Edit tour

Windows Analysis Report
http://mailto:noreply-eversheds-sutherland@highq.com

Overview

General Information

Sample URL:	http://mailto:noreply-eversheds-sutherland@highq.com
Analysis ID:	1523272
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2304,i,10470009356049978610,4068125326516324767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mailto:noreply-eversheds-sutherland@highq.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=098a80e6-f42b-4be9-aaa3-f8f8d5f3dcfc&batch_time=1727776290947 HTTP/1.1Host: rum.browser-intake-datadoghq.comConnection: keep-aliveContent-Length: 15803sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://legal.thomsonreuters.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://legal.thomsonreuters.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 01 Oct 2024 09:51:45 GMTContent-Type: application/jsonContent-Length: 42Connection: closex-amzn-RequestId: e74e3459-7d4e-4b58-8a6a-f45339a7dd0ax-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: e9vnuF8OoAMEKpQ=X-Amzn-Trace-Id: Root=1-66fbc631-52c9c50951f0c775335eb65b
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 01 Oct 2024 09:51:49 GMTContent-Type: application/jsonContent-Length: 42Connection: closex-amzn-RequestId: 9855e6c9-234d-4050-9cb0-8de56e7d1f26x-amzn-ErrorType: MissingAuthenticationTokenExceptionx-amz-apigw-id: e9voXGeToAMEdrA=X-Amzn-Trace-Id: Root=1-66fbc635-133b25d32ac08db10cd34ed6

Source: chromecache_401.2.dr, chromecache_535.2.dr, chromecache_317.2.dr, chromecache_250.2.dr, chromecache_457.2.dr	String found in binary or memory: http://cdn.appdynamics.com
Source: chromecache_287.2.dr, chromecache_359.2.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_401.2.dr, chromecache_250.2.dr	String found in binary or memory: http://col.eum-appdynamics.com
Source: chromecache_353.2.dr, chromecache_518.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_372.2.dr, chromecache_404.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: http://fra-col.eum-appdynamics.com
Source: chromecache_353.2.dr, chromecache_324.2.dr, chromecache_543.2.dr, chromecache_518.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_303.2.dr, chromecache_375.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_303.2.dr, chromecache_375.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_251.2.dr, chromecache_340.2.dr	String found in binary or memory: http://pellepim.bitbucket.org/jstz/
Source: chromecache_268.2.dr, chromecache_535.2.dr, chromecache_301.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_317.2.dr	String found in binary or memory: http://schema.org/ImageObject
Source: chromecache_268.2.dr, chromecache_301.2.dr	String found in binary or memory: http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint
Source: chromecache_268.2.dr, chromecache_301.2.dr	String found in binary or memory: http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint1
Source: chromecache_268.2.dr, chromecache_301.2.dr	String found in binary or memory: http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint2
Source: chromecache_303.2.dr, chromecache_375.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_514.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_287.2.dr, chromecache_359.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_527.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_313.2.dr, chromecache_482.2.dr	String found in binary or memory: https://aetna.schemaapp.com/
Source: chromecache_358.2.dr, chromecache_256.2.dr, chromecache_324.2.dr, chromecache_543.2.dr	String found in binary or memory: https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/head.js
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/main.css
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/main.js
Source: chromecache_409.2.dr, chromecache_394.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EP8757b503532a44a68eee17773f6f10a0/AppMeasurement_Module_Audi
Source: chromecache_259.2.dr, chromecache_430.2.dr	String found in binary or memory: https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/EX7f8dfe07dfd547b7a9f546be5b8b3b1
Source: chromecache_295.2.dr	String found in binary or memory: https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC0202c5abf5c84397b72147008aebed6
Source: chromecache_468.2.dr	String found in binary or memory: https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1043e003412140f8ab9e58fbe496aab
Source: chromecache_491.2.dr	String found in binary or memory: https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1127c9543dd5441c840a88ac5e98d26
Source: chromecache_539.2.dr	String found in binary or memory: https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCcd58eb141ac949fe96b1930007a2066
Source: chromecache_492.2.dr	String found in binary or memory: https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCd37f24b9aa7043f1a5b88b1d4cf80db
Source: chromecache_453.2.dr	String found in binary or memory: https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCfe32cc4532d941ffa076b0d824f6f53
Source: chromecache_281.2.dr, chromecache_506.2.dr	String found in binary or memory: https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/launch-f0760189cfc5.js
Source: chromecache_251.2.dr, chromecache_340.2.dr	String found in binary or memory: https://bitbucket.org/pellepim/jstimezonedetect/src/default/LICENCE.txt
Source: chromecache_499.2.dr, chromecache_527.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_401.2.dr, chromecache_535.2.dr, chromecache_317.2.dr, chromecache_250.2.dr, chromecache_457.2.dr	String found in binary or memory: https://cdn.appdynamics.com
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://cdn.schemaapp.com/javascript/highlight.js
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://cdn.schemaapp.com/javascript/schemaFunctions.min.js
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_381.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NjhkNmNkNGE
Source: chromecache_401.2.dr, chromecache_250.2.dr	String found in binary or memory: https://col.eum-appdynamics.com
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://community.thomsonreuters.com/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://community.thomsonreuters.com/developers/
Source: chromecache_355.2.dr, chromecache_524.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_399.2.dr, chromecache_468.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_355.2.dr, chromecache_524.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_322.2.dr, chromecache_349.2.dr	String found in binary or memory: https://cookiepedia.co.uk/giving-consent-to-cookies
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://cs.thomsonreuters.com/community/
Source: chromecache_413.2.dr, chromecache_545.2.dr	String found in binary or memory: https://d41.co/
Source: chromecache_313.2.dr, chromecache_482.2.dr	String found in binary or memory: https://data.schemaapp.com/
Source: chromecache_313.2.dr, chromecache_482.2.dr	String found in binary or memory: https://datatst.schemaapp.com/
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_311.2.dr, chromecache_265.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/home
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/industry/Legal
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/industry/Risk%20&%20Fraud
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/industry/Tax%20&%20Accounting
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/industry/Trade%20&%20Supply
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/use-case-library?industry=Legal
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/use-case-library?industry=Risk%20and%20Fraud
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/use-case-library?industry=Tax%20and%20Accounting
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://developers.thomsonreuters.com/pages/use-case-library?industry=Trade%20and%20Supply
Source: chromecache_326.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=68d6cd4a-87cc-4465-9311-5feb95c2e
Source: chromecache_518.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_372.2.dr, chromecache_404.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_380.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Source
Source: chromecache_288.2.dr, chromecache_307.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3w8aZQ.woff2)
Source: chromecache_288.2.dr, chromecache_307.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wAaZfrc.woff2)
Source: chromecache_288.2.dr, chromecache_307.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wEaZfrc.woff2)
Source: chromecache_288.2.dr, chromecache_307.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wIaZfrc.woff2)
Source: chromecache_288.2.dr, chromecache_307.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wMaZfrc.woff2)
Source: chromecache_288.2.dr, chromecache_307.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wsaZfrc.woff2)
Source: chromecache_288.2.dr, chromecache_307.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wwaZfrc.woff2)
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://fra-col.eum-appdynamics.com
Source: chromecache_324.2.dr, chromecache_543.2.dr	String found in binary or memory: https://github.com/caolan/async
Source: chromecache_251.2.dr, chromecache_340.2.dr	String found in binary or memory: https://github.com/dbushell/Pikaday
Source: chromecache_251.2.dr, chromecache_340.2.dr	String found in binary or memory: https://github.com/jquery/globalize
Source: chromecache_324.2.dr, chromecache_543.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_398.2.dr, chromecache_470.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_527.2.dr	String found in binary or memory: https://google.com
Source: chromecache_527.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_325.2.dr	String found in binary or memory: https://gs.mountain.com/gs
Source: chromecache_381.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_285.2.dr, chromecache_453.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: chromecache_381.2.dr, chromecache_485.2.dr, chromecache_326.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_285.2.dr, chromecache_453.2.dr	String found in binary or memory: https://js.adsrvr.org/up_loader.1.1.0.js
Source: chromecache_317.2.dr	String found in binary or memory: https://knowledge.highq.com/help/pages/contact-support
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/
Source: chromecache_535.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/content/dam/ewp-m/images/legal/en/artworked-images/tr4522189-03e-25
Source: chromecache_317.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/content/dam/ue/en-us/images/og-image/234509.png.transform/rect-768/
Source: chromecache_457.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/content/dam/ue/en-us/images/og-image/universal-og.png.transform/rec
Source: chromecache_535.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en-us/products/practical-law/trial-overview
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en-us/products/westlaw-edge/trial-overview
Source: chromecache_457.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/contact-sales
Source: chromecache_535.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products
Source: chromecache_317.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/document-intelligence
Source: chromecache_317.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/highq
Source: chromecache_317.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/highq/contact-sales
Source: chromecache_317.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/highq/features
Source: chromecache_535.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/highq/request-demo
Source: chromecache_535.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/highq/request-demo/thank-you
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/law-books#featured
Source: chromecache_317.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/legal-tracker
Source: chromecache_317.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/products/practical-law
Source: chromecache_457.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/search-results
Source: chromecache_457.2.dr	String found in binary or memory: https://legal.thomsonreuters.com/en/support
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://legalsolutions.thomsonreuters.co.uk/en/customer-support.html
Source: chromecache_514.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_514.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_514.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_527.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_499.2.dr, chromecache_527.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_381.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=68d6cd4a-87cc-4465-9311-5feb95c2e6e0&gd
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://platform.cloud.coveo.com/rest/search
Source: chromecache_291.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_317.2.dr	String found in binary or memory: https://play.vidyard.com/VYqeqLSEFR8hPVUWsJYHXV.jpg
Source: chromecache_251.2.dr, chromecache_340.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_291.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_300.2.dr, chromecache_376.2.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_326.2.dr	String found in binary or memory: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr
Source: chromecache_300.2.dr, chromecache_376.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: chromecache_300.2.dr, chromecache_376.2.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.legal.thomsonreuters.com/law-products/New-Products-and-Editions/c/17300
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.legal.thomsonreuters.com/law-products/Site-Search/Law-Books/c/13002
Source: chromecache_457.2.dr	String found in binary or memory: https://store.legal.thomsonreuters.com/law-products/Site-Search/Law-Books/c/13002?page=1&n=%3bq1%3dN
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.legal.thomsonreuters.com/law-products/Site-Search/Law-Books/c/13002?slink=true
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.tax.thomsonreuters.com/
Source: chromecache_457.2.dr	String found in binary or memory: https://store.tax.thomsonreuters.com/accounting/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.tax.thomsonreuters.com/accounting/Brand/c/3000
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.tax.thomsonreuters.com/accounting/Organization-Type/c/1000
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.tax.thomsonreuters.com/accounting/Practice-Area/c/2000
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.tax.thomsonreuters.com/accounting/Tax/1040-Quickfinder-Handbook/p/100200040
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://store.tax.thomsonreuters.com/accounting/quickfinder-proview-bundles
Source: chromecache_291.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/community/checkpoint
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/community/onesource
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/contact
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/insights
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/international-trade-supply-chain
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/international-trade-supply-chain/customs-duties-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/international-trade-supply-chain/customs-duties-management/customs
Source: chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/international-trade-supply-chain/global-trade-compliance-managemen
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/international-trade-supply-chain/product-service-classification
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/international-trade-supply-chain/product-service-classification/ha
Source: chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/international-trade-supply-chain/supply-chain-procurement-technolo
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/onesource/global-trade-management/ftz
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/onesource/indirect-tax/compliance
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/products
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/products/checkpoint-edge
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/products/checkpoint-edge/trial
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/products/sureprep-1040scan
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/products/ultratax-cs
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting/accounting-financial-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting/audit-workflow
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting/disclosure
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting/engagement-compilation-review
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting/guidance-standards
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting/internal-audit-controls
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting/quality-control
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/data-document-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/data-document-management/certificate-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/data-document-management/data-management-mining
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/data-document-management/document-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/data-document-management/document-storage-organizat
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/estate-planning
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/estate-planning/estate-planning-taxation
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/estate-planning/wealth-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/financial-planning-analysis
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/financial-planning-analysis/financial-reporting
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/payroll-compensation-pension-benefits
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/payroll-compensation-pension-benefits/healthcare-pl
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/payroll-compensation-pension-benefits/payroll-workf
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/billing-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/client-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/cost-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/practice-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/workflow-management
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/professional-development-education
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/professional-development-education/product-training
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/professional-development-education/professional-dev
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/financial-close
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/fixed-asset-depreciation
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/income-tax-compliance
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/sales-use-tax
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/tax-automation
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/tax-compliance
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/tax-planning
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/tax-preparation
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/tax-tools
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/transfer-pricing
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/credits-incentives
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/federal-tax
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/international-tax
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/partnership-taxation
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/research-powered-by-ai
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/specialized-industry-taxation
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/state-local-tax
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/tax-laws-regulations
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/uncertain-tax-positions
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://tax.thomsonreuters.com/us/en/onvio/firm-management/preview
Source: chromecache_499.2.dr, chromecache_527.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_535.2.dr	String found in binary or memory: https://thomsonreuters.scene7.com/is/image/thomsonreutersPROD/tr4522189-03d-2880x710.hero-s-nrw.jpg
Source: chromecache_535.2.dr	String found in binary or memory: https://thomsonreuters.scene7.com/is/image/thomsonreutersPROD/tr4522189-03d-2880x710.hero-s.jpg
Source: chromecache_535.2.dr	String found in binary or memory: https://thomsonreuters.scene7.com/is/image/thomsonreutersPROD/tr4522189-03d-2880x710:Hero-s-nrw?ts=1
Source: chromecache_535.2.dr	String found in binary or memory: https://thomsonreuters.scene7.com/is/image/thomsonreutersPROD/tr4522189-03d-2880x710:Hero-s?ts=17243
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://training.thomsonreuters.com/
Source: chromecache_268.2.dr, chromecache_535.2.dr, chromecache_301.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://twitter.com/thomsonreuters
Source: chromecache_393.2.dr, chromecache_508.2.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js
Source: chromecache_527.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_299.2.dr, chromecache_309.2.dr, chromecache_522.2.dr, chromecache_280.2.dr, chromecache_469.2.dr, chromecache_483.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11093504263/?random
Source: chromecache_270.2.dr, chromecache_488.2.dr, chromecache_255.2.dr, chromecache_554.2.dr, chromecache_542.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/996834583/?random
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=6Lcg8t8aAAAAAEg-ugVYe6QCmneyyVZm6ExG-4vv
Source: chromecache_459.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_527.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_527.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_499.2.dr, chromecache_527.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_499.2.dr, chromecache_527.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_459.2.dr, chromecache_555.2.dr, chromecache_489.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/de.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/el.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/es.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/fi.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/fr.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/it.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/nl.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/pl.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/pt.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/pt_br.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/ru.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/sq.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/sv.html
Source: chromecache_495.2.dr, chromecache_426.2.dr	String found in binary or memory: https://www.hotjarconsent.com/zh.html
Source: chromecache_268.2.dr, chromecache_535.2.dr, chromecache_301.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.linkedin.com/company/thomson-reuters
Source: chromecache_533.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/8d515a58/pixel.js
Source: chromecache_534.2.dr, chromecache_492.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/about-us/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/case-studies/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/contact-support/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/faqs/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/leadership-team/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/our-work/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/standards-values/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/the-source/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/about/webinars-online-events/
Source: chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/content-types/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/content-types/audio/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/content-types/events/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/content-types/graphics/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/content-types/live-video/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/content-types/newswire/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/content-types/pictures/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/content-types/video/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/media-center/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/media-solutions/archive/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/media-solutions/ready-to-publish/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/media-solutions/reuters-ready/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/media-solutions/user-generated-content/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/partners/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/platforms/api-feeds/
Source: chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/platforms/reuters-connect/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/platforms/reuters-pictures-platform/
Source: chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/platforms/reuterscom-platform/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/platforms/world-news-express/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/reutersbest/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/services/action-images/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/services/advertising-solutions/
Source: chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/services/reuters-plus-content-studio/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/services/sponsorship/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/services/verification-services/
Source: chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/business-finance/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/entertainment-lifestyle/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/health/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/human-interest/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/politics/
Source: chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/reuters-community/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/science/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/sports/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/topics/technology/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/broadcasters
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/corporate-communications/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/governments/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/health-pharma/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/machine-learning-ai/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/marketers-advertisers/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/professionals/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/publishers/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.reutersagency.com/en/who-we-serve/sports-media/
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.ca/en/training-and-support.html
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com.br/pt/suporte.html
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/ccpa-dsar
Source: chromecache_275.2.dr	String found in binary or memory: https://www.thomsonreuters.com/contact
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en-au/help.html
Source: chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en-us/help.html
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en-us/help/account-management.html
Source: chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en.html
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/about-us.html
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/about-us/our-purpose.html
Source: chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/account-management.html
Source: chromecache_434.2.dr, chromecache_275.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/contact-us.html
Source: chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/login.html
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/policies/copyright.html
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/press-releases.html
Source: chromecache_322.2.dr, chromecache_349.2.dr, chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/privacy-statement.html
Source: chromecache_322.2.dr, chromecache_349.2.dr, chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/privacy-statement.html#cookies
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.thomsonreuters.com/en/terms-of-use.html
Source: chromecache_265.2.dr, chromecache_451.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_268.2.dr, chromecache_535.2.dr, chromecache_301.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.youtube.com/thomsonreuters
Source: chromecache_326.2.dr	String found in binary or memory: https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=68d6cd4a-87cc-4465-9311-5feb95c2e6e0&ex
Source: chromecache_514.2.dr	String found in binary or memory: https://zenorocha.github.io/clipboard.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50156 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50364 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@29/502@321/99

