Edit tour

Windows Analysis Report
https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&

Overview

General Information

Sample URL:	https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9Olr
Analysis ID:	1520712
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML page contains string obfuscation

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1204 --field-trial-handle=2204,i,2645209729689295859,16213097606780777706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ibew01.formstack.com/workflows/application_for_membership MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2020,i,840183946823761153,12592881876379363948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://ibew01.formstack.com/workflows/application_for_membership

HTTP Parser: Number of links: 0

Source: https://acrobat.adobe.com/dc-conversions2-dropin/3.17.1_2.130.0/translations-en-US-json.js

HTTP Parser: Found new string: script "use strict";(self["webpackJsonp-conversions2"]=self["webpackJsonp-conversions2"]||[]).push([[818],{R5i5:e=>{e.exports=JSON.parse('{"pdfti.dropzone.heading.seo":"Convert a PDF to JPG image","pdftw.dropzone.heading.seo":"Convert PDF to Word","pdftxls.dropzone.description.seo":"Drag and drop a PDF file to use our PDF to Microsoft Excel converter.","pdftxls.dropzone.heading.seo":"Convert PDF to Excel","pdftw.dropzone.description.seo":"Drag and drop a PDF file to use our PDF to Microsoft Word converter.","pdftppt.dropzone.heading.seo":"Convert PDF to PPT","pdftppt.dropzone.description.seo":"Drag and drop a PDF file to use our PDF to Microsoft PowerPoint (PPT) converter.","pdftw.dropzone.description.mobile.seo":"Select a PDF file to use our PDF to Microsoft Word converter.","pdfti.dropzone.description.mobile.seo":"Select a PDF, then convert to JPG, PNG, or TIFF file formats.","pdftxls.dropzone.description.mobile.seo":"Select a PDF file to use our PDF to Microsoft Excel converter.","pdftppt.dropzone.description.mob...

Source: https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&

HTTP Parser: Title: Review and Sign does not match URL

Source: https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&	HTTP Parser: No <meta name="author".. found
Source: https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&	HTTP Parser: No <meta name="author".. found
Source: https://ibew01.formstack.com/workflows/application_for_membership	HTTP Parser: No <meta name="author".. found
Source: https://ibew01.formstack.com/workflows/application_for_membership	HTTP Parser: No <meta name="author".. found

Source: https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&	HTTP Parser: No <meta name="copyright".. found
Source: https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&	HTTP Parser: No <meta name="copyright".. found
Source: https://ibew01.formstack.com/workflows/application_for_membership	HTTP Parser: No <meta name="copyright".. found
Source: https://ibew01.formstack.com/workflows/application_for_membership	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49745 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49939 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49745 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /workflows/application_for_membership HTTP/1.1Host: ibew01.formstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/forms-renderer/builds/public/form_9e1f9ab9a5.js HTTP/1.1Host: static.formstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ibew01.formstack.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files.formstack.com/public/858050/531988_tmpl_head_5f4014c04316a. HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ibew01.formstack.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /workflows/application_for_membership HTTP/1.1Host: ibew01.formstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ibew01.formstack.com/workflows/application_for_membershipAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=8757c147a41006b0de8b555e4f0513f2; fsBrowserSessionId=66f6e2f8035563.91401914; _dd_s=rum=0&expire=1727456895455
Source: global traffic	HTTP traffic detected: GET /forms/forms-renderer/builds/public/df-26.js?chunkhash=24fed29d1095b76ff5d3&id=5034 HTTP/1.1Host: static.formstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ibew01.formstack.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/forms-renderer/builds/public/form_9e1f9ab9a5.js HTTP/1.1Host: static.formstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /live-form/analytics/3730845/firstView HTTP/1.1Host: ibew01.formstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fsBrowserSessionId=66f6e2f8035563.91401914; _dd_s=rum=0&expire=1727456895455
Source: global traffic	HTTP traffic detected: GET /forms/forms-renderer/builds/public/phoneValidation.js?chunkhash=c0eb132e5829966aa022&id=384 HTTP/1.1Host: static.formstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ibew01.formstack.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files.formstack.com/public/858050/531988_tmpl_head_5f4014c04316a. HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/forms-renderer/builds/public/df-26.js?chunkhash=24fed29d1095b76ff5d3&id=5034 HTTP/1.1Host: static.formstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon/favicon.ico HTTP/1.1Host: www.formstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ibew01.formstack.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/forms-renderer/builds/public/phoneValidation.js?chunkhash=c0eb132e5829966aa022&id=384 HTTP/1.1Host: static.formstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon/favicon.ico HTTP/1.1Host: www.formstack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.css HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.js HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://acrobat.adobe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utilnav/9.2/utilitynav.js HTTP/1.1Host: prod.adobeccstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4507022599913472/envelope/?sentry_key=a70bff58cd4048f9e05163230edfd1bd&sentry_version=7 HTTP/1.1Host: o4505393339695104.ingest.us.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: secure.na2.echocdn.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: ibew01.formstack.com
Source: global traffic	DNS traffic detected: DNS query: static.formstack.com
Source: global traffic	DNS traffic detected: DNS query: adobe.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: widget.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: static.adobelogin.com
Source: global traffic	DNS traffic detected: DNS query: prod.adobeccstatic.com
Source: global traffic	DNS traffic detected: DNS query: l.betrad.com
Source: global traffic	DNS traffic detected: DNS query: ims-na1.adobelogin.com
Source: global traffic	DNS traffic detected: DNS query: files-download2.acrocomcontent.com
Source: global traffic	DNS traffic detected: DNS query: dc-api-v2.adobecontent.io
Source: global traffic	DNS traffic detected: DNS query: dc-api.adobecontent.io
Source: global traffic	DNS traffic detected: DNS query: c.evidon.com
Source: global traffic	DNS traffic detected: DNS query: by2.uservoice.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: api.echosign.com
Source: global traffic	DNS traffic detected: DNS query: cdn-sharing.adobecc.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.formstack.com
Source: global traffic	DNS traffic detected: DNS query: o4505393339695104.ingest.us.sentry.io

Source: unknown

HTTP traffic detected: POST /live-form/analytics/3730845/firstView HTTP/1.1Host: ibew01.formstack.comConnection: keep-aliveContent-Length: 23sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonX-Requested-With: xmlhttprequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://ibew01.formstack.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ibew01.formstack.com/workflows/application_for_membershipAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fsBrowserSessionId=66f6e2f8035563.91401914; _dd_s=rum=0&expire=1727456895455

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CloudFrontContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeDate: Fri, 27 Sep 2024 16:53:19 GMTP3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"X-Frame-Options: sameoriginSet-Cookie: PHPSESSID=2cb48483f25241a076303f6e1d439b5b; path=/live-form/; secure; HttpOnlyExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Cache: Error from cloudfrontVia: 1.1 615f944336054ae07b8e7c415ddbad44.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA60-P2X-Amz-Cf-Id: rQlQYBsmSWFGFRXym1eukKzCPPPvQy1mAjvGhUImqFCJ6n0Feq8qnA==X-Content-Type-Options: nosniff

Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: http://eightmedia.github.com/hammer.js
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: http://flesler.blogspot.com
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: http://flesler.blogspot.com/2007/10/jqueryscrollto.html
Source: chromecache_315.2.dr, chromecache_213.2.dr	String found in binary or memory: http://github.com/wyuenho/backgrid
Source: chromecache_241.2.dr, chromecache_244.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_193.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_190.2.dr, chromecache_218.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000149e7
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017702
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017704
Source: chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: chromecache_162.2.dr, chromecache_289.2.dr, chromecache_241.2.dr, chromecache_244.2.dr, chromecache_169.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_315.2.dr, chromecache_213.2.dr	String found in binary or memory: http://www.mozilla.org/MPL/
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_310.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/gabceb
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/gabceb/jquery-browser-plugin
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/hgoebl/mobile-detect.js
Source: chromecache_315.2.dr, chromecache_213.2.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blob/master/licenses.txt
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/websanova/mousestop
Source: chromecache_156.2.dr, chromecache_267.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_156.2.dr, chromecache_267.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.37.1/LICENSE
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_276.2.dr, chromecache_193.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_309.2.dr	String found in binary or memory: https://static.adobelogin.com/imslib/imslib.min.js
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
Source: chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: https://use.typekit.net/af/a2527e/000000000000000000017704/27/
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: chromecache_190.2.dr, chromecache_218.2.dr	String found in binary or memory: https://use.typekit.net/af/e301c6/0000000000000000000149e7/27/
Source: chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1204 --field-trial-handle=2204,i,2645209729689295859,16213097606780777706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://ibew01.formstack.com/workflows/application_for_membership
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2020,i,840183946823761153,12592881876379363948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1204 --field-trial-handle=2204,i,2645209729689295859,16213097606780777706,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2020,i,840183946823761153,12592881876379363948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://jquery.org/license	0%	URL Reputation	safe
http://jqueryui.com	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
http://api.jqueryui.com/position/	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://p.typekit.net/p.gif	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://js.foundation/	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
dd20fzx9mj46f.cloudfront.net	13.224.189.78	true	false	unknown
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	34.196.92.164	true	false	unknown
widget.uservoice.com	104.17.28.92	true	false	unknown
api.echosign.com	3.236.206.93	true	false	unknown
secure.na2dc2.echosign.com	44.234.124.145	true	false	unknown
cdn-sharing.adobecc.map.fastly.net	151.101.1.138	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.156	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
formstack.com	18.66.122.27	true	false	unknown
s3.amazonaws.com	52.216.146.117	true	false	unknown
o4505393339695104.ingest.us.sentry.io	34.120.195.249	true	false	unknown
adobe.com.ssl.d1.sc.omtrdc.net	63.140.62.222	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
by2.uservoice.com	104.17.30.92	true	false	unknown
prod.adobeccstatic.com	3.161.82.76	true	false	unknown
use.typekit.net	unknown	unknown	false	unknown
c.evidon.com	unknown	unknown	false	unknown
www.formstack.com	unknown	unknown	false	unknown
ibew01.formstack.com	unknown	unknown	false	unknown
static.formstack.com	unknown	unknown	false	unknown
ims-na1.adobelogin.com	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
l.betrad.com	unknown	unknown	false	unknown
dc-api-v2.adobecontent.io	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
dc-api.adobecontent.io	unknown	unknown	false	unknown
adobe.tt.omtrdc.net	unknown	unknown	false	unknown
cdn-sharing.adobecc.com	unknown	unknown	false	unknown
secure.na2.echocdn.com	unknown	unknown	false	unknown
static.adobelogin.com	unknown	unknown	false	unknown
files-download2.acrocomcontent.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://static.formstack.com/forms/forms-renderer/builds/public/form_9e1f9ab9a5.js	false	unknown
https://o4505393339695104.ingest.us.sentry.io/api/4507022599913472/envelope/?sentry_key=a70bff58cd4048f9e05163230edfd1bd&sentry_version=7	false	unknown
https://static.formstack.com/forms/forms-renderer/builds/public/phoneValidation.js?chunkhash=c0eb132e5829966aa022&id=384	false	unknown
https://ibew01.formstack.com/live-form/analytics/3730845/firstView	false	unknown
https://s3.amazonaws.com/files.formstack.com/public/858050/531988_tmpl_head_5f4014c04316a.	false	unknown
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.js	false	unknown
https://prod.adobeccstatic.com/utilnav/9.2/utilitynav.css	false	unknown
https://www.formstack.com/images/favicon/favicon.ico	false	unknown
https://ibew01.formstack.com/workflows/application_for_membership	false	unknown
https://static.formstack.com/forms/forms-renderer/builds/public/df-26.js?chunkhash=24fed29d1095b76ff5d3&id=5034	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_276.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js	chromecache_156.2.dr, chromecache_267.2.dr	false		unknown
http://jqueryui.com	chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://use.typekit.net/af/a2527e/000000000000000000017704/27/	chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
https://github.com/jquery/jquery-color	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
https://use.typekit.net/af/cb695f/000000000000000000017701/27/	chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
http://typekit.com/eulas/000000000000000000017704	chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
https://static.adobelogin.com/imslib/imslib.min.js	chromecache_309.2.dr	false		unknown
http://eightmedia.github.com/hammer.js	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
http://typekit.com/eulas/000000000000000000017706	chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
https://github.com/gabceb/jquery-browser-plugin	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
http://typekit.com/eulas/0000000000000000000176ff	chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
https://github.com/gabceb	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
http://typekit.com/eulas/000000000000000000017701	chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
http://typekit.com/eulas/000000000000000000017702	chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
http://typekit.com/eulas/000000000000000000017703	chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
https://github.com/hgoebl/mobile-detect.js	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
http://github.com/wyuenho/backgrid	chromecache_315.2.dr, chromecache_213.2.dr	false		unknown
http://flesler.blogspot.com/2007/10/jqueryscrollto.html	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
https://github.com/zloirock/core-js/blob/v3.37.1/LICENSE	chromecache_156.2.dr, chromecache_267.2.dr	false		unknown
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/	chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
http://jedwatson.github.io/classnames	chromecache_241.2.dr, chromecache_244.2.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_162.2.dr, chromecache_289.2.dr, chromecache_241.2.dr, chromecache_244.2.dr, chromecache_169.2.dr	false		unknown
https://github.com/imakewebthings/waypoints/blob/master/licenses.txt	chromecache_315.2.dr, chromecache_213.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
http://api.jqueryui.com/position/	chromecache_276.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://use.typekit.net/af/e301c6/0000000000000000000149e7/27/	chromecache_190.2.dr, chromecache_218.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_276.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
http://typekit.com/eulas/0000000000000000000149e7	chromecache_190.2.dr, chromecache_218.2.dr	false		unknown
https://use.typekit.net/af/4b3e87/000000000000000000017706/27/	chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
https://jquery.org/license	chromecache_276.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_276.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://p.typekit.net/p.gif	chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	false	URL Reputation: safe	unknown
http://flesler.blogspot.com	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
https://use.typekit.net/af/40207f/0000000000000000000176ff/27/	chromecache_190.2.dr, chromecache_218.2.dr, chromecache_313.2.dr, chromecache_164.2.dr	false		unknown
https://github.com/websanova/mousestop	chromecache_276.2.dr, chromecache_193.2.dr	false		unknown
https://sizzlejs.com/	chromecache_276.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown
https://js.foundation/	chromecache_276.2.dr, chromecache_193.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
3.161.82.76	prod.adobeccstatic.com	United States	16509	AMAZON-02US	false
151.101.1.138	cdn-sharing.adobecc.map.fastly.net	United States	54113	FASTLYUS	false
18.66.122.60	unknown	United States	3	MIT-GATEWAYSUS	false
63.140.62.222	adobe.com.ssl.d1.sc.omtrdc.net	United States	15224	OMNITUREUS	false
16.182.106.16	unknown	United States	unknown	unknown	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
66.235.152.156	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
3.236.206.93	api.echosign.com	United States	14618	AMAZON-AESUS	false
13.224.189.78	dd20fzx9mj46f.cloudfront.net	United States	16509	AMAZON-02US	false
52.216.146.117	s3.amazonaws.com	United States	16509	AMAZON-02US	false
18.66.122.27	formstack.com	United States	3	MIT-GATEWAYSUS	false
34.120.195.249	o4505393339695104.ingest.us.sentry.io	United States	15169	GOOGLEUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false
18.66.122.21	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.122.65	unknown	United States	3	MIT-GATEWAYSUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520712
Start date and time:	2024-09-27 18:51:30 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/288@66/17
Cookbook Comments:	Browse: https://secure.na2.documents.adobe.com/

