)IqMwZ}+G&#_CC780pKm7W>O$^t&seZmjP0Oc'yw'?T,V:t_8Yg`"n6kK
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 00 00 4c 23 c3 1d 4a 46 26 dd b2 a0 b3 b3 f3 cf 12 89 f8 55 1b 36 6c ca 34 7a bb 00 00 00 30 71 08 e0 47 d8 91 47 1e b5 ac ad ad e3 6f 3b 3b ba cf 6f 6d 6b 8b 25 93 29 7d d1 9e cf 97 67 de 03 00 00 00 98 fa 1c f7 00 66 4b 4b cb 49 9d 9d 9d 7f 9e 88 c7 df bd 61 c3 a6 78 a3 b7 0d 00 00 00 13 83 00 7e 44 dd 7d d7 8a 99 99 4c e6 53 5d 9d 1d 17 b6 b4 b4 26 53 c9 b4 7e 64 36 28 66 af 1e 1b 77 fe 8c 07 9d 04 40 e3 19 ae ff d5 32 6f ad 9c f5 ee c3 2c cb f9 ae 6e 7f ec 9f 31 13 4e 40 e1 14 bf 75 a1 e1 0c d7 8f f3 f5 a2 eb 27 8c 5a e6 41 84 ce 11 75 21 53 87 04 84 91 b2 80 75 4e 66 20 39 02 4d 43 9f cf 46 bc b5 a5 f5 b4 74 ba e5 93 86 61 1c db e8 4d 02 00 00 c0 c4 20 80 1f 41 2b 7e 77 6f 3c 1e 8f 5d d6 d6 da 76 59 26 d3 da 92 4a a7 c4 34 0d 9d 79 af 06 ac ad f5 e6 Data Ascii: L#JF&U6l4z0qGGo;;omk%)}gfKKIax~D}LS]&S~d6(fw@2o,n1N@u'ZAu!SuNf 9MCFtaM A+~wo<]vY&J4y
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 8c 1f 7e 7d cc 75 40 15 65 b4 a6 eb 35 04 d7 4f cd 41 1d 9a f1 b8 d5 16 8f c7 4f 5d b7 6e 43 a6 d1 db 03 00 00 80 fa 20 80 1f 01 b3 66 ce 6e 8d c5 13 57 24 13 89 d3 12 c9 64 22 16 8b eb d7 55 f9 1c 6a 8d 02 00 00 00 08 c3 34 ad 78 3a 95 3e 2d 11 8f 2d 67 8f 01 00 00 4c 0d 04 f0 23 a1 38 2b 99 48 9e 11 8b 27 66 c6 ac b8 11 8f c7 74 a6 93 2e 9f 43 5d 68 00 00 00 00 a1 9e 94 30 8d 64 2a bd 20 91 4c 5e bc 6e dd 33 64 e1 03 00 00 4c 01 b1 46 6f 00 44 4c cb 5a 18 8b c7 16 c5 62 b1 44 3c 1e 2f 2b 39 63 0b 13 c8 57 d3 57 2a 67 63 97 bf 09 aa 4f ef ae 89 ef 7e df bd 5c c0 97 bb c6 85 f3 f0 ac e6 d0 a1 56 46 64 d8 65 72 ec d2 3b 61 ca 7b b9 a7 b1 e7 f5 6b 57 bc da b1 f2 6a 4c ae d2 17 65 13 3a 4a 6f b8 5f 2b 5f 89 ff 7b d5 b6 6b 95 96 55 cd 32 68 4f 4b bb d1 b9 5b Data Ascii: ~}u@e5OAO]nC fnW$d"Uj4x:>--gL#8+H'ft.C]h0d* L^n3dLFoDLZbD</+9cWW*gcO~\VFder;a{kWjLe:Jo_+_{kU2hOK[
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: da 21 c3 b7 5d 70 05 f2 86 33 71 c7 b4 19 d5 b4 8d ee 92 1a 51 0e e6 f3 54 80 f7 6e 19 fe 33 ec b7 15 b1 6f 15 4a a5 12 3b 7e e7 a7 d7 df 9d ed 86 ba de 08 da bb e3 28 af 15 36 b8 4f c2 01 26 83 3a ce 4c 53 55 d1 89 a5 f3 f9 7c 9a bd 0e 00 00 d0 bc 08 e0 37 4e 77 a1 50 98 65 1a 46 d2 34 0d a3 94 7d 3f 7a f3 67 67 9a fa 05 bd eb c1 33 48 16 22 93 be da 7a f5 93 35 58 9c d7 b6 93 91 3f 05 f8 d5 b6 f0 ab 7f 41 2d 8c 49 51 4d e6 7c 98 32 13 61 a6 1d 1d 29 c4 6f 22 47 10 df eb 75 f7 6b ce 3f bd 4a 72 b8 a7 0d 93 e9 eb 35 3f 26 45 d0 91 44 1f e0 14 e1 55 c7 de 6f 9a a0 e9 86 a7 2d fb e7 c4 a3 bd 70 07 e6 ed b6 cb ef fa c6 79 3d d2 88 f1 7c 00 fb 50 13 31 2c d3 34 93 ea 87 bd 02 00 00 d0 bc cc 46 6f c0 74 65 9a 66 77 2c 66 a9 fa f7 31 67 a0 1e 00 00 00 00 ea 40 Data Ascii: !]p3qQTn3oJ;~(6O&:LSU\|7NwPeF4}?zgg3H"z5X?A-IQM\|2a)o"Guk?Jr5?&EDUo-py=\|P1,4Fotefw,f1g@