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2304,i,10470009356049978610,4068125326516324767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mailto:noreply-eversheds-sutherland@highq.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2304,i,10470009356049978610,4068125326516324767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://mailto:noreply-eversheds-sutherland@highq.com	1%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://www.reutersagency.com/en/about/contact-support/	0%	Virustotal		Browse
https://tax.thomsonreuters.com/en/products/sureprep-1040scan	0%	Virustotal		Browse
https://www.hotjarconsent.com/sv.html	0%	Virustotal		Browse
https://store.legal.thomsonreuters.com/law-products/New-Products-and-Editions/c/17300	0%	Virustotal		Browse
https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/tax-compliance	0%	Virustotal		Browse
https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/specialized-industry-taxation	0%	Virustotal		Browse
https://developers.thomsonreuters.com/pages/use-case-library?industry=Tax%20and%20Accounting	0%	Virustotal		Browse
https://tax.thomsonreuters.com/en/contact	0%	Virustotal		Browse
https://www.reutersagency.com/en/services/reuters-plus-content-studio/	0%	Virustotal		Browse
https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/client-management	0%	Virustotal		Browse
https://www.reutersagency.com/en/about/about-us/	0%	Virustotal		Browse
https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting	0%	Virustotal		Browse
https://52.22.50.55/is	0%	Virustotal		Browse
http://fra-col.eum-appdynamics.com	0%	Virustotal		Browse
https://www.reutersagency.com/en/media-center/	0%	Virustotal		Browse
https://westthomson.demdex.net/dest5.html?d_nsid=0	0%	Virustotal		Browse
https://www.thomsonreuters.com/en/privacy-statement.html#cookies	0%	Virustotal		Browse
https://github.com/microsoft/clarity	0%	Virustotal		Browse
https://www.reutersagency.com/en/who-we-serve/health-pharma/	0%	Virustotal		Browse
https://community.thomsonreuters.com/developers/	0%	Virustotal		Browse
https://tax.thomsonreuters.com/en/tax-accounting/estate-planning/wealth-management	0%	Virustotal		Browse
https://siteintercept.qualtrics.com	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
pacman-content-live.live.eks.hotjar.com	52.215.101.83	true	false	unknown
collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com	18.184.92.94	true	false	unknown
d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com	52.202.121.139	true	false	unknown
cdn-cf.vidyard.com	18.245.31.62	true	false	unknown
vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com	34.200.154.196	true	false	unknown
westthomsoncom.sc.omtrdc.net	63.140.62.222	true	false	unknown
cm.g.doubleclick.net	216.58.206.66	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
px.mountain.com	52.89.99.220	true	false	unknown
static-cdn.hotjar.com	18.66.102.106	true	false	unknown
match.adsrvr.org	35.71.131.137	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	unknown
dx.mountain.com	34.238.149.65	true	false	unknown
surveystats.hotjar.io	18.172.112.60	true	false	unknown
gs.mountain.com	35.81.162.201	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.193.140	true	false	unknown
youtube-ui.l.google.com	142.250.184.238	true	false	unknown
highq.com	155.46.172.255	true	false	unknown
cdn.appdynamics.com	3.160.150.127	true	false	unknown
googleads.g.doubleclick.net	142.250.181.226	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
v2.d41.co	18.193.60.9	true	false	unknown
td.doubleclick.net	142.250.186.130	true	false	unknown
cdn.cookielaw.org	104.18.87.42	true	false	unknown
wsky-live.live.eks.hotjar.com	52.16.153.177	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
p04i.t.eloqua.com	130.35.231.29	true	false	unknown
d2unjxrejkh6j9.cloudfront.net	13.35.58.22	true	false	unknown
analytics.cloud.coveo.com	75.2.114.51	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
eps.6sc.co	75.2.108.141	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.221	true	false	unknown
insight.adsrvr.org	35.71.131.137	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
script.hotjar.com	13.32.27.107	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	18.202.150.204	true	false	unknown
store.thomsonreuters.com	155.46.172.12	true	false	unknown
d1uy6ivt6fb41q.cloudfront.net	18.66.102.21	true	false	unknown
a204422-web-1621559077.us-east-1.elb.amazonaws.com	34.239.208.227	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
d2ea2b9yqhjp4b.cloudfront.net	18.245.46.125	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
l4-logs-http-rum-pub-s0-7d264be627ade923.elb.us-east-1.amazonaws.com	3.233.158.30	true	false	unknown
d3nidttaq34fka.cloudfront.net	13.32.121.44	true	false	unknown
pacman-metrics-live.live.eks.hotjar.com	52.48.85.172	true	false	unknown
d22lao95g8jow9.cloudfront.net	13.35.58.63	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	unknown
www.datadoghq-browser-agent.com	13.33.219.205	true	false	unknown
l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com	3.233.158.33	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
platform.cloud.coveo.com	99.83.254.102	true	false	unknown
ib.anycast.adnxs.com	185.89.210.122	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com	34.246.233.184	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
trail.thomsonreuters.com	unknown	unknown	false	unknown
www.highq.com	unknown	unknown	false	unknown
app-data.gcs.trstatic.net	unknown	unknown	false	unknown
t.clarity.ms	unknown	unknown	false	unknown
siteintercept.qualtrics.com	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
api.schemaapp.com	unknown	unknown	false	unknown
zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
j.6sc.co	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown
ws.hotjar.com	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	unknown
legal.thomsonreuters.com	unknown	unknown	false	unknown
c.6sc.co	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
store.legal.thomsonreuters.com	unknown	unknown	false	unknown
img04.en25.com	unknown	unknown	false	unknown
simage2.pubmatic.com	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown
cdn.schemaapp.com	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	unknown
westthomson.demdex.net	unknown	unknown	false	unknown
paapi4153.d41.co	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
pixel-config.reddit.com	unknown	unknown	false	unknown
thomsonreuters.scene7.com	unknown	unknown	false	unknown
cdn.vidyard.com	unknown	unknown	false	unknown
b.6sc.co	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
data.schemaapp.com	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
westservicesinc.tt.omtrdc.net	unknown	unknown	false	unknown
metrics.hotjar.io	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=04b47a7b-1ef9-405f-bc6a-26c026a55562&batch_time=1727776338973	false		unknown
https://data.schemaapp.com/ThomsonReuters/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20vZW4vc2VhcmNoLXJlc3VsdHM	false		unknown
https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-dcl_components.min.css	false		unknown
https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/tr_spiral_pattern_desktop.png	false		unknown
https://legal.thomsonreuters.com/etc.clientlibs/emcm/components/structure/page/clientlibs-gated-content.min.js	false		unknown
https://legal.thomsonreuters.com/etc/clientlibs/granite/jquery/granite/csrf.min.js	false		unknown
https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-base.min.css	false		unknown
https://us-u.openx.net/w/1.0/sd?id=537148856&val=ZvvGLQAAAG9rCQNx	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NjhkNmNkNGEtODdjYy00NDY1LTkzMTEtNWZlYjk1YzJlNmUw&gdpr=0&gdpr_consent=&ttd_tdid=68d6cd4a-87cc-4465-9311-5feb95c2e6e0	false		unknown
https://52.22.50.55/is	false	0%, Virustotal, Browse	unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/main.css	false		unknown
https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-bold-webfont.woff2	false		unknown
https://trail.thomsonreuters.com/visitor/v200/svrGP.aspx?pps=3&siteid=1575097598&ref2=elqNone&tzo=300&ms=881&optin=disabled&elq1pcGUID=DBAB9B1D7D1E4E85B7D4D9EE050E1F76	false		unknown
https://westthomson.demdex.net/dest5.html?d_nsid=0	false	0%, Virustotal, Browse	unknown
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Abeacon%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=7d080599-ba18-4c6f-b730-877b49ffa75d&batch_time=1727776357218	false		unknown
https://alb.reddit.com/rp.gif?ts=1727776312649&id=t2_3fnooq8w&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=744e8800-d940-4b54-8767-3fffd6b7a998&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=	false		unknown
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=c14e57da-d60c-4827-8146-39c08bc63790&batch_time=1727776340063	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=68d6cd4a-87cc-4465-9311-5feb95c2e6e0	false		unknown
https://script.hotjar.com/survey-v2.c285531737fe89cbffd2.js	false		unknown
https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js	false		unknown
https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.css	false		unknown
https://cdn.cookielaw.org/consent/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35/d44bc8d7-bab6-412b-8d1b-627d267abba5/en.json	false		unknown
https://dx.mountain.com/spx?dxver=4.0.0&shaid=36732&tdr=&plh=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo&cb=53431726174497960term=value	false		unknown
https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/support-icon-v1.5.svg	false		unknown
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=bf1c5e6e-d85f-4118-9098-6452acfe90cf&batch_time=1727776362100	false		unknown
https://api.schemaapp.com/pagecount	false		unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZvvGLQAAAG9rCQNx&C=1	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/play-icon.svg	false		unknown
https://cdn.cookielaw.org/logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_tr_h_lg_rgb_ps.png	false		unknown
https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY	false		unknown
https://legal.thomsonreuters.com/content/dam/ue/en-us/images/video-covers/234635.jpg	false		unknown
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/996834583/?value=0&guid=ON&script=0&data=aam=17510640;aam=19639398;aam=22827176;aam=19639398;aam=22801918&ad_personalization=granted&ad_user_data=granted	false		unknown
https://metrics.hotjar.io/?v=6&site_id=466896	false		unknown
https://legal.thomsonreuters.com/en/products/highq/_jcr_content/root/container/container/tabs/item_1665177412591/image_copy_copy.coreimg.png/1669639663326/234582.png	false		unknown
https://cdn.appdynamics.com/adrum/adrum-21.4.0.3405.js	false		unknown
https://cdn.schemaapp.com/highlighter/prod/ThomsonReuters/v2/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20	false		unknown
https://rum.browser-intake-datadoghq.com/api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=501fade0-86e0-4230-b643-c64d42656736&batch_time=1727776330348	false		unknown
https://44.212.189.233/is	false		unknown
https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/0.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.hotjarconsent.com/sv.html	chromecache_495.2.dr, chromecache_426.2.dr	false	0%, Virustotal, Browse	unknown
https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/specialized-industry-taxation	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://www.reutersagency.com/en/about/contact-support/	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://tax.thomsonreuters.com/en/products/sureprep-1040scan	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://store.legal.thomsonreuters.com/law-products/New-Products-and-Editions/c/17300	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/tax-compliance	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://www.reutersagency.com/en/about/about-us/	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://developers.thomsonreuters.com/pages/use-case-library?industry=Tax%20and%20Accounting	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://tax.thomsonreuters.com/en/contact	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://www.reutersagency.com/en/services/reuters-plus-content-studio/	chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha/#6175971	chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	false	URL Reputation: safe	unknown
https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/client-management	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
http://fra-col.eum-appdynamics.com	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://www.thomsonreuters.com/en/privacy-statement.html#cookies	chromecache_322.2.dr, chromecache_349.2.dr, chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://openjsf.org/	chromecache_514.2.dr	false	URL Reputation: safe	unknown
https://github.com/microsoft/clarity	chromecache_398.2.dr, chromecache_470.2.dr	false	0%, Virustotal, Browse	unknown
https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/launch-f0760189cfc5.js	chromecache_281.2.dr, chromecache_506.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_291.2.dr	false	URL Reputation: safe	unknown
https://www.reutersagency.com/en/media-center/	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://tax.thomsonreuters.com/en/tax-accounting/estate-planning/wealth-management	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://www.hotjarconsent.com/pl.html	chromecache_495.2.dr, chromecache_426.2.dr	false		unknown
https://www.reutersagency.com/en/who-we-serve/health-pharma/	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_381.2.dr	false	URL Reputation: safe	unknown
https://siteintercept.qualtrics.com	chromecache_300.2.dr, chromecache_376.2.dr	false	0%, Virustotal, Browse	unknown
https://community.thomsonreuters.com/developers/	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false	0%, Virustotal, Browse	unknown
https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/tax-laws-regulations	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
http://schema.org/ImageObject	chromecache_317.2.dr	false		unknown
https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1043e003412140f8ab9e58fbe496aab	chromecache_468.2.dr	false		unknown
http://underscorejs.org/LICENSE	chromecache_514.2.dr	false	URL Reputation: safe	unknown
https://www.thomsonreuters.com/en/terms-of-use.html	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://tax.thomsonreuters.com/en/community/checkpoint	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance/partnership-taxation	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://tax.thomsonreuters.com/en/tax-accounting/audit-accounting/quality-control	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://d41.co/	chromecache_413.2.dr, chromecache_545.2.dr	false		unknown
https://www.hotjarconsent.com/zh.html	chromecache_495.2.dr, chromecache_426.2.dr	false		unknown
http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint	chromecache_268.2.dr, chromecache_301.2.dr	false		unknown
https://tax.thomsonreuters.com/en/tax-accounting/data-document-management/certificate-management	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://www.hotjarconsent.com/fi.html	chromecache_495.2.dr, chromecache_426.2.dr	false		unknown
https://www.reutersagency.com/en/topics/business-finance/	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://www.reutersagency.com/en/content-types/live-video/	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://tax.thomsonreuters.com/en/international-trade-supply-chain/customs-duties-management	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
http://code.google.com/p/episodes/	chromecache_287.2.dr, chromecache_359.2.dr	false		unknown
https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/financial-close	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://www.thomsonreuters.com/en-au/help.html	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_311.2.dr, chromecache_265.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-user-list/996834583/?random	chromecache_270.2.dr, chromecache_488.2.dr, chromecache_255.2.dr, chromecache_554.2.dr, chromecache_542.2.dr, chromecache_523.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	false	URL Reputation: safe	unknown
https://www.reutersagency.com/en/content-types/newswire/	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://tax.thomsonreuters.com/en/tax-accounting/data-document-management/document-management	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://legal.thomsonreuters.com/en/products/legal-tracker	chromecache_317.2.dr	false		unknown
https://www.thomsonreuters.com/en.html	chromecache_457.2.dr	false		unknown
https://platform.cloud.coveo.com/rest/search	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://tax.thomsonreuters.com/en/tax-accounting/tax-planning-preparation/income-tax-compliance	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_330.2.dr, chromecache_422.2.dr, chromecache_291.2.dr	false	URL Reputation: safe	unknown
https://tax.thomsonreuters.com/en/tax-accounting/data-document-management/data-management-mining	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://cookiepedia.co.uk/giving-consent-to-cookies	chromecache_322.2.dr, chromecache_349.2.dr	false		unknown
https://tax.thomsonreuters.com/en/tax-accounting/tax-research-guidance	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown
https://tax.thomsonreuters.com/en/tax-accounting	chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.245.46.125	d2ea2b9yqhjp4b.cloudfront.net	United States	16509	AMAZON-02US	false
52.89.99.220	px.mountain.com	United States	16509	AMAZON-02US	false
151.101.193.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
66.235.152.221	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
18.172.112.60	surveystats.hotjar.io	United States	3	MIT-GATEWAYSUS	false
13.35.58.63	d22lao95g8jow9.cloudfront.net	United States	16509	AMAZON-02US	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
34.239.208.227	a204422-web-1621559077.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.18.87.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
99.83.254.102	platform.cloud.coveo.com	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
63.140.62.17	unknown	United States	15224	OMNITUREUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
18.245.46.71	unknown	United States	16509	AMAZON-02US	false
52.215.101.83	pacman-content-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
75.2.21.6	unknown	United States	16509	AMAZON-02US	false
130.35.231.29	p04i.t.eloqua.com	United States	31898	ORACLE-BMC-31898US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
99.83.231.3	unknown	United States	16509	AMAZON-02US	false
34.252.162.78	unknown	United States	16509	AMAZON-02US	false
155.46.172.255	highq.com	United States	24324	KORDIA-TRANSIT-AS-APKordiaLimitedNZ	false
44.235.191.156	unknown	United States	16509	AMAZON-02US	false
142.250.186.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.102.106	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
54.73.193.221	unknown	United States	16509	AMAZON-02US	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
52.48.85.172	pacman-metrics-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
52.202.121.139	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.202.150.204	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.217.18.98	unknown	United States	15169	GOOGLEUS	false
52.12.117.226	unknown	United States	16509	AMAZON-02US	false
34.246.233.184	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com	United States	16509	AMAZON-02US	false
13.32.27.107	script.hotjar.com	United States	7018	ATT-INTERNET4US	false
52.16.153.177	wsky-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
13.32.27.21	unknown	United States	7018	ATT-INTERNET4US	false
75.2.114.51	analytics.cloud.coveo.com	United States	16509	AMAZON-02US	false
13.107.253.45	s-part-0017.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.1.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
142.250.181.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
44.212.189.233	unknown	United States	14618	AMAZON-AESUS	false
13.33.219.205	www.datadoghq-browser-agent.com	United States	16509	AMAZON-02US	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
151.101.129.140	unknown	United States	54113	FASTLYUS	false
34.200.154.196	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.66.102.53	unknown	United States	3	MIT-GATEWAYSUS	false
75.2.108.141	eps.6sc.co	United States	16509	AMAZON-02US	false
3.160.150.128	unknown	United States	16509	AMAZON-02US	false
3.160.150.127	cdn.appdynamics.com	United States	16509	AMAZON-02US	false
13.32.121.46	unknown	United States	16509	AMAZON-02US	false
52.58.230.154	unknown	United States	16509	AMAZON-02US	false
3.228.39.208	unknown	United States	14618	AMAZON-AESUS	false
13.32.121.44	d3nidttaq34fka.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.222	westthomsoncom.sc.omtrdc.net	United States	15224	OMNITUREUS	false
13.35.58.22	d2unjxrejkh6j9.cloudfront.net	United States	16509	AMAZON-02US	false
13.35.58.105	unknown	United States	16509	AMAZON-02US	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
3.233.158.33	l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.66.102.45	unknown	United States	3	MIT-GATEWAYSUS	false
18.245.31.62	cdn-cf.vidyard.com	United States	16509	AMAZON-02US	false
185.89.210.122	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
13.35.58.17	unknown	United States	16509	AMAZON-02US	false
35.81.162.201	gs.mountain.com	United States	237	MERIT-AS-14US	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
18.192.30.99	unknown	United States	16509	AMAZON-02US	false
155.46.172.12	store.thomsonreuters.com	United States	24324	KORDIA-TRANSIT-AS-APKordiaLimitedNZ	false
66.235.152.156	unknown	United States	15224	OMNITUREUS	false
18.245.46.35	unknown	United States	16509	AMAZON-02US	false
52.22.50.55	unknown	United States	14618	AMAZON-AESUS	false
142.250.184.238	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
37.252.171.85	unknown	European Union	29990	ASN-APPNEXUS	false
3.233.158.30	l4-logs-http-rum-pub-s0-7d264be627ade923.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
18.193.60.9	v2.d41.co	United States	16509	AMAZON-02US	false
18.172.103.101	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.77.208.237	unknown	United States	16509	AMAZON-02US	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.62.27	unknown	United States	15224	OMNITUREUS	false
35.244.159.8	unknown	United States	15169	GOOGLEUS	false
18.245.31.111	unknown	United States	16509	AMAZON-02US	false
98.82.73.200	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
13.35.58.41	unknown	United States	16509	AMAZON-02US	false
18.210.229.244	unknown	United States	14618	AMAZON-AESUS	false
18.184.92.94	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.66.102.21	d1uy6ivt6fb41q.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
216.58.206.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
13.35.58.39	unknown	United States	16509	AMAZON-02US	false
34.238.149.65	dx.mountain.com	United States	14618	AMAZON-AESUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
99.81.86.51	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523272
Start date and time:	2024-10-01 11:50:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://mailto:noreply-eversheds-sutherland@highq.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@29/502@321/99
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://legal.thomsonreuters.com/en/products/highq/request-demo Browse: https://legal.thomsonreuters.com/en/search-results

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 172.217.16.206, 64.233.184.84, 34.104.35.123, 172.217.16.202, 142.250.186.131, 151.101.1.181, 151.101.193.181, 151.101.129.181, 151.101.65.181, 184.28.89.29, 2.16.202.113, 2.16.202.128, 172.217.18.3, 2.16.168.7, 2.16.168.8, 142.250.185.106, 142.250.184.202, 216.58.206.74, 216.58.206.42, 142.250.185.202, 142.250.185.170, 142.250.184.234, 216.58.212.138, 142.250.186.106, 142.250.181.234, 142.250.74.202, 142.250.185.234, 142.250.185.138, 142.250.185.74, 142.250.186.138, 52.30.34.11, 34.253.91.38, 52.17.115.23, 20.114.59.183, 95.101.111.184, 95.101.111.170, 216.58.206.35, 142.250.186.136, 192.229.221.95, 151.101.130.49, 151.101.66.49, 151.101.194.49, 151.101.2.49, 13.95.31.18, 2.16.100.168, 88.221.110.91, 69.173.144.165, 69.173.144.139, 69.173.144.138, 172.217.23.98, 142.250.185.67, 172.217.16.136, 88.221.110.136, 88.221.110.227, 104.115.82.25, 104.115.82.10, 13.107.42.14, 23.201.244.51, 172.64.146.215, 104.18.41.41, 20.114.189.70, 20.242.39.171, 104.17.208
Excluded domains from analysis (whitelisted): a1967.dscr.akamai.net, azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, a767.dspw65.akamai.net, wildcard.scene7.com.edgesuite.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, e5763.x.akamaiedge.net, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, cm.everesttech.net.akadns.net, j2.6sc.co.edgekey.net, pagead2.googlesyndication.com, od.linkedin.edgesuite.net, cs6.wpc.apr-17a6a-2.edgecastdns.net, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, c.bing.com, clients.l.google.com, a1916.dscg2.akamai.net, h2.shared.global.fastly.net, pixel.rubiconproject.net.akadns.net, c-msn-com-nsatc.trafficmanager.net, wildcard.en25.com.edgekey.net, clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com, ipv6-2.6sc.co.edgekey.net, www.googletagmanager.c
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://legal.thomsonreuters.com/en/products/highq Model: jbxai	{ "brand":["Thomson Reuters"], "contains_trigger_text":true, "trigger_text":"Request free demo", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":["Cookies Settings"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://legal.thomsonreuters.com/en/products/highq Model: jbxai	{ "brand":["Thomson Reuters"], "contains_trigger_text":true, "trigger_text":"Request free demo", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":["Privacy Statement", "Cookie Policy"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://legal.thomsonreuters.com/en/products/highq Model: jbxai	{ "brand":["Thomson Reuters"], "contains_trigger_text":true, "trigger_text":"Request free demo", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://legal.thomsonreuters.com/en/products/highq/request-demo Model: jbxai	{ "brand":["Thomson Reuters"], "contains_trigger_text":true, "trigger_text":"See HighQ in action", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":["First name", "Last name", "Email address", "Phone number (numerals only; no dashes)"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://legal.thomsonreuters.com/en/products/highq/request-demo Model: jbxai	{ "brand":["Thomson Reuters"], "contains_trigger_text":true, "trigger_text":"See HighQ in action", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":["First name", "Last name", "Email address", "Phone number (numerals only; no dashes)"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://legal.thomsonreuters.com/en/products/highq/request-demo Model: jbxai	{ "phishing_score":1, "brands":"Thomson Reuters", "legit_domain":"thomsonreuters.com", "classification":"wellknown", "reasons":["The brand 'Thomson Reuters' is well-known and globally recognized.", "The URL 'legal.thomsonreuters.com' is a subdomain of 'thomsonreuters.com', which is the legitimate domain for Thomson Reuters.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The input fields (First name, Last name, Email address, Phone number) are typical for a legitimate business form."], "brand_matches":[true], "url_match":true, "brand_input":"Thomson Reuters", "input_fields":"First name, Last name, Email address, Phone number (numerals only; no dashes)"}

URL: https://legal.thomsonreuters.com/en/products/highq/request-demo Model: jbxai	{ "phishing_score":1, "brands":"Thomson Reuters", "legit_domain":"thomsonreuters.com", "classification":"wellknown", "reasons":["The brand 'Thomson Reuters' is a well-known global information and news organization.", "The URL 'legal.thomsonreuters.com' is a subdomain of 'thomsonreuters.com', which is the legitimate domain for Thomson Reuters.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields (First name, Last name, Email address, Phone number) are typical for a legitimate form on a professional site."], "brand_matches":[false], "url_match":true, "brand_input":"Thomson Reuters", "input_fields":"First name, Last name, Email address, Phone number (numerals only; no dashes)"}

URL: https://legal.thomsonreuters.com/en/search-results Model: jbxai	{ "brand":["Thomson Reuters"], "contains_trigger_text":true, "trigger_text":"Get relevant answers to your legal research questions with Al-Assisted Research.... Verify the results using links to trusted Westlaw authority so you can make better-informed decisions and complete the remainder of your research more efficiently.... Explore more features... Discover a more...", "prominent_button_name":"Accept All Cookies", "text_input_field_labels":["Cookies Settings"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	299
Entropy (8bit):	5.27162334128487
Encrypted:	false
SSDEEP:	6:5e4POurJb8FyrpqduAUEJEy2qEXuWtQR1CqjwVGXeJ7ULL:M4POet8ggpUEiUE2zCqjwsXeaLL
MD5:	E2C3A51528343E3660D27149AB2266CF
SHA1:	8AB6343AB7DA336016C33907B6708FFC22B4A859
SHA-256:	817B303794960EE3ABC7E14047CC5AA79BA03B17741EFF5BC0C9D5D9543076BA
SHA-512:	1F9D1D76A8F8958AF03A022377EFD546801A9DE259CB0AC402318B7AE505D2FF140054048F292DCE4BB2E891033B26718563DE93D2F6E2603D16CE6948BEC5A5
Malicious:	false
Reputation:	low
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[43],{1029:function(r,t,a){"use strict";a.r(t);var e=a(691),n=e.a.template;n.displayName="CoveoSearchBox";var o=n,s=e.a.rehydrator;a.d(t,"default",function(){return o}),a.d(t,"rehydrator",function(){return s})}}]);.//# sourceMappingURL=43.js.map

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	4.86578763987379
Encrypted:	false
SSDEEP:	3:K3pGOcFSKPn99B7ARJGBsFKsemOHWI/75Et:K5GOqRFARIews1OHPa
MD5:	57CE98513BB2FE4469B53AC659C80B2A
SHA1:	E3625C6B7C6A7DDC7BEE22371E56A0BC54CA9354
SHA-256:	306C5341EA0ADE33AEB02A53C3884AED33DECBF84F008DF855A4AB8CFC19176A
SHA-512:	4B7FBED88A0AE7867CEB041D3FBB051C696F726F59D92374EBBD691E3941452F991DD4BD922CEF1BA4C6B006A9E15932E8C003F5D558DFCE6BE5109333AEE464
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/emcm/components/structure/page/pagestyle-clientlibs.min.css
Preview:	body.emcm-body{background-color:#ffff}.@media(max-width:767px){#root{overflow:clip}.}..grecaptcha-badge{display:none}

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	downloaded
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14087)
Category:	downloaded
Size (bytes):	14136
Entropy (8bit):	5.289031230064601
Encrypted:	false
SSDEEP:	384:IKHfR0WUDjGUnRP/NGkJtBveyyKIig9gjaxIm6VTHG:nHfqrnRDJveyyJig9gOKm6c
MD5:	0A898F6EDF2D77595F7378557DD8FB96
SHA1:	C538AC7767548E4499AAD30A1F35E2AA2A20EA11
SHA-256:	71D18AF9EE879A36717E1EA3367B669031E3F6B12CB0AA1373FD200D278C4E6A
SHA-512:	374950127BCF694AC5D63689EFC0998BE58AC8FB5C62AE962435BC8A025302470FE5BCBF69EBFA1B017DE8CFC219DB8813FD46FDB14A7A9F2727A0E4C6A07C9B
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){let d=null,c=["debug","info","warn","error"],l=c.reduce((e,a,t)=>(e[a]=function(){var n="debug"===a?"log":a;if(d&&console&&"function"==typeof console[n]){var e=c.indexOf(d.toString().toLocaleLowerCase());if(!0===d\|\|-1<e&&e<=t){for(var i=arguments.length,o=new Array(i),r=0;r<i;r++)o[r]=arguments[r];let[e,...t]=[...o];console[n](a.toUpperCase()+" - (TTD) "+e,...t)}}},e),{});function e(e){d=e}let s=null,o={},u={},p={},f={};function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";i(e)}function r(e,t){n(t),function i(e,o){let r=g(e,o,s.triggerElements);let t=g(e,o,s.cssSelectors);u[o]=u[o]\|\|[];p[o]=p[o]\|\|[];f[o]=f[o]\|\|[];for(var n of t)n&&n.tagName&&"INPUT"===n.tagName&&p[o].push(n);l.debug(`triggers ["${o}"] `,r);l.debug(`validInputs ["${o}"] `,t);r.forEach(e=>{u[o].push(e)});for(let n=0;n<r.length;n++){var a=function(){try{l.debug("Detect event: ",s.detectionEventType,"on element, ",r[n]);let e=Object.entries(p).map(e=>e[1]).flatMap(e=>e);for(var t

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28816, version 1.0
Category:	downloaded
Size (bytes):	28816
Entropy (8bit):	7.992629720454495
Encrypted:	true
SSDEEP:	768:fsyLofDwN42qko+qLpGJSEjFN9aQ7edHT/7jurH/j7/:fjTyKjEpGJtNGT/vu7
MD5:	EDAB84A4F6F521CD9E66699D0FF6E858
SHA1:	9A0725D1D13E0067DEEF716A18831658D4CA7011
SHA-256:	C9015686CF54E5E643E2BFFE8CF0AA2C3140F56B0D84C1A315845E8A31601DB4
SHA-512:	6A46CBD01CAF9BE859D886EE62DC119EE32C23409DD060ACD2C3D2D716FDC64D8F744D9AF3777E028F0374A1BE575680EA0B0D57CC873DF8B640B119F3A1330E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3w8aZQ.woff2
Preview:	wOF2......p...........p...............................n..6?HVAR.h?MVARF.`?STAT.'..b/d.......e....0....6.$.... ..\|..Z.......t.k..fU.......6..v&^..c#.1....9....$.24.K.l.....$E.DUu...T..2y)SU.@...J...i..$...D..:z....i...E.A...sG.4J..3..,oJ.MoIG.w.....Y..)3c..O"=..Wi{[..C..<.....u......?.K....uF....%.1M...E.;;..y...].........{.o......s.?.......B...b.!..."R.....).C3...c).2...XJ)""..""..RDL..1,R.pc.J7..2....R......k..$.g.Z'.W.... $....~.;.9..e!dY...eY.eY..,..F.c..a2.c./...........~_.K].R).c.bS...2l.x.B...Y?in..T..4+ADD.H.(...C. 1,.6S....Y[..=w.....G....a".H1........R....[O...$.ll../.......`.cQ,..5`...X`c$*....a\y.u.zzwx..y.U.....,..p.#s...........Z.....f.Y.q.Y..l.>..).s..:>....}.m..9....<.3.s;..ZK.K5..c..1\|B.!..>....o..iJ.:Q..f]........../]..P@.4....`.Eas..mb.......n...3B.......yQb%.....7.8.^..+.......;. ..}.U.~...gVV`..T$;@....R.hvwd.!.M............Y.@.o........M..IA.i.2.....8gj..V...D:...._...'.l.w.m.)O...._g....g$+...vp&'Z...P.E.-.......K....