IP
192.168.2.6
192.168.2.5

Input	Output
URL: https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP& Model: jbxai	{ "brand":["X"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP& Model: jbxai	{ "brand":["Adobe Acrobat Sign"], "contains_trigger_text":true, "trigger_text":"View message from IBEW 1245 Membership", "prominent_button_name":"Start", "text_input_field_labels":["charlescoffman11@gmail.com", "Coleman Env-"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP& Model: jbxai	{ "phishing_score":2, "brands":"Adobe Acrobat Sign", "legit_domain":"adobe.com", "classification":"wellknown", "reasons":["The brand 'Adobe Acrobat Sign' is well-known and associated with Adobe.", "The URL 'secure.na2.documents.adobe.com' contains 'adobe.com', which is the legitimate domain for Adobe.", "The subdomain 'secure.na2.documents' is plausible for a service like Adobe Acrobat Sign, which may use subdomains for different services or regions."], "brand_matches":[false], "url_match":false, "brand_input":"Adobe Acrobat Sign", "input_fields":"charlescoffman11@gmail.com, Coleman Env-"}

URL: https://ibew01.formstack.com/workflows/application_for_membership Model: jbxai	{ "brand":["International Brotherhood of Electrical Workers"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Application for Membership USA", "text_input_field_labels":["Prefix", "Name", "Address", "City", "State", "Date of Birth*"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ibew01.formstack.com/workflows/application_for_membership Model: jbxai	{ "brand":["International Brotherhood of Electrical Workers"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Application for Membership USA", "text_input_field_labels":["Form No. 107", "Prefix", "Name", "First Name", "Initial (optional)", "Last Name", "Suffix", "Address", "Address Line 1", "City", "State", "Date of Birth*", "Month", "Day", "Year", "Month", "Day", "Year"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2564)
Category:	downloaded
Size (bytes):	2614
Entropy (8bit):	5.227990507261766
Encrypted:	false
SSDEEP:	48:BQskm8hvREaBoZ4VTuDFjvEGQKRkua3EhgZFO10KHBjWSKC2/:uskm8h9BoZ4VTuDFz/QokukEiFO10KHi
MD5:	55DCC71C4C24AF7891EBE63F357C0DA7
SHA1:	22019F3A5D742A727180EED5B56C5212BD7F3AAC
SHA-256:	AEF5B580FE7025D557605248E463009EAC9B02CF775030F71A50D6FA5D340ED5
SHA-512:	5559AFB00EF1308001C277928E085C9F6C6AC7CFD4056E5C259DD02691FDD69964F7578443979B20B0319C216911498CB797F3C766D1FD2F53666B6898E213B3
Malicious:	false
Reputation:	low
URL:	https://acrobat.adobe.com/dc-web-app-dropin/3.18.0_2.172.0/migration-api.js
Preview:	"use strict";(self["webpackJsonp-web-app"]=self["webpackJsonp-web-app"]\|\|[]).push([[619],{d1dY:(i,t,e)=>{e.r(t),e.d(t,{KNOWN_STATUS:()=>n,default:()=>o});var r=e("plsW");const n={LOCK_SCHEDULED:"LOCK_SCHEDULED",LOCKED:"LOCKED",DEFERRED:"DEFERRED",ABORTED:"ABORTED",COMPLETED:"COMPLETED"},s=r.logging.getLogger("AcpMigrationApi");class AcpMigrationApi{constructor(){var i=this;this.dcApiListener=function(t,e){let r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};const{headers:n={}}=r;if(n["x-acp-migration-info"]){const t=n["x-acp-migration-info"],e=i.parseMigrationHeader(t);i.currentMigrationInfo=e,i.notifyListeners(e)}},this.dcApiErrorListener=(i,t,e)=>{if(423===e.code\|\|403===e.code){var r,n;const i=null===(r=e.details)\|\|void 0===r\|\|null===(n=r.headers)\|\|void 0===n?void 0:n["x-acp-migration-info"];if(i){const t=this.parseMigrationHeader(i);this.currentMigrationInfo=t,this.notifyListeners(t)}}},this.notificationListener=()=>{r.providers["get-unc-obj"]().then((i=>{i.RegisterObserv

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2564)
Category:	dropped
Size (bytes):	2614
Entropy (8bit):	5.227990507261766
Encrypted:	false
SSDEEP:	48:BQskm8hvREaBoZ4VTuDFjvEGQKRkua3EhgZFO10KHBjWSKC2/:uskm8h9BoZ4VTuDFz/QokukEiFO10KHi
MD5:	55DCC71C4C24AF7891EBE63F357C0DA7
SHA1:	22019F3A5D742A727180EED5B56C5212BD7F3AAC
SHA-256:	AEF5B580FE7025D557605248E463009EAC9B02CF775030F71A50D6FA5D340ED5
SHA-512:	5559AFB00EF1308001C277928E085C9F6C6AC7CFD4056E5C259DD02691FDD69964F7578443979B20B0319C216911498CB797F3C766D1FD2F53666B6898E213B3
Malicious:	false
Reputation:	low
Preview:	"use strict";(self["webpackJsonp-web-app"]=self["webpackJsonp-web-app"]\|\|[]).push([[619],{d1dY:(i,t,e)=>{e.r(t),e.d(t,{KNOWN_STATUS:()=>n,default:()=>o});var r=e("plsW");const n={LOCK_SCHEDULED:"LOCK_SCHEDULED",LOCKED:"LOCKED",DEFERRED:"DEFERRED",ABORTED:"ABORTED",COMPLETED:"COMPLETED"},s=r.logging.getLogger("AcpMigrationApi");class AcpMigrationApi{constructor(){var i=this;this.dcApiListener=function(t,e){let r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};const{headers:n={}}=r;if(n["x-acp-migration-info"]){const t=n["x-acp-migration-info"],e=i.parseMigrationHeader(t);i.currentMigrationInfo=e,i.notifyListeners(e)}},this.dcApiErrorListener=(i,t,e)=>{if(423===e.code\|\|403===e.code){var r,n;const i=null===(r=e.details)\|\|void 0===r\|\|null===(n=r.headers)\|\|void 0===n?void 0:n["x-acp-migration-info"];if(i){const t=this.parseMigrationHeader(i);this.currentMigrationInfo=t,this.notifyListeners(t)}}},this.notificationListener=()=>{r.providers["get-unc-obj"]().then((i=>{i.RegisterObserv

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 18:52:25.107415915 CEST	53	55495	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:25.149753094 CEST	53	63831	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:26.157012939 CEST	53	57624	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:26.734448910 CEST	53	60845	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:28.599554062 CEST	54701	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:28.599829912 CEST	64245	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:28.608088017 CEST	53	54701	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:28.609551907 CEST	53	64245	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:30.605422020 CEST	59511	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:30.606350899 CEST	53122	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:30.612782001 CEST	53	59511	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:30.634888887 CEST	53	53122	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:31.955172062 CEST	53	53393	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:34.453910112 CEST	54892	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:34.454051971 CEST	59641	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:34.482930899 CEST	53	54892	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:34.485075951 CEST	53	59641	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:43.276876926 CEST	53	56179	1.1.1.1	192.168.2.6
Sep 27, 2024 18:52:52.947432995 CEST	59693	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:52.947813034 CEST	59791	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:54.383517981 CEST	53279	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:54.383665085 CEST	50231	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:55.673132896 CEST	58455	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:55.673607111 CEST	58855	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:56.840856075 CEST	53743	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:52:56.841547012 CEST	55519	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:02.093015909 CEST	53	57770	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:05.629585981 CEST	53	62851	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:10.727925062 CEST	57024	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:10.728579044 CEST	49802	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:10.755736113 CEST	53	49802	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:10.787911892 CEST	53	57024	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:12.527806997 CEST	60052	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:12.528172016 CEST	52662	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:12.557133913 CEST	53	52662	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:12.559869051 CEST	53	60052	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.742651939 CEST	54058	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.743585110 CEST	59205	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.750175953 CEST	53	54058	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.754179001 CEST	53	59205	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.754482985 CEST	58367	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.755186081 CEST	57657	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.759408951 CEST	60638	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.759922028 CEST	53368	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.762331009 CEST	53	58367	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.762403011 CEST	53	57657	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.766277075 CEST	58760	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.767210960 CEST	53003	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.776967049 CEST	53	58760	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.776983976 CEST	53	53003	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.785758018 CEST	53	53368	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.786829948 CEST	53	65058	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.790224075 CEST	53	50161	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.791456938 CEST	54292	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.791965961 CEST	62264	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.797374010 CEST	53	56002	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.801111937 CEST	56724	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.801354885 CEST	58205	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.801362038 CEST	53	54292	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.812055111 CEST	53	60638	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.812855005 CEST	57164	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.813541889 CEST	55377	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.815804958 CEST	56344	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.816351891 CEST	50504	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.816684008 CEST	53	62264	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.818661928 CEST	55085	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.819015026 CEST	55244	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.827416897 CEST	53	50504	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.851938009 CEST	53	52474	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.853416920 CEST	53	59285	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.853710890 CEST	53	55244	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.854224920 CEST	62797	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.854878902 CEST	54007	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.855035067 CEST	53	61981	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.856568098 CEST	56016	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.856944084 CEST	60240	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.858930111 CEST	55418	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.859128952 CEST	62434	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.867580891 CEST	53	56016	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.867770910 CEST	53	60240	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.868837118 CEST	57415	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.869220018 CEST	62182	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.872729063 CEST	60383	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.873321056 CEST	63977	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:13.882280111 CEST	53	60383	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.888655901 CEST	53	57415	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.890136003 CEST	53	62182	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.895586967 CEST	53	63977	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:13.924949884 CEST	53	62575	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:17.185532093 CEST	53	64365	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:17.578665018 CEST	61619	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:17.579402924 CEST	58072	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:17.586146116 CEST	53	58072	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:17.586821079 CEST	53	61619	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:17.590141058 CEST	53	60079	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:17.793680906 CEST	50227	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:17.794128895 CEST	58654	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:17.802151918 CEST	53	58654	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:17.824956894 CEST	53	50227	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:17.953005075 CEST	55605	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:17.953272104 CEST	55233	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:17.981913090 CEST	53	55233	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:17.983491898 CEST	53	55605	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:20.016350985 CEST	62497	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:20.016531944 CEST	63854	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:20.023453951 CEST	53	63854	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:20.025319099 CEST	53	62497	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:20.569582939 CEST	53247	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:20.569746971 CEST	50173	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:20.589915037 CEST	53	53247	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:20.597557068 CEST	53	50173	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:22.079658985 CEST	59200	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:22.079821110 CEST	56652	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:22.093610048 CEST	53	59200	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:22.107975960 CEST	53	56652	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:24.794559002 CEST	53	62469	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:25.467894077 CEST	53	56520	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:26.631906033 CEST	53	50910	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:29.309612036 CEST	54263	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:29.309978962 CEST	50870	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:29.317193985 CEST	53	50870	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:29.317435980 CEST	53	54263	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:30.693361998 CEST	51849	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:30.693548918 CEST	61411	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:30.920442104 CEST	61121	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:30.920805931 CEST	51883	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:31.046555996 CEST	53	51849	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:31.046569109 CEST	53	51883	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:31.046577930 CEST	53	61411	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:31.058891058 CEST	53	61121	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:31.686527014 CEST	57102	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:31.686527967 CEST	50327	53	192.168.2.6	1.1.1.1
Sep 27, 2024 18:53:31.693785906 CEST	53	50327	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:31.694006920 CEST	53	57102	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:44.815934896 CEST	53	64223	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:51.577728987 CEST	53	57896	1.1.1.1	192.168.2.6
Sep 27, 2024 18:53:52.715586901 CEST	53	54368	1.1.1.1	192.168.2.6