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 8b 7a 60 db 28 5c 83 03 00 00 00 5e 08 e0 37 88 69 9a 7a 30 2d 95 d5 3e 5a f7 78 f2 b7 23 5c dd 57 91 98 65 ea 9b 9c 5a 97 55 cd b6 54 53 af da 5d 73 3a 6c 0d 59 af 75 87 9d ae da 65 03 08 27 4c 1b 12 76 dc 0e bf b6 21 4c 1d eb a0 f7 dc 65 75 82 da ae b0 ed 4b 14 da 13 da 38 44 49 d0 39 5e eb 75 47 35 03 cc d6 32 48 ae f3 bd 4a db 59 6b 47 61 94 da 8a 28 6c cb 78 c5 13 a6 e4 73 a5 52 3a 53 e0 e3 00 00 00 60 0a 22 80 df 20 b9 5c 5e 62 31 43 57 ce d1 c1 a0 e1 7a 3a 13 99 e9 15 34 a0 9a fd de d8 9b b1 a2 c4 13 56 cd eb ab d7 b4 13 7d 93 38 91 03 d2 4e a5 1b 5d a0 11 26 fa dc a9 14 88 73 ab b6 9d 76 06 f0 e8 28 04 a2 cd 2b e0 3e 19 4f 08 56 73 0d 52 e9 3a ae 1e db 51 cf e5 35 4b 52 8d 4a 52 c9 66 55 29 9d e9 f3 b9 01 00 00 d0 3c 08 e0 37 48 3e 5f 10 43 f2 23 Data Ascii: z`(\^7iz0->Zx#\WeZUTS]s:lYue'Lv!LeuK8DI9^uG52HJYkGa(lxsR:S`" \^b1CWz:4V}8N]&sv(+>OVsR:Q5KRJRfU)<7H>_C#
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: d7 ea ac f1 08 04 ea 01 00 00 00 00 00 00 00 d1 41 06 7e 83 14 8b c5 42 51 8a ba de 8b 5d f6 a5 94 cc 14 9d cc 7b dd ad 30 b2 6d e3 2f 49 11 b4 8c 30 19 ec d5 6e 47 98 ec d7 5a b2 c9 dc cb 9b cc 52 43 00 a4 61 63 71 84 6d 53 fc da 33 af cc 58 bf 2c d8 4a 6d a2 b3 6d 0a 9b 35 eb b5 0d 64 cb 02 b5 ab 94 0d 5f cd 7c 95 e6 f5 7a da a6 9e e3 73 78 09 93 49 5f cf 71 84 00 00 00 00 54 46 00 bf 41 2c 2b 66 59 96 55 34 4d b3 68 07 53 d4 7d cf 48 80 25 02 81 7c bb 06 7e bd 6a b5 8e 27 70 56 cb 63 d9 ce b2 14 ee 20 7b d8 c0 98 73 5a af c7 ce fd fe 0e 20 9a 82 82 e4 36 af 36 c0 ef 7d af e9 82 ca e1 f8 bd 36 fa ef 41 f9 78 1e 5e 6d 71 98 b6 ca eb 3d 4a 5e 00 f5 51 a9 fd 08 3a 1f c3 5c 37 b8 af 5d bc 96 eb 0c ea fb 75 ea f9 6d 77 50 27 60 d0 b5 52 98 75 01 00 00 00 18 Data Ascii: A~BQ]{0m/I0nGZRCacqmS3X,Jmm5d_\|zsxI_qTFA,+fYU4MhS}H%\|~j'pVc {sZ 66}6Ax^mq=J^Q:\7]umwP'`Ru