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4150)
Category:	downloaded
Size (bytes):	60206
Entropy (8bit):	5.2995038348350745
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXHM9ZK0BKJnYTZ02LKVsdmpyKcicQ:RIT7OXs9ZKAKtYj8wKcHQ
MD5:	17006894EDBC60B11E055C76F75B381F
SHA1:	D3A067B16C73EF66AF4A5C63FF8073F5C6287F77
SHA-256:	A622EB40E467828DF3B0E8BFCD6220CF4A47016406E2FE9711DFC380DF300687
SHA-512:	E1A51EBAFD60AA7A460EAE1BF68AF863A33D964EA4C64CDDFDD3861D6845430C495DF94F995F6FFE28237D56D3869F62CE4C627E6AFB72FDD7BF88C49DC116CC
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/156351445072315?v=2.9.169&r=stable&domain=legal.thomsonreuters.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	dropped
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16729), with no line terminators
Category:	dropped
Size (bytes):	16729
Entropy (8bit):	5.23114254054774
Encrypted:	false
SSDEEP:	384:JwPi9hUyVYDsdU5sF59QF5vCAG57eCYk9p:JwShUyWDR5sj9q5vCAGxpYk9p
MD5:	E4DDBB6FA70E1E8A7FDD64A764E1FACE
SHA1:	2D07E7B9A69B2187B204A56FD0FAF3AE8FA71341
SHA-256:	C6D8A31334BD1582344149A84504526120AF4FEB2738962BB03D96F173ABEC68
SHA-512:	1B7CCC4F47318D5DF4A4FF064793A81A5C5C2A480A00A084E6819E764450195A3FA3EA0CC0BED4DAA11A3935EA6333399D1B3EC5BB05DCCD3F8DD27908D8F48F
Malicious:	false
Reputation:	low
Preview:	var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"."+d[3]}catch(d){}}();(function () {var mntnis; async function fwto(resource, options = {}) { const { timeout = 1000 } = options; const controller = new AbortController(); const id = setTimeout(() => controller.abort(), timeout); const response = await fetch(resource, {...options, signal: controller.signal}); clearTimeout(id); return response.text(); } fwto("https://18.210.229.244/is", {timeout: 1000}).then(function (response) { return response; }).then(function (response) { mntnis = response; }).catch(function (err) { mntnis = err; }); var shaddslashes = function (s) {if (s != undefined && s != null) {s = s.replace(/%/g, "%25%32%35");s = s.replace(/\\/g, "%5C");s = s.replace(/'/g, "%27");s = s.replace(/"/g, "%22");s = s.replace(/\?/g,

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	62243
Entropy (8bit):	5.409110995042521
Encrypted:	false
SSDEEP:	768:/i2VpDUAE3q7h7snQpWWzlj18nQrHoQqhF:s/3IgGDzlj18nQrSF
MD5:	8B73B216AC0A0730279EBB5FC109C29C
SHA1:	4D0A7239EE5F70D143300E772DE91B4768A7F4A4
SHA-256:	0A0721D78278F9A6C3DD3F639BAD1B3105D2DF9E97E3D4A74DBEC66D6B92C7EC
SHA-512:	4EFB681C418B2EC3266A5824515155E23F41677B0059D659F3CBED77F144206032B206907745E7E0AE6F4A01E99E7710F848D31B815BA15E4DD7E4A6B9F10F78
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjwhLS0gQ2xvc2UgQnV0dG9uIC0tPjxkaXYgY2xhc3M9Im90LXBjLWhlYWRlciI+PCEtLSBMb2dvIFRhZyAtLT48ZGl2IGNsYXNzPSJvdC1wYy1sb2dvIiByb2xlPSJpbWciIGFyaWEtbGFiZWw9IkNvbXBhbnkgTG9nbyI+PC9kaXY+PGJ1dHRvbiBpZD0iY2xvc2UtcGMtYnRuLWhhbmRsZXIiIGNsYXNzPSJvdC1jbG9zZS1pY29uIiBhcmlhLWxhYmVsPSJDbG9zZSI+PC9idXR0b24+PC9kaXY+PCEtLSBDbG9zZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN0aW9uIGNsYXNzPSJvdC1zZGstcm93IG90LWNhdC1ncnAiPjxoMyBpZD0ib3QtY2F0ZWdvcnktdGl0bGUiPk1hbmFnZSBDb29raWUgUHJlZmVyZW5jZXM8L2gzPjxkaXYgY2xhc3M9Im90LXBsaS1oZHIiPjxzcGFuIGNsYXNzPSJvdC1saS10aXRsZSI+Q2

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1727776312649&id=t2_3fnooq8w&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=744e8800-d940-4b54-8767-3fffd6b7a998&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1282
Entropy (8bit):	4.2563758279486335
Encrypted:	false
SSDEEP:	24:22DGuWy0qWJGiVOo//jq9mncg5KF2FBfgeaIuwDc6kQXVjTyH:lDYy0NJGIv26ciKFoGcIMTyH
MD5:	5428E7A08AB5CE3E00008ED050D8C8C3
SHA1:	263025F7A1268EC84FDADC986076B72185FAB839
SHA-256:	BFF4290A95DEF5BC68F2F27CCCE9BE8C091F0550ABB54434F0422FE9CAF1FC7A
SHA-512:	837A259F14C4F7F47CA2687B972107953F359609D6C33030E54CEBDB48767054DBBBEBE66BF7C45EA9B01B62F510FA23E1C1716CC6AB9C30CDDAB7561D9C931C
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/emcm/components/structure/page/clientlibs-gated-content.min.js
Preview:	(function (document, $) {. "use strict";.. const isGated = document.body.getAttribute("data-is-gated");. const gatedFormName = document.body.getAttribute("data-gated-form");.. if (isGated && !isFormSubmitted(gatedFormName)) {. const url = new URL(. window.location.origin. + window.location.pathname.replace(".html", ""). + ".gated.json". + window.location.search. );. fetch(url).then(response => {. if (response.status === 200) {. response.json().then(data => {. window.location = data.location;. });. }. });. }.. function isFormSubmitted(formName) {. const formCookieName = " tr_ewp_submitted_forms=";. const cookie = document.cookie.split(";").find(item => item.startsWith(formCookieName));. if (cookie) {. try {. const formsJson = JSON.parse(decodeURIComponent(cookie.replace(formCookieNa

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	452
Entropy (8bit):	5.054902972880033
Encrypted:	false
SSDEEP:	12:t4wPkzQJWT4nmdU/gKm7Ktex3mQSihq1bsGmVtkNe:t4wPsscU/dIKQxWQjQnr8
MD5:	84A82C23C09E88EFCAEEE4BABB9A4077
SHA1:	B04AB644DC9F00807207B93F495C6C603646C898
SHA-256:	83F92F357C20C679BAED9AC44D33F7DFA3FC020F3F45BB92AB1C02B43ECE837B
SHA-512:	4EEBEB2E14B572A462F784671F60971A892F9F576992BF6FC25B4B04088CF229712D65EF30A2426CC9DC97445B32A4D648E6535F5CEE7EED0E70BDC07FABA486
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Play icon" class="nc-icon-wrapper" width="24" height="24" viewBox="0 0 24 24" fill="#404040"><title>button play</title>.<path d='M20.555,11.168l-15-10c-0.307-0.204-0.702-0.224-1.026-0.05C4.203,1.292,4,1.631,4,2v20 c0,0.369,0.203,0.708,0.528,0.882C4.676,22.961,4.838,23,5,23c0.194,0,0.388-0.057,0.555-0.168l15-10C20.833,12.646,21,12.334,21,12 S20.833,11.354,20.555,11.168z'></path>.</svg>..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (645)
Category:	downloaded
Size (bytes):	104941
Entropy (8bit):	5.403413067660838
Encrypted:	false
SSDEEP:	768:ucZpO34TKSJv/HWk/RU+eI1D8shZ1Bbfz+qIS137FC1UJhYplpCDyHh8Oy0vMrmS:ucj9JRF1DJhBbfz+QR4n/6mY7mbY
MD5:	4AEF8C9CAF79317EDB0667812BA89F53
SHA1:	BA49E5003CD5EFF5273FA031F1C8EE7A7FA82203
SHA-256:	51A1F8053F3E51386A72383B9E18E584EEEBD125506D926352246E35E9899CF7
SHA-512:	419ADB65DD86F3CD8A326F98357C5CB780AB9D8F87FA5BC7C12B52E2FB7F55358DE3277CEB30BF4CCC987F08CB7E5DCF2E19A2B029C5A1FE840C3F3D0ADF5392
Malicious:	false
Reputation:	low
URL:	https://cdn.appdynamics.com/adrum/adrum-21.4.0.3405.js
Preview:	;/* Version 281eccdb0a28fe3b4dbfbf942f8b88ed v:21.4.0.3405, c:30de095c7d8f35f3f926215f37b39accad0317b8, b:21.4.0.3405 */(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={},x=window.console,B=x&&"function"==typeof x.log?x:{log:function(){}};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();var t=this&&this.Tc\|\|function(){var a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(a,h){a.__proto__=h}\|\|function(a,h){for(var e in h)h.hasOwnProperty(e)&&(a[e]=h[e])};return function(b,h){function e(){this.constructor=b}a(b,h);b.prototype=null===h?Object.create(h):.(e.prototype=h.prototype,new e)}}();(function(a){(function(a){a.setUpMonitors=function(){for(var a=[],b=0;b<arguments.length;b++)a[b]=arguments[b];for(b=0;b<a.length;b++){var c=a[b];c&&c.setUp()}}})(a.monitor\|\|(a.monitor={}))})(g\|\|(g={}));(function(a){(function(b){function h(a){return b.refs.slice.apply(a,b.refs.slice.call(arguments,1))}function e(a,m)

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65133)
Category:	downloaded
Size (bytes):	3097940
Entropy (8bit):	5.569365114134649
Encrypted:	false
SSDEEP:	49152:M4jG4b4ws/ZMoH+Yk7XnEOwjE9+tQza45mr2DU8W5pNG:/
MD5:	82131697CB9D045382A3F4107F3F8995
SHA1:	59E815782B85D26FD18A933100137B3BE8CDFD13
SHA-256:	0B5B78C02F4DF27CFB5256E9F285DF60C7682D55381AFB1F66CBD680DB5540A0
SHA-512:	59D09A97595DC5E9E2D4D523CEC05583BABA10FC62BE93694C3B16F480627EB790386120AF63F10939EB96BA70B555171D1C9B2761E2EA78B54B731ADBA6DDDF
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/4.js
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[4],{563:function(e,t,o){"use strict";e.exports=o(594)},594:function(e,t,o){"use strict";./** @license React v16.13.1. * react-dom-server.browser.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var n=o(94),i=o(0);function r(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,o=1;o<arguments.length;o++)t+="&args[]="+encodeURIComponent(arguments[o]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var a="function"==typeof Symbol&&Symbol.for,s=a?Symbol.for("react.portal"):60106,c=a?Symbol.for("react.fragment"):60107,l=a?Symbol.for("react.strict_mode"):60108,u=a?Symbol.for("react.profiler"):60114,d=a?Symbol.for("react.provider"):60109,p=a?Symbol.for("reac

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	dropped
Size (bytes):	1271
Entropy (8bit):	5.184130085081704
Encrypted:	false
SSDEEP:	24:2Q+Bvk+oX/IP2iJyep9Mf9MWIMyMZ2iJRcM2n3k2RRnDbLMWhTtMXy99MJVOfMsX:P/1op9M1MTMyMIjM23pbD/MUtMXy99M0
MD5:	0A6AFF292F5CC42142779CDE92054524
SHA1:	7A4B1CB962793F47ED138A8DF2D5E4D49E73335A
SHA-256:	C250924012FDC9EA9516B30650895201CD167DBD49C9D148924F30881ABFA393
SHA-512:	A9934DC7FFF0FA59069A815C3CF795148E9A36759017037DEF66E6A228D650139FD364A004DA7A8F0706E4B28E7AA1F63A8B5F7A3BD0270369EAE9AF82D64403
Malicious:	false
Reputation:	low
Preview:	(function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={removeUrlHash:function(){history.replaceState(void 0,void 0," ")},updateUrlHash:function(a,b,c){a&&a._elements&&a._elements[b]&&a._elements[b][c]&&a._elements[b][c].id&&history.replaceState(void 0,void 0,"#"+a._elements[b][c].id)},getDeepLinkItemIdx:function(a,.b,c){if(window.location.hash){var d=window.location.hash.substring(1);if(d&&document.getElementById(d)&&a&&a._config&&a._config.element&&a._elements[b]&&a._config.element.querySelector("[id\x3d'"+d+"']"))for(var e=0;e<a._elements[b].length;e++){var g=a._elements[b][e],f=!1;a._elements[c]&&(f=(f=a._elements[c][e])&&f.querySelector("[id\x3d'"+d+"']"));if(g.id===d\|\|f)return e}}return-1},getDeepLinkItem:function(a,b,c){c=window.CQ.CoreComponents.container.utils.getDeepLinkItemIdx(a,b,c);

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	dropped
Size (bytes):	76920
Entropy (8bit):	5.315135101968235
Encrypted:	false
SSDEEP:	768:4ztzOpKAiSHlkXRfuScNANA2AJXMz4nsRM3pmn7d6acRbtGdsRkbZ/fmMbM0ZhHw:4RzLS2VdcNANA2AJ19jRkbZ/frOL4D4T
MD5:	0D733B58CBA7F467CDB30B07AA521264
SHA1:	9131470D6A9BC2A6D1A8385B727A0E88E0779AFB
SHA-256:	57103BC25D647144E5613E9E68D5A9132929EF4502108E4EAE900139B5455926
SHA-512:	4D9A88371D1F561FB2BA45C505F2DBD4F28C9EE2AAFCDFF97B80D4B0EB3D242BA46C2BEAF0633D6F8E9DE6252F85DCBC9D1AF5C005493F0F302A38A9C844194E
Malicious:	false
Reputation:	low
Preview:	./@preserve.Version 2.15.1./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.15.1"]=window["WAFQualtricsWebpackJsonP-cloud-2.15.1"]\|\|[]).push([[12],{17:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"f",(function(){retur

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17998)
Category:	dropped
Size (bytes):	18618
Entropy (8bit):	5.640300193320173
Encrypted:	false
SSDEEP:	384:MolxP/aWS4dj4lfFVqEBSmur4+O5Un8OxuTtLRsFOuohfa8wnaeDg3z6MVRegEW9:DlMWSKcKDOhtLCONa8qae0rVReZWrPJ
MD5:	59D00FA56FB8B29068D96A431A52AE7B
SHA1:	9F8C5455383C49873A60CAEBACB1DECAAE0F909E
SHA-256:	76E6DCC56BA185BAB0F2E68B485146BC42E79395A67DF0F7C23A18790677DE09
SHA-512:	3BFF8DCB6FDF2B4DE78211D636AE0310891FE6653CD1C6CADE0AE8039AC0EB67659DA142040B6290133E0D928FA1D22061F0A043D86F232AD40527A80B30F7EE
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var c=this\|\|self,C=function(d){return d},m=function(d,a){if(!(a=(d=null,c).trustedTypes,a)\|\|!a.createPolicy)return d;try{d=a.createPolicy("bg",{createHTML:C,createScript:C,createScriptURL:C})}catch(f){c.console&&c.console.error(f.message)}return d};(0,eval)(function(d,a){return(a=m())&&d.eval(a.createScript("1"))===1?function(f){return a.createScript(f)}:function(f){return""+f}}(c)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var dB=function(d,a,C){if(d.length==3){for(C=0;C<3;C++)a[C]+=d[C];for(C=(d=[13,8,13,12,16,5,3,10,15],0);C<9;C++)a[3](a,C%3,d[C])}},a2=function(d,a,C){return d.PE(function(m){C=m},false,a),C},cb=function(d,a,C,m,c,Z,e,F){return(F=X[(Z=(a=[27,-7,-92,-77,46,39,a,14,55,37],d&(e=f$,7)),m).V](m.uZ),F[m.V]=function(f){Z+=6+7*d,c=f,Z&=7},F).concat=function(f){return((c=(f=(f=C%16+1,+a

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4597), with no line terminators
Category:	dropped
Size (bytes):	4597
Entropy (8bit):	5.792386907972656
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUPXdil6x:1DY0hf1bT47OIqWb1CXdilg
MD5:	2A0F423B5CB8FB05775527CA6FBE8474
SHA1:	FABCEEE99AA0CC6BDAB637A39B9AC47EC6EF968F
SHA-256:	852DCEC632851B7B1B1A47EDAC53F867D4E59DD2BB7FF4C8CBBF78D6691AAFD9
SHA-512:	3B4AEAD0A782CCCF8DA8C932F6A5F983E3A23E596D7293E285F5A05B2957670BD5E2FB4D407A72932A92A8F221052AFC840CC39298221ECC9D99D98E13F28BBA
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1250)
Category:	dropped
Size (bytes):	1283
Entropy (8bit):	5.109418824656296
Encrypted:	false
SSDEEP:	24:YozBbSHclra7w/Wbiz7vBmGa1RIYTu9cwMY3l0SSCzfIZ7kpbewaC:YozhSHc61euMY69cQiSd07kpydC
MD5:	D4FB89083795A6C5233AECB433094BE8
SHA1:	4FCB3E42129FBAE2DFE8F47B11FA46EF43B02BD1
SHA-256:	679D26A3CA897FB7D98C05FF0C8E97B249E731B5E40FB5995D3139B4281BB298
SHA-512:	EACB391C09F1417E08AF2A6170AC144AA6F1EF022181610DA64E610465BF94296D182762829BE8ACB0ACF0A3D426D7F8D5F37B679F9C318BA521507DC0E7ED14
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.DCL=t():e.DCL=t()}(this,function(){return function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:fu

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.303519320189195
Encrypted:	false
SSDEEP:	24:E1mXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1mXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	5A8457D38765353E91A6CE89E45965B1
SHA1:	38624C9C36F34DC4C640AC3455D20B2CB26B0F84
SHA-256:	93D2AA96B40FBCF6D45E7BB4BB02C2C7B0413BB365D76F9E32A879A6BD4FE97E
SHA-512:	B622DAAAF54B207891330AABCCA615631A537255A9CB020435395627D7A07F4B1A4736FEC096B6F753BE29CAE78DB6C4E988091CE94A6A1889259A12FBA8F712
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/d9418494\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32766)
Category:	downloaded
Size (bytes):	46308
Entropy (8bit):	5.35661763154835
Encrypted:	false
SSDEEP:	768:jhsHSr5VtIYIGa6IY9mkYhhm7S/5I0XlTCrOoboxI5WdPD6DrVySysmy/Yu:jpjtIYIFh0bYhhYS/y+VCdsHGISl/
MD5:	710BEA8BE780F21A6A985DDEAC1109AA
SHA1:	8AE8196608D439BE0E38B3F4A1A6245543E99325
SHA-256:	6D6A5200D473D340D2A995D23A9B5BD8090F2FE1ABA0B52787A02C442E507684
SHA-512:	203C85EE6C1376BA4F8724CB7A9E51BCFF54F8C6EB08721E37449F0A7EF315FC23511DC3404453E45B2EB64572EAC67D514E0F7F2D5DE8DE3A1C4B2FAA59F16F
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/EX7f8dfe07dfd547b7a9f546be5b8b3b19-libraryCode_source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/EX7f8dfe07dfd547b7a9f546be5b8b3b19-libraryCode_source.js`..function AppMeasurement_Module_Media(e){var t=this;t.s=e,(e=window).s_c_in\|\|(e.s_c_il=[],e.s_c_in=0),t._il=e.s_c_il,t._in=e.s_c_in,t._il[t._in]=t,e.s_c_in++,t._c="s_m",t.list=[],t.open=function(e,n,a,i){var r,o={},c=new Date,s="";if(n\|\|(n=-1),e&&a){if(t.list\|\|(t.list={}),t.list[e]&&t.close(e),i&&i.id&&(s=i.id),s)for(r in t.list)!Object.prototype[r]&&t.list[r]&&t.list[r].R==s&&t.close(t.list[r].name);o.name=e,o.length=n,o.offset=0,o.e=0,o.playerName=t.playerName?t.playerName:a,o.R=s,o.C=0,o.a=0,o.timestamp=Math.floor(c.getTime()/1e3),o.k=0,o.u=o.timestamp,o.c=-1,o.n="",o.g=-1,o.D=0,o.I={},o.G=0,o.m=0,o.f="",o.B=0,o.L=0,o.A=0,o.F=0,o.l=!1,o.v="",o.J="",o.K=0,o.r=!1,o.H="",o.complete=0,o.Q=0,o.p=0,o.q=0,t.list[e]=o}},t.openAd=function(e,n,a,i,r,o,c,s){var l={};t.open(e,n,a,s),(l=t.list[e])&&(l.l=!0,l.v=i,l.J=r,l.K=o,l.H=c)},t.M=func

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
URL:	https://px.mountain.com/st?ga_tracking_id=G-1111111&shpt=Request%20a%20Demo%20-%20HighQ%20%7C%20Thomson%20Reuters&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22G-1111111%22%2C%22shpt%22%3A%22Request%20a%20Demo%20-%20HighQ%20%7C%20Thomson%20Reuters%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&available_ga=%5B%5D&hardcoded_ga=G-1111111&dxver=4.0.0&shaid=36732&plh=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo&cb=53431726174497960term%3Dvalue&shadditional=googletagmanager%3Dtrue&shoid=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513)
Category:	downloaded
Size (bytes):	3576
Entropy (8bit):	5.3356090423770475
Encrypted:	false
SSDEEP:	48:1ywPnLqgwfSKDhLmeJpMZ+K7zmgnpiMCntcxTjgzCH9UCtmSj4GCSpZbK4R8RhXY:8TXOzaeNUz4Gh3tv2
MD5:	E30B4DBF010A765D5355E977264AE7CC
SHA1:	0DBE70E357CEB8DD2F7D7E110D573631F40F5C92
SHA-256:	AE66CBB491A4C3399CFD27DA20655D67604377CCC03E79F20736EB95F80A044F
SHA-512:	EF66FA5FBA46E67EE224D12E39612C3C8CE0F14F003AB38F96697DFBC1B9E66923F4C9A621632F116A8088D618F9064B6794454CF9EE37A6ADB9CA6FA4C0B734
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc/clientlibs/granite/jquery/granite/csrf.min.js
Preview:	(function(d,q){d.Granite=d.Granite\|\|{};d.Granite.HTTP=d.Granite.HTTP\|\|{};var e=null;d.Granite.HTTP.externalize=d.Granite.HTTP.externalize\|\|function(g){if(null===e)a:{var h=/^(?:http\|https):\/\/[^\/]+(\/.)\/(?:etc\.clientlibs\|etc(\/.)\/clientlibs\|libs(\/.)\/clientlibs\|apps(\/.)\/clientlibs).\.js(\?.)?$/;try{if(d.CQURLInfo)e=CQURLInfo.contextPath\|\|"";else{for(var l=document.getElementsByTagName("script"),k=0;k<l.length;k++){var m=h.exec(l[k].src);if(m){e=m[1];break a}}e=""}}catch(p){}}try{0===.g.indexOf("/")&&e&&0!==g.indexOf(e+"/")&&(g=e+g)}catch(p){}return g}})(this);.(function(d){function q(){this._handler=[]}function e(a){var b="//"+document.location.host,c=document.location.protocol+b;return a===c\|\|a.slice(0,c.length+1)===c+"/"\|\|a===b\|\|a.slice(0,b.length+1)===b+"/"\|\|!/^(\/\/\|http:\|https:)./.test(a)}function g(a){d.console&&console.warn("CSRF data not available;The data may be unavailable by design, such as during non-authenticated requests: "+a)}function h(){var a=new q;r=

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	935
Entropy (8bit):	4.170841226104828
Encrypted:	false
SSDEEP:	24:tTvRumKJlOjCabuoRN0qoNEGVVImVQ1r8LzM1AW:17KJAjCa6QNCNpPLzu
MD5:	7517937A7CDC3CD268CD85DA114A98BA
SHA1:	9DFC4ECD94CB1661AC7664BDFA5D136960884997
SHA-256:	044E2B7338101925DD047F3111D840726A4BB8C160BB6668EE86CC8F4E69EDFA
SHA-512:	1D42D8E17386C5DC02B0425875F98FE4F01849DEA70CB6F080312C9E3DBE9CCC4CAEA461216F8C3E8BD32D94B151D38B03A55D43294C62802BD4C7D444774ABA
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/support-icon-v1.5.svg
Preview:	<svg width="18" height="16" viewBox="0 0 18 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M9 16C6.125 16 3.5 14.5 2.0625 12C0.625 9.53125 0.625 6.5 2.0625 4C3.5 1.53125 6.125 0 9 0C11.8438 0 14.4688 1.53125 15.9062 4C17.3438 6.5 17.3438 9.53125 15.9062 12C14.4688 14.5 11.8438 16 9 16ZM6.28125 5.1875V5.21875C6.15625 5.59375 6.34375 6.03125 6.75 6.1875C7.125 6.3125 7.5625 6.125 7.6875 5.71875L7.71875 5.6875C7.75 5.59375 7.84375 5.53125 7.9375 5.53125H9.75C10.0312 5.53125 10.25 5.71875 10.25 6C10.25 6.15625 10.1562 6.3125 10 6.40625L8.625 7.1875C8.375 7.3125 8.25 7.5625 8.25 7.84375V8.25C8.25 8.6875 8.5625 9 9 9C9.40625 9 9.71875 8.6875 9.75 8.28125L10.75 7.6875C11.3438 7.34375 11.75 6.6875 11.75 6C11.75 4.90625 10.8438 4 9.75 4H7.9375C7.1875 4 6.53125 4.46875 6.28125 5.1875ZM8 11C8 11.5625 8.4375 12 9 12C9.53125 12 10 11.5625 10 11C10 10.4688 9.53125 10 9 10C8.4375 10 8 10.4688 8 11Z" fill="#404040"/>.</svg>.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44539)
Category:	dropped
Size (bytes):	1043927
Entropy (8bit):	5.508979525698392
Encrypted:	false
SSDEEP:	12288:7ITc7q3sNV6skT3XRkVYKjZKjQhMwHGXZWO6HfbBeBI2O3XP2wqOnH/0QOknHnS4:7IdtNQh3HfbBeDfzKeaQfzKeaL
MD5:	F332723DC6F13794D713DD7EF2B03D15
SHA1:	93779DC599425F664881C45B55738C2D3BB6CE91
SHA-256:	CB6DCA692A64402FDEE3048DB811612A3534C5AB1EFA1C593E47191CBCA0BFAC
SHA-512:	990BB8C00A22E8E032AB02147E2FB79A961C199392C29BB6284CDDDC70EE9D2A29D50E43058263E40388A0275CF11BC644ABA93D403D42173AB6BEDD0F9FAE02
Malicious:	false
Reputation:	low
Preview:	!function(r){function t(t){for(var o,e,l=t[0],i=t[1],p=0,n=[];p<l.length;p++)e=l[p],Object.prototype.hasOwnProperty.call(a,e)&&a[e]&&n.push(a[e][0]),a[e]=0;for(o in i)Object.prototype.hasOwnProperty.call(i,o)&&(r[o]=i[o]);for(h&&h(t);n.length;)n.shift()()}var o={},a={2:0};function e(t){if(o[t])return o[t].exports;var a=o[t]={i:t,l:!1,exports:{}};return r[t].call(a.exports,a,a.exports,e),a.l=!0,a.exports}e.e=function(r){var t=[],o=a[r];if(0!==o)if(o)t.push(o[2]);else{var l=new Promise((function(t,e){o=a[r]=[t,e]}));t.push(o[2]=l);var i,p=document.createElement("script");p.charset="utf-8",p.timeout=120,e.nc&&p.setAttribute("nonce",e.nc),p.src=function(r){return e.p+"clientlib-dependencies/resources/"+({4:"polyfills-dom",7:"vendors~polyfills-core-js"}[r]\|\|r)+".js"}(r);var h=new Error;i=function(t){p.onerror=p.onload=null,clearTimeout(n);var o=a[r];if(0!==o){if(o){var e=t&&("load"===t.type?"missing":t.type),l=t&&t.target&&t.target.src;h.message="Loading chunk "+r+" failed.\n("+e+": "+l+")"