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 27, 2024 18:52:30.635023117 CEST	192.168.2.6	1.1.1.1	c265	(Port unreachable)	Destination Unreachable
Sep 27, 2024 18:53:11.476314068 CEST	192.168.2.6	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Sep 27, 2024 18:53:13.784240961 CEST	192.168.2.6	1.1.1.1	c2cc	(Port unreachable)	Destination Unreachable
Sep 27, 2024 18:53:17.938002110 CEST	192.168.2.6	1.1.1.1	c278	(Port unreachable)	Destination Unreachable
Sep 27, 2024 18:53:20.597639084 CEST	192.168.2.6	1.1.1.1	c249	(Port unreachable)	Destination Unreachable
Sep 27, 2024 18:53:22.108027935 CEST	192.168.2.6	1.1.1.1	c249	(Port unreachable)	Destination Unreachable
Sep 27, 2024 18:53:23.336216927 CEST	192.168.2.6	1.1.1.1	c28c	(Port unreachable)	Destination Unreachable
Sep 27, 2024 18:53:25.868942022 CEST	192.168.2.6	1.1.1.1	c28b	(Port unreachable)	Destination Unreachable
Sep 27, 2024 18:53:31.058965921 CEST	192.168.2.6	1.1.1.1	c20d	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 36 4d 6e 67 51 6e 4c 42 54 30 57 56 75 79 55 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 35 33 31 61 35 64 31 30 31 38 32 37 31 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 6MngQnLBT0WVuyUZ.1Context: ba531a5d10182717
2024-09-27 16:52:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 16:52:26 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 36 4d 6e 67 51 6e 4c 42 54 30 57 56 75 79 55 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 35 33 31 61 35 64 31 30 31 38 32 37 31 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 35 59 5a 6c 62 61 71 4e 47 2b 31 4a 7a 6a 7a 6d 50 56 36 4d 48 62 39 72 7a 53 75 33 2b 4e 6d 4a 70 4c 53 69 76 52 54 79 46 65 47 70 77 56 69 41 37 41 58 50 6a 55 56 46 55 44 73 78 67 53 63 34 76 6d 32 6b 71 6a 42 6e 36 67 34 78 35 35 51 46 42 48 5a 6c 76 47 77 43 61 67 36 30 33 50 7a 7a 55 42 56 34 49 6f 61 68 73 33 61 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 6MngQnLBT0WVuyUZ.2Context: ba531a5d10182717<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAS5YZlbaqNG+1JzjzmPV6MHb9rzSu3+NmJpLSivRTyFeGpwViA7AXPjUVFUDsxgSc4vm2kqjBn6g4x55QFBHZlvGwCag603PzzUBV4Ioahs3al
2024-09-27 16:52:26 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 36 4d 6e 67 51 6e 4c 42 54 30 57 56 75 79 55 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 61 35 33 31 61 35 64 31 30 31 38 32 37 31 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 6MngQnLBT0WVuyUZ.3Context: ba531a5d10182717<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 16:52:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 16:52:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4d 4e 44 6b 78 75 39 53 72 45 53 45 32 59 75 47 50 49 4b 2f 4c 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: MNDkxu9SrESE2YuGPIK/LQ.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 16:52:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=258752 Date: Fri, 27 Sep 2024 16:52:30 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 16:52:31 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=258781 Date: Fri, 27 Sep 2024 16:52:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 16:52:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6d 63 61 2b 36 68 46 48 57 6b 6d 74 41 6b 4b 30 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 33 31 64 39 37 31 31 30 63 30 39 33 66 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: mca+6hFHWkmtAkK0.1Context: 5031d97110c093f5
2024-09-27 16:52:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 16:52:34 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6d 63 61 2b 36 68 46 48 57 6b 6d 74 41 6b 4b 30 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 33 31 64 39 37 31 31 30 63 30 39 33 66 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 35 59 5a 6c 62 61 71 4e 47 2b 31 4a 7a 6a 7a 6d 50 56 36 4d 48 62 39 72 7a 53 75 33 2b 4e 6d 4a 70 4c 53 69 76 52 54 79 46 65 47 70 77 56 69 41 37 41 58 50 6a 55 56 46 55 44 73 78 67 53 63 34 76 6d 32 6b 71 6a 42 6e 36 67 34 78 35 35 51 46 42 48 5a 6c 76 47 77 43 61 67 36 30 33 50 7a 7a 55 42 56 34 49 6f 61 68 73 33 61 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: mca+6hFHWkmtAkK0.2Context: 5031d97110c093f5<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAS5YZlbaqNG+1JzjzmPV6MHb9rzSu3+NmJpLSivRTyFeGpwViA7AXPjUVFUDsxgSc4vm2kqjBn6g4x55QFBHZlvGwCag603PzzUBV4Ioahs3al
2024-09-27 16:52:34 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6d 63 61 2b 36 68 46 48 57 6b 6d 74 41 6b 4b 30 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 30 33 31 64 39 37 31 31 30 63 30 39 33 66 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: mca+6hFHWkmtAkK0.3Context: 5031d97110c093f5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 16:52:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 16:52:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 45 63 71 6e 6e 77 77 6d 45 32 77 64 6f 4c 37 70 4a 4c 6a 53 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yEcqnnwwmE2wdoL7pJLjSw.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4e 67 64 71 74 76 32 75 32 55 61 58 59 58 7a 6c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 35 63 39 39 66 32 30 38 37 31 64 34 62 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Ngdqtv2u2UaXYXzl.1Context: ef5c99f20871d4b0
2024-09-27 16:52:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 16:52:47 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4e 67 64 71 74 76 32 75 32 55 61 58 59 58 7a 6c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 35 63 39 39 66 32 30 38 37 31 64 34 62 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 35 59 5a 6c 62 61 71 4e 47 2b 31 4a 7a 6a 7a 6d 50 56 36 4d 48 62 39 72 7a 53 75 33 2b 4e 6d 4a 70 4c 53 69 76 52 54 79 46 65 47 70 77 56 69 41 37 41 58 50 6a 55 56 46 55 44 73 78 67 53 63 34 76 6d 32 6b 71 6a 42 6e 36 67 34 78 35 35 51 46 42 48 5a 6c 76 47 77 43 61 67 36 30 33 50 7a 7a 55 42 56 34 49 6f 61 68 73 33 61 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Ngdqtv2u2UaXYXzl.2Context: ef5c99f20871d4b0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAS5YZlbaqNG+1JzjzmPV6MHb9rzSu3+NmJpLSivRTyFeGpwViA7AXPjUVFUDsxgSc4vm2kqjBn6g4x55QFBHZlvGwCag603PzzUBV4Ioahs3al
2024-09-27 16:52:47 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4e 67 64 71 74 76 32 75 32 55 61 58 59 58 7a 6c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 66 35 63 39 39 66 32 30 38 37 31 64 34 62 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Ngdqtv2u2UaXYXzl.3Context: ef5c99f20871d4b0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 16:52:47 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 16:52:47 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 4f 45 51 45 59 71 2f 31 45 47 49 6c 6c 76 69 44 62 56 33 73 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yOEQEYq/1EGIllviDbV3sA.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:08 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 50 6e 4d 50 79 34 6a 74 4a 55 6d 36 49 30 2b 49 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 62 66 62 64 36 34 62 37 34 61 37 63 38 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: PnMPy4jtJUm6I0+I.1Context: 56bfbd64b74a7c81
2024-09-27 16:53:08 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 16:53:08 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 50 6e 4d 50 79 34 6a 74 4a 55 6d 36 49 30 2b 49 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 62 66 62 64 36 34 62 37 34 61 37 63 38 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 35 59 5a 6c 62 61 71 4e 47 2b 31 4a 7a 6a 7a 6d 50 56 36 4d 48 62 39 72 7a 53 75 33 2b 4e 6d 4a 70 4c 53 69 76 52 54 79 46 65 47 70 77 56 69 41 37 41 58 50 6a 55 56 46 55 44 73 78 67 53 63 34 76 6d 32 6b 71 6a 42 6e 36 67 34 78 35 35 51 46 42 48 5a 6c 76 47 77 43 61 67 36 30 33 50 7a 7a 55 42 56 34 49 6f 61 68 73 33 61 6c Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: PnMPy4jtJUm6I0+I.2Context: 56bfbd64b74a7c81<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAS5YZlbaqNG+1JzjzmPV6MHb9rzSu3+NmJpLSivRTyFeGpwViA7AXPjUVFUDsxgSc4vm2kqjBn6g4x55QFBHZlvGwCag603PzzUBV4Ioahs3al
2024-09-27 16:53:08 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 50 6e 4d 50 79 34 6a 74 4a 55 6d 36 49 30 2b 49 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 62 66 62 64 36 34 62 37 34 61 37 63 38 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: PnMPy4jtJUm6I0+I.3Context: 56bfbd64b74a7c81<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 16:53:08 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 16:53:08 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 66 30 51 69 64 72 58 41 72 45 75 57 52 37 42 54 62 48 79 56 43 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: f0QidrXArEuWR7BTbHyVCg.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:11 UTC	699	OUT	GET /workflows/application_for_membership HTTP/1.1 Host: ibew01.formstack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:53:12 UTC	879	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 27 Sep 2024 16:53:12 GMT P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: fsBrowserSessionId=66f6e2f8035563.91401914; path=/; secure; HttpOnly; SameSite=Lax Set-Cookie: PHPSESSID=8757c147a41006b0de8b555e4f0513f2; path=/workflows/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Cache-Control: public Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 7a17e7bab97826b103c75b700dd638e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: WDKx5zfuPyOu8aidnmQWQzktl4S17Bqc4wAKLTn0tY1vXM6zFuy2Rg== X-Content-Type-Options: nosniff