2024-07-19 20:22:54 UTC	1369	IN	Data Raw: 75 26 d0 89 d1 58 07 0e 1c 92 7d 7b f7 eb 27 7d f2 f9 bc cc 98 d9 2d 1d 1d 6d 32 1d 44 e5 a9 a6 b7 df de 23 07 f6 1f 94 1d 3b 76 4b 47 47 bb 74 75 75 c8 cc 59 33 24 9d 4e f9 06 d7 0a 05 f5 7b c1 b3 86 b5 fd 5a a1 50 18 fd bb 7a cb a8 5c b3 de bd 2c 35 7f d8 7a d7 ce 69 fd 96 df d3 d3 2b 7b f7 ec 97 1d 3b 76 e9 d2 70 b3 67 cf 94 8e ce 36 e9 ec ec a8 b8 6c b7 de de 3e 79 7b f7 5e d9 b5 f3 6d 19 1c 1c 94 39 73 67 49 77 77 97 cc 9a 3d 43 ea 7d 6e ec d9 b3 47 76 ed dc a3 3f ff fc 79 73 a4 6b 46 a7 74 75 75 56 b5 1c b5 6f 76 ed da 23 83 03 03 23 9f b1 ad bd 4d ba bb ab 5b ce db 6f ef 95 83 07 0e e9 fd d7 de d1 2e dd 5d 9d 32 73 56 77 d9 71 02 d8 6d 85 d7 f9 e4 3e 8f 2b 8d a7 e1 37 c6 86 5f 2d fc 6a c6 0c 8a 22 02 ff 00 00 00 68 76 04 f0 27 d7 48 98 65 70 60 50 Data Ascii: u&X}{'}-m2D#;vKGGtuuY3$N{ZPz\,5zi+{;vpg6l>y{^m9sgIww=C}nGv?yskFtuuVov##M[o.]2sVwqm>+7_-j"hv'Hep`P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49941	104.18.39.66	443	2380	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-19 20:22:54 UTC	415	OUT	GET /api/public/content/9cfe697b6d3f4044a0dca3699fa70406?v=83c5c7da&t=w1920hq HTTP/1.1 Host: assets.mimecast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-19 20:22:55 UTC	620	IN	HTTP/1.1 200 OK Date: Fri, 19 Jul 2024 20:22:55 GMT Content-Type: image/png Content-Length: 3471 Connection: close CF-Ray: 8a5d6d219d28c3ff-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 187 Cache-Control: public, must-revalidate, max-age=600 Content-Disposition: inline; filename=R_Channel_icon.png; filename*=utf-8''R_Channel_icon.png ETag: "0x8DC4E6A6B3A8E66" Last-Modified: Wed, 27 Mar 2024 14:30:15 GMT Vary: Accept-Encoding api-supported-versions: 1.0 ch-mds-worker-redirect-type: public-links-url ch-mds-worker-version: 2.1 Entity: 128551 Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-19 20:22:55 UTC	749	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d1 00 00 00 d1 08 06 00 00 00 52 3a 57 ef 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0d 41 49 44 41 54 78 9c ed 9d 3d 6c 56 d7 19 c7 af 3f b0 f9 72 54 da a1 29 43 94 2a 55 32 36 15 23 91 60 23 03 20 55 b0 38 1d 20 43 c8 c0 94 0f c9 59 90 b1 32 21 35 6d 3a 64 28 2c 30 04 2f 44 8a 4a 06 e8 52 23 91 ad 96 5c a9 aa d4 a8 95 32 01 1d da a6 b1 f9 b0 8d ed e8 7f 5f 5f d7 31 7e 5f bf f7 3c e7 de 7b ce b9 bf df 00 81 f0 7e f8 7d 9f ff 79 3e ce 73 9e 33 f0 df 43 47 d7 32 00 70 65 6a d0 f9 a1 00 90 83 88 00 8c 20 22 00 23 88 08 c0 08 22 02 30 82 88 00 8c 20 22 00 23 88 08 c0 08 22 02 30 82 88 00 8c 20 22 00 23 88 08 c0 08 22 02 30 82 88 00 8c 20 22 00 23 88 08 c0 08 22 02 30 82 88 00 Data Ascii: PNGIHDRR:WpHYsAIDATx=lV?rT)C*U26#`# U8 CY2!5m:d(,0/DJR#\2__1~_<{~}y>s3CG2pej "#"0 "#"0 "#"0 "#"0