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 193 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2598
Entropy (8bit):	7.24493548656537
Encrypted:	false
SSDEEP:	48:uAO6A9uJRqzkHioklJabaQSPI6frFXaNu+eStx0b5sn9:ltJwzUiXaCPI6Ajebe9
MD5:	FE7500E2F7F1AE9AD381AB2949C23BFA
SHA1:	01394C38C599B99D1C5CDDF93B76B6ED38C5B084
SHA-256:	E67E13B7502AAEBDBBC3C75E443C7EDF0473326DC7BB8CD5F271DC522F201A2B
SHA-512:	62209C708418C59EA5EBF77D0BE145FE50F229C8239A7FF1ABE4A68910205FEBDD40229BE9342FF82061069B7DEC46EE336100979D15C412479F827BDA8AA6C1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_tr_h_lg_rgb_ps.png
Preview:	.PNG........IHDR..............9......PLTEGpL....g..d..d..e..e..e..d..h..g..f..s..g..i..f..o..d........j..d..d..f..g..d..e..d..q..e..e........m..e..j..j..e..h..e.....f..f..e..d..d..d..e..d..d..d..u..d..d..f..d..e..d..f..d..d..f..d..g..j..f..e..m..f..e..d..e..k..e..e..f..d..f..d..d..d..e..d..e..d..e..d..d..d..e..d.@@@@@@@@@EEEFFF@@@OOO@@@@@@DDDDDD@@@@@@@@@AAABBB@@@AAAUUU@@@AAA@@@@@@@@@@@@@@@AAABBB@@@@@@@@@@@@AAADDD@@@@@@DDD@@@@@@@@@BBBEEE@@@@@@@@@@@@@@@CCC@@@HHH@@@@@@@@@@@@CCC@@@@@@.d..d..j..e..f.@@@@@@FFFNNN@@@@@@@@@AAA@@@AAA@@@@@@BBBAAAAAAAAA@@@@@@AAA@@@@@@@@@@@@DDDAAA@@@@@@fff@@@.e..d.AAA@@@@@@CCC@@@JJJfff...@@@AAAAAABBBCCC....e..q..e..d.AAAAAABBB@@@@@@AAA@@@BBBDDDBBB@@@.d..g..d.@@@@@@@@@@@@AAA@@@AAAAAA@@@PPP.e..g..e.@@@AAA@@@@@@@@@@@@.d..f.AAAHHH@@@.d..d..e..d..d..d.AAAAAAAAAAAAAAA@@@.d..d..e..e.QV.....tRNS../.wv.5.#.n.6.x.u...Y.s%...`X...N..T,O.!D2e..dL......hg.'....*.\~..H....]?+.....y.=..B...........$8........i.....Z.....+..&...;!....3..cv..D.....W.....7.?j...5R\:..J..G....

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	31666
Entropy (8bit):	5.397564672661937
Encrypted:	false
SSDEEP:	384:npzjVkjElIVonxb6qOq+WZT8HjiyUv5aYe9hiVw6rCRNbzgM/BwNwgmx/tXTxw4k:nxjNl3x8XBHa4iVwmytzimx/hcg6/K3w
MD5:	B0A74586B183DB7082EA48B6EA43EDE3
SHA1:	5CEC77CD9C2A7EC472327533B0E32D2D5DA8634D
SHA-256:	36CB859BE5A639C678F317D76C5C589DA1B5E08820FCCE41D67C38B517EFA959
SHA-512:	88A1BA500A6CA668014C54D442DCA1487C1FFBE0E57BAA53A4F4E9C0038F12B981F3A1FC38B598EA4822EB0E086FAF0A4C5DC8601C9BB91C2B6B6BFC3E0945A2
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/d9418494/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=ba(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (567)
Category:	downloaded
Size (bytes):	24157
Entropy (8bit):	5.363272575684598
Encrypted:	false
SSDEEP:	384:ljk9w/4EPgHoj8Az3iPFiS0ED6lEsH3yQVyF/6WC3SJ4JcMNN3ja3jfUDLZQSQ5U:ljk9w/4EPgHoj8Az3iPFiS7D6lEsH3yW
MD5:	9DB973972EDB3F06F7748DA88BF92A83
SHA1:	B2C3E19A8827A7D5AAE93F6EE94560073FAF18B6
SHA-256:	A8631AA205C84CBFD6E3662535669FDC6BBAB33E743D9BAAD9A122643CE5B456
SHA-512:	43D842538D2A7DD6A96A315F383D684D1B28C11419374354CF69AFD972B36E6675E110AF01DB00F087D219121EDFFE9FCE3BF32C2E9F2C69F57B9666D977E855
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-base.min.js
Preview:	Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector);Element.prototype.closest\|\|(Element.prototype.closest=function(v){var m=this;if(!document.documentElement.contains(m))return null;do{if(m.matches(v))return m;m=m.parentElement\|\|m.parentNode}while(null!==m&&1===m.nodeType);return null});.(function(){function v(h){function w(b){d._config=b;b.element.removeAttribute("data-cmp-is");x(b.options);B(b.element);if(d._elements.item){d._elements.item=Array.isArray(d._elements.item)?d._elements.item:[d._elements.item];d._elements.button=Array.isArray(d._elements.button)?d._elements.button:[d._elements.button];d._elements.panel=Array.isArray(d._elements.panel)?d._elements.panel:[d._elements.panel];(b=window.CQ.CoreComponents.container.utils.getDeepLinkItem(d,"item"))&&!b.hasAttribute(r.item.expanded)&&.c(b,!0);if(d._properties.singleExpansion)if(b)for(var e=0;e<d._elements.item.length;e++)d._elements.item[e].id!==b.id

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64441)
Category:	dropped
Size (bytes):	591445
Entropy (8bit):	5.3012849626802545
Encrypted:	false
SSDEEP:	6144:vfpV1vSqMvhVnMVnxVnDVnHVnDVnlAVnbnVnoVnvVnqVnqYVn9KVnCVnCVnwvocr:ZbaXH3VScbwp+
MD5:	9DCC7B2141E55A00D80278F44CB11DAC
SHA1:	C2C28C34CC921D5EBC75BC5510F2D00607D28903
SHA-256:	CB855913AE61EF6C5975E97B32473EFA319E3B80F82249A393C9135A59D0177A
SHA-512:	C5E7504F17C2666B38667D5C68C5C25967CC9747061A4CBB823F8C11C3955A34FCF10DBC530026963773929B9464125C5E0BB4A38509424124594F4E84AAC962
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/etc.clientlibs/uefalcon/clientlibs/",n(n.s=298)}({298:function(e,t,n){"use strict";n.r(t);n(299),n(3

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1577
Entropy (8bit):	5.216424355894799
Encrypted:	false
SSDEEP:	48:YAhwAeBkCGg3XHdnnCWdhOytl9CPlYpCf4:9PeBktg3XHdnn9fOy9CPlYpCf4
MD5:	2ED566DFF74BB3CA46AAC4D7CBF78D59
SHA1:	EE55FD262CB4B03ED6647DDF592D84B392E897DE
SHA-256:	CA27E07E6920B45F742851CF3733175435606A1953F6EEC3273EF428A2ED5991
SHA-512:	AC5AC84BCE6F33C0DCC636A849219DE36E905DC3FD4156C6A727B6C9BBDA487B5209EE8EB33EC9E0ED63C6F26208FDF6030DEC87C0ADEA0BEAAC329EF5808C33
Malicious:	false
Reputation:	low
URL:	https://data.schemaapp.com/ThomsonReuters/aHR0cDovL3NjaGVtYWFwcC5jb20vZGIvVGhvbXNvblJldXRlcnNfU2hhcmVkRGF0YUl0ZW0
Preview:	{"@context":"http://schema.org","@type":"Organization","contactPoint":[{"@type":"ContactPoint","contactType":"Call Us","telephone":"+1 646 540 3000","name":"Call Us - United States","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint"},{"@type":"ContactPoint","telephone":"+1 647 480 7000","name":"Call Us - Canada","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint1"},{"@type":"ContactPoint","telephone":"+44 20 3197 3000","name":"Call Us - United Kingdom","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint2"}],"sameAs":["https://www.youtube.com/thomsonreuters","https://www.linkedin.com/company/thomson-reuters","https://twitter.com/thomsonreuters","https://www.facebook.com/thomsonreuters","https://www.youtube.com/user/ThomsonReutersLegal"],"logo":"https://cdn.cookielaw.org/logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_t

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22502)
Category:	dropped
Size (bytes):	22503
Entropy (8bit):	5.3081657913101346
Encrypted:	false
SSDEEP:	384:n83CmwWtdvD5ABwXCX+3rpheTJ8eMAB6LxbnmcY2Jo7pJ:ndmw0D5ABwXhdheTJHexzeJ
MD5:	F9D299A63749C9A58C948201F85F4412
SHA1:	4878DA695F0D388ED248E3FE48A2261A2547D4E8
SHA-256:	872D4E2AE170A25A803A61B0DDE9FE4CE7AE5B80BD59E333EB139161EC22E495
SHA-512:	466469EBEF67587E45D2B49431B164C810D4BD3FFC48D71CEF4238E1E2ECE435D166A5AE7BAFBEC153E65A8E96FC77ADAB21078E984D5F60627C3A4107D6BDC8
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=function(t){"use strict";var a,o,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}};(g=v=v\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=i=i

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4625), with no line terminators
Category:	dropped
Size (bytes):	4625
Entropy (8bit):	5.797841772343459
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUqXciYY6:1DY0hf1bT47OIqWb1nXciJ6
MD5:	077B6967B05E1B6BB2766609137A381C
SHA1:	C0C68BF4B55D4B9E23003DF91FB5821FE8CA5AD0
SHA-256:	9E338332F05C94E417332910616C095BEEF36759FFEDDA219B7C66B05B5E3C6C
SHA-512:	5BFACB3D60243A148930DFFD9CE0F5880E0F62B18FB2BCEDAD58E4A765300254660ADAD87D5C9FD792A8642F3BE06C58C36FB9226426DCD3B670016D07024A51
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (553)
Category:	downloaded
Size (bytes):	3618
Entropy (8bit):	5.336332106774489
Encrypted:	false
SSDEEP:	48:5XePPnLjEwu0/dOdWzL5eJpMRcI28tYXCntpngzCH9UumKs3Es3PeoeFmjfl1hn7:5++angz4MNrmBas3yBAI
MD5:	56934E461FF6C436F962A5990541A527
SHA1:	646455C5A2FB79B49F90AE33880BA26F85EBCF41
SHA-256:	515394110439A7AAFE62229BBDA44A768A1D938A2053D92764FAE16B2ABA5E81
SHA-512:	B1055AE1463E7CCF78B785BF7603F139C71C3859F1EBEFC6EC5608EE3B6F064ECB2D81EFB69732AEB4ABE8B5AEA71184C225C8BFECEFD37263EDF749660482C3
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/clientlibs/granite/jquery/granite/csrf.min.js
Preview:	(function(d){d.Granite=d.Granite\|\|{};d.Granite.HTTP=d.Granite.HTTP\|\|{};var f=null;d.Granite.HTTP.externalize=d.Granite.HTTP.externalize\|\|function(g){if(null===f)a:{var n=/^(?:http\|https):\/\/[^/]+(\/.)\/(?:etc\.clientlibs\|etc(\/.)\/clientlibs\|libs(\/.)\/clientlibs\|apps(\/.)\/clientlibs\|etc\/designs).\.js(\?.)?$/;try{if(d.CQURLInfo)f=CQURLInfo.contextPath\|\|"";else{for(var h=document.getElementsByTagName("script"),k=0;k<h.length;k++){var l=n.exec(h[k].src);if(l){f=l[1];break a}}f=""}}catch(p){}}try{0===.g.indexOf("/")&&f&&0!==g.indexOf(f+"/")&&(g=f+g)}catch(p){}return g}})(this);.(function(d){window.Granite.csrf\|\|(window.Granite.csrf=d(window.Granite.HTTP))})(function(d){function f(){this._handler=[]}function g(a){var b="//"+document.location.host,c=document.location.protocol+b;return a===c\|\|a.slice(0,c.length+1)===c+"/"\|\|a===b\|\|a.slice(0,b.length+1)===b+"/"\|\|!/^(\/\/\|http:\|https:)./.test(a)}function n(a){window.console&&console.warn("CSRF data not available;The data may be una

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18683), with no line terminators
Category:	dropped
Size (bytes):	18683
Entropy (8bit):	5.0751432780517
Encrypted:	false
SSDEEP:	384:2GwJTOiFAtkzBeynnnYKBrNrwrRrd4DreshDweKB6PVUZFF7D8um/F:D8TOiFAqBeknPpMtx4DqshDweKYKFF7O
MD5:	50D2A8B41AC2B5C951B7A33FBBE5B48E
SHA1:	B1DFEFE7B5CEDCB3E4BF2FC8E50F0F8FE1C44A50
SHA-256:	3D5190A15CC2AD4AF4AEC089BB74238D01762520F17FD8EB5EC1E6E872CA7F6B
SHA-512:	566BE3F507B81458AC942F1C304C804DE5BE6BF8C986332423A25CE8CD38781A7BE29CD36295569410389EA896F79F5D8152560925A03EC3077C07D746D01925
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="/etc.clientlibs/uefalcon/clientlibs/",o(o.s=305)}({2:function(e,t,o){"use strict";function n(e,t){var

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	640
Entropy (8bit):	4.306049766653289
Encrypted:	false
SSDEEP:	12:trCv4/RuCYSFDTx7QlK00Nrn7+XoceNjpxrmVj3LpLlyXrWuvQnhIAW:tuv4/RuqDT6l4NrCYckpxrmJ3LBlwdQa
MD5:	2B7A7DE3C96F2B4F01069AC9CCEFAEDA
SHA1:	2A4E17487BBB59565DBA2080FF539919556B1A7A
SHA-256:	11F5E74C0E46E2B78A1E06F95D58CCC707DE4E9BDBF6A0A264CE038020CB3820
SHA-512:	E4D25CC5EC31BB1E698BA317F9838DBF2753EB2874B7D6B37981B52BF6804DD4D179B071C83A454241F4E7AB2457841810C2E1D58070223C7C9D96EB6CE275E5
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/search-icon-v1.5.svg
Preview:	<svg width="17" height="17" viewBox="0 0 17 17" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M13 6.5C13 7.9375 12.5312 9.28125 11.75 10.3438L15.6875 14.3125C16.0938 14.6875 16.0938 15.3438 15.6875 15.7188C15.3125 16.125 14.6562 16.125 14.2812 15.7188L10.3125 11.75C9.25 12.5625 7.90625 13 6.5 13C2.90625 13 0 10.0938 0 6.5C0 2.9375 2.90625 0 6.5 0C10.0625 0 13 2.9375 13 6.5ZM6.5 11C8.09375 11 9.5625 10.1562 10.375 8.75C11.1875 7.375 11.1875 5.65625 10.375 4.25C9.5625 2.875 8.09375 2 6.5 2C4.875 2 3.40625 2.875 2.59375 4.25C1.78125 5.65625 1.78125 7.375 2.59375 8.75C3.40625 10.1562 4.875 11 6.5 11Z" fill="#404040"/>.</svg>.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6114
Entropy (8bit):	4.955304967425108
Encrypted:	false
SSDEEP:	96:npyIr40wULONUuGbCBHxY9ZHUfCZakF1a2qs+XFqO2aCvjRjGA7jJjiZ5M4SQ:FmYOCdbnZ0fC0PdsaFqaCLRxJgFv
MD5:	69656D56B0ADF9E6D25BF12DB1A72C3C
SHA1:	77E351B1C2C22805277D9AB54ECB4D999C8E529A
SHA-256:	886C55949150D100F5AB35E12D33D340DC5D48770F331DFAB15212A957337D1F
SHA-512:	639B96871EE73BECA49A3BF1D6ED4F888DF39A24A585978F17FE03A1C8B2386BDBED1F117035D2D12FAAAA5CE044090FD23D0F0B96B7C5253FD198F7CADAA0A3
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202308.1.0","OptanonDataJSON":"88f9c6ac-fbaa-4d32-a2e8-ad5925270c35","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"0f60c065-5ea4-49a7-8e40-0501426d035f","Name":"Global Opt In","Countries":["tw","ma","in","jp","kr","za","cl","my","co","ca"],"States":{},"LanguageSwitcherPlaceholder":{"default":"en","zh-Hant":"zh-Hant","pt":"pt","ko-KR":"ko-KR","es-CL":"es-CL","fr":"fr","es":"es","ja-JP":"ja-JP"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Standard Template","Conditions":[],"GCEnable":false,"IsGPPEnabled":false},{"Id"

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3442), with no line terminators
Category:	downloaded
Size (bytes):	3444
Entropy (8bit):	5.139779092713654
Encrypted:	false
SSDEEP:	96:/snIQwsx1LcT3+MJRjBJcWYErFZWJCkH3WgmIqJmaF:sIFA1E3LDZuxXWgva
MD5:	32CDF627C1BB8DEA237F0752FFA8A385
SHA1:	2AFEBFA2E6EBC2FE77BB12C65BC061297E24DDA3
SHA-256:	07AEF3F9371C8C6001FAC50469EBA07549E562B7F1D67394F27C1A20F917FAAC
SHA-512:	4C2C417A6C09618BB09CCA1AC25E17B5922E872539328642711BCA4F9CA81579774D9BB43CBDA82398DB83AB6EF216243DE529F59D2F6CE927B426FAC1885AF5
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-recaptcha.min.js
Preview:	!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(o,r,function(t){return e[t]}.bind(null,r));return o},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/etc.clientlibs/uefalcon/clientlibs/",n(n.s=301)}({301:function(e,t,n){"use strict";n.r(t);n(302)},30

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	738
Entropy (8bit):	5.051615524404409
Encrypted:	false
SSDEEP:	12:2SSSlxYgE+lkf0ZJnnYpAtexyY91kIDxRR1DMn10F4+EoijgQ4dlSsNM9q40AsOy:2GxpErfOtwx1kIDxRRJM57o2gQGlSsNT
MD5:	CC91D15296E99E46E25DEB15CD670AC8
SHA1:	3B7AA1E9028C3F173C52F2FBBCD40B1C113C0E1F
SHA-256:	88949BFEECD2D22696D3C4D48F7B8927AAD06B0F0C69B5B5640860DFC1DAA3AE
SHA-512:	7A8C033A6D42D8258530A2A3CD29C6BB851BC7ABA1A7B9801C2641A5C7E8645C2155F6FDAA6DB4EB775C49C424B04E345F5806D04608483D6711B867BD2437BD
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/emcm/components/forms/form/sixsense-clientlibs.min.js
Preview:	(function(g,l){function k(b){var f=[],c;for(c in b)if("object"===typeof b[c]){var a=k(b[c]),e="product"==a["0"].name?a["0"].value:c;a=a.map(function(d){var h={};h.name=e+"_"+d.name;h.value=d.value;return h});f=f.concat(a)}else a={},a.name=c,a.value=b[c],f.push(a);return f}l(g).ready(function(){try{var b=g.getElementById("eloqua_form");if(!b)return;var f=b.parentNode;var c=JSON.parse(localStorage.getItem("_6senseCompanyDetails"));if(!c)return}catch(e){console.error(e);return}b=[];for(var a in c)"segments"!==.a&&(b=k(c[a]),b.forEach(function(e){var d=g.createElement("input");d.setAttribute("type","hidden");d.setAttribute("name",e.name);d.setAttribute("id",e.name);d.setAttribute("value",e.value);f.appendChild(d)}))})})(document,$);

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31988)
Category:	dropped
Size (bytes):	70103
Entropy (8bit):	5.350960946609932
Encrypted:	false
SSDEEP:	1536:L5i0S1TpywbZi31SPTnODPEGnVbg94ePcwD4wP1nN69X1SiraqXztGV51Au+:lY7ZbpwDw1y
MD5:	459A293140296A7DD51DABE839A65DD0
SHA1:	845297A9FCE629C6717ECE092449F242AAAEEBF3
SHA-256:	13122B3FD48D530470D735824C63B0B25A895931F5728921F8CC1EB5848FE2BA
SHA-512:	2073062401E4C141A83A4AEB1641FFFBEB87FA89C91C05059D6A60E5EE08522E9D889C72D16529153A4F96DE10B63F4E17B50AB661483D24D5E59833171FB970
Malicious:	false
Reputation:	low
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},C={},T={},F={},x={},A={},I={},M={},U={},L={},P={},N=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},D=this&&this.__extends\|\|function(){var t=function(e,n){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])})(e,n)};return function(e,n){function i(){this.constructor=e}if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");t(e,n),e.prototype=null===n?Object.create(n):(i.prototype=n.prototype,new i)}}(),O=this&&this.__assign\|\|function(){return O=Object.assign\|\|function(t){for(var e,n=1,i=argument

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 792 x 446, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	130505
Entropy (8bit):	7.982830956186414
Encrypted:	false
SSDEEP:	3072:PLqEFkKHg/VUtgAG7CjPOqeNrFD4gpjBeJ+qNeun:Tq6kgg/ig7v9pHjBesqNew
MD5:	4AFF3EC37555713DB227AC948ED5C981
SHA1:	EFF85A223ED1ECC39203C6E149832A749310BE0F
SHA-256:	18EB8D9F23B4DBF9FBDA02C48B0BBEF012EB8DAD7FF6C7941B776BBE36BB5423
SHA-512:	61272CE5DC873536B135ED78AF136BD36B48479F89314270A3BADA77C785D554302D163DF4A9A0CB9B36EB7BFC9D177468DFD1522B29DC80F9865ACEA12FE795
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs.................sRGB.........gAMA......a....^IDATx.........s.k.. ..HB.`A...V..(._....^.k...R..=.A.D.qw}.K.\.?g..+.v....{..wwg...s..]. .H".$.H".$.H".$..E$.D.I$.D.I$...4VUa...b.,4........P.."i{...H".$.H".$.HZK.o.W?..5...q1...Q>l.D.$Z..$.H"...L..IK1..D....#........]....b1t...1\|.....C.....E...!V...sg.n.V,.......%.644`...h5..d2OV)//Gqq.2L..v.%].tA^^.ZS..F4Le'#.H"i}iOc.....z..1..iO.gI.....%.....QYY....gX.b........s.1...~g...+/...FMM.+.Inl.Fy.w..'.l.`....$.b....~~.N..o./~.s\|;o....s.q.....P..M.L.......B.RTT._..W.0a..\|}C=...?...?Gss3...<....?Z..%.F.Tv2".$...4.D....[%2.T..N.H2.B./).8.M..b\..NRnX...9.`.04....V......g\.L.2..+v........$T>_}......;1}.....o....!..."1D.I$.D.I$.D...)<.5.tP..U.w.u..Xn..\p....W..!.b...-/..>inn..bijjB......f.)D.,%..g0x.Y...qQ.L4..bD.I$.D.I$.D.~d!..!B..M.....Ma]..........).....s>...d..Z4m[...K..v o....Zq....Gn.A../X^..I..B.v..D.I$..)...3...R.A......M.M.eC..}.......-..%.....6..H...Sb..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4566), with no line terminators
Category:	dropped
Size (bytes):	4566
Entropy (8bit):	5.786128766719514
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU4qhi0+9:1DY0hf1bT47OIqWb1pqhi0A
MD5:	5524CC09F130E97C8399BADAF348BA01
SHA1:	50F77797AAD01B95C0B7DEF3320CDD52CFE025A7
SHA-256:	E13D66E1E69AB870888D3A00D430BD8FA5003800DC7F2206153773A00E848615
SHA-512:	B320D8613D82545130CEF51D0894878A93E07E3BFD110BFC711E362AB9EFFF21CB101001C07A627B4FA684891919A6A7AC389C2818060BEBA366CDB46B744703
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32760)
Category:	dropped
Size (bytes):	362940
Entropy (8bit):	5.367781619700903
Encrypted:	false
SSDEEP:	6144:uZV17gljnSKTI/dEE1L1zPQuLVr3uwg2dljzSi:kV1k7S7/VzPQuL5uEzD
MD5:	2F666D973A89F966E0E5F7AB1C44EFA1
SHA1:	455B0D2A27D67F3A1701DC668FBEDD4AC1059498
SHA-256:	6C28070FBDB8552A154270E640E3EEA0244B0D0D6BC316A0ED7318FC232C1B4B
SHA-512:	FF614C407FDC8DDCB6AD4CF146749C56C7072FA1F5E166B87D47E3DDF650B2670852AF873E7DA0CA72ADD6191EB437C339D6F79407CA5293C1AE9CA3FE91CFCE
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/launch-f0760189cfc5.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-09-25T09:19:57Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN66420846c385475a9c8c2d936b38b2d5",stage:"production"},dataElements:{jobDescription:{defaultValue:"",cleanText:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.careers.jobDescription"}},userAccountRegion:{defaultValue:"",forceLowerCase:!0,cleanText:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.user.profileInfo.accountRegion"}},customProp5:{defaultValue:"",cleanText:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.custom.customProp5"}},totalBalance:{defaultValue:"