2024-09-27 16:53:12 UTC	16384	IN	Data Raw: 34 31 66 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 0a 20 20 3c 74 69 74 6c 65 3e 41 70 70 6c 69 63 61 74 69 6f 6e 20 66 6f 72 20 4d 65 6d 62 65 72 73 68 69 70 20 2d 20 55 53 41 20 Data Ascii: 41f8<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <meta name="robots" content="noindex, nofollow"> <title>Application for Membership - USA
2024-09-27 16:53:12 UTC	512	IN	Data Raw: 75 74 65 73 22 3a 7b 22 64 74 6f 54 79 70 65 22 3a 22 46 69 65 6c 64 41 74 74 72 69 62 75 74 65 73 54 65 78 74 44 74 6f 22 2c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 4f 70 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 63 61 6c 63 75 6c 61 74 69 6f 6e 41 6c 6c 6f 77 4e 65 67 61 74 69 76 65 73 22 3a 30 2c 22 63 61 6c 63 75 6c 61 74 69 6f 6e 43 61 74 65 67 6f 72 79 22 3a 22 74 65 78 74 22 2c 22 63 61 6c 63 75 6c 61 74 69 6f 6e 4f 70 65 72 61 74 6f 72 22 3a 22 22 2c 22 63 61 6c 63 75 6c 61 74 69 6f 6e 55 6e 69 74 73 22 3a 22 22 2c 22 63 68 61 72 61 63 74 65 72 73 57 69 64 65 22 3a 35 30 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 54 65 78 74 22 3a 22 22 2c 22 64 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 22 22 2c 22 66 69 65 6c 64 4f 6e 65 43 61 6c 63 75 6c 61 74 69 6f 6e Data Ascii: utes":{"dtoType":"FieldAttributesTextDto","autocompleteOptions":null,"calculationAllowNegatives":0,"calculationCategory":"text","calculationOperator":"","calculationUnits":"","charactersWide":50,"confirmationText":"","defaultValue":"","fieldOneCalculation
2024-09-27 16:53:12 UTC	15234	IN	Data Raw: 33 62 37 61 0d 0a 6c 20 53 65 63 75 72 69 74 79 20 4e 75 6d 62 65 72 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 5d 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 73 65 61 72 63 68 43 6f 6e 66 69 67 22 3a 7b 22 63 61 6e 53 65 61 72 63 68 4f 70 74 69 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 52 65 6d 6f 74 65 53 65 61 72 63 68 22 3a 66 61 6c 73 65 7d 2c 22 73 65 63 74 69 6f 6e 22 3a 22 38 37 33 31 39 31 35 39 22 2c 22 73 68 6f 75 6c 64 46 6f 72 63 65 53 6b 69 70 56 61 6c 69 64 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 75 70 70 6f 72 74 69 6e 67 54 65 78 74 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 2c 22 75 6e 69 71 75 65 22 3a 66 61 Data Ascii: 3b7al Security Number","language":"en","options":[],"readOnly":false,"required":true,"searchConfig":{"canSearchOptions":false,"useRemoteSearch":false},"section":"87319159","shouldForceSkipValidation":false,"supportingText":null,"type":"text","unique":fa
2024-09-27 16:53:12 UTC	15998	IN	Data Raw: 33 65 37 36 0d 0a 61 6c 63 75 6c 61 74 69 6f 6e 41 6c 6c 6f 77 4e 65 67 61 74 69 76 65 73 22 3a 30 2c 22 63 61 6c 63 75 6c 61 74 69 6f 6e 43 61 74 65 67 6f 72 79 22 3a 22 74 65 78 74 22 2c 22 63 61 6c 63 75 6c 61 74 69 6f 6e 4f 70 65 72 61 74 6f 72 22 3a 22 22 2c 22 63 61 6c 63 75 6c 61 74 69 6f 6e 55 6e 69 74 73 22 3a 22 22 2c 22 66 69 65 6c 64 4f 6e 65 43 61 6c 63 75 6c 61 74 69 6f 6e 22 3a 30 2c 22 66 69 65 6c 64 54 77 6f 43 61 6c 63 75 6c 61 74 69 6f 6e 22 3a 30 2c 22 72 75 6c 65 73 22 3a 5b 5d 7d 2c 22 64 65 66 61 75 6c 74 56 61 6c 75 65 22 3a 7b 22 64 74 6f 54 79 70 65 22 3a 22 44 65 66 61 75 6c 74 56 61 6c 75 65 53 74 72 69 6e 67 44 74 6f 22 2c 22 76 61 6c 75 65 22 3a 22 22 7d 2c 22 66 69 65 6c 64 54 79 70 65 41 74 74 72 69 62 75 74 65 73 22 3a 7b Data Ascii: 3e76alculationAllowNegatives":0,"calculationCategory":"text","calculationOperator":"","calculationUnits":"","fieldOneCalculation":0,"fieldTwoCalculation":0,"rules":[]},"defaultValue":{"dtoType":"DefaultValueStringDto","value":""},"fieldTypeAttributes":{
2024-09-27 16:53:12 UTC	409	IN	Data Raw: 31 39 32 0d 0a 62 65 6c 22 3a 22 32 33 32 31 22 2c 22 76 61 6c 75 65 22 3a 22 69 6e 66 6f 69 62 65 77 32 33 32 31 40 67 6d 61 69 6c 2e 63 6f 6d 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 32 33 32 32 22 2c 22 76 61 6c 75 65 22 3a 22 69 62 65 77 32 33 32 32 6e 65 77 6d 65 6d 62 65 72 73 40 67 6d 61 69 6c 2e 63 6f 6d 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 32 33 32 35 22 2c 22 76 61 6c 75 65 22 3a 22 6d 65 6d 62 65 72 73 68 69 70 32 33 32 35 40 67 6d 61 69 6c 2e 63 6f 6d 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 32 33 35 35 22 2c 22 76 61 6c 75 65 22 3a 22 69 62 65 77 32 33 35 35 40 6f 75 74 6c 6f 6f 6b 2e 63 6f 6d 22 2c 22 69 6d 61 67 65 55 Data Ascii: 192bel":"2321","value":"infoibew2321@gmail.com","imageUrl":""},{"label":"2322","value":"ibew2322newmembers@gmail.com","imageUrl":""},{"label":"2325","value":"membership2325@gmail.com","imageUrl":""},{"label":"2355","value":"ibew2355@outlook.com","imageU
2024-09-27 16:53:12 UTC	16384	IN	Data Raw: 37 66 66 38 0d 0a 76 61 6c 75 65 22 3a 22 70 65 74 65 72 5f 6d 65 72 73 6b 69 40 69 62 65 77 2e 6f 72 67 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 7d 5d 2c 22 72 65 61 64 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 73 65 61 72 63 68 43 6f 6e 66 69 67 22 3a 7b 22 63 61 6e 53 65 61 72 63 68 4f 70 74 69 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 75 73 65 52 65 6d 6f 74 65 53 65 61 72 63 68 22 3a 66 61 6c 73 65 7d 2c 22 73 65 63 74 69 6f 6e 22 3a 22 38 37 33 31 39 31 35 39 22 2c 22 73 68 6f 75 6c 64 46 6f 72 63 65 53 6b 69 70 56 61 6c 69 64 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 73 75 70 70 6f 72 74 69 6e 67 54 65 78 74 22 3a 22 41 70 70 6c 79 69 6e 67 20 74 6f 22 2c 22 74 79 70 65 22 3a 22 73 65 6c 65 63 74 22 2c 22 Data Ascii: 7ff8value":"peter_merski@ibew.org","imageUrl":""}],"readOnly":false,"required":true,"searchConfig":{"canSearchOptions":false,"useRemoteSearch":false},"section":"87319159","shouldForceSkipValidation":false,"supportingText":"Applying to","type":"select","
2024-09-27 16:53:12 UTC	16384	IN	Data Raw: 36 2e 63 6f 6d 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 37 30 30 22 2c 22 76 61 6c 75 65 22 3a 22 69 62 65 77 37 30 30 40 69 62 65 77 37 30 30 2e 63 6f 6d 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 37 30 32 22 2c 22 76 61 6c 75 65 22 3a 22 6e 65 77 6d 65 6d 62 65 72 61 70 70 40 69 62 65 77 37 30 32 2e 6f 72 67 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 37 32 33 22 2c 22 76 61 6c 75 65 22 3a 22 69 62 65 77 37 32 33 40 69 62 65 77 37 32 33 2e 6f 72 67 22 2c 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 37 35 33 22 2c 22 76 61 6c 75 65 22 3a 22 41 64 6d 69 6e 40 69 62 65 77 37 35 33 2e 6f 72 67 22 2c 22 69 6d 61 67 Data Ascii: 6.com","imageUrl":""},{"label":"700","value":"ibew700@ibew700.com","imageUrl":""},{"label":"702","value":"newmemberapp@ibew702.org","imageUrl":""},{"label":"723","value":"ibew723@ibew723.org","imageUrl":""},{"label":"753","value":"Admin@ibew753.org","imag
2024-09-27 16:53:12 UTC	13992	IN	Data Raw: 33 36 61 30 0d 0a 62 65 77 34 33 2e 6f 72 67 22 7d 2c 7b 22 63 6f 6d 70 61 72 69 73 6f 6e 4f 70 65 72 61 74 6f 72 22 3a 22 3d 3d 22 2c 22 66 69 65 6c 64 49 64 22 3a 22 38 37 33 31 39 31 38 31 22 2c 22 76 61 6c 75 65 22 3a 22 69 62 65 77 35 37 34 40 71 77 65 73 74 6f 66 66 69 63 65 2e 6e 65 74 22 7d 2c 7b 22 63 6f 6d 70 61 72 69 73 6f 6e 4f 70 65 72 61 74 6f 72 22 3a 22 3d 3d 22 2c 22 66 69 65 6c 64 49 64 22 3a 22 38 37 33 31 39 31 38 31 22 2c 22 76 61 6c 75 65 22 3a 22 69 62 65 77 6c 75 32 36 35 40 69 62 65 77 32 36 35 2e 6f 72 67 22 7d 5d 2c 22 6f 70 65 72 61 74 6f 72 22 3a 22 4f 52 22 2c 22 77 6f 72 6b 66 6c 6f 77 53 74 65 70 73 22 3a 5b 5d 7d 2c 22 73 65 63 75 72 65 53 65 74 74 69 6e 67 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 61 6c 63 75 6c 61 74 69 6f 6e Data Ascii: 36a0bew43.org"},{"comparisonOperator":"==","fieldId":"87319181","value":"ibew574@qwestoffice.net"},{"comparisonOperator":"==","fieldId":"87319181","value":"ibewlu265@ibew265.org"}],"operator":"OR","workflowSteps":[]},"secureSettings":null},{"calculation