2024-07-19 20:22:55 UTC	1369	IN	Data Raw: 56 be fa a7 73 c2 2d 01 f9 5e d5 55 00 e9 34 9a fe 2b ff f3 d0 cb 2f e5 62 f5 19 86 0d 1f 7a 35 cf 8f da 54 68 48 4e 44 fa 12 43 09 81 94 27 e4 86 5b b2 6a d7 69 1e f5 e3 45 97 be b8 95 2d cf 7c d9 b3 0c 2d b1 ea 35 47 8e 1f f3 f2 ba 7b de 3d 9f bf 5e 5b 36 63 93 2b 71 3f 77 73 da 5b 03 a6 0f 24 a2 85 b7 df a9 fd 67 90 78 b4 87 55 56 c0 c5 22 64 15 d3 93 cb d7 da d2 6b 97 56 89 5b 61 5c 48 02 12 32 c6 32 06 a9 50 c8 f2 33 68 f5 97 68 1f 5d 74 db b7 2a 44 af 1e 39 0b bb cf 9d 69 4d 91 21 19 11 e9 0b 53 33 66 88 94 29 32 58 7e 06 b5 e0 48 00 3e 3a 28 16 a7 6f e4 cf 65 09 c9 46 c7 4f 67 6d 20 99 9c 48 85 04 eb ca a7 a4 7b e9 e6 ed 0d 23 d4 f3 e9 60 9b f2 05 8b 77 50 e2 2e 6f b4 93 71 eb df b9 26 f9 32 f6 87 ef 5f f0 da 35 a1 f7 ab e7 54 e9 da 85 d1 f1 53 ad Data Ascii: Vs-^U4+/bz5ThHNDC'[jiE-\|-5G{=^[6c+q?ws[$gxUV"dkV[a\H22P3hh]t*D9iM!S3f)2X~H>:(oeFOgm H{#`wP.oq&2_5TS
2024-07-19 20:22:55 UTC	1353	IN	Data Raw: dc 0a 9d 7c 08 48 25 57 6d fe 55 d1 0c 29 71 aa 7b 7c fe 8d b7 92 3f 37 e3 9a ef ed 89 74 bf ab 5f 06 43 2f 67 5b 51 7c 5e 47 a9 b8 d8 40 6d 4b d3 65 19 46 c7 4f 77 42 f2 44 67 d6 05 2b 22 5f b7 68 d7 d9 8a 5f 94 79 eb bc ee 24 16 86 54 1c fa f4 4a 92 23 85 83 15 91 25 c7 28 04 d4 54 2c ae 02 81 eb 45 60 29 33 b0 be c1 ac 05 32 25 06 53 f4 42 2a 20 34 9d 9f 28 4f 22 b4 db 1e 35 0d a7 24 a4 e1 d4 bc 90 8f f2 b5 2f 14 da 29 8c a9 7b 52 a9 aa 62 f2 c2 1a 6a a9 c5 64 a7 8d e4 8d 99 72 eb 47 30 d4 d9 5d 75 d8 b5 77 72 22 7f 9d 62 6f 2c 66 82 2b 71 eb cb 93 cb 77 41 c6 a2 2a 59 48 54 71 ac 61 3b 24 1a 6d 1c 6b 03 d9 d7 46 a7 36 94 65 e8 6a b5 aa ea fd 3f b9 7c 2d f7 da 11 33 15 9c 27 1a 39 71 cc f9 b1 21 ae 6a 32 68 4d 21 aa 62 1f a9 98 70 a4 b0 b1 8a 0e 81 a2 Data Ascii: \|H%WmU)q{\|?7t_C/g[Q\|^G@mKeFOwBDg+"_h_y$TJ#%(T,E`)32%SB* 4(O"5$/){RbjdrG0]uwr"bo,f+qwA*YHTqa;$mkF6ej?\|-3'9q!j2hM!bp

Target ID:	0
Start time:	16:22:21
Start date:	19/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:22:26
Start date:	19/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2208,i,6947341399331639761,9694673760673214665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:22:28
Start date:	19/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	16:22:54
Start date:	19/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4120 --field-trial-handle=2208,i,6947341399331639761,9694673760673214665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Windows Analysis Report
https://protect-us.mimecast.com/s/wFHoCqxrAnt7V914iZaD1v