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	5.0122171962792645
Encrypted:	false
SSDEEP:	12:2DpeGXLsmyprd/umbdb+/9hXO1cDW/J1QWRoMEvWR1yQyadS6g8uLdARdxs:2D0GXARfWmx6/9ZO1yyQWRoFeR15y8VC
MD5:	1778E79223513F3EFBBB301CB67A2EBB
SHA1:	C5C1139A04EE0EEFAEAD48963F1E04850E83BD5A
SHA-256:	A15C7445269831BE1AC1FDCE58DD72789DD157295652688D25AE0C9B537F06C9
SHA-512:	1FEB3AE0FCECF9B75CE77741BC9F3FC2C34CF9801E12866AAB66BF97D96AE611D0EF420C612CC2E7408E4601BF47838DEAD3D6BE6C0F2F5375DC83335FCC7C86
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/emcm/components/structure/page/clientlibs-smartcrop.min.js
Preview:	(function(g,h){h(window).on("load",function(){g.querySelectorAll(".SmartCrop").forEach(function(b){var a=b.querySelector("img");if(a){var d=b.getAttribute("data-image-src"),e=b.getAttribute("data-image-srcset"),f=new Image;f.addEventListener("error",function(){if(d&&e&&(a.setAttribute("src",d),a.setAttribute("srcset",e),"PICTURE"===a.parentElement.nodeName)){var c=a.cloneNode(!1);a.parentElement.replaceWith(c)}(c=b.querySelector(".SmartCrop-warn"))&&c.classList.remove("u-hiddenVisually")},{once:!0});.f.setAttribute("src",a.getAttribute("src"))}})})})(document,$);

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	302
Entropy (8bit):	5.248797804215816
Encrypted:	false
SSDEEP:	6:5e4POurpqYitmzLwJEy268F5iRrQR1CWBaVGXeJ7HV:M4POepq4wiE8qEzCWMsXeT
MD5:	9E88FEDED40CE5C74EAD07FC1A89B569
SHA1:	D2D9F0291592A21D6360A2224A72F15DDCBA04D6
SHA-256:	742DF1ED9484AE932BC65FDDF61440ABF931814A7B3586AB3DDE57A35617DB77
SHA-512:	94D932414D6D9401845D78052E1E865DD5C3D83416E842DB97B0F37F2EB175E86645EEB0296F7EF7D8F49A000FE890DB0EBFF55F56DA4E0863EA9C4287DAAFC3
Malicious:	false
Reputation:	low
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[44],{1030:function(r,t,e){"use strict";e.r(t);var a=e(691),n=a.b.template;n.displayName="CoveoSearchResult";var o=n,s=a.b.rehydrator;e.d(t,"default",function(){return o}),e.d(t,"rehydrator",function(){return s})}}]);.//# sourceMappingURL=44.js.map

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
URL:	https://c.6sc.co/
Preview:	<p></p>

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (645)
Category:	dropped
Size (bytes):	792
Entropy (8bit):	5.157128355194952
Encrypted:	false
SSDEEP:	12:jvgeHhSRvvct/BeHhSRvOLXb3dhiomT6QmsnuWcaKYWx0tWUqFWdxL3n8mtPd:9Mnct/BsMq3Pio4nfuWccWwWUqFW373d
MD5:	FB1C0797B02B2CD11B05AFBF8FFF41D1
SHA1:	E8940C69A88D148F753261AAE3A4ED7D754DC856
SHA-256:	C4178F5EF5266AE1576AC7F5E0B8EFC945933996E054BAD6754C00EC9EB65864
SHA-512:	50D1D3C8CE42004830EEE34BB2BB0939CA2344C8A39B317A18C319C2B131C060F9683AEA9FEC2FF1B2601D631FD0BD2B0B8B7519F8AA5122B946EDA08C4D0165
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCfe32cc4532d941ffa076b0d824f6f537-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCfe32cc4532d941ffa076b0d824f6f537-source.min.js', "<script src=\"https://js.adsrvr.org/up_loader.1.1.0.js\" type=\"text/javascript\"></script>\n <script type=\"text/javascript\">\n ttd_dom_ready( function() {\n if (typeof TTDUniversalPixelApi === 'function') {\n var universalPixelApi = new TTDUniversalPixelApi();\n universalPixelApi.init(\"3u503kv\", [\"thm7oum\"], \"https://insight.adsrvr.org/track/up\");\n }\n });\n</script>\n\n\n\n\n\n\n\n\n");

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	32
Entropy (8bit):	4.625
Encrypted:	false
SSDEEP:	3:Mzxf5JoOMC1n:MzhoOM8
MD5:	02D22D8DA1B0C0182CFBEEE6DF3519CF
SHA1:	39F831288298E1D74BCCCB83AFC2407D04BD2C2B
SHA-256:	098EA1135D38ABB0B8560F1BBAFBF09AEC7B0CA3CB5F4259A4757E9EDCA75BA8
SHA-512:	A6023685DBF5C39621A0A4F329279D498CB0A889211BDBE418505A8E42210599B63974C9D801BE74C572C146D609BFCD514DF3671B79AC4C96CDA0D33524C307
Malicious:	false
Reputation:	low
Preview:	xp8D0LYVt/uO5ne9zR/Odp1TbzkimZnd

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	downloaded
Size (bytes):	52285
Entropy (8bit):	5.382930833719229
Encrypted:	false
SSDEEP:	768:9TxvlEP4zkocwmUoxpdI9zIyIgN0xgG6v+PGQTlP6j3t3vR/+a93seByJ0b74Ebc:BxvlEP4zkocxzdxgtv+PG0PA3txPEEbc
MD5:	9CFEE67F2681E1E92EFB3F85FA9C668F
SHA1:	C75AC9268B74CD96CF32BE69368E263A9973608B
SHA-256:	0DB43EBA61B33934229B19B825B7BEA29C3BB17FC1E3E1E43047D7772AAE6036
SHA-512:	620643847686939ECCE13B1633424CE10329CFF1ACD6C19959AB0507A8F0542A4C3F3C755582691EEA3F4AE80A8FC33172EEB75491D44D9A2D09453C2914E20A
Malicious:	false
Reputation:	low
URL:	https://cdn.appdynamics.com/adrum-ext.281eccdb0a28fe3b4dbfbf942f8b88ed.js
Preview:	;/* Version 281eccdb0a28fe3b4dbfbf942f8b88ed v:21.4.0.3405, c:30de095c7d8f35f3f926215f37b39accad0317b8, b:21.4.0.3405 /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){var x=window.console,B=x&&"function"==typeof x.log?x:{log:function(){

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14784
Entropy (8bit):	5.40380507135058
Encrypted:	false
SSDEEP:	192:dctElp3UQUXFcg54p3JdU+mcHK/p3aeU9jcqnip337U0ccZARp3QUUb5c8Fkp3VY:q6LHjcbx7OT7e
MD5:	6E6CE544EBC90844936CD4BA85D81F3C
SHA1:	031DF99F42B233A9ED998EB4DEAE6E28E474DF49
SHA-256:	757321FDD89F00985DCE79B3F162A19E1B3195FA36E7FCFE2EB2C2E88A1BC434
SHA-512:	786EBF9A833DAC7B38F96A1C2CB3F4DCA819FF4F749144E226B5F82661CBB2863077BB1213FA509CEC7CB1189911FE0A3AE6CBD1A1BA1C27E1821FFC69A4B8F0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Source+Sans+3:wght@300;400;500;600;700;800&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans 3';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wIaZfrc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans 3';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wsaZfrc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans 3';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wMaZfrc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans 3';. font-style: normal;. font-wei

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2593)
Category:	downloaded
Size (bytes):	2624
Entropy (8bit):	5.328574016124741
Encrypted:	false
SSDEEP:	48:/MIYCAXAZoCWZ+/YnDAsNn6Ir356XeY311FObS2DuVErAzAHXsy4/:EZCAQZoCWZ+/kDAsp6IL5keY311FOu2e
MD5:	ECBAF5A08AEDAEDCF6AE527124D4D016
SHA1:	C9B627F471B70BA7504A4DE0EC5928D5985E8D0A
SHA-256:	6549131586658A6A3FB2A09C651D23D52AC3D58BBCDAB1CCAA68CC2474863D16
SHA-512:	10AED39301A9BB4FA805C9AFFDC6200FF83C260D0CBD12C204C07163AFF4ABAEC8AF4715D8679417F260664A2507D8D06006B9BC54A6678D28A80C6E61A95F0C
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/24.js
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[24],{1008:function(e,t,r){"use strict";r.r(t);var a,o="loading"in HTMLImageElement.prototype,n="loading"in HTMLIFrameElement.prototype,i="onscroll"in window;function c(e){var t,r,a=[];"picture"===e.parentNode.tagName.toLowerCase()&&((r=(t=e.parentNode).querySelector("source[data-lazy-remove]"))&&t.removeChild(r),a=Array.prototype.slice.call(e.parentNode.querySelectorAll("source"))),a.push(e),a.forEach(function(e){e.hasAttribute("data-lazy-srcset")&&(e.setAttribute("srcset",e.getAttribute("data-lazy-srcset")),e.removeAttribute("data-lazy-srcset"))}),e.setAttribute("src",e.getAttribute("data-lazy-src")),e.removeAttribute("data-lazy-src")}function s(e){var t=document.createElement("div");for(t.innerHTML=function(e){var t=e.textContent\|\|e.innerHTML,r="data:image/svg+xml,%3Csvg xmlns=%27http://www.w3.org/2000/svg%27 viewBox=%270 0 "+((t.match(/width=['"](\d+)['"]/)\|\|!1)[1]\|\|1)+" "+((t.match(/height=['"](\d+)['"]/)\|\|!1)[1]\|\|1)+"%27%3E%3C

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Reputation:	low
Preview:	...........................

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.33221219626569
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyI:x2pHD5YEl5k9zyI
MD5:	1AE6B27EBA211F4CFCD99B904DA88BB7
SHA1:	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2
SHA-256:	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
SHA-512:	7DD325AB05B1A419614C2C39224C11E1388F09BCA5EA0F56811E6842B4FB243BCB53AA2BDDE00A94FBC324222B47924152C183337EB390F58C59AC80E89593B6
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.612457348662773
Encrypted:	false
SSDEEP:	3:YTyLV/VfsqPNVcSLQzRE9Ldu1S4:YWLV9soDLQmpdwS4
MD5:	69EE36929D2172DEA5C1763BAC240040
SHA1:	77EF82FC4B7757D445E8901E16D785AA44E3B1DF
SHA-256:	45DA241A91C843B268ADA7481CDECE1AA679F2720931EFFEA28D83E1398D66A9
SHA-512:	FDA2E41AF332441315A0BC6352DD1B9350F92E13447CD1A58CBAA96748271C26780A653EA94F023808F572D1E329C855EF6A0E3B51558BF474ABA614AB26051A
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (871)
Category:	downloaded
Size (bytes):	1018
Entropy (8bit):	5.184868475544792
Encrypted:	false
SSDEEP:	24:9vtzuct/Bsvtz5v+QDsWpGGFmOtyuo+XsVQRWUn3WXaDd:fztt/B0z5ZDsWsmVo+XsOwUn1B
MD5:	077BA8E91BBE33ED94AE6CCC777EEBF3
SHA1:	A5D00166703566CC2F022851DAE3D74142D271DE
SHA-256:	FAC1658C1FA279790DF41323BA4D9C9BC22D3915E2B040187229BD6ACC721B00
SHA-512:	BC3C5E95B9743979E498287A726EE511B5C5D0A314EB62AD01A124E1785B7CAD4C6679904C8B2ACD333C1EEF1DBB227473C758F43051824ECE5E2A1611AB04CD
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC0202c5abf5c84397b72147008aebed67-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC0202c5abf5c84397b72147008aebed67-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC0202c5abf5c84397b72147008aebed67-source.min.js', "<script type=\"text/javascript\">\n\tvar _elqQ = _elqQ \|\| []; \n\t_elqQ.push(['elqSetSiteId', '1575097598']); // INSTANCE: SIE\n\t_elqQ.push(['elqUseFirstPartyCookie', 'trail.thomsonreuters.com']);\n\t_elqQ.push(['elqTrackPageView']);\n (function() {\n function async_load() {\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//img04.en25.com/i/elqCfg.min.js';\n var x = document.getElementsByTagName('script')[0];\n x.parentNode.insertBefore(s, x);\n }\n async_load(); //modification for GTM/Adobe compatibility\n })(

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142072
Entropy (8bit):	4.980839889039235
Encrypted:	false
SSDEEP:	1536:Qx4fU3hfvfRDt77TCF5Y7VDrbVvRHvnegVQrLzBrj/PX9Xw+KVTamAA+Wmy8MyqR:w
MD5:	10EA0A36E25F2315A60EC33DC37361A6
SHA1:	65EFAAEB0CB22DBDE71E9B3F0135C4527EF48984
SHA-256:	B462AA55899D4696131244F1C74DF4359038BE9465822CE4C597DA97EEEB909F
SHA-512:	A97DF5EF1F2A3AF2B2414A614FA213CA2A66AF16FD9743254BA60460A8D7EBA26CEE6B82CC3FCDA3AB105BA843B6B4DEBCEA0FDE7806992255BDD7BB2BDA1E8B
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.css
Preview:	@import url(https://fonts.googleapis.com/css2?family=Source+Sans+3:wght@300;400;500;600;700;800&display=swap);.bb-BodyText{font-family:"Source Sans 3",system-ui,-apple-system,"Segoe UI",roboto,helvetica,arial,sans-serif;font-weight:400;font-size:16px;line-height:1.5}.bb-BodyTextlarge,.bb-BodyTextLargeSemibold{font-size:20px;line-height:1.6}.bb-BodyTextLargeSemibold,.bb-BodyTextMediumSemibold,.bb-BodyTextSmallSemibold,.bb-CaptionSemibold{font-weight:600}.bb-BodyTextMediumCompact{line-height:1.25}.bb-BodyTextSmall,.bb-BodyTextSmallSemibold{font-size:14px;line-height:1.43}.bb-Caption,.bb-CaptionSemibold{font-size:13px;line-height:1.54}.bb-EyebrowLarge,.bb-EyebrowSmall{font-family:"Knowledge2017","helvetica Neue",helvetica,arial,sans-serif;font-weight:700;letter-spacing:.8px;text-transform:uppercase}.bb-EyebrowLarge{line-height:1.5;font-size:16px}.bb-EyebrowSmall{line-height:1.71;font-size:14px}.bb-Heading1,.bb-Heading2,.bb-Heading3,.bb-Heading4,.bb-Heading5,.bb-Heading6{font-family:"Knowl

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (36737)
Category:	dropped
Size (bytes):	36770
Entropy (8bit):	5.302462256503142
Encrypted:	false
SSDEEP:	768:TeyjVu3YWyyh1x+0IhQChjYdDJuW6VmDhjLZvv1TXGSZqu1HLP6:qyZil3a5jgDJe
MD5:	6641DD1C2DA3DE9B31659D56C8500F24
SHA1:	9411158B51553CD46E9F20316316AD1D4E02B85B
SHA-256:	4DEEE41D4CFB9008A16A6CCF4DE6D3FA16077E01CCD64905296579B0B5B7A1A8
SHA-512:	78687575ED7C69B88C787F999B2B67D6A764F56447D2A058F488BD75523FA41C215F6EE1B779863568512B61CADFC564FF51CE6D6F5659D487F7D94CF656A3E8
Malicious:	false
Reputation:	low
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[10],{118:function(e,t){e.exports=function(e){var t=typeof e;return null!=e&&("object"==t\|\|"function"==t)}},470:function(e,t,a){var n;!function(r){"use strict";function i(e,t){var a=(65535&e)+(65535&t);return(e>>16)+(t>>16)+(a>>16)<<16\|65535&a}function o(e,t,a,n,r,o){return i(function(e,t){return e<<t\|e>>>32-t}(i(i(t,e),i(n,o)),r),a)}function s(e,t,a,n,r,i,s){return o(t&a\|~t&n,e,t,r,i,s)}function c(e,t,a,n,r,i,s){return o(t&n\|a&~n,e,t,r,i,s)}function l(e,t,a,n,r,i,s){return o(t^a^n,e,t,r,i,s)}function u(e,t,a,n,r,i,s){return o(a^(t\|~n),e,t,r,i,s)}function d(e,t){var a,n,r,o,d;e[t>>5]\|=128<<t%32,e[14+(t+64>>>9<<4)]=t;var p=1732584193,m=-271733879,f=-1732584194,b=271733878;for(a=0;a<e.length;a+=16)n=p,r=m,o=f,d=b,m=u(m=u(m=u(m=u(m=l(m=l(m=l(m=l(m=c(m=c(m=c(m=c(m=s(m=s(m=s(m=s(m,f=s(f,b=s(b,p=s(p,m,f,b,e[a],7,-680876936),m,f,e[a+1],12,-389564586),p,m,e[a+2],17,606105819),b,p,e[a+3],22,-1044525330),f=s(f,b=s(b,p=s(p,m,f,b,e[a+4],7,-1764

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1282
Entropy (8bit):	4.2563758279486335
Encrypted:	false
SSDEEP:	24:22DGuWy0qWJGiVOo//jq9mncg5KF2FBfgeaIuwDc6kQXVjTyH:lDYy0NJGIv26ciKFoGcIMTyH
MD5:	5428E7A08AB5CE3E00008ED050D8C8C3
SHA1:	263025F7A1268EC84FDADC986076B72185FAB839
SHA-256:	BFF4290A95DEF5BC68F2F27CCCE9BE8C091F0550ABB54434F0422FE9CAF1FC7A
SHA-512:	837A259F14C4F7F47CA2687B972107953F359609D6C33030E54CEBDB48767054DBBBEBE66BF7C45EA9B01B62F510FA23E1C1716CC6AB9C30CDDAB7561D9C931C
Malicious:	false
Reputation:	low
Preview:	(function (document, $) {. "use strict";.. const isGated = document.body.getAttribute("data-is-gated");. const gatedFormName = document.body.getAttribute("data-gated-form");.. if (isGated && !isFormSubmitted(gatedFormName)) {. const url = new URL(. window.location.origin. + window.location.pathname.replace(".html", ""). + ".gated.json". + window.location.search. );. fetch(url).then(response => {. if (response.status === 200) {. response.json().then(data => {. window.location = data.location;. });. }. });. }.. function isFormSubmitted(formName) {. const formCookieName = " tr_ewp_submitted_forms=";. const cookie = document.cookie.split(";").find(item => item.startsWith(formCookieName));. if (cookie) {. try {. const formsJson = JSON.parse(decodeURIComponent(cookie.replace(formCookieNa

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4627), with no line terminators
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	5.792473246412232
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUpqiiYab:1DY0hf1bT47OIqWb1MqiiLb
MD5:	BE916118F6D088FB98584D421C680789
SHA1:	32F87DB9C261B7990C8EA14F9074FB8B7F037675
SHA-256:	E174BA9AE202DD116AEB8CEFC9F013B3DB7C757115B447BD4B1F7AE98867FC6C
SHA-512:	A75FD2CF6924149D9C1145653FC7E08A3C235B77F2C7AA3C8404EC147C8EFF37BFE2516639B4A1B4FB6F8ED02294694D06425A1F2354D47E19D795868F5F2A15
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	downloaded
Size (bytes):	9896
Entropy (8bit):	5.49351314230287
Encrypted:	false
SSDEEP:	192:pIUVupN9xa4Kh/rth66rHlu6lOZCTbKTPsGDzY037P2MuHRLl7s:g9MRjTM6KCTbKTPsGDzPLP2MuHk
MD5:	D06F94DEC994A8F6C80F88A1EEB5329D
SHA1:	C714F7AD76C12668A0F6157F58C31B18466CD962
SHA-256:	E86B2991A854F2A33096C02A59888E6EC8915DCA848A6964BBF0E9C871F50112
SHA-512:	7F8FA1AB35D58C37E9F0EFB13EE74C616E3E076DC7D835B4CFF7A3A32E91A1CE3F851A64FB8651DA9F83A776897E7669900DD26D244C0429BFEF3498B8FC2BDF
Malicious:	false
Reputation:	low
URL:	https://zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com/WRSiteInterceptuser/?Q_ZID=ZN_9NXfmD5iBoQORGm
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","BrandTier":"RQqcwhV2J1","zoneId":"ZN_9NXfmD5iBoQORGm"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.**Version

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1577
Entropy (8bit):	5.216424355894799
Encrypted:	false
SSDEEP:	48:YAhwAeBkCGg3XHdnnCWdhOytl9CPlYpCf4:9PeBktg3XHdnn9fOy9CPlYpCf4
MD5:	2ED566DFF74BB3CA46AAC4D7CBF78D59
SHA1:	EE55FD262CB4B03ED6647DDF592D84B392E897DE
SHA-256:	CA27E07E6920B45F742851CF3733175435606A1953F6EEC3273EF428A2ED5991
SHA-512:	AC5AC84BCE6F33C0DCC636A849219DE36E905DC3FD4156C6A727B6C9BBDA487B5209EE8EB33EC9E0ED63C6F26208FDF6030DEC87C0ADEA0BEAAC329EF5808C33
Malicious:	false
Reputation:	low
Preview:	{"@context":"http://schema.org","@type":"Organization","contactPoint":[{"@type":"ContactPoint","contactType":"Call Us","telephone":"+1 646 540 3000","name":"Call Us - United States","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint"},{"@type":"ContactPoint","telephone":"+1 647 480 7000","name":"Call Us - Canada","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint1"},{"@type":"ContactPoint","telephone":"+44 20 3197 3000","name":"Call Us - United Kingdom","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint2"}],"sameAs":["https://www.youtube.com/thomsonreuters","https://www.linkedin.com/company/thomson-reuters","https://twitter.com/thomsonreuters","https://www.facebook.com/thomsonreuters","https://www.youtube.com/user/ThomsonReutersLegal"],"logo":"https://cdn.cookielaw.org/logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_t

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	downloaded
Size (bytes):	76920
Entropy (8bit):	5.315135101968235
Encrypted:	false
SSDEEP:	768:4ztzOpKAiSHlkXRfuScNANA2AJXMz4nsRM3pmn7d6acRbtGdsRkbZ/fmMbM0ZhHw:4RzLS2VdcNANA2AJ19jRkbZ/frOL4D4T
MD5:	0D733B58CBA7F467CDB30B07AA521264
SHA1:	9131470D6A9BC2A6D1A8385B727A0E88E0779AFB
SHA-256:	57103BC25D647144E5613E9E68D5A9132929EF4502108E4EAE900139B5455926
SHA-512:	4D9A88371D1F561FB2BA45C505F2DBD4F28C9EE2AAFCDFF97B80D4B0EB3D242BA46C2BEAF0633D6F8E9DE6252F85DCBC9D1AF5C005493F0F302A38A9C844194E
Malicious:	false
Reputation:	low
URL:	https://siteintercept.qualtrics.com/dxjsmodule/12.8fb54ff2c385347a3180.chunk.js?Q_CLIENTVERSION=2.15.1&Q_CLIENTTYPE=web&Q_BRANDID=legal.thomsonreuters.com
Preview:	./@preserve.Version 2.15.1./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.15.1"]=window["WAFQualtricsWebpackJsonP-cloud-2.15.1"]\|\|[]).push([[12],{17:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"f",(function(){retur