2024-09-27 16:53:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:13 UTC	576	OUT	GET /forms/forms-renderer/builds/public/form_9e1f9ab9a5.js HTTP/1.1 Host: static.formstack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ibew01.formstack.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:53:13 UTC	631	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript; charset=utf-8 Content-Length: 2142579 Connection: close Date: Fri, 27 Sep 2024 16:53:13 GMT Last-Modified: Wed, 25 Sep 2024 19:00:21 GMT ETag: "66f45dc5-20b173" Cache-Control: public, s-maxage=86400 Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 03249875678629095a5ec311a6f1a298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: G828SzYGZ5wxrzewphC-lhBQbWFWJxCRzs9rGq1ky1fC6dqW_wRPYg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-09-27 16:53:13 UTC	15622	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 6f 72 6d 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 46 6f 72 6d 73 74 61 63 6b 46 6f 72 6d 73 3b 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 32 31 32 31 37 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 6f 72 74 61 6c 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 74 72 69 63 74 5f 6d 6f 64 65 22 29 2c Data Ascii: /! For license information please see form.js.LICENSE.txt /var FormstackForms;(()=>{var __webpack_modules__={21217:(e,t)=>{"use strict";Symbol.for("react.element"),Symbol.for("react.portal"),Symbol.for("react.fragment"),Symbol.for("react.strict_mode"),
2024-09-27 16:53:14 UTC	10406	IN	Data Raw: 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 3d 3d 65 3f 6e 75 6c 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 75 6c 6c 21 3d 72 29 7b 76 61 72 20 6e 2c 6f 2c 69 2c 61 2c 75 3d 5b 5d 2c 6c 3d 21 30 2c 73 3d 21 31 3b 74 72 79 7b 69 66 28 69 3d 28 72 3d 72 2e 63 61 6c 6c 28 65 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 74 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 29 21 3d 3d 72 29 72 65 74 75 72 6e 3b 6c 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 6c 3d Data Ascii: ion(e){if(Array.isArray(e))return e}(t)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,o,i,a,u=[],l=!0,s=!1;try{if(i=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;l=!1}else for(;!(l=
2024-09-27 16:53:14 UTC	6435	IN	Data Raw: 69 6f 6e 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 6e 75 6c 6c 21 3d 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 28 72 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 75 28 65 2c 74 29 3b 76 61 72 20 72 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 72 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 72 3d 65 2e 63 6f 6e 73 74 72 75 63 74 Data Ascii: ion(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(r)\|\|function(e,t){if(e){if("string"==typeof e)return u(e,t);var r={}.toString.call(e).slice(8,-1);return"Object"===r&&e.constructor&&(r=e.construct
2024-09-27 16:53:14 UTC	16384	IN	Data Raw: 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 22 22 3b 72 65 74 75 72 6e 20 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 7c 7c 61 28 65 29 7c 7c 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 75 28 74 29 3b 72 65 74 75 72 6e 20 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 28 22 22 21 3d 3d 6e 3f 22 22 2e 63 6f 6e 63 61 74 28 72 2c 22 28 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 29 22 29 3a 72 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 Data Ascii: &void 0!==arguments[1]?arguments[1]:"";return e.displayName\|\|e.name\|\|a(e)\|\|t}function l(e,t,r){var n=u(t);return e.displayName\|\|(""!==n?"".concat(r,"(").concat(n,")"):r)}function s(e){if(null!=e){if("string"==typeof e)return e;if("function"==typeof e)retu
2024-09-27 16:53:14 UTC	16384	IN	Data Raw: 73 20 75 73 65 43 75 73 74 6f 6d 43 68 65 63 6b 6f 75 74 28 29 22 29 7d 28 29 3b 76 61 72 20 65 3d 74 2e 75 73 65 43 6f 6e 74 65 78 74 28 4d 29 3b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 43 75 73 74 6f 6d 43 68 65 63 6b 6f 75 74 20 43 6f 6e 74 65 78 74 3b 20 59 6f 75 20 6e 65 65 64 20 74 6f 20 77 72 61 70 20 74 68 65 20 70 61 72 74 20 6f 66 20 79 6f 75 72 20 61 70 70 20 74 68 61 74 20 63 61 6c 6c 73 20 75 73 65 43 75 73 74 6f 6d 43 68 65 63 6b 6f 75 74 28 29 20 69 6e 20 61 6e 20 3c 43 75 73 74 6f 6d 43 68 65 63 6b 6f 75 74 50 72 6f 76 69 64 65 72 3e 20 70 72 6f 76 69 64 65 72 2e 22 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 75 73 65 45 6c 65 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: s useCustomCheckout()")}();var e=t.useContext(M);if(!e)throw new Error("Could not find CustomCheckout Context; You need to wrap the part of your app that calls useCustomCheckout() in an <CustomCheckoutProvider> provider.");return e},e.useElements=function
2024-09-27 16:53:14 UTC	16384	IN	Data Raw: 65 28 29 3e 3d 75 2e 67 65 74 54 69 6d 65 28 29 3f 72 2b 31 3a 74 2e 67 65 74 54 69 6d 65 28 29 3e 3d 73 2e 67 65 74 54 69 6d 65 28 29 3f 72 3a 72 2d 31 7d 7d 2c 37 30 30 39 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 6e 3d 72 28 33 35 34 30 34 29 2c 6f 3d 72 28 35 35 32 31 35 29 2c 69 3d 72 28 36 37 38 38 39 29 2c 61 3d 72 28 33 37 32 35 38 29 2c 75 3d 72 28 33 33 32 33 29 2c 6c 3d 72 28 35 36 37 37 35 29 2c 73 3d 36 30 34 38 65 35 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 28 30 2c 61 2e 41 29 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 72 3d 28 30 2c 6e 2e 41 29 28 65 29 2c 63 3d 28 30 2c 6f 2e 41 29 28 72 2c 74 29 2e 67 65 74 54 69 6d 65 28 Data Ascii: e()>=u.getTime()?r+1:t.getTime()>=s.getTime()?r:r-1}},70098:(e,t,r)=>{"use strict";r.d(t,{A:()=>c});var n=r(35404),o=r(55215),i=r(67889),a=r(37258),u=r(3323),l=r(56775),s=6048e5;function c(e,t){(0,a.A)(1,arguments);var r=(0,n.A)(e),c=(0,o.A)(r,t).getTime(
2024-09-27 16:53:14 UTC	16384	IN	Data Raw: 69 64 20 30 3d 3d 3d 4e 7c 7c 6e 75 6c 6c 3d 3d 3d 28 46 3d 4e 2e 6f 70 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 46 3f 76 6f 69 64 20 30 3a 46 2e 77 65 65 6b 53 74 61 72 74 73 4f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 79 3f 79 3a 30 29 3b 69 66 28 21 28 7a 3e 3d 30 26 26 7a 3c 3d 36 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 77 65 65 6b 53 74 61 72 74 73 4f 6e 20 6d 75 73 74 20 62 65 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 36 20 69 6e 63 6c 75 73 69 76 65 6c 79 22 29 3b 69 66 28 21 42 2e 6c 6f 63 61 6c 69 7a 65 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 6c 6f 63 61 6c 65 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 6c 6f 63 61 6c 69 7a 65 20 70 72 6f 70 65 72 74 79 22 29 3b 69 66 28 21 42 Data Ascii: id 0===N\|\|null===(F=N.options)\|\|void 0===F?void 0:F.weekStartsOn)&&void 0!==y?y:0);if(!(z>=0&&z<=6))throw new RangeError("weekStartsOn must be between 0 and 6 inclusively");if(!B.localize)throw new RangeError("locale must contain localize property");if(!B
2024-09-27 16:53:14 UTC	16384	IN	Data Raw: 66 6c 6f 6f 72 28 69 2f 31 30 30 29 2d 28 65 3e 3d 69 25 31 30 30 3f 31 30 30 3a 30 29 7d 72 65 74 75 72 6e 20 6e 3f 72 3a 31 2d 72 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 65 25 34 30 30 3d 3d 30 7c 7c 65 25 34 3d 3d 30 26 26 65 25 31 30 30 21 3d 30 7d 76 61 72 20 66 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 72 2c 65 29 3b 76 61 72 20 74 3d 77 28 72 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 65 3b 53 28 74 68 69 73 2c 72 29 3b 66 6f 72 28 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 2c 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 6f 5b 69 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 72 65 74 75 72 6e 20 65 3d 74 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 74 Data Ascii: floor(i/100)-(e>=i%100?100:0)}return n?r:1-r}function ce(e){return e%400==0\|\|e%4==0&&e%100!=0}var fe=function(e){y(r,e);var t=w(r);function r(){var e;S(this,r);for(var n=arguments.length,o=new Array(n),i=0;i<n;i++)o[i]=arguments[i];return e=t.call.apply(t
2024-09-27 16:53:14 UTC	16384	IN	Data Raw: 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 2c 69 3d 30 3b 69 3c 6e 3b 69 2b 2b 29 6f 5b 69 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 72 65 74 75 72 6e 20 65 3d 74 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 74 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 6f 29 29 2c 28 30 2c 5f 2e 41 29 28 28 30 2c 68 2e 41 29 28 65 29 2c 22 70 72 69 6f 72 69 74 79 22 2c 38 30 29 2c 28 30 2c 5f 2e 41 29 28 28 30 2c 68 2e 41 29 28 65 29 2c 22 69 6e 63 6f 6d 70 61 74 69 62 6c 65 54 6f 6b 65 6e 73 22 2c 5b 22 61 22 2c 22 42 22 2c 22 48 22 2c 22 6b 22 2c 22 74 22 2c 22 54 22 5d 29 2c 65 7d 72 65 74 75 72 6e 20 45 28 72 2c 5b 7b 6b 65 79 3a 22 70 61 72 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 73 77 Data Ascii: rguments.length,o=new Array(n),i=0;i<n;i++)o[i]=arguments[i];return e=t.call.apply(t,[this].concat(o)),(0,_.A)((0,h.A)(e),"priority",80),(0,_.A)((0,h.A)(e),"incompatibleTokens",["a","B","H","k","t","T"]),e}return E(r,[{key:"parse",value:function(e,t,r){sw
2024-09-27 16:53:14 UTC	16384	IN	Data Raw: 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 66 28 65 2c 74 29 3b 76 61 72 20 72 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 72 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 72 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 Data Ascii: tance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function c(e,t){if(e){if("string"==typeof e)return f(e,t);var r={}.toString.call(e).slice(8,-1);return"Object"===r&&e.constructor&&(r=e.constructor.name),"Map"