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (760)
Category:	downloaded
Size (bytes):	101012
Entropy (8bit):	5.479189260167126
Encrypted:	false
SSDEEP:	3072:j2F1P3V7wiw0w3SNa3aGuWYe5mQZHSyUx+rHq:j41vV7wig5mQIyUx+rHq
MD5:	3E24D4D067AC58228B5004ABB50344EF
SHA1:	301C9DE328688542E2D1FB2347FBB671D2392298
SHA-256:	C44372172FD63C732549FBB0778BD7A8A73211262F9C5BD5D4AE18193DA67EFF
SHA-512:	B7465630D1221EF2A488E8FEF3B8E48A1F2636A277574AA12C67F62AF6D2BD4F6FFE6B54FF63F9168736744BA9ED1F0ABAB4DB054B118B0EAA9BF50CF1A1175D
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/clientlibs/granite/jquery.min.js
Preview:	/. jQuery JavaScript Library v1.12.4-aem. http://jquery.com/.. Includes Sizzle.js. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2016-05-20T17:17Z. Sizzle CSS Selector user v2.2.1. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2015-10-17./.(function(B,ya){"object"===typeof module&&"object"===typeof module.exports?module.exports=B.document?ya(B,!0):function(za){if(!za.document)throw Error("jQuery requires a window with a document");return ya(za)}:ya(B)})("undefined"!==typeof window?window:this,function(B,ya){function za(a){var b=!!a&&"length"in a&&a.length,d=c.type(a);return"function"===d\|\|c.isWindow(a)?!1:"array"===d\|\|0===b\|\|"number"===typeof b&&0<b&&b-1 in a}function Wa(a,b,d){if(c.isFunction(b))return c.grep(a,function(e,f){return!!b.call(e,.f,e)!==d});if(b.nodeType)return c.grep(a,function(e)

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10527)
Category:	downloaded
Size (bytes):	258087
Entropy (8bit):	5.573346311703434
Encrypted:	false
SSDEEP:	3072:72wzFARXKiKj3WuNHt7t8VbFN6Om+vGcsthVmbuCqx:72wvi+NHt7t8VbFcOm+v8KbHS
MD5:	7F817D82810C6D62679D7243155FA1C7
SHA1:	A9A527BB31CE63A3E55E06E800F9FD25E5F88E0E
SHA-256:	BFB419FBDCA63DF2887EA8EF239CC67C7697A26C6A8B8AEE6844B568BF4A38E4
SHA-512:	08D1AF5020A8F195430405F98EA38DD5C68907BC973EF2843FB4148042AD1600C9C998021F2751A6CF8E4A7C943B23D24384310F9F78ECCD2A365B78157B9C1E
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/player-pomo-6a44004ddd8cc38b85c6c18986c805e8.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{1160:./!*******************************************************************!\. !* ../player/components/fullscreenWrapper/FullscreenWrapper.scss !. \*******************************************************************/./! no static exports found /./! exports used: fullscreenWrapper /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){e.exports={fullscreenWrapper:"_29Gjr"}},1161:./!************************************************!\. !* ../player/components/spinner/Spinner.scss !. \***********************************************/./! no static exports found /./! exports used: show, spinner /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){e.exports={spinner:"giifV",spin:"_3pWeg",highlight:"_1Nluf",show:"_20Z54"}},1162:./!******************************************!\. !* ../player/components/icon/Icon.scss !. \**********

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	469
Entropy (8bit):	4.273010075259319
Encrypted:	false
SSDEEP:	12:trf1fDuifrm5ivXWihXnWQQrWhUru+Mn0:tT1fDuWvX1h3WAjln0
MD5:	FF3BE85BCF46D45AEEC12DDEDAE04B57
SHA1:	1558F184325E0C881B0D7591D9040516D2781D82
SHA-256:	DE761A54C27B972275CFD32F301226D24B469C47A7B302A505F7B9EA9FAA9D24
SHA-512:	753EEB7BF7FC56A80E86B3A63910EACB1A5EA5CF40592695F3F806E347104E28A202085C22054AA43C39D062124E5E0533CABB030FF0FE1E321A7C1C7BFB39D2
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/close-icon-1-5.svg
Preview:	<svg width="18" height="18" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M13.7 0.3C13.3 -0.1 12.7 -0.1 12.3 0.3L7 5.6L1.7 0.3C1.3 -0.1 0.7 -0.1 0.3 0.3C-0.1 0.7 -0.1 1.3 0.3 1.7L5.6 7L0.3 12.3C-0.1 12.7 -0.1 13.3 0.3 13.7C0.5 13.9 0.7 14 1 14C1.3 14 1.5 13.9 1.7 13.7L7 8.4L12.3 13.7C12.5 13.9 12.8 14 13 14C13.2 14 13.5 13.9 13.7 13.7C14.1 13.3 14.1 12.7 13.7 12.3L8.4 7L13.7 1.7C14.1 1.3 14.1 0.7 13.7 0.3Z" fill="#404040"/>.</svg>

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (36737)
Category:	downloaded
Size (bytes):	36770
Entropy (8bit):	5.302462256503142
Encrypted:	false
SSDEEP:	768:TeyjVu3YWyyh1x+0IhQChjYdDJuW6VmDhjLZvv1TXGSZqu1HLP6:qyZil3a5jgDJe
MD5:	6641DD1C2DA3DE9B31659D56C8500F24
SHA1:	9411158B51553CD46E9F20316316AD1D4E02B85B
SHA-256:	4DEEE41D4CFB9008A16A6CCF4DE6D3FA16077E01CCD64905296579B0B5B7A1A8
SHA-512:	78687575ED7C69B88C787F999B2B67D6A764F56447D2A058F488BD75523FA41C215F6EE1B779863568512B61CADFC564FF51CE6D6F5659D487F7D94CF656A3E8
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/10.js
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[10],{118:function(e,t){e.exports=function(e){var t=typeof e;return null!=e&&("object"==t\|\|"function"==t)}},470:function(e,t,a){var n;!function(r){"use strict";function i(e,t){var a=(65535&e)+(65535&t);return(e>>16)+(t>>16)+(a>>16)<<16\|65535&a}function o(e,t,a,n,r,o){return i(function(e,t){return e<<t\|e>>>32-t}(i(i(t,e),i(n,o)),r),a)}function s(e,t,a,n,r,i,s){return o(t&a\|~t&n,e,t,r,i,s)}function c(e,t,a,n,r,i,s){return o(t&n\|a&~n,e,t,r,i,s)}function l(e,t,a,n,r,i,s){return o(t^a^n,e,t,r,i,s)}function u(e,t,a,n,r,i,s){return o(a^(t\|~n),e,t,r,i,s)}function d(e,t){var a,n,r,o,d;e[t>>5]\|=128<<t%32,e[14+(t+64>>>9<<4)]=t;var p=1732584193,m=-271733879,f=-1732584194,b=271733878;for(a=0;a<e.length;a+=16)n=p,r=m,o=f,d=b,m=u(m=u(m=u(m=u(m=l(m=l(m=l(m=l(m=c(m=c(m=c(m=c(m=s(m=s(m=s(m=s(m,f=s(f,b=s(b,p=s(p,m,f,b,e[a],7,-680876936),m,f,e[a+1],12,-389564586),p,m,e[a+2],17,606105819),b,p,e[a+3],22,-1044525330),f=s(f,b=s(b,p=s(p,m,f,b,e[a+4],7,-1764

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9856
Entropy (8bit):	5.404905076483872
Encrypted:	false
SSDEEP:	192:Qcg54p3JdU+mcHK/p3aeU9jcqnip337U0ccZARp3QUUb8:bHjcbx7Oj
MD5:	E969572EF6EC02AED16B4ADA5EAD2739
SHA1:	DDD3F8EFAD9EB8E7AB8E7498CA3EE0EDB1403803
SHA-256:	060F1DF1ACE2D13E8955AD25F6752A568273B641A93F4BCB320B867230DBA7AB
SHA-512:	E66346C9FE09A15085A2984113ACF57D46C73BE6224EC7D0234096AF0A4FE60B198A2880DD4F75F3AE03E3CD3FF93BD4170B78807AAD32B3368F774BCCA21904
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Source+Sans+3:wght@400;500;600;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans 3';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wIaZfrc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans 3';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wsaZfrc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans 3';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wMaZfrc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans 3';. font-style: normal;. font-wei

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=52807&time=1727776358826&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results%23t%3DLegal%26sort%3Drelevancy
Preview:	{}

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4626), with no line terminators
Category:	downloaded
Size (bytes):	4626
Entropy (8bit):	5.792958820095624
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUpqiiY++:1DY0hf1bT47OIqWb1Mqiiw
MD5:	4128133A16A40BBB372BA792D0B355AE
SHA1:	41A99B5B38838DE1BBDE9882A411A81169CE4501
SHA-256:	7146FEFC041687F91737EF051FEB0C67EAE185174597C229294A7FF53BA4A1B7
SHA-512:	67576B9D408C188D25145625EC6C658AFE09EB7FCC4C04AA69EB5265FE7DA73B8ADFD252FD4B870600382A86CF0593F2F49F642AE4BD650F3BCAEE47D298B19C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11093504263/?random=1727776303693&cv=11&fst=1727776303693&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&hn=www.googleadservices.com&frm=0&tiba=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 634 x 678, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	44882
Entropy (8bit):	7.955705520718984
Encrypted:	false
SSDEEP:	768:KL982P13j/MCMn57QoH9rtBouhKkEJHpnfpPaFaVAF+lx0FjVBQNS16L8xG1VAcp:639jSNQYxtuLlpnYEveDV16L8IsAL
MD5:	6FE7F2D330CFDAB9AD8CBC0FE239C8A8
SHA1:	A058C0CDCA0E2142015035053A6B56B9E05238D3
SHA-256:	893078CFF6F245F1C759DEC0C3B683BFDBE1BDC8BCFCD9BF7A14AA69D2EF361A
SHA-512:	F284ED355F6D22D26B2CD361EA3C4DE256B3D6CDF25D6ED0B13EA2B61B27B7E17168ACD6B519E5B3E08EF626A19BCD98AEE435F6ADDC8DD2E64824D70E7F6325
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...z..........V3X....pHYs.................sRGB.........gAMA......a.....IDATx..U....O...H.?.`D..T0..I.. ....B.T@.....T`M.d.\|....;..2B.q.~..Z..e..=:.}..!......g..O?....>.w..'.....>...{.....}.........}!..B.!.0#.@..c..........=....i...~.z....B...{B.!#A..7j.%.T..{Z.w..c]..u....onn..B....!...1..k5.N.I..:=j.v......H..I...VWW.l.j#...Y../.~OBH{.G.i../WVV..{.d\...'......k.u........T..X..M...C..#v...6........B..^..#...u...\WT..............I...<..I.i..z..&y.a...........n......\.s5....U..F.B...G.i..SsB=.3..<...g]..w...].{.R.7....4..!.!..E.}Go.5...R!?...Bo....u.[.....j...+O........x.!%...c..BC....T...R.]b1..Z._.~..+$..(......$R....K.......MKO...u..\H...L&..\|.E.Z..I.1XuK..q.t[]].....T...':.;....Q...R1..j...E..`...{.K...?...........?.F?w.C..............677.B....z...h.C.j.R...s.q...jx....yij..j.-....q..y1.u~..c....5.....G.....y.W..........[= l...'....:q4a`..[....BH=0G....F.o9V....P..d..);4.....B...<8l..=....y....=B..ge5..%Q\...

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561)
Category:	dropped
Size (bytes):	31666
Entropy (8bit):	5.397564672661937
Encrypted:	false
SSDEEP:	384:npzjVkjElIVonxb6qOq+WZT8HjiyUv5aYe9hiVw6rCRNbzgM/BwNwgmx/tXTxw4k:nxjNl3x8XBHa4iVwmytzimx/hcg6/K3w
MD5:	B0A74586B183DB7082EA48B6EA43EDE3
SHA1:	5CEC77CD9C2A7EC472327533B0E32D2D5DA8634D
SHA-256:	36CB859BE5A639C678F317D76C5C589DA1B5E08820FCCE41D67C38B517EFA959
SHA-512:	88A1BA500A6CA668014C54D442DCA1487C1FFBE0E57BAA53A4F4E9C0038F12B981F3A1FC38B598EA4822EB0E086FAF0A4C5DC8601C9BB91C2B6B6BFC3E0945A2
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var r=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var t=ba(this);function u(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&r(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(k){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(k\|\|"")+"_"+g++,k)}.function c(k,e){this.g=k;r(this,"description",{configurable:!0,writable:!0,value:e

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.880412778268956
Encrypted:	false
SSDEEP:	3:2LGffV8QgfQRPU6btRPTcVcSYfQRZSCSSeRWzWKLc/HMeen:2LGXxQKl/bi9IcSRSeQLB
MD5:	31E78D24352FD02BF116A99AE9C8A962
SHA1:	F9BD1C306A47281BD07C733176A036B7504081C0
SHA-256:	1205975C1237863203F15E334A5D232CA678B19A8A2A42959C4C9749AD262C60
SHA-512:	D8ADBC645369C128B01006BB22DBC308CF625641378E18BC7AD121FD4BA8E6FAC1849CD32DCD98137738D9ABF1C8B057D5344EFAE19AD76ACCF2341A2C47EB71
Malicious:	false
Reputation:	low
Preview:	(function(){irongate.g=function(){return 'b47d2d02-7bf9-32e6-9936-6d8315ad9dde'};irongate.gt=function(){return 1727776318143};irongate.dl()})();

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2299), with no line terminators
Category:	downloaded
Size (bytes):	2299
Entropy (8bit):	5.065713404473587
Encrypted:	false
SSDEEP:	48:WF4rTdOe3lBXsfgvMYyYvTEV+m4ewxhAk8P:CWVBXsg+Y+45n2P
MD5:	BD244E1B891B02E1257DC6FB99604EB6
SHA1:	296C431C92027441C5B184F88B5C2E6A0AE7464C
SHA-256:	81F845E2D1EF874C2C93F6200FB004EEBEA26DD567D854D59F7A572F1B9B66E1
SHA-512:	35742B760D92EE5BBDC8838DF9A60FC203DD00FB4DBA00D70D3CF6FAF7374BD4F6E4AA65F821850AA3BB2EA0EB2FD84C43D1D97B450977A65242982C85C9440E
Malicious:	false
Reputation:	low
URL:	https://cdn.schemaapp.com/javascript/schemaFunctions.min.js
Preview:	function schemaLoad(h,g,f,b,d){window.schema_highlighter=window.schema_highlighter!==undefined?window.schema_highlighter:{accountId:h,key:g,stripUrls:f===undefined?true:f,testMode:b,fetchFromHighlightJsCache:d,output:true};const k=new Set(["Brother","KaplanNorthAmericaLLC","Aetna/AetnaMedicare"]);if(window.schema_highlighter!==undefined&&window.schema_highlighter.accountId!==undefined&&!k.has(window.schema_highlighter.accountId)&&window.schema_highlighter.accountId.startsWith("SonovaAG")&&window.schema_highlighter.fetchFromHighlightJsCache){window.schema_highlighter.fetchFromHighlightJsCache=false}if(window.schema_highlighter.accountId===undefined&&h===undefined){return}else{if(window.schema_highlighter.accountId===undefined&&h!==undefined){window.schema_highlighter.accountId=h;window.schema_highlighter.key=g;window.schema_highlighter.stripUrls=f===undefined?true:f;window.schema_highlighter.testMode=b;window.schema_highlighter.fetchFromHighlightJsCache=d;window.schema_highlighter.outpu

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x355, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4918
Entropy (8bit):	7.793066261784075
Encrypted:	false
SSDEEP:	96:evxbNiiiiiiiiD52FiiiiiiiWXyU4BDS01BcAitSItFt+05n4ecMbyU:ehNiiiiiiiiNoiiiiiiilU4BZbcAiN+O
MD5:	3A1DC1F8A62D0F09A3A4406ACC937002
SHA1:	F94095333D190E487F14C4621D96207FB30E3612
SHA-256:	429C9334DEFF38BCB423808CEE1EB324BBD7FB7EFAD1BA5ED87F3CA01A9D7AD0
SHA-512:	778AD64450725BEBCDBE004756C4E590A976C1B803FC14D2B85FCC993E03A2645180976C6FA869354D9E751BB41B0A0828CEF9411CF4D7845018E77DFC76EC6B
Malicious:	false
Reputation:	low
URL:	https://thomsonreuters.scene7.com/is/image/thomsonreutersPROD/tr4522189-03d-2880x710.hero-s.jpg
Preview:	RIFF....WEBPVP8 ".........c....%........}....^.......=Cq.............3..K..h?.}..w.{.W.?./.>......c.s...a........}.=..}...c.....s...G..Z_.....\|+.b..........?..}. ...t..G...h.z}S.....i..c.o.?.F......~).......+.?.!?n..}......_......a.....o.o.....~M.M.....?..i?}...........3......B.f}..P.O.<i.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.LfM.8yk..O.m..m..m..m..m..m..m..m..m..m..g..........:Ig..W..M.cM.cM.cM.cM.cM.cM.cM.cM.cM.cM..T/}.a.g.Qu{<.@.*.Vv......D.D.D.D.D.D.D.D.D.D.D..lC..2x.h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h.. I{.?._.......>~...Y...1..1..1..1..1..1..1..1..1..1..I$h...?.....I..-...M...O.<i.Li.Li.Li.Li.Li.Li.Li.Lg"...LY..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..[.t..EJd?P...w...n.2x.h..h..h..h..h..h..h..h..h..h....z1...+...6..U"....847H.8E.h..4.&4.&4.&4.&4.&4.&4.&4.&4.&4......,...'.6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6.....p.-..-e1

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38008), with no line terminators
Category:	downloaded
Size (bytes):	38008
Entropy (8bit):	5.293573855015993
Encrypted:	false
SSDEEP:	768:f+hnWMUaMC0ww8Q34fU/nMRyWqCLnXOw0FwCxCi7tfQ0T3IRBmlhsYjJZWfp+GQe:YbjqOUyXOw0F7Pup2DEriV1M
MD5:	F81875E26F738C79A1513EF30DE7D7F6
SHA1:	5A0D9F6A00BCC4A35655A13F52D18A0139AD12F4
SHA-256:	BF675B942DFD56CB6E2CBD907A45D61BEE4FF568CA05CB93BA0D5FCA48DEFB43
SHA-512:	053DFF823B53A820EBC1CCC46736893900EB6F080F30DCEBE29A734220216563BDAC55516E2CCAB1EF374271F8BC7259317A481FBFE4C9C599CD70C35C86F844
Malicious:	false
Reputation:	low
URL:	https://cdn.schemaapp.com/javascript/highlight.js
Preview:	(()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),l=e(116),a=e(675),d={o:"https://api.schemaapp.com/markup/markup?url=",h:"https://api.schemaapp.com/query-service/query",u:"https://apitst.schemaapp.com/query-service/query",l:"https://apiuat.schemaapp.com/query-service/query",v:"https://cdn.schemaapp.com/",p:"https://hunchwww.s3.amazonaws.com/",g:"https://hunchwww.s3.amazonaws.com/",m:"https://data.schemaapp.com/",O:"https://datatst.schemaapp.com/",P:"https://datauat.schemaapp.com/"};i.endpoints=d;class v{constructor(t,i=""){this.T=t,""===i?void 0!==window.location.port&&""!=window.location.port?this.S=window.location.origin.replace(":"+window.location.port,"")+window.location.pathname:this.S=window.location.origin+window.location.pathname:this.S=i}_(t){this.S=t}createPattern(t,i){const e=[];for(const s of t)null!=i&&s["@type"]!=i\|\|e.push({type:s["@type"],members:new

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38008), with no line terminators
Category:	dropped
Size (bytes):	38008
Entropy (8bit):	5.293573855015993
Encrypted:	false
SSDEEP:	768:f+hnWMUaMC0ww8Q34fU/nMRyWqCLnXOw0FwCxCi7tfQ0T3IRBmlhsYjJZWfp+GQe:YbjqOUyXOw0F7Pup2DEriV1M
MD5:	F81875E26F738C79A1513EF30DE7D7F6
SHA1:	5A0D9F6A00BCC4A35655A13F52D18A0139AD12F4
SHA-256:	BF675B942DFD56CB6E2CBD907A45D61BEE4FF568CA05CB93BA0D5FCA48DEFB43
SHA-512:	053DFF823B53A820EBC1CCC46736893900EB6F080F30DCEBE29A734220216563BDAC55516E2CCAB1EF374271F8BC7259317A481FBFE4C9C599CD70C35C86F844
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),l=e(116),a=e(675),d={o:"https://api.schemaapp.com/markup/markup?url=",h:"https://api.schemaapp.com/query-service/query",u:"https://apitst.schemaapp.com/query-service/query",l:"https://apiuat.schemaapp.com/query-service/query",v:"https://cdn.schemaapp.com/",p:"https://hunchwww.s3.amazonaws.com/",g:"https://hunchwww.s3.amazonaws.com/",m:"https://data.schemaapp.com/",O:"https://datatst.schemaapp.com/",P:"https://datauat.schemaapp.com/"};i.endpoints=d;class v{constructor(t,i=""){this.T=t,""===i?void 0!==window.location.port&&""!=window.location.port?this.S=window.location.origin.replace(":"+window.location.port,"")+window.location.pathname:this.S=window.location.origin+window.location.pathname:this.S=i}_(t){this.S=t}createPattern(t,i){const e=[];for(const s of t)null!=i&&s["@type"]!=i\|\|e.push({type:s["@type"],members:new

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1948)
Category:	downloaded
Size (bytes):	257585
Entropy (8bit):	3.8816146563183014
Encrypted:	false
SSDEEP:	3072:XGU5VS+7ER53MsIrrYGTOHjAr0RABhgtGBRD9nhxhlcIrrG2x8rrd98rrKTZ+IrG:RQzLo
MD5:	8AC5EFAC44C7DCE49062315DCA55FD95
SHA1:	A19CC72A4B37C6B0651C540F38AE6C6BDB1ADBE0
SHA-256:	E6F7410D3FD16A7C877190A519191C0B2A2C267D72184B1A6F7744317D9161DF
SHA-512:	43F825C2C87CD417C82DBF823A16111ED596B38FB2958CADDFA67F5634365E1360DCBAF2D74DC459B27868879BA63CCEE71E32B97012BED610F91A6518EBE000
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/en/products/highq
Preview:	<!DOCTYPE html>.<html lang="en-US">... <head>. <meta charset="utf-8"/>.. <link rel="icon" href="/favicon.ico"/>. . <meta content="width=device-width, initial-scale=1" name="viewport"/>.. . . . . <script src="https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js" type="text/javascript">. </script>. <script>. window.DD_RUM && window.DD_RUM.init({. clientToken: "pub62df06fe98be88d223c0b56e30910186",. applicationId: "fe534364-701c-4d56-b4be-020a7e03efa2",. site: 'datadoghq.com',. service: "legal.thomsonreuters.com",. env: "prod",. // Specify a version number to identify the deployed version of your application in Datadog. // version: '1.0.0',. sessionSampleRate: 100,. sessionReplaySampleRate: 20,. trackUserInteractions:

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13360)
Category:	dropped
Size (bytes):	25285
Entropy (8bit):	5.279700001376637
Encrypted:	false
SSDEEP:	384:wy7hBc1bpt9YlnBFYierMbYUye2LYU+bnMhjURHjXo20wwCi1kMYm53Nx:wyAn9YNYiPbYJe2YMKHbo20PCy5YmTx
MD5:	B9D6B72D13D44F89A96DE90208A2739B
SHA1:	97E7B073397C7B9B169E973FCD79445DEA2AB139
SHA-256:	08C481804956AB731D74A9918B1EB31DBD5CB2830659E71CE4B68A75EE1E7346
SHA-512:	1077388C51778818F2E037E3CA24FA615D0504001B6ADB074E35251C2465C22020B5A07A8CA2AD55D3C345DB8789A14D959766A1D1FDDF53BE26AFF8732BC4EA
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":466896,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":true,"legal_name":"Thomson Reuters","privacy_policy_url":"","deferred_page_contents":[],"record_targeting_rules":[{"component":"url","match_operation":"simple","pattern":"https://legal.thomsonreuters.com/en/promo/black-friday","negate":false},{"component":"url","match_operation":"simple","pattern":"https://legal.thomsonreuters.com/en/promo/cyber-monday","negate":false},{"component":"url","match_operation":"simple","pattern":"https://store.legal.thomsonreuters.com/law-products/cart","negate":false},{"component":"url","match_operation":"simple","pattern":"https://legal.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	271780
Entropy (8bit):	5.174938820635855
Encrypted:	false
SSDEEP:	1536:gCGuC5e+gBJK0o3fyhlGH1py5SBLZEEuTzxqoch9OkFc5eXwEOoX4mCkOkimYyf9:dGuC4J7km+/OoX4bkOkwkwktKYxXbV7B
MD5:	897CA2C6A02EFC6C53EB5F3E65C89F71
SHA1:	FD5D4C4EE9B86833B40A8C24F6917F460E6A5BB7
SHA-256:	EED7AA1E79225D3EDB8EA1E74C66230859969EA18B8845A1BB913CAE5134B749
SHA-512:	962B09116411739B0784D8086CEA89E4BBF59CDFD02A1E0D0A0C7C60AC1B9ADA77C16FEA8498CA8C38BC999BD4D26C612512D1ABD9DEE744BBB211636929EF76
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35/d44bc8d7-bab6-412b-8d1b-627d267abba5/en.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38974), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	378599
Entropy (8bit):	5.290426394011973
Encrypted:	false
SSDEEP:	6144:C1TuDueMRP2JqAxDiLHrbIxmGvGcra/d1ghKv+D:QhUsHMTsGw+D
MD5:	E29709257E04218CFE7211940C5B835D
SHA1:	ADF78A01642351B441C5657B54E2599F6F046EAA
SHA-256:	0914B1ACDAD8777319B9D044A113F0FF5C47268B302552E4DF39611187CF55D9
SHA-512:	8DBF8FEA0B324199848653A67C21F3600F790A4053336F18BE3A52E0D4454ECBE123856FC6012611147C9D6C49C15B1CBB029ECC3247CE1BA8B3338020AC57FC
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/main.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.DCL=t():e.DCL=t()}(this,function(){return function(e){function t(t){for(var n,o,i=t[0],a=t[1],u=0,l=[];u<i.length;u++)o=i[u],r[o]&&l.push(r[o][0]),r[o]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(t);l.length;)l.shift()()}var n={},r={22:0};function o(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var i=new Promise(function(t,o){n=r[e]=[t,o]});t.push(n[2]=i);var a,u=document.getElementsByTagName("head")[0],c=document.createElement("script");c.charset="utf-8",c.timeout=120,o.nc&&c.setAttribute("nonce",o.nc),c.src=function(e){return o.p+""+({}[e]\|\|e)+".js"}(e),a=function(t){c.onerror=c.onload=null,clearTimeout(l);var n=r[e];if(0!==n){if(n){var o=t&&("load

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2081)
Category:	downloaded
Size (bytes):	2082
Entropy (8bit):	5.2870520903631135
Encrypted:	false
SSDEEP:	48:QQS5w4gwgWXlUA/k8SZekbMkJk2kkvkbDk+8/puQxWBSnXnwpwJ:QQd4PblA8SYqpu2hM3oQQYBSAeJ
MD5:	A25E8E06E17CF6DEBA93D890DFDB374D
SHA1:	9DC78810E17222B0C11B3DB62E469C097357D518
SHA-256:	1130B26D18D47EA4253DA038F4B0687E7E60347CBFE8600E978088F05B06E343
SHA-512:	7005735BF9CE182592496F3DBE3CDC568702DC3393B5E8EC7DECB7294524E39B60CFB24C505C69DA75C6CAC0252A1E9BCC98D3935BF3362750C0DFF126163C30
Malicious:	false
Reputation:	low
URL:	https://px.mountain.com/st?ga_tracking_id=G-1111111&shpt=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22G-1111111%22%2C%22shpt%22%3A%22HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&available_ga=%5B%5D&hardcoded_ga=G-1111111&dxver=4.0.0&shaid=36732&plh=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&cb=33401024174249196term%3Dvalue&shadditional=googletagmanager%3Dtrue&shoid=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq
Preview:	!function(){"undefined"==typeof irongate&&(irongate={}),irongate.gr=function(t){void 0!==irongate.g?t():(void 0===irongate.gcb&&(irongate.gcb=[]),irongate.gcb.push(t))},irongate.gsl=function(){var t=document.createElement("script");t.type="text/javascript",t.src="https://gs.mountain.com/gs";var e=document.getElementsByTagName("script"),n=Number(e.length)-1,r=document.getElementsByTagName("script")[n];r.parentNode.insertBefore(t,r),irongate.timeout=setInterval(irongate.dl,2e3)},irongate.dl=function(){for(void 0!==irongate.g&&clearInterval(irongate.timeout);irongate.gcb.length>0;){irongate.gcb.pop()()}};irongate.gr((function(){var t=document.createElement("script");t.type="text/javascript";var e="px.mountain.com/st?ga_tracking_id=G-1111111&shpt=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22G-1111111%22%2C%22shpt%22%3A%22HighQ%20%7C%20Legal%20Business%20Management%20%26

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (618)
Category:	downloaded
Size (bytes):	976
Entropy (8bit):	5.4442383258642835
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WksMIHCCKrocEMHeKJjzdQ4nV/ZKdHHJjzq:si2N1V4NxwZG180CUEOjzFujzqwo
MD5:	0F85D4134A0FDF9AB7E9468D7F9240C4
SHA1:	F0B5F9D1E7348688CAEB4954D2A3D85451D74C77
SHA-256:	FC6F4F44F0017CF4AFB5BA8A5E9A8F37B263757E626C1D1126587AA8C7994652
SHA-512:	6DC11FE1098C28ECE483A3A4C7FE8E19A4443C90BA821CA70D0FFECDF1FFB70B667606A6DE8AC2F77F4D7174A0B667F7FB2D942CF90D295941E096559870DB5D
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=3u503kv&ref=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo&upid=thm7oum&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=68d6cd4a-87cc-4465-9311-5feb95c2e6e0&expiration=1730368347&gdpr=0&gdpr_consent=","https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=68d6cd4a-87cc-4465-9311-5feb95c2e6e0&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch","https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=68d6cd4a-87cc-4465-9311-5feb95c2e6e0&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic"] );. })(this);. </script>. . </div>.</body>.</html>

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.107.100", baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	33597
Entropy (8bit):	7.747088259982219
Encrypted:	false
SSDEEP:	768:rprF9vAbpvA/Zp2aQ4t+62aP4HbDgdG4Xic:raGUalQm4Hwo4yc
MD5:	F2AF8D00E1A4C29A797C7E69CB98EDBA
SHA1:	DF8D282CE8AB8130DDD7751DFD76F151C0A3AC59
SHA-256:	88BF5F9E6C546575E7D01734692B1D21A9651A3963DAE4689A8C5C0559A6CDAA
SHA-512:	862CD01D6B53EEA55669A59189876A12E117C995B13AF4EED1066E54F9692DDE4B40AAD8CB858B13BCE3F34A97BDEC6BEADE8CE946B9610E5B6B3A060DD866F6
Malicious:	false
Reputation:	low
URL:	https://cdn.vidyard.com/thumbnails/15002978/PC8gA58NjnILaxk56RJLVRYWpahpm4tE.jpg
Preview:	......JFIF..............Lavc57.107.100....C...........................................................##$++3...............................................................................1!A..2"qQ..a4r.s3t...T#...BR.5.b.D.$S.6...C...%.e.u..U.d.......................1!Q.A".Ra.2.q...B.#...b..Sr3............"...................?....................._..Bi..o......r..=.B......^.....J...%.....H..a..H... ..........YU..... .B@....J....%...&.`.. ......... ...'.J@.$....P.X.@. "... ....J...%(H..%.... .@A)BA ..&.6..\|.\|.{...7.u.y..9...:.....{....@..........H.................._..Bi..o......c.}..]......W......BA ..&. ..$..0l...%.....H.....".H.....%...H...%..A(..@.a..@.)@.........E........ .......(.%(....$.$. ....%(H..%.... .@A)BA ..&.6..\|.\|.{...7.u.y..(.o.....Q.p................................_..Bi..o.....?.M}..J#..=.y/wQ(K"....,....$..-..........$....$..Z..........TJ.H.....).T...@.........B@......B........BA ...H....H(..@..@..J...P.X.H... .@......(.&.6}..i..:....._7.u.y..(.............

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	153156
Entropy (8bit):	5.313184589772049
Encrypted:	false
SSDEEP:	1536:PpbrUzacicmSKzO9R0cFMX/kC7dCqGjHlUHNaVcZRxRBA04VKsuntF0dTGgQ18u5:Wza1ke70eNaVGAvkF2kl
MD5:	2630B3D7AD4A41FAC67742216E506D83
SHA1:	DDA36227690CB7C9EC74DE3667DD595D59FB8EEC
SHA-256:	CD5EB76033D96219A0C4FE45FB0DF10202E1FEBCB4D086FB1305F1B3304A6B1A
SHA-512:	DF4BBC981FDD148A6EC0E97CBCCB16B66C9054EB144A6055EAC76A2B34FEFE071617E6AA00338A7D2C990ED7D521BA1FB95D086C20B4A37BB95C0820C9B9124D
Malicious:	false
Reputation:	low
URL:	https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js
Preview:	!function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r),warn:n.warn.bind(e,r),error:n.error.bind(e,r)};function o(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(t){i.error(e,t)}}}var a,s=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},u=!1;function c(t){u=t}function l(t){return function(){return d(t,this,arguments)}}function d(t,e,n){try{return t.apply(e,n)}catch(t){if(f(t),a)try{a(t)}catch(t){f(t)}}}function f(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];u&&i.error.apply(i,s(["[MONITOR]"],t,!1))}function p(t,e){return-1!==t.indexOf(e)}function v(t){if(Array.from)r

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (352), with no line terminators
Category:	downloaded
Size (bytes):	352
Entropy (8bit):	4.795252889051518
Encrypted:	false
SSDEEP:	6:2LGSjTLk8LaXiCMGhBaVmOgO09NFfd2ZfGn3mEc7xJtJDDmEcivIcmEcHtA3vNNd:2XHk8eXkGXaU/J9NWZun3mEcBhmEczcN
MD5:	B89B77C0E31813EA0DD3C4D152E6F5FB
SHA1:	541937077CE26ED5EDC5AE91580929876936E4BF
SHA-256:	CBF0788ABCB487C683601008ECBA42A9F04BB04A864A8FB6D6ADB2777BA84F9D
SHA-512:	EC70F6C341EEEDF5C92740798A7CFE2C9CBF5D2EC0934CEAC523C3931C4B8A5F992F6887B0EB5754BEC8C304EE80573B1C653C893A8FA177A28ABD44C73E491A
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/emcm/components/structure/page/tracking-clientlibs.min.js
Preview:	(function(e,b){b(e).ready(function(){var a=b(".chatBotTrackingVariables"),c=a.data("tracking-campaign-code"),d=a.data("tracking-channel-code");a=a.data("tracking-sfdc-code");try{c&&window.localStorage.setItem("cid",c),d&&window.localStorage.setItem("chl",d),a&&window.localStorage.setItem("sfdccampaignid",a)}catch(f){console.error(f)}})})(document,$);

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	299
Entropy (8bit):	5.27162334128487
Encrypted:	false
SSDEEP:	6:5e4POurJb8FyrpqduAUEJEy2qEXuWtQR1CqjwVGXeJ7ULL:M4POet8ggpUEiUE2zCqjwsXeaLL
MD5:	E2C3A51528343E3660D27149AB2266CF
SHA1:	8AB6343AB7DA336016C33907B6708FFC22B4A859
SHA-256:	817B303794960EE3ABC7E14047CC5AA79BA03B17741EFF5BC0C9D5D9543076BA
SHA-512:	1F9D1D76A8F8958AF03A022377EFD546801A9DE259CB0AC402318B7AE505D2FF140054048F292DCE4BB2E891033B26718563DE93D2F6E2603D16CE6948BEC5A5
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/43.js
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[43],{1029:function(r,t,a){"use strict";a.r(t);var e=a(691),n=e.a.template;n.displayName="CoveoSearchBox";var o=n,s=e.a.rehydrator;a.d(t,"default",function(){return o}),a.d(t,"rehydrator",function(){return s})}}]);.//# sourceMappingURL=43.js.map

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.75
Encrypted:	false
SSDEEP:	3:n4cKPEFn:4cKPEF
MD5:	C41C96CB58FDD296A045CFE0CA483F7D
SHA1:	147FC605743D511CD86D8AAC94EC549226141ECB
SHA-256:	E27816491421AFEE49283128D6891B84A95FCED6CC3158250F0B79C7DB7D5AED
SHA-512:	641209BE40CE0D0E896664708145E100C1415674649E88450750027194205505206FC9DB8F71955B92C1D9F95537384AB33741F9A9E99FD09F3E9377971B34D7
Malicious:	false
Reputation:	low
URL:	https://44.212.189.233/is
Preview:	VB4pEgG+X1zM3DeU7WOkBvHLjh3YohQk

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11093504263?random=1727776303693&cv=11&fst=1727776303693&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&hn=www.googleadservices.com&frm=0&tiba=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 792 x 446, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	130505
Entropy (8bit):	7.982830956186414
Encrypted:	false
SSDEEP:	3072:PLqEFkKHg/VUtgAG7CjPOqeNrFD4gpjBeJ+qNeun:Tq6kgg/ig7v9pHjBesqNew
MD5:	4AFF3EC37555713DB227AC948ED5C981
SHA1:	EFF85A223ED1ECC39203C6E149832A749310BE0F
SHA-256:	18EB8D9F23B4DBF9FBDA02C48B0BBEF012EB8DAD7FF6C7941B776BBE36BB5423
SHA-512:	61272CE5DC873536B135ED78AF136BD36B48479F89314270A3BADA77C785D554302D163DF4A9A0CB9B36EB7BFC9D177468DFD1522B29DC80F9865ACEA12FE795
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/en/products/highq/_jcr_content/root/container/container/tabs/item_1665177418815/image_copy_copy.coreimg.png/1669639696841/234565.png
Preview:	.PNG........IHDR.....................pHYs.................sRGB.........gAMA......a....^IDATx.........s.k.. ..HB.`A...V..(._....^.k...R..=.A.D.qw}.K.\.?g..+.v....{..wwg...s..]. .H".$.H".$.H".$..E$.D.I$.D.I$...4VUa...b.,4........P.."i{...H".$.H".$.HZK.o.W?..5...q1...Q>l.D.$Z..$.H"...L..IK1..D....#........]....b1t...1\|.....C.....E...!V...sg.n.V,.......%.644`...h5..d2OV)//Gqq.2L..v.%].tA^^.ZS..F4Le'#.H"i}iOc.....z..1..iO.gI.....%.....QYY....gX.b........s.1...~g...+/...FMM.+.Inl.Fy.w..'.l.`....$.b....~~.N..o./~.s\|;o....s.q.....P..M.L.......B.RTT._..W.0a..\|}C=...?...?Gss3...<....?Z..%.F.Tv2".$...4.D....[%2.T..N.H2.B./).8.M..b\..NRnX...9.`.04....V......g\.L.2..+v........$T>_}......;1}.....o....!..."1D.I$.D.I$.D...)<.5.tP..U.w.u..Xn..\p....W..!.b...-/..>inn..bijjB......f.)D.,%..g0x.Y...qQ.L4..bD.I$.D.I$.D.~d!..!B..M.....Ma]..........).....s>...d..Z4m[...K..v o....Zq....Gn.A../X^..I..B.v..D.I$..)...3...R.A......M.M.eC..}.......-..%.....6..H...Sb..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	4.854361737126505
Encrypted:	false
SSDEEP:	3:2LGffV8QgfQRPU6btRPTcVcSYfQRZSCSSeXgXp/HMeen:2LGXxQKl/bi9IcSRSeXgX+
MD5:	2B730596A7C41CFA35E2D13DA3916168
SHA1:	B1505EF374EE50B2FA83BA862FA89DC95A49EE74
SHA-256:	B099A59164EA2A2B9AA7420100779F8E962F4F4BBCFD9775C4FA5D27459813DD
SHA-512:	18D076D7ABF4B414BC093B4EEDC6AD37A98AC9B1356C2842DA08E89EBD7481F4D4E6C93607EAD4AAE9DB4B80ECD9D28338F4A913EE8C4803AAF3DA3C221BFDBA
Malicious:	false
Reputation:	low
URL:	https://gs.mountain.com/gs
Preview:	(function(){irongate.g=function(){return 'b47d2d02-7bf9-32e6-9936-6d8315ad9dde'};irongate.gt=function(){return 1727776317132};irongate.dl()})();

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39304, version 1.0
Category:	downloaded
Size (bytes):	39304
Entropy (8bit):	7.994120188451945
Encrypted:	true
SSDEEP:	768:yfI8MPCOcq8YOv9zyu2ZxnYwBQRn2bWPN+TsVqeWAyNmY+iMuEGtSgq:18MCq8YG8u2Pnfon/Vq1AyN5FtEGtS3
MD5:	20DCA63D8EE3254B712C7171AE987713
SHA1:	BFF49469BB0DC3989D8DD4726A85D060396B100F
SHA-256:	CCAEE6F0BB7DCF2A0EE729096CFBA2CF24EA535E068F6CBFB827F79733F8181D
SHA-512:	F1678F40E5DC86ACE717DCB33196D31BF2951C36E266419E61580313BEFBC44C049CFC86267A5156C20B561B3ED213807D44A96B8F57EB22E04BD2133CD7AE98
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-medium-webfont.woff2
Preview:	wOF2............................................?FFTM........8.`..^..4..u.....h..'.6.$..Z..p.. .."..T..?webf.[._...q...A.m[...t..r..p.........nc.. ...F3....._.4d,siI[.." .#..o.o... H1!.....4.........6.p...P.i.x.=...4""".....P%,J&V.K..~].d...........F.....-B.g....K...g#.O..P.u02.j.d../",LhI.T..F.{.r..}......p..,..+".(..\....#.=.>d;s]..R,..;$...S. u....F.[ ..+D..l.T.9a.. "....7jS.mr...............l."............H...<...Lv.xGF...L....\|.......\..~...s.mJ.no......-q.Vy...C7..y.Lnu.T;.%K...O..O...W..{fA ....l.FF.<..?.=..B,..'X.bc.....L...r.".?.g..].....{..c.o..E..E.(..F.#R..T... .>.k.......qe\|...../~3s......F.%....%.Q .=.....}.E.P.LX...p..$.........<..}..k..N~.j+...J....b..@..i..5..@.......sf...$/x@.J.P....$..0.u.R......&.Y1..b....D.!.).jn..Pr...w..n.........?.T<.J(/.N.`!.....8.M.....$.#.X.<..]...66B..x..N....1. \.L]..\....%7r.%.y..F...WI...%tr.r.T.yzA...8v....b.........TOy.3...I...+.j.jTK<. ...../G........t.N....n.5,....M.7..7W..e..L...7.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65133)
Category:	dropped
Size (bytes):	3097940
Entropy (8bit):	5.569365114134649
Encrypted:	false
SSDEEP:	49152:M4jG4b4ws/ZMoH+Yk7XnEOwjE9+tQza45mr2DU8W5pNG:/
MD5:	82131697CB9D045382A3F4107F3F8995
SHA1:	59E815782B85D26FD18A933100137B3BE8CDFD13
SHA-256:	0B5B78C02F4DF27CFB5256E9F285DF60C7682D55381AFB1F66CBD680DB5540A0
SHA-512:	59D09A97595DC5E9E2D4D523CEC05583BABA10FC62BE93694C3B16F480627EB790386120AF63F10939EB96BA70B555171D1C9B2761E2EA78B54B731ADBA6DDDF
Malicious:	false
Reputation:	low
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[4],{563:function(e,t,o){"use strict";e.exports=o(594)},594:function(e,t,o){"use strict";./** @license React v16.13.1. * react-dom-server.browser.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var n=o(94),i=o(0);function r(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,o=1;o<arguments.length;o++)t+="&args[]="+encodeURIComponent(arguments[o]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var a="function"==typeof Symbol&&Symbol.for,s=a?Symbol.for("react.portal"):60106,c=a?Symbol.for("react.fragment"):60107,l=a?Symbol.for("react.strict_mode"):60108,u=a?Symbol.for("react.profiler"):60114,d=a?Symbol.for("react.provider"):60109,p=a?Symbol.for("reac

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43386
Category:	dropped
Size (bytes):	12103
Entropy (8bit):	7.985508379818304
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVc2VhjIJ0STPz03aWagq692yvggkbH:+tjRIm6SoITu3khUTPjI5TI3afb6YmwH
MD5:	BED9B675380C07EDC84C03D0F362B192
SHA1:	0FC4DCF8CB37F303985159B5A9348BB9AE5C6397
SHA-256:	3AE25E7FC8C3E9A41A480D9E39BA0E43845FFD78B0529695530925F6575852D9
SHA-512:	25CFA4027E02D6EEFC95202417A02843556BDA5D28685735FFC102F3C63327CFAAF59B9565E3B23F2BC26C0274EFDD0F69CCA8AD9A3A6DCEA4D903722DCE9FB6
Malicious:	false
Reputation:	low
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	5.248797804215816
Encrypted:	false
SSDEEP:	6:5e4POurpqYitmzLwJEy268F5iRrQR1CWBaVGXeJ7HV:M4POepq4wiE8qEzCWMsXeT
MD5:	9E88FEDED40CE5C74EAD07FC1A89B569
SHA1:	D2D9F0291592A21D6360A2224A72F15DDCBA04D6
SHA-256:	742DF1ED9484AE932BC65FDDF61440ABF931814A7B3586AB3DDE57A35617DB77
SHA-512:	94D932414D6D9401845D78052E1E865DD5C3D83416E842DB97B0F37F2EB175E86645EEB0296F7EF7D8F49A000FE890DB0EBFF55F56DA4E0863EA9C4287DAAFC3
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/44.js
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[44],{1030:function(r,t,e){"use strict";e.r(t);var a=e(691),n=a.b.template;n.displayName="CoveoSearchResult";var o=n,s=a.b.rehydrator;e.d(t,"default",function(){return o}),e.d(t,"rehydrator",function(){return s})}}]);.//# sourceMappingURL=44.js.map

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	318603
Entropy (8bit):	5.327277754653192
Encrypted:	false
SSDEEP:	3072:eq/zG44kl0MdCKR+fbiKAUBUQq/B7SWvPEE9e5hCu7R/3vWgvXfnilkVq/wF70dG:eq/zG44klmKYlVKjwungr
MD5:	FF91F6448B88C4AE3876B9C8C9EA9FAE
SHA1:	960C924BC7218312C6D236B186EF681041201533
SHA-256:	9103FA4AD7A2624C68ABCFFB3889864156E28613EFCA62A2E05C7E76FB1AF450
SHA-512:	383E95B4A9157ABEB51C40C56C01C2C557F7EAE41FEFF9029051F6F8DD0D3F70719B6390DD852170D78618AC6FFCB99F08DD694177E20F09541EC4243A4E6546
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/main.css
Preview:	/! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:rgba(0,0,0,0)}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]::-moz-focus-inner,[

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	downloaded
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Reputation:	low
URL:	https://pixel-config.reddit.com/pixels/t2_3fnooq8w/config
Preview:	...........................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513)
Category:	dropped
Size (bytes):	3576
Entropy (8bit):	5.3356090423770475
Encrypted:	false
SSDEEP:	48:1ywPnLqgwfSKDhLmeJpMZ+K7zmgnpiMCntcxTjgzCH9UCtmSj4GCSpZbK4R8RhXY:8TXOzaeNUz4Gh3tv2
MD5:	E30B4DBF010A765D5355E977264AE7CC
SHA1:	0DBE70E357CEB8DD2F7D7E110D573631F40F5C92
SHA-256:	AE66CBB491A4C3399CFD27DA20655D67604377CCC03E79F20736EB95F80A044F
SHA-512:	EF66FA5FBA46E67EE224D12E39612C3C8CE0F14F003AB38F96697DFBC1B9E66923F4C9A621632F116A8088D618F9064B6794454CF9EE37A6ADB9CA6FA4C0B734
Malicious:	false
Reputation:	low
Preview:	(function(d,q){d.Granite=d.Granite\|\|{};d.Granite.HTTP=d.Granite.HTTP\|\|{};var e=null;d.Granite.HTTP.externalize=d.Granite.HTTP.externalize\|\|function(g){if(null===e)a:{var h=/^(?:http\|https):\/\/[^\/]+(\/.)\/(?:etc\.clientlibs\|etc(\/.)\/clientlibs\|libs(\/.)\/clientlibs\|apps(\/.)\/clientlibs).\.js(\?.)?$/;try{if(d.CQURLInfo)e=CQURLInfo.contextPath\|\|"";else{for(var l=document.getElementsByTagName("script"),k=0;k<l.length;k++){var m=h.exec(l[k].src);if(m){e=m[1];break a}}e=""}}catch(p){}}try{0===.g.indexOf("/")&&e&&0!==g.indexOf(e+"/")&&(g=e+g)}catch(p){}return g}})(this);.(function(d){function q(){this._handler=[]}function e(a){var b="//"+document.location.host,c=document.location.protocol+b;return a===c\|\|a.slice(0,c.length+1)===c+"/"\|\|a===b\|\|a.slice(0,b.length+1)===b+"/"\|\|!/^(\/\/\|http:\|https:)./.test(a)}function g(a){d.console&&console.warn("CSRF data not available;The data may be unavailable by design, such as during non-authenticated requests: "+a)}function h(){var a=new q;r=