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Windows Analysis Report
https://secure.na2.documents.adobe.com/public/esign?tsid=CBFCIBAACBSCTBABDUAAABACAABAAskvx_bq2cquZ4iq5BLjtEbawFZPxMTV6mRN_3v_virXQazei6QWK2KQGkwGCN9pO8Sn1Zu0F3YP6y43ljMzViV-Jk1qAjzp1hzXH72fTmZKTDP9OlrjmAtiGxIKJVXAP&

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:17 UTC	818	OUT	POST /live-form/analytics/3730845/firstView HTTP/1.1 Host: ibew01.formstack.com Connection: keep-alive Content-Length: 23 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json X-Requested-With: xmlhttprequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ibew01.formstack.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ibew01.formstack.com/workflows/application_for_membership Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fsBrowserSessionId=66f6e2f8035563.91401914; _dd_s=rum=0&expire=1727456895455
2024-09-27 16:53:17 UTC	23	OUT	Data Raw: 7b 22 76 69 65 77 4d 65 74 68 6f 64 22 3a 22 68 6f 73 74 65 64 22 7d Data Ascii: {"viewMethod":"hosted"}
2024-09-27 16:53:17 UTC	708	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Fri, 27 Sep 2024 16:53:17 GMT P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Cache-Control: public Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: sameorigin X-Cache: Miss from cloudfront Via: 1.1 16aa5c15345b1c0756b83a5ae8ee765e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: rRO6kYEjL8Q3O3ntm4kqCtp1THCLrpvCtjWgO9tnKU_zMknCNBWA4A== X-Content-Type-Options: nosniff
2024-09-27 16:53:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:18 UTC	645	OUT	GET /files.formstack.com/public/858050/531988_tmpl_head_5f4014c04316a. HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ibew01.formstack.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:53:18 UTC	490	IN	HTTP/1.1 200 OK x-amz-id-2: vTa5VG3frYIFjR6nbcLyuQSCgnFh9P/kwtRXwGnKOq17XOvwygU12HhV3qhRiW7rhCiYhW1Jv8Y= x-amz-request-id: 4KNAJ5QEXFG3TNFE Date: Fri, 27 Sep 2024 16:53:19 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 21 Aug 2020 18:38:57 GMT ETag: "7d76d2cae1c735be6bb5c8bf150478a3" X-Robots-Tag: noindex x-amz-version-id: AYucccVNOBAs56eksy2KHLRMPdJnTcpr Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 66929 Connection: close
2024-09-27 16:53:18 UTC	8419	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 85 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-09-27 16:53:18 UTC	16384	IN	Data Raw: 41 7d 40 15 1d 1b 3c 5d 18 ad b0 76 df 8f 71 fd 06 bb 6d ab 11 9f 8a 24 3f a4 1c 53 32 64 f8 b8 f7 1f 01 40 da ac c0 ff 00 f0 23 ff 00 7b 82 46 8a a7 aa fb 1d a5 bf 15 fe 65 61 6b 14 0f 61 32 49 30 89 15 35 44 ff 00 96 d5 d2 07 42 c0 e3 3c 95 e4 a1 9b f6 e9 3b 43 ea 65 90 dd de 3c 6b 35 bd cf d2 a3 47 5f 32 25 45 97 53 53 2f 33 49 93 ae 41 43 0c 71 53 b9 ad 3d c8 6e d2 75 f0 b2 b7 10 94 1c 6e fa 72 92 cb 1c 52 4d 70 09 45 9a 45 fa 87 0c 0f e3 94 bc bf 28 3d 0f ed c7 5b f5 5a 9a c5 7d a3 e5 45 a5 ae ff 00 d3 d8 14 db da 0b 0b a6 b4 f2 7e 9a e7 e7 68 58 92 cd fc 55 3f 37 5c 78 3d ef ae ae ad 91 f2 f0 65 3c 51 59 5a d7 c4 27 2d cb 3b 66 6b 4e 9d b8 f3 f2 e6 76 dc 94 84 20 d5 d4 d3 fa 71 cb a3 2e 05 3c 55 00 b0 cb a8 1d 6b ed 38 8b bd 8a 88 1b f2 74 80 17 e5 Data Ascii: A}@<]vqm$?S2d@#{Feaka2I05DB<;Ce<k5G_2%ESS/3IACqS=nunrRMpEE(=[Z}E~hXU?7\x=e<QYZ'-;fkNv q.<Uk8t
2024-09-27 16:53:18 UTC	1024	IN	Data Raw: 2f b9 84 88 88 a4 b3 92 6c f2 a0 28 f5 a0 fe a4 ca 0e 16 2a 6d e2 6d 7d 8a b7 16 da f7 dd d2 f1 61 d9 2c a6 bb bb 81 58 84 84 0f 08 6a 0d 6c ed a5 54 77 54 e3 ba d8 dd a5 74 32 b5 d5 4d 9a db d3 9b 98 b6 95 bb df 2c a6 f3 d2 30 5d 22 ba d4 d0 a0 50 4a b9 8c 8d 4c 1b 56 6b 5c b1 e7 db b4 bd 3e 05 cb fa 22 eb dc 54 1d 77 c4 38 7d bb c3 24 f1 48 ea cc 28 fe 73 ba 80 54 b5 58 b6 9a 81 ec ae 3a 2b d9 dd e9 30 fe e4 67 6e ed 55 0e 5f db 71 fb 64 64 90 49 71 1b 14 ff 00 49 96 57 2e a1 7c 54 50 4d 29 ed ee ca 98 eb ed fb 0a 53 57 b9 c7 97 b9 76 29 57 3c ee de 2b a9 21 db a1 8f e9 95 dc 0f 02 10 eb 52 3b ba 11 f1 c7 2f c9 d5 b3 a7 d5 50 10 da f7 6b 19 e3 69 a3 b6 b3 b6 ea 32 89 0c 84 b1 15 0c da 19 ba 1a d7 d9 82 f1 5d 19 2a e5 92 0e 61 06 df 07 97 7b 79 15 ba 00 Data Ascii: /l(mm}a,XjlTwTt2M,0]"PJLVk\>"Tw8}$H(sTX:+0gnU_qddIqIW.\|TPM)SWv)W<+!R;/Pki2]a{y
2024-09-27 16:53:18 UTC	16384	IN	Data Raw: da b8 ae e5 be d9 dc bd dd da ab ed fb 02 6e 72 47 1b 43 76 d5 5b 82 d3 39 28 23 0e 83 3f 31 fc 31 fc dd 98 2f ab 8f c5 85 34 53 f8 22 9b c9 77 8d c7 8a fa 5d 67 b7 df c9 69 17 23 e5 43 fd 32 e3 6e 8d 51 53 6f 53 e2 75 7c 9a 47 9b 56 a2 ec 7c 45 8e 2e aa 6d f7 13 67 15 fb c2 10 71 1e 05 c9 f6 13 27 19 fa 7b 78 36 cb 74 9a d3 78 b2 13 0d d6 de 58 b4 eb 17 76 8b 57 98 bf 89 95 93 a7 66 17 26 9e bf a0 71 4d 69 fa 8a ba e5 b7 7c 6e da 2d e3 7c 89 39 0b cc a6 ce c3 7e da e5 8d 53 72 52 84 2d ae e7 6c fe 22 c9 5e ba 75 0e 9e f3 8c e8 b4 fb 74 0e 51 ab d7 ed d4 99 c4 b8 b4 5e 96 f1 55 e6 1b ae d4 77 0d f6 ee 48 d6 ee 34 74 8c 6d f6 d3 9a 64 5f 21 43 40 e7 e1 5a 0c 4d ad cd f1 45 56 bc 14 b0 97 13 e0 57 3c 96 f1 f7 8d ce fb 74 93 69 d5 22 d9 c5 b8 85 59 a7 b2 ba Data Ascii: nrGCv[9(#?11/4S"w]gi#C2nQSoSu\|GV\|E.mgq'{x6txXvWf&qMi\|n-\|9~SrR-l"^utQ^UwH4tmd_!C@ZMEVW<ti"Y
2024-09-27 16:53:18 UTC	1024	IN	Data Raw: 4f ff 00 2b 18 65 d2 a9 1d 7d b6 b6 6c b7 6e 92 81 1c 31 76 9a b5 3d d9 0c 73 9d d5 06 c9 35 16 bd a7 a6 13 34 ad 46 01 55 6d 4f 9b 7e 8c 4c 9a fd c0 2d ea 0b 98 ae 9a f2 c5 95 a4 94 7e 6c 12 0f 09 23 b4 1e cc 0a 36 63 56 b5 56 84 0d 9f 91 5a de cd e5 c8 be 4d d4 66 8f 09 39 57 a1 a6 1d e9 1a f4 34 c7 99 5d 47 52 c3 7f 77 03 db 82 b4 54 8d 75 31 af 77 53 89 6c ce 94 75 6d b3 1c de b7 09 f7 4d c9 de 47 aa b1 22 bd c8 bd df 0c 76 e2 a4 1e 76 5c 93 a9 55 67 ab 13 d8 49 c5 1c 4d 9e 29 35 c0 20 ae cb b8 8b 49 db 52 82 92 af 96 ed da a0 f6 8c 52 65 55 97 2d 9a e8 3c 52 48 18 14 2e 44 67 b9 57 21 86 cb 92 65 95 eb ce f3 4e 9a 4a a1 2b 11 3d 0d 32 af 51 89 68 68 27 6b 71 30 8e a1 d4 7c 2b fa f1 22 65 83 66 dd 6e 2d ca f9 aa b2 a9 1a 6b d0 e6 72 1d 4e 22 d5 2a ac Data Ascii: O+e}ln1v=s54FUmO~L-~l#6cVVZMf9W4]GRwTu1wSlumMG"vv\UgIM)5 IRReU-<RH.DgW!eNJ+=2Qhh'kq0\|+"efn-krN"*
2024-09-27 16:53:18 UTC	16384	IN	Data Raw: 4d d2 ba c1 cc 1a 83 ee c7 53 ee 1a 62 5e 60 7d da ef 8f db d8 48 d6 67 6a b4 9d a8 15 a1 86 d5 1e 87 26 01 d5 43 0a ae 22 ee d7 d0 e9 ed 78 52 f3 65 2b f1 21 ec 1b f6 e3 28 7b 58 1a 3b b8 63 5a f9 65 80 50 2b 92 a3 2d 74 f5 f6 8c 45 94 2f 78 eb ee a9 89 be 54 73 fd 43 23 76 9d c9 89 c7 d1 cb 4a 08 a5 5f 31 8f f5 58 78 0f db 85 c6 0f 39 ea 14 54 69 2c 0f 9c 5a 4d 5d 0b f6 03 97 65 31 b6 2b 41 86 5a ce 85 37 94 ed 71 c9 6f 2c 71 8d 4e ea 58 e9 cc 06 ea b9 ae 59 63 5a bd 5c e9 22 6a 36 2f dc 7f d6 fe 3f 1e d5 6c 79 30 6b 1d f2 de 20 1a 31 1c 8f 1c 94 14 d7 1e 80 d4 d4 28 74 1e dc 3c 78 9f 2f 14 2b da 11 97 f2 df 52 57 7f e5 37 bb 89 b6 31 59 4b 6e 96 b6 e6 53 47 a4 25 9b 5b 01 f2 ea 2e 72 ae 59 57 1d b8 ea 93 6d a3 8b 2d 5d 92 49 93 6d 2e a3 e3 7c 4e 6b c2 Data Ascii: MSb^`}Hgj&C"xRe+!({X;cZeP+-tE/xTsC#vJ_1Xx9Ti,ZM]e1+AZ7qo,qNXYcZ\"j6/?ly0k 1(t<x/+RW71YKnSG%[.rYWm-]Im.\|Nk
2024-09-27 16:53:18 UTC	1024	IN	Data Raw: 24 0b a7 d4 57 b8 56 98 69 9b 51 11 a4 52 45 47 41 d7 1c 5d ef 4f c4 fa 0f a2 fe ff 00 c3 fd 49 fb 5e c9 bc 6e 63 45 85 9c b7 3d 9a 91 4e 91 ef 63 45 1f 6e 38 95 5b d8 f6 af 9a 94 5e f3 48 bb ec be 90 df 48 56 4d d6 e9 6d d2 99 c1 07 8d fe 2c 7c 23 ef c6 d5 c1 e2 79 f9 7e a8 96 94 5f d4 bd 6c fc 27 8e ed 47 55 ad 92 19 bb 67 97 f3 64 fb 5b 21 f0 18 d9 52 a8 f3 72 f7 79 2f bb 0e e8 5f 7f bf 16 73 0a c2 03 c2 2b 80 06 1a 33 aa b4 e9 82 40 8b 71 0f e7 29 1d 08 ae 10 c5 45 09 a6 7d b8 10 0f 46 99 e1 88 8c cd f9 84 57 21 80 62 9c 02 01 3f 6e 00 3d 59 47 94 68 73 07 3c 39 13 2b bb bf a9 1c 7b 6a 91 ad e2 76 bf b9 5a 87 48 29 a1 48 ec 2e 72 af bb 18 df 35 6a 77 60 fa 76 4c 9a fc 2b cc 03 7b ea ed cb a6 98 76 d8 c4 67 2f cc 90 93 f7 01 8c 9f 73 e0 8e fa fd 1d 75 Data Ascii: $WViQREGA]OI^ncE=NcEn8[^HHVMm,\|#y~_l'GUgd[!Rry/_s+3@q)E}FW!b?n=YGhs<9+{jvZH)H.r5jw`vL+{vg/su
2024-09-27 16:53:18 UTC	1776	IN	Data Raw: a5 2b 56 3f 31 e9 8e 4b 33 54 7b fe 90 fe 2a 83 ed 18 c1 de 0a e4 27 42 99 3c 55 07 d9 8c fd 4d 47 c9 12 0c 80 64 15 9b da 70 72 d4 96 ce 42 58 e9 15 41 df 5c 1c 84 99 c2 10 6b 56 2b ed ad 30 3b 22 a4 ea 32 fc 92 57 df 89 56 42 e4 7a f3 48 28 18 e5 ec c3 1a 63 a9 76 55 68 ac 08 ed a8 c5 72 1c 8d 5b 6e 36 cf 29 d3 22 92 9d 40 39 fc 70 36 c6 99 31 ee 63 91 05 64 d4 bf a3 02 c8 0d 8c 3c d1 8c c1 2b da 0e 33 b5 e0 52 07 bf 6f 3b 76 b2 49 bc 6b 24 57 2a 41 03 a1 55 c6 94 bf ba da 1c 95 5d d2 d1 ec 6e 8a 35 74 93 55 71 d0 af 61 c7 a9 87 2f 3a 99 b4 14 d9 66 69 2d 01 8d e9 56 a5 7b 06 0b 02 0a 45 75 20 8c f8 eb a9 82 a5 4f fb 3d 98 c9 a7 b9 a2 21 f2 49 bc bb 07 cf 36 34 15 3f c5 4a 8c 65 db d6 72 79 1b 74 33 cb e7 91 19 c6 81 99 eb 4a e5 f8 71 eb d5 a9 92 58 c3 Data Ascii: +V?1K3T{'B<UMGdprBXA\kV+0;"2WVBzH(cvUhr[n6)"@9p61cd<+3Ro;vIk$WAU]n5tUqa/:fi-V{Eu O=!I64?Jeryt3JqX
2024-09-27 16:53:18 UTC	4510	IN	Data Raw: 03 7b be d2 97 76 8c 8a 6b 22 83 e5 b1 20 e7 dd f1 a6 34 c1 7e 2c ae 32 57 f6 a8 e5 80 10 e0 be 96 a2 ab 9c 83 74 26 98 f5 79 a6 88 88 08 08 1f cf 47 d0 42 2b 8f c4 48 07 55 69 d3 b3 21 d7 18 64 7a 1a 54 1b c8 ef 98 18 e3 92 8c 80 f4 af b4 1c e9 43 85 db 28 6c d9 ec 55 2e 59 24 8a 55 66 34 5c d2 b9 9f 76 3d 0a b2 60 6e 53 4d a5 97 55 33 a8 50 0f ef 00 4d 4f b8 75 ff 00 e3 2b e2 13 21 c1 08 92 54 8b 51 d4 ee 10 af 52 3b 35 57 bb 1a d9 c2 91 25 a9 70 b8 41 e4 85 45 a8 51 a4 05 ee 00 63 c7 76 f7 d9 b7 40 2d e4 0e 57 b4 52 b5 3e f3 ec a6 3a b1 dc 83 a1 a4 71 2d 68 3c 0b 97 c2 b4 c5 df 56 34 78 c6 26 97 ab 69 06 99 76 29 c2 53 10 2e a6 97 c5 06 97 b5 5e 9e 1a 01 dc 34 ff 00 4e 3c 4b 39 ca 74 35 a1 72 bb 88 bd a8 cb a0 15 c6 dd e6 3e 54 d0 ca 8f 56 88 b7 5b ae Data Ascii: {vk" 4~,2Wt&yGB+HUi!dzTC(lU.Y$Uf4\v=`nSMU3PMOu+!TQR;5W%pAEQcv@-WR>:q-h<V4x&iv)S.^4N<K9t5r>TV[

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:18 UTC	787	OUT	GET /workflows/application_for_membership HTTP/1.1 Host: ibew01.formstack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ibew01.formstack.com/workflows/application_for_membership Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=8757c147a41006b0de8b555e4f0513f2; fsBrowserSessionId=66f6e2f8035563.91401914; _dd_s=rum=0&expire=1727456895455
2024-09-27 16:53:19 UTC	691	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 27 Sep 2024 16:53:19 GMT P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Cache-Control: public Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 2816426ad1adbedbdd23d4cdf80c2de2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: DkfADTN8bet9U1eO_BfLifgYbbjnAR0arF9abzGlMM0L79NRo1AW4Q== X-Content-Type-Options: nosniff
2024-09-27 16:53:19 UTC	16384	IN	Data Raw: 37 65 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 0a 20 20 3c 74 69 74 6c 65 3e 41 70 70 6c 69 63 61 74 69 6f 6e 20 66 6f 72 20 4d 65 6d 62 65 72 73 68 69 70 20 2d 20 55 53 41 20 Data Ascii: 7e36<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <meta name="robots" content="noindex, nofollow"> <title>Application for Membership - USA

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:18 UTC	467	OUT	GET /live-form/analytics/3730845/firstView HTTP/1.1 Host: ibew01.formstack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fsBrowserSessionId=66f6e2f8035563.91401914; _dd_s=rum=0&expire=1727456895455
2024-09-27 16:53:19 UTC	797	IN	HTTP/1.1 404 Not Found Server: CloudFront Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Fri, 27 Sep 2024 16:53:19 GMT P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" X-Frame-Options: sameorigin Set-Cookie: PHPSESSID=2cb48483f25241a076303f6e1d439b5b; path=/live-form/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Cache: Error from cloudfront Via: 1.1 615f944336054ae07b8e7c415ddbad44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: rQlQYBsmSWFGFRXym1eukKzCPPPvQy1mAjvGhUImqFCJ6n0Feq8qnA== X-Content-Type-Options: nosniff
2024-09-27 16:53:19 UTC	15477	IN	Data Raw: 33 63 36 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3a 66 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 6f 72 6d 73 74 61 63 6b 2e 63 6f 6d 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 6f 72 6d 73 74 61 63 6b 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 66 6f 72 6d 73 74 61 63 6b 2e 63 6f 6d 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 Data Ascii: 3c6d<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en" xmlns:fs="http://www.formstack.com"><head> <title>Formstack</title> <link rel="preconnect" href="//static.formstack.com"> <base href="https://i
2024-09-27 16:53:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:20 UTC	405	OUT	GET /files.formstack.com/public/858050/531988_tmpl_head_5f4014c04316a. HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:53:20 UTC	490	IN	HTTP/1.1 200 OK x-amz-id-2: 3DSWVtEJ9LCMT0p+sEvMyrRU2vhKyxkcmlHQcMDPMObRMyIKpU2kt7k4KiM3OS0N7szsngL3Xeo= x-amz-request-id: YSW46Q40SZVQQCY4 Date: Fri, 27 Sep 2024 16:53:21 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 21 Aug 2020 18:38:57 GMT ETag: "7d76d2cae1c735be6bb5c8bf150478a3" X-Robots-Tag: noindex x-amz-version-id: AYucccVNOBAs56eksy2KHLRMPdJnTcpr Accept-Ranges: bytes Content-Type: image/jpeg Server: AmazonS3 Content-Length: 66929 Connection: close
2024-09-27 16:53:20 UTC	15803	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 85 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-09-27 16:53:20 UTC	16384	IN	Data Raw: 4f 1f 81 aa c9 e2 18 f5 32 6b fb f8 36 e4 83 cc 4e 3b ab ea af 77 7b 59 48 48 91 03 07 69 34 32 b6 98 95 bc d4 a5 75 3a 85 a6 1e 15 13 e2 4e 56 dc 78 15 5d da d3 66 e7 3b 1c 91 73 18 12 da 2b 49 56 cf 69 e4 b6 e6 b7 10 4f e6 bc 00 4e d5 35 0c d1 a9 63 41 19 2e 17 ae 78 b7 5e 2f dd fe 84 2b 4a d4 cf 65 3c 93 82 6f a3 8d f2 b1 aa 27 cf 6d dc d0 1f 26 78 c1 a6 a5 27 a5 3f 12 1c d7 dd 8a d2 ca 50 6b 57 0c b2 dd 5b db ee 36 c1 58 80 f4 ac 52 8c e9 5f d4 71 9e c5 ee 09 b2 8a 58 4c b6 f2 8d 32 44 73 1e c3 dd ec c3 63 44 93 19 ae 33 2c 41 88 66 70 8a 42 4a 0c 22 8c f7 94 26 9d e2 e5 69 4a 90 6b ec 23 1b d7 63 30 0b a9 ec 1f 1c 31 11 4c 4d 4e 98 02 0d 2b 83 ee 6d 26 c7 0c 6e 75 1b 72 63 34 ec 07 a5 71 8d d1 ba 66 85 b2 12 d6 8b a7 b4 9a 7d b8 c4 68 31 10 6d 20 d6 Data Ascii: O2k6N;w{YHHi42u:NVx]f;s+IViON5cA.x^/+Je<o'm&x'?PkW[6XR_qXL2DscD3,AfpBJ"&iJk#c01LMN+m&nurc4qf}h1m
2024-09-27 16:53:20 UTC	1024	IN	Data Raw: 37 f9 2e 26 dd 6e a5 b8 53 1c b2 48 ec e8 7b 2a 6b 8d 6a e4 d2 d5 84 08 88 2d 4f 75 7f 46 2e cc cf 12 52 73 2c 7a bb 08 26 b4 a7 f4 d7 11 2c db 82 26 58 f1 e4 bd b7 9e f0 cd f4 d6 96 c5 52 46 d0 f2 b1 76 56 60 11 50 74 1a 3c 44 9c b0 e5 99 bc 4b a0 1c 56 39 01 d2 1c 29 06 87 e5 60 0f 6f ca 73 c0 9c 87 16 69 9b 25 b7 2b e7 88 2e 37 ed c0 c5 b1 44 f5 10 26 95 d4 ca 72 44 03 a2 8e f2 4e 33 f4 ea 9c 9a 29 ea 1b e5 9c 93 6f da 36 c8 b6 4e 39 a2 11 a4 a3 cb 16 4b 12 0f 99 50 fe f3 1f 9d f1 8e 5c 93 a2 1d 6b 0c cd ed 09 8e 5f 07 45 a8 a7 5e bd 3e cc 63 75 2b ef 35 4f 52 eb b3 6c 87 7c b8 db 36 e5 ba 96 c2 69 a4 65 86 ee 03 47 40 f1 31 6a 78 97 e6 d1 a7 af 4c 73 76 b6 ff 00 ba d7 42 f3 fc 32 6c 5b 7f 10 bc b3 b4 8e 15 ba 55 31 05 2c f1 46 10 19 14 0f cc 00 c8 e6 Data Ascii: 7.&nSH{*kj-OuF.Rs,z&,&XRFvV`Pt<DKV9)`osi%+.7D&rDN3)o6N9KP\k_E^>cu+5ORl\|6ieG@1jxLsvB2l[U1,F
2024-09-27 16:53:20 UTC	16384	IN	Data Raw: 78 6d d2 ea da d3 6d 7b 5b 87 8c b0 95 4b 4e 34 a1 03 23 4a 61 d1 27 ac 31 5d b5 a4 a3 e8 9d 92 d5 6d 36 5b 0b 55 c9 6d ed a2 88 7b 91 02 fe ac 71 59 cb 67 65 54 24 7b 2e f5 b3 44 69 2d fd bc 64 75 0d 2a 2f e9 38 15 2d e0 0e f5 f1 15 6b ba ed 77 6f a2 d6 f2 0b 87 a1 3a 62 91 1c d0 75 c9 49 c0 ea d6 e8 15 93 d9 82 f9 97 10 b3 e4 db 53 5a 49 2b 59 5e c6 43 d8 ee 90 05 fa 8b 69 01 a8 78 9c e6 3b 8d 0e 63 0e 97 e2 c5 7a 72 40 2b 8e 47 79 b3 ec 3f c8 b9 35 a1 bd dd a7 41 63 64 43 83 16 e8 f2 fe 58 0a e4 78 1c 83 59 15 97 c2 2a 46 a1 8d 15 25 cd 76 fe c6 6e d0 a1 ef fd ca 6f 2b e3 fc a2 3d 9e da c3 75 dd c4 17 6f 34 76 93 3c 77 32 7d 12 6d e2 2d 30 24 d1 91 90 9e 64 d0 f3 3a fc d4 ec 38 da b6 ac ca 5a 19 5a b6 88 6f 50 89 e1 5b d0 6b 3d b7 94 7d 2a f1 5d d9 c4 Data Ascii: xmm{[KN4#Ja'1]m6[Um{qYgeT${.Di-du/8-kwo:buISZI+Y^Cix;czr@+Gy?5AcdCXxYF%vno+=uo4v<w2}m-0$d:8ZZoP[k=}*]
2024-09-27 16:53:20 UTC	1024	IN	Data Raw: e0 da 49 1b 90 7c 32 06 3d be 16 aa 9f 0e 1a 7d 6b b8 9a e8 f6 20 6e db 5f 23 ff 00 5d 76 2e 29 ea 25 f7 9b c7 6c 90 ae d5 22 91 0d b5 f3 44 bf 90 8f 27 ca ae f9 23 16 f9 7e 35 c6 89 a8 6e bb 99 b4 e5 2b 6c 4d e5 fb ff 00 d4 5c da 7a 7f b6 cf b7 ed 7b dd e4 22 c7 76 be 84 32 c1 0c 60 b3 db ed 51 3a eb 6a 55 c2 3b 76 fe 82 ab af db ef 0b 3e 9f 6f b8 1b bf 6d 52 ee 9b 8f 16 f4 b3 ea 16 fa f7 6c a3 ef 9b ab 69 76 80 69 d7 25 bc 52 11 51 14 11 76 77 d3 02 7b d8 4d 6d 51 ae 21 b9 73 fb 1b 5e 47 b9 f0 9d e1 a4 e2 bc 7e 66 11 5b 6e 67 cd 12 c2 2a 47 96 29 93 69 5a d1 4a f5 18 76 55 70 9e ec 2a ec a5 ad 91 6d 5f 5f 39 96 d0 2e 57 92 71 40 45 8c a9 6d 7b 71 6b 36 94 8e 77 40 ea 8d a8 48 a1 8a 90 69 ab 19 fa 15 7b 33 45 9e cb 74 3c 3f f7 47 b1 69 cf 62 bb d7 dd e6 Data Ascii: I\|2=}k n_#]v.)%l"D'#~5n+lM\z{"v2`Q:jU;v>omRlivi%RQvw{MmQ!s^G~f[ngG)iZJvUpm__9.Wq@Em{qk6w@Hi{3Et<?Gib
2024-09-27 16:53:20 UTC	11800	IN	Data Raw: e0 87 6b 16 c8 43 6a 9d a4 94 8e a0 aa aa 81 97 c7 15 51 36 4c e3 1b 70 5b b8 ae 59 8f 9a 2a 42 f6 0c b0 ae e1 0e a8 b7 5c 5f c8 aa 75 35 57 a0 ad 0e 39 2f 62 d2 28 de a5 ca d2 71 f1 a4 7c f3 20 f6 f4 38 cf 03 f7 cb bf c2 63 d2 da bd 4d 7e 18 ef 93 9e 06 be 8b 41 57 27 2a d6 98 18 d5 46 a7 90 89 43 03 9a d0 8f 86 17 41 31 b9 a6 77 24 b9 a9 39 93 80 04 45 1c b3 38 48 d4 b3 1e c1 86 22 64 56 c2 06 fc cf ef 47 51 dd 8f 47 b5 c7 55 ef 3d cc 32 b7 b0 e3 b7 84 d7 30 7a e3 af 25 f4 31 aa d4 bc ec 1c cb 5e da 90 1a 6b 81 56 36 43 dc 05 01 f8 e3 c6 c9 76 99 e8 51 26 8f 6f 37 4b 7b af 16 82 8f de 31 85 b2 49 aa a8 32 7b a8 62 05 a4 60 ab ed c6 5b 8c 56 d3 78 2f e5 68 d3 24 39 0f 77 b7 05 d4 20 ab 90 af 1f 5f 2c cb 6e e6 ad 03 e8 60 05 72 ae 58 c6 ef a9 49 6a 3d c9 Data Ascii: kCjQ6Lp[YB\_u5W9/b(q\| 8cM~AW'FCA1w$9E8H"dVGQGU=20z%1^kV6CvQ&o7K{1I2{b`[Vx/h$9w _,n`rXIj=
2024-09-27 16:53:20 UTC	4510	IN	Data Raw: 03 7b be d2 97 76 8c 8a 6b 22 83 e5 b1 20 e7 dd f1 a6 34 c1 7e 2c ae 32 57 f6 a8 e5 80 10 e0 be 96 a2 ab 9c 83 74 26 98 f5 79 a6 88 88 08 08 1f cf 47 d0 42 2b 8f c4 48 07 55 69 d3 b3 21 d7 18 64 7a 1a 54 1b c8 ef 98 18 e3 92 8c 80 f4 af b4 1c e9 43 85 db 28 6c d9 ec 55 2e 59 24 8a 55 66 34 5c d2 b9 9f 76 3d 0a b2 60 6e 53 4d a5 97 55 33 a8 50 0f ef 00 4d 4f b8 75 ff 00 e3 2b e2 13 21 c1 08 92 54 8b 51 d4 ee 10 af 52 3b 35 57 bb 1a d9 c2 91 25 a9 70 b8 41 e4 85 45 a8 51 a4 05 ee 00 63 c7 76 f7 d9 b7 40 2d e4 0e 57 b4 52 b5 3e f3 ec a6 3a b1 dc 83 a1 a4 71 2d 68 3c 0b 97 c2 b4 c5 df 56 34 78 c6 26 97 ab 69 06 99 76 29 c2 53 10 2e a6 97 c5 06 97 b5 5e 9e 1a 01 dc 34 ff 00 4e 3c 4b 39 ca 74 35 a1 72 bb 88 bd a8 cb a0 15 c6 dd e6 3e 54 d0 ca 8f 56 88 b7 5b ae Data Ascii: {vk" 4~,2Wt&yGB+HUi!dzTC(lU.Y$Uf4\v=`nSMU3PMOu+!TQR;5W%pAEQcv@-WR>:q-h<V4x&iv)S.^4N<K9t5r>TV[

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:20 UTC	426	OUT	GET /forms/forms-renderer/builds/public/df-26.js?chunkhash=24fed29d1095b76ff5d3&id=5034 HTTP/1.1 Host: static.formstack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:53:21 UTC	626	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript; charset=utf-8 Content-Length: 8633 Connection: close Date: Fri, 27 Sep 2024 16:53:21 GMT Last-Modified: Wed, 25 Sep 2024 18:51:23 GMT Cache-Control: public, s-maxage=86400 Accept-Ranges: bytes ETag: "66f45bab-21b9" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 db1cc9ceb7681bf2a56c0f22acac3a36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: 0k6VR29sHOM52P70vNGDUKSxaC1R8aillc5avqOwVyXRfRDbo7wYJg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-09-27 16:53:21 UTC	6396	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 76 34 6d 73 57 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 73 65 6c 66 2e 76 34 6d 73 57 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 33 34 5d 2c 7b 33 32 39 35 38 3a 28 65 2c 74 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 61 3d 74 2e 77 69 64 74 68 3f 53 Data Ascii: "use strict";(self.v4msWebpackJsonp=self.v4msWebpackJsonp\|\|[]).push([[5034],{32958:(e,t)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){return function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},a=t.width?S
2024-09-27 16:53:21 UTC	2237	IN	Data Raw: 61 72 73 65 50 61 74 74 65 72 6e 3a 2f 5c 64 2b 2f 69 2c 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7d 7d 29 2c 65 72 61 3a 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 73 3a 7b 6e 61 72 72 6f 77 3a 2f 5e 28 62 7c 61 29 2f 69 2c 61 62 62 72 65 76 69 61 74 65 64 3a 2f 5e 28 62 5c 2e 3f 5c 73 3f 63 5c 2e 3f 7c 62 5c 2e 3f 5c 73 3f 63 5c 2e 3f 5c 73 3f 65 5c 2e 3f 7c 61 5c 2e 3f 5c 73 3f 64 5c 2e 3f 7c 63 5c 2e 3f 5c 73 3f 65 5c 2e 3f 29 2f 69 2c 77 69 64 65 3a 2f 5e 28 62 65 66 6f 72 65 20 63 68 72 69 73 74 7c 62 65 66 6f 72 65 20 63 6f 6d 6d 6f 6e 20 65 72 61 7c 61 6e 6e 6f 20 64 6f 6d 69 6e 69 7c 63 6f 6d 6d 6f 6e 20 65 72 Data Ascii: arsePattern:/\d+/i,valueCallback:function(e){return parseInt(e,10)}}),era:(0,r.default)({matchPatterns:{narrow:/^(b\|a)/i,abbreviated:/^(b\.?\s?c\.?\|b\.?\s?c\.?\s?e\.?\|a\.?\s?d\.?\|c\.?\s?e\.?)/i,wide:/^(before christ\|before common era\|anno domini\|common er

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:21 UTC	606	OUT	GET /images/favicon/favicon.ico HTTP/1.1 Host: www.formstack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ibew01.formstack.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:53:21 UTC	577	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: image/x-icon Content-Length: 2614 Connection: close Date: Fri, 27 Sep 2024 16:53:21 GMT Last-Modified: Wed, 25 Sep 2024 18:50:09 GMT ETag: "66f45b61-a36" Cache-Control: public, s-maxage=86400 Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 3072267d18c4d0ed9e535752800364e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: j6MPSCRglF1gqicSiNYH2x_gzeYB4NympIp8TuXjeEpsmiXJG4SOAg== X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-09-27 16:53:21 UTC	2614	IN	Data Raw: 00 00 01 00 03 00 30 30 10 00 01 00 04 00 68 06 00 00 36 00 00 00 20 20 10 00 01 00 04 00 e8 02 00 00 9e 06 00 00 10 10 02 00 01 00 01 00 b0 00 00 00 86 09 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 04 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 2b 23 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 02 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 Data Ascii: 00h6 (0`+#"""""""""""""""""""""""""""""""""""""""""""" """""""""""""""""""""""""""""""""""""""""""""""""

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:22 UTC	367	OUT	GET /images/favicon/favicon.ico HTTP/1.1 Host: www.formstack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:53:23 UTC	588	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: image/x-icon Content-Length: 2614 Connection: close Date: Fri, 27 Sep 2024 04:26:54 GMT Last-Modified: Wed, 25 Sep 2024 18:50:09 GMT Cache-Control: public, s-maxage=86400 Accept-Ranges: bytes ETag: "66f45b61-a36" X-Cache: Hit from cloudfront Via: 1.1 615f944336054ae07b8e7c415ddbad44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: fYJ_HZ_UYApUlnG16FaqJ6Uju51pw1VYmWwzSJ6ycHxcqjKpCYc3jA== Age: 44789 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
2024-09-27 16:53:23 UTC	2614	IN	Data Raw: 00 00 01 00 03 00 30 30 10 00 01 00 04 00 68 06 00 00 36 00 00 00 20 20 10 00 01 00 04 00 e8 02 00 00 9e 06 00 00 10 10 02 00 01 00 01 00 b0 00 00 00 86 09 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 04 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 2b 23 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 02 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 Data Ascii: 00h6 (0`+#"""""""""""""""""""""""""""""""""""""""""""" """""""""""""""""""""""""""""""""""""""""""""""""

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:24 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-09-27 16:53:24 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:53:28 UTC	563	OUT	GET /utilnav/9.2/utilitynav.css HTTP/1.1 Host: prod.adobeccstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://acrobat.adobe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:53:28 UTC	599	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 170927 Connection: close Last-Modified: Tue, 10 May 2022 06:05:18 GMT x-amz-storage-class: INTELLIGENT_TIERING Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 27 Sep 2024 07:30:11 GMT Cache-Control: max-age=43200 ETag: "f1502fac113b15d77b859c2478d9b136" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 92db4c522f37fa3dd780f6fa204d8256.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: FHZB1_HLBfVQZucJou0E_kZi6kNRQI4GbwRfPpDBz14e2LdxLpnvnA== Age: 33798 Cross-Origin-Resource-Policy: cross-origin
2024-09-27 16:53:28 UTC	8949	IN	Data Raw: 2f 2a 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 74 6f 20 79 6f 75 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 0a 20 2a 20 20 6f Data Ascii: /* * Copyright 2018 Adobe Systems Incorporated. All rights reserved. * This file is licensed to you under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. You may obtain a copy * o
2024-09-27 16:53:28 UTC	16384	IN	Data Raw: 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 33 20 65 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 33 Data Ascii: rmal;letter-spacing:0;text-transform:none;margin-bottom:8px;margin-top:8px}.utilnav-container .spectrum-Heading3 em{font-size:22px;font-weight:700;line-height:1.3;font-style:italic;letter-spacing:0;text-transform:none}.utilnav-container .spectrum-Heading3
2024-09-27 16:53:28 UTC	16384	IN	Data Raw: 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 41 72 74 69 63 6c 65 20 2e 73 70 65 63 74 72 75 6d 2d 44 65 74 61 69 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 36 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 41 72 74 69 63 6c 65 20 2e 73 70 65 63 74 72 75 6d 2d 44 65 74 61 69 6c 20 65 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b Data Ascii: er .spectrum-Article .spectrum-Detail{font-size:11px;font-weight:400;line-height:1.5;font-style:normal;letter-spacing:.06em;text-transform:uppercase;margin-bottom:16px;margin-top:8px}.utilnav-container .spectrum-Article .spectrum-Detail em{font-size:11px;
2024-09-27 16:53:28 UTC	3339	IN	Data Raw: 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 36 20 65 6d 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 2d 2d 73 75 62 74 69 74 6c 65 32 20 65 6d 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 36 20 65 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d Data Ascii: ectrum-Heading6 em,.utilnav-container .spectrum:lang(zh) .spectrum-Heading--subtitle2 em,.utilnav-container .spectrum:lang(zh) .spectrum-Heading6 em{font-size:14px;font-weight:800;line-height:1.5;font-style:normal;letter-spacing:.05em;text-transform:none}
2024-09-27 16:53:28 UTC	16384	IN	Data Raw: 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 65 74 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 31 2d 2d 71 75 69 65 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 Data Ascii: Heading1--quiet,.utilnav-container .spectrum:lang(zh) .spectrum-Heading1--quiet{font-size:32px;font-weight:300;line-height:1.5;font-style:normal;letter-spacing:.05em;text-transform:none;margin-bottom:8px;margin-top:8px}.utilnav-container .spectrum:lang(ja
2024-09-27 16:53:28 UTC	1514	IN	Data Raw: 69 6e 67 31 7b 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 41 72 74 69 63 6c 65 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 32 7b 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 41 72 74 69 63 6c 65 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 33 7b 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 41 72 74 69 63 6c 65 20 2e 73 70 65 63 74 72 75 Data Ascii: ing1{color:#2c2c2c}.utilnav-container .spectrum--light .spectrum-Article .spectrum-Heading2{color:#2c2c2c}.utilnav-container .spectrum--light .spectrum-Article .spectrum-Heading3{color:#2c2c2c}.utilnav-container .spectrum--light .spectrum-Article .spectru
2024-09-27 16:53:28 UTC	16384	IN	Data Raw: 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 32 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6b 6f 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 32 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 7a 68 29 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 32 7b 63 6f 6c 6f 72 3a 23 34 62 34 62 34 62 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 3a 6c 61 6e 67 28 6a 61 29 20 2e 73 70 65 63 74 72 75 6d 2d Data Ascii: spectrum:lang(ja) .spectrum-Body2,.utilnav-container .spectrum--light .spectrum:lang(ko) .spectrum-Body2,.utilnav-container .spectrum--light .spectrum:lang(zh) .spectrum-Body2{color:#4b4b4b}.utilnav-container .spectrum--light .spectrum:lang(ja) .spectrum-
2024-09-27 16:53:28 UTC	16384	IN	Data Raw: 42 6f 64 79 2d 2d 6c 61 72 67 65 7b 63 6f 6c 6f 72 3a 23 63 64 63 64 63 64 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 2d 2d 73 6d 61 6c 6c 7b 63 6f 6c 6f 72 3a 23 63 64 63 64 63 64 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 42 6f 64 79 2d 2d 73 65 63 6f 6e 64 61 72 79 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 64 61 72 6b 20 2e 73 70 65 63 74 72 75 6d 2d 48 65 61 64 69 6e 67 2d 2d 64 69 73 70 6c 61 79 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 Data Ascii: Body--large{color:#cdcdcd}.utilnav-container .spectrum--dark .spectrum-Body--small{color:#cdcdcd}.utilnav-container .spectrum--dark .spectrum-Body--secondary{color:#999}.utilnav-container .spectrum--dark .spectrum-Heading--display{color:#fff}.utilnav-cont
2024-09-27 16:53:28 UTC	16384	IN	Data Raw: 54 6f 6f 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 2e 66 6f 63 75 73 2d 72 69 6e 67 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 23 31 34 37 33 65 36 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 42 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 43 6c 65 61 72 42 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f Data Ascii: Tool{margin-left:8px}.utilnav-container .spectrum--light .spectrum-Button.focus-ring{box-shadow:0 0 0 1px #1473e6}.utilnav-container .spectrum--light .spectrum-Button:active{box-shadow:none}.utilnav-container .spectrum--light .spectrum-ClearButton{backgro
2024-09-27 16:53:28 UTC	14808	IN	Data Raw: 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 2e 66 6f 63 75 73 2d 72 69 6e 67 2e 69 73 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 2e 69 73 2d 66 6f 63 75 73 65 64 2e 69 73 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 32 63 32 63 32 63 7d 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 74 20 2e 73 70 65 63 74 72 75 6d 2d 46 69 65 6c 64 42 75 74 74 6f 6e 2e 69 73 2d 73 65 6c 65 63 74 65 64 2c 2e 75 74 69 6c 6e 61 76 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 70 65 63 74 72 75 6d 2d 2d 6c 69 67 68 Data Ascii: ight .spectrum-FieldButton.focus-ring.is-placeholder,.utilnav-container .spectrum--light .spectrum-FieldButton.is-focused.is-placeholder{color:#2c2c2c}.utilnav-container .spectrum--light .spectrum-FieldButton.is-selected,.utilnav-container .spectrum--ligh