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1511540
Entropy (8bit):	5.363202487938861
Encrypted:	false
SSDEEP:	12288:7qHzmRjLkT3XRkOvKjuKjOdYKkWrqOAJXJTfJ0aC+QD9jQsyxR5GcsGV19cQ0Ql8:o888hhfqL/DYMCq/DYMC+
MD5:	5EC24B0BB02FF58BCC8597FB5F333080
SHA1:	AF42EC60286D7BD338637F50B9215C5DD582BDE0
SHA-256:	17353C3739427CEE3FA41BF2C8280F836DEE82F29193E4286EB5CC9D68E045B2
SHA-512:	8DA64F3436A125327449B5B093D24C6D38BBFA9D4319AEDE1DC876DF8DE52CADA9897ABB852D5A7A18A0FA9EE52A4CA46F3793A2E50E03AC0A83E3CF9BF761DD
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{306:function(o,a,r){"use strict";r.r(a),function(o){r.d(a,"dig_accordion",(function(){return l})),r.d(a,"dig_accordion_item",(function(){return lt})),r.d(a,"dig_accordion_panel",(function(){return dt})),r.d(a,"dig_back_to_top",(function(){return bt})),r.d(a,"dig_button",(function(){return Mt})),r.d(a,"dig_card",(function(){return St})),r.d(a,"dig_card_media",(function(){return Ct})),r.d(a,"dig_checkbox_group",(function(){return $t})),r.d(a,"dig_divider",(function(){return ei})),r.d(a,"dig_form",(function(){return ii})),r.d(a,"dig_icon",(function(){return li})),r.d(a,"dig_input_password",(function(){return di})),r.d(a,"dig_input_tel",(function(){return fi})),r.d(a,"dig_input_text",(function(){return ni})),r.d(a,"dig_link",(function(){return ui})),r.d(a,"dig_media",(function(){return mi})),r.d(a,"dig_modal",(function(){return vi})),r.d(a,"dig_nav_option",(function(){return xi})),r.d(a,"dig_paper",(function(){return Hi})),r.d(a,"dig

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	271780
Entropy (8bit):	5.174938820635855
Encrypted:	false
SSDEEP:	1536:gCGuC5e+gBJK0o3fyhlGH1py5SBLZEEuTzxqoch9OkFc5eXwEOoX4mCkOkimYyf9:dGuC4J7km+/OoX4bkOkwkwktKYxXbV7B
MD5:	897CA2C6A02EFC6C53EB5F3E65C89F71
SHA1:	FD5D4C4EE9B86833B40A8C24F6917F460E6A5BB7
SHA-256:	EED7AA1E79225D3EDB8EA1E74C66230859969EA18B8845A1BB913CAE5134B749
SHA-512:	962B09116411739B0784D8086CEA89E4BBF59CDFD02A1E0D0A0C7C60AC1B9ADA77C16FEA8498CA8C38BC999BD4D26C612512D1ABD9DEE744BBB211636929EF76
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=68d6cd4a-87cc-4465-9311-5feb95c2e6e0&google_gid=CAESELb9op4lLaYic07Hycjc2GU&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1462)
Category:	downloaded
Size (bytes):	1609
Entropy (8bit):	5.429948110028507
Encrypted:	false
SSDEEP:	24:9WUct/BsWitdN8L+ch9HwiI02yWEGDyfVpY/+wurwoRWxEtRWxoD1bpYIcOpXCeZ:it/BUtdGNh/0tGvwxEtwxoRbpYIckCw
MD5:	EE457693BEC588B3F9063FD55E98ED37
SHA1:	69B13F3C09FBA78DE61E1F746E949A3D044B8D9C
SHA-256:	C27449E050483C9495A752345347468DB54AFEBB57553A386C6F146C2D7ACA4D
SHA-512:	AE30300E548949C55D0B164F55CD5E3BD625123639176E9FFDC33C765CEDDEA719C29E0BD4D997E0E4FA673B02199782C0D25BADADB9DFF7E73A56F1EC1BF3A9
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCcd58eb141ac949fe96b1930007a2066f-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCcd58eb141ac949fe96b1930007a2066f-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCcd58eb141ac949fe96b1930007a2066f-source.min.js', " MNTN Tracking Pixel-->\n INSTALL ON ALL PAGES OF SITE-->\n<script type=\"text/javascript\">\n\t(function(){\"use strict\";var e=null,b=\"4.0.0\",\n\tn=\"36732\",\n\tadditional=\"term=value\",\n\tt,r,i;try{t=top.document.referer!==\"\"?encodeURIComponent(top.document.referrer.substring(0,2048)):\"\"}catch(o){t=document.referrer!==null?document.referrer.toString().substring(0,2048):\"\"}try{r=window&&window.top&&document.location&&window.top.location===document.location?document.location:window&&window.top&&window.top.location&&\"\"!==window.top.location?window.top.location:document.location}catch(u){r=document.location}try{i=parent.location.href!==\"\"?encodeURIComponent(parent.location.hr

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 792 x 446, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	294264
Entropy (8bit):	7.99518395153022
Encrypted:	true
SSDEEP:	6144:rV6ynaBl50F/hzIPldtMkZmybTyJrlW6443eKgxpfHEwkbxsENMT8zcna:rVTnaBlKbIPldtIyb+TWcuxpcFu5a
MD5:	413FDD4D7E5E3575041B9D804EB80480
SHA1:	9A7BA733EE92581AB314EFB4425AF108DBD9A711
SHA-256:	5722990E693040F114AB05E57A64325A006E4E78D3B0214C586F77CED4217FC8
SHA-512:	1BEADA564C118ED8AED06CB0CD2A4A38195995C7C16C950B2682C88684DD52847D8CC3E148036AFB446FAB8B5F9EFE84FB97DBEF98F85DAB5BD478CED4BACFAA
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/en/products/highq/_jcr_content/root/container/container/tabs/container/image_copy.coreimg.png/1698258525660/234568.png
Preview:	.PNG........IHDR.....................pHYs.................sRGB.........gAMA......a...}.IDATx....d9.0..]....u....==......o.d..}..8\|!...c>rT.\|..T....T.......3...{ddu.!..~/..).........B.A...C.Ne.py.....]~(Y.HA...a.#/...h..9)..0.!...`...<.m....4D@/.{......_.-.c..h......2..o........NU..../.........)....g....X..e.a......#".^.....G.2;..;_../......++0.vpxx...:._..._..&..0C...b..vE7..)..8i.e....h9..."rc...D.;....0..$.\.?..oA...5.A.E.l..........T..C.....B!.B...@..#?....J..].9...........FHE~.qe)....HYb.r.5.....Q. P..K.)....ZH...L....#...f..,E..).R.R.?F!.R.s.r...x.d...,Fb+.Sf..\|.9i....8#})........d(%43.wZP<.o.b..mj,."+T...0v+.."..jN.H.{L..6.QF]ACl.K...... ,..P1-......T0.T....}....T....Zu.........r..j.S.W.:....."..C.u'.\U..5.bib.M..1..+'+Zv2%Ca.U...D..iX....U..y.n{>...r.t..5(%7..?N"....-2..........l...S..3.. .)u.s......~..+s..Rsc.t...R.....g..X.....$^.j.....uH....l..5A.w.....$'(. .....-.-..6.0oA.T.O....Q./....v.n..c,,2.r0.k).n...)..I.....*y'GQu.$w.\|...nZI......c

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57440)
Category:	downloaded
Size (bytes):	261912
Entropy (8bit):	5.30977558251021
Encrypted:	false
SSDEEP:	1536:8RhpIvFN0FJ2HAE6ImWK3yi/WbHPDAhFKYWE026N/YpdSa45tINAoTGPMMCnx8J5:ohpIdYpRyNHPDOFHWEeaBTGPMMgqJ5
MD5:	F2DC5386EA2553A1767EDFDCF25B6C51
SHA1:	CCB3B686BE089D82F5A930C30DD267B1BB4F4224
SHA-256:	93182CF4B7DA759FD29F924B2E76368C4A1736AA6BDD1E64433F13179E3490AB
SHA-512:	DDF5A5C3DB15A53D5796B78C00C98D5B46447C9DEF6778EC347C49E379B4469A68371FE3C70B8BEEB506B90FB44421052C61945AA32E1E96F383A58266FBC251
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/vendors~player-pomo-06e36a03641345933819d02c12e5b33b.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[30],{1055:./!*******************************************************!\. !* ../node_modules/react/cjs/react.production.min.js !. \*******************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){"use strict";./* @license React v16.12.0. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /var s=n(/! object-assign */436),r="function"==typeof Symbol&&Symbol.for,f=r?Symbol.for("react.element"):60103,c=r?Symbol.for("react.portal"):60106,o=r?Symbol.for("react.fragment"):60107,i=r?Symbol.for("react.strict_mode"):60108,a=r?Symbol.for("react.profiler"):60114,u=r?Symbol.for("react.provider"):60109,l=r?Symbol.for("react.context"):60110,d=r?Sy

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5258)
Category:	dropped
Size (bytes):	5259
Entropy (8bit):	5.060180329787528
Encrypted:	false
SSDEEP:	96:D95qbslDCpFqImxwoD9N9JT3c5E/9CQipDwdGOddh:h5TdCpFqImxZ5NvAE/9PipDwEOddh
MD5:	FB9F7DAE39619642ED5890E40763EF2E
SHA1:	BC50FA89795E534B7E417E834C70CB674A9D30B4
SHA-256:	70712C8650FEECC46403B5801B9D5B72D5B2D6BA1D1CF0317E105603982321BF
SHA-512:	4E710BEA7BB3C8534D12D485260466B15785C6286CBEBE7BC562B9AD020A6E87A70139385FA6F1338F9048E1787ECF3FA4C48821675153F68D9BDFEA47E926DA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e){return function(e){if(Array.isArray(e))return r(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(e){if("string"==typeof e)return r(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?r(e,t):void 0}}(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function r(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];re

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	231860
Entropy (8bit):	5.458017496816048
Encrypted:	false
SSDEEP:	3072:5fLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713zW:5fLeYc+6JaH8N7QQGArHu5s713q
MD5:	20EA15103C2FCC0334E520EEC1CDEA80
SHA1:	4AA44A30B21B09EA568053179EEE320413764455
SHA-256:	57E4FAB3E926D0392DFC236B18CC28628ABF957EFE96C5D5A592B617EC108A90
SHA-512:	6E0475F88E657357ABF9A3917421C7B504BF0385C8A930E2C5CF464AB96CC8BC42F1D42D202053C9A834D2D7CB6AEFECAAE937C95E05313DB9B4FCBE4F406785
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (553)
Category:	downloaded
Size (bytes):	3681
Entropy (8bit):	5.310615162639586
Encrypted:	false
SSDEEP:	48:IGUXERTgdf3nfLzeJpMJvAdFADGKCnt0gzCH9Uum33Es3PBH0Or/1mSh/F4ksiiN:BDzFHXz4M3r9LjqziiN
MD5:	011C0FC0D0CF131BDFF879743A353002
SHA1:	9336BA4F6BD99531147F284CF217D473EB6FA3C0
SHA-256:	2DBB30AF18C1CC025D432F934A8B23478A3539D525BFA6100FB097E2DCDAFE57
SHA-512:	0681C12F9DA2507D19D32CE68C2B4A6ACA9F56A8F9BCC5CF3840B1757FD15DE1EF1411069913D566D39933DA586401585DA7481F0762795CF0E4DD64A2410E00
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/clientlibs/granite/jquery/granite.min.js
Preview:	(function(g,e){e.Granite=e.Granite\|\|{};e.Granite.$=e.Granite.$\|\|g;e._g=e._g\|\|{};e._g.$=e._g.$\|\|g;var k=Granite.HTTP;g.ajaxSetup({externalize:!0,encodePath:!0,hook:!0,beforeSend:function(h,c){"undefined"!==typeof G_IS_HOOKED&&G_IS_HOOKED(c.url)\|\|(c.externalize&&(c.url=k.externalize(c.url)),c.encodePath&&(c.url=k.encodePathOfURI(c.url)));c.hook&&(h=k.getXhrHook(c.url,c.type,c.data))&&(c.url=h.url,h.params&&("GET"===c.type.toUpperCase()?c.url+="?"+g.param(h.params):c.data=g.param(h.params)))},statusCode:{403:function(h){"Authentication Failed"===.h.getResponseHeader("X-Reason")&&k.handleLoginRedirect()}}});g.ajaxSettings.traditional=!0})(jQuery,this);.(function(g){window.Granite.csrf\|\|(window.Granite.csrf=g(window.Granite.HTTP))})(function(g){function e(){this._handler=[]}function k(a){var b="//"+document.location.host,d=document.location.protocol+b;return a===d\|\|a.slice(0,d.length+1)===d+"/"\|\|a===b\|\|a.slice(0,b.length+1)===b+"/"\|\|!/^(\/\/\|http:\|https:).*/.test(a)}function h(a){window.con

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	1.9560481186376761
Encrypted:	false
SSDEEP:	96:jGpxkqkiJpAsnNKYOcHp+5BsTxXqr84jsG+9SJv5iszM6U0Nikm0pAp:jGvUu3smsfsIzCh/P
MD5:	430ACCE94BA315DEF125DD60AF0D607E
SHA1:	8BF93E33CDC999C2C8EDB0C1180F236366CB6309
SHA-256:	3CEED549E912A62EFCCE446E8B1EECCC26D3BD118E399DBA26940BD847404920
SHA-512:	7DEBDA56FAEC3A332EB4ECA9BC3DE50B81C9BA5FC5BC7918D368A97D50DDD0633850A657C9089D04D30A65A7B1D3405E22E2EEE90500D673627DAED82ABAD1E3
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................@...@...@...@...........................................................................................................................................................@...@...@...............@.T.@...@...@.T..................................

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1250)
Category:	downloaded
Size (bytes):	1283
Entropy (8bit):	5.109418824656296
Encrypted:	false
SSDEEP:	24:YozBbSHclra7w/Wbiz7vBmGa1RIYTu9cwMY3l0SSCzfIZ7kpbewaC:YozhSHc61euMY69cQiSd07kpydC
MD5:	D4FB89083795A6C5233AECB433094BE8
SHA1:	4FCB3E42129FBAE2DFE8F47B11FA46EF43B02BD1
SHA-256:	679D26A3CA897FB7D98C05FF0C8E97B249E731B5E40FB5995D3139B4281BB298
SHA-512:	EACB391C09F1417E08AF2A6170AC144AA6F1EF022181610DA64E610465BF94296D182762829BE8ACB0ACF0A3D426D7F8D5F37B679F9C318BA521507DC0E7ED14
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/head.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.DCL=t():e.DCL=t()}(this,function(){return function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:fu

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	dropped
Size (bytes):	52285
Entropy (8bit):	5.382930833719229
Encrypted:	false
SSDEEP:	768:9TxvlEP4zkocwmUoxpdI9zIyIgN0xgG6v+PGQTlP6j3t3vR/+a93seByJ0b74Ebc:BxvlEP4zkocxzdxgtv+PG0PA3txPEEbc
MD5:	9CFEE67F2681E1E92EFB3F85FA9C668F
SHA1:	C75AC9268B74CD96CF32BE69368E263A9973608B
SHA-256:	0DB43EBA61B33934229B19B825B7BEA29C3BB17FC1E3E1E43047D7772AAE6036
SHA-512:	620643847686939ECCE13B1633424CE10329CFF1ACD6C19959AB0507A8F0542A4C3F3C755582691EEA3F4AE80A8FC33172EEB75491D44D9A2D09453C2914E20A
Malicious:	false
Reputation:	low
Preview:	;/* Version 281eccdb0a28fe3b4dbfbf942f8b88ed v:21.4.0.3405, c:30de095c7d8f35f3f926215f37b39accad0317b8, b:21.4.0.3405 /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){var x=window.console,B=x&&"function"==typeof x.log?x:{log:function(){

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44539)
Category:	downloaded
Size (bytes):	1043927
Entropy (8bit):	5.508979525698392
Encrypted:	false
SSDEEP:	12288:7ITc7q3sNV6skT3XRkVYKjZKjQhMwHGXZWO6HfbBeBI2O3XP2wqOnH/0QOknHnS4:7IdtNQh3HfbBeDfzKeaQfzKeaL
MD5:	F332723DC6F13794D713DD7EF2B03D15
SHA1:	93779DC599425F664881C45B55738C2D3BB6CE91
SHA-256:	CB6DCA692A64402FDEE3048DB811612A3534C5AB1EFA1C593E47191CBCA0BFAC
SHA-512:	990BB8C00A22E8E032AB02147E2FB79A961C199392C29BB6284CDDDC70EE9D2A29D50E43058263E40388A0275CF11BC644ABA93D403D42173AB6BEDD0F9FAE02
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-dependencies.min.js
Preview:	!function(r){function t(t){for(var o,e,l=t[0],i=t[1],p=0,n=[];p<l.length;p++)e=l[p],Object.prototype.hasOwnProperty.call(a,e)&&a[e]&&n.push(a[e][0]),a[e]=0;for(o in i)Object.prototype.hasOwnProperty.call(i,o)&&(r[o]=i[o]);for(h&&h(t);n.length;)n.shift()()}var o={},a={2:0};function e(t){if(o[t])return o[t].exports;var a=o[t]={i:t,l:!1,exports:{}};return r[t].call(a.exports,a,a.exports,e),a.l=!0,a.exports}e.e=function(r){var t=[],o=a[r];if(0!==o)if(o)t.push(o[2]);else{var l=new Promise((function(t,e){o=a[r]=[t,e]}));t.push(o[2]=l);var i,p=document.createElement("script");p.charset="utf-8",p.timeout=120,e.nc&&p.setAttribute("nonce",e.nc),p.src=function(r){return e.p+"clientlib-dependencies/resources/"+({4:"polyfills-dom",7:"vendors~polyfills-core-js"}[r]\|\|r)+".js"}(r);var h=new Error;i=function(t){p.onerror=p.onload=null,clearTimeout(n);var o=a[r];if(0!==o){if(o){var e=t&&("load"===t.type?"missing":t.type),l=t&&t.target&&t.target.src;h.message="Loading chunk "+r+" failed.\n("+e+": "+l+")"

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZvvGLQAAAG9rCQNx&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1906x1431, components 3
Category:	downloaded
Size (bytes):	45487
Entropy (8bit):	7.161432425817959
Encrypted:	false
SSDEEP:	768:EHnD0H2Qg0d8LYPiK5IFYmOtTnSe2ZZbM0f1aK1XB2jnNQ0TMGew5n:aD0HJZaWoYmOtTSe2/bM0YKmj+nGe4n
MD5:	3711D78C09664C78E902AE743FAB2422
SHA1:	AFBCFA0818E3D297228491185295C74706933A1F
SHA-256:	3ACFF96DFE388D9EC12208B018B7C8876E6841C7163730E9C0A83E673846F152
SHA-512:	26D645D6D70D62B34CBF5881884338D5DFF6A48D92221CE6F2419571A914AA2E9C7E6E5EAE1438650293081F947AED35F5AB12588D04EDAEA342633C15A23A52
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/content/dam/ue/en-us/images/video-covers/234635.jpg
Preview:	......Exif..II*.................Ducky............./http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 2023 Macintosh" xmpMM:InstanceID="xmp.iid:92763DFD620311ED9D69F93EC37A60AF" xmpMM:DocumentID="xmp.did:92763DFE620311ED9D69F93EC37A60AF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:92763DFB620311ED9D69F93EC37A60AF" stRef:documentID="xmp.did:92763DFC620311ED9D69F93EC37A60AF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17343), with no line terminators
Category:	downloaded
Size (bytes):	17343
Entropy (8bit):	5.574892552711479
Encrypted:	false
SSDEEP:	384:y3Ngx0Ch1PyLCV1xOzZC+3yZy9gCVrOzv1z1VnOzclOzKylsDUYU4s3UEUssOs/p:DXKezAzI90bEzdJkzhzXS43Hk4WMc+lK
MD5:	19C1896B104B5D567DE70E47965DF75C
SHA1:	67CA585867AD6DC3A4E5DFDEEA73C35F38BA193E
SHA-256:	E49D3A8602D8B0402ACFB8F002D8BBE194180319E3A954BF7BC75AEF0FE9E129
SHA-512:	B9E1976C2F427D25A7EA1807EC42BC5CBFAC00F92E005B31617535F5D7E9DD37FAA6C326BCE1AC359C11349C400D14B24B7192F50F80962052516DAD0C7B38D8
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/996834583?random=1727776335187&cv=11&fst=1727776335187&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo&hn=www.googleadservices.com&frm=0&tiba=Request%20a%20Demo%20-%20HighQ%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":7776000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s488782044.1727776304","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s488782044.1727776304\u0026ig_key=1sNHM0ODg3ODIwNDQuMTcyNzc3NjMwNA!2sZ3JtUA!3sAAptDV4drIhp\u0026tag_eid=44800267","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s5TF1SQ!2sZ3JtUA!3sAAptDV4drIhp","1i44800267"],"userBiddingSignals":[["903838704","470862665","6714099386","5482137"],null,1727776336839985],"ads":[{"renderUrl":"https://tdsf.double

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17643), with no line terminators
Category:	downloaded
Size (bytes):	17643
Entropy (8bit):	5.5951546337003375
Encrypted:	false
SSDEEP:	384:y3NgBdCVr1zyLCV1xOzZChylyZC+3Ozcl1Vn1POzKOzvy9gs/UrU4s3UYsDssOU9:GbmezAzIsoIDzs7Wz1zqJMAHknoGEsrB
MD5:	2D460B7F6A0199FFA29FC328E6E4C46D
SHA1:	5478B0D9E4E4A3558D5869A15BA42C88938E79F5
SHA-256:	E81668FA9B68CEC9274B84E0282148ACFC49F3D915D188AD89BE526C8EFB5A1E
SHA-512:	D5D2F1623A66D49A4EF7FF54F150C2F016A6DDA77BB74CADE4D35DAB3703A1F3CB3E144690552EDE2564F6A79061B77FF1C918B62D78316BA981A3905A5BCB04
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/996834583?random=1727776303589&cv=11&fst=1727776303589&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&hn=www.googleadservices.com&frm=0&tiba=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":7776000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s488782044.1727776304","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s488782044.1727776304\u0026ig_key=1sNHM0ODg3ODIwNDQuMTcyNzc3NjMwNA!2sZ3JtMQ!3sAAptDV57Y6d0","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s5TF1SQ!2sZ3JtMQ!3sAAptDV57Y6d0"],"userBiddingSignals":[["5482137","470862665","6714099386","903838704"],null,1727776305867238],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=140

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmBfPYjho195RIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/libs/granite/csrf/token.json
Preview:	{}

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	1271
Entropy (8bit):	5.184130085081704
Encrypted:	false
SSDEEP:	24:2Q+Bvk+oX/IP2iJyep9Mf9MWIMyMZ2iJRcM2n3k2RRnDbLMWhTtMXy99MJVOfMsX:P/1op9M1MTMyMIjM23pbD/MUtMXy99M0
MD5:	0A6AFF292F5CC42142779CDE92054524
SHA1:	7A4B1CB962793F47ED138A8DF2D5E4D49E73335A
SHA-256:	C250924012FDC9EA9516B30650895201CD167DBD49C9D148924F30881ABFA393
SHA-512:	A9934DC7FFF0FA59069A815C3CF795148E9A36759017037DEF66E6A228D650139FD364A004DA7A8F0706E4B28E7AA1F63A8B5F7A3BD0270369EAE9AF82D64403
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.js
Preview:	(function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={removeUrlHash:function(){history.replaceState(void 0,void 0," ")},updateUrlHash:function(a,b,c){a&&a._elements&&a._elements[b]&&a._elements[b][c]&&a._elements[b][c].id&&history.replaceState(void 0,void 0,"#"+a._elements[b][c].id)},getDeepLinkItemIdx:function(a,.b,c){if(window.location.hash){var d=window.location.hash.substring(1);if(d&&document.getElementById(d)&&a&&a._config&&a._config.element&&a._elements[b]&&a._config.element.querySelector("[id\x3d'"+d+"']"))for(var e=0;e<a._elements[b].length;e++){var g=a._elements[b][e],f=!1;a._elements[c]&&(f=(f=a._elements[c][e])&&f.querySelector("[id\x3d'"+d+"']"));if(g.id===d\|\|f)return e}}return-1},getDeepLinkItem:function(a,b,c){c=window.CQ.CoreComponents.container.utils.getDeepLinkItemIdx(a,b,c);

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	32
Entropy (8bit):	4.5625
Encrypted:	false
SSDEEP:	3:Ja1GvklVn:0GclV
MD5:	933211C2F47FD862ED003957DDE81699
SHA1:	B8414CEA6A957EC548402A2F22F7DFB4402FD77E
SHA-256:	E46A1F9B79FE50F1F4C6AE3BF67692AE93F18E0F7D652BCA0876C64706143A20
SHA-512:	06230685074F2811556D34F39EFA2BD6A468099740F2207B40CC30F37E3E3111E0520E826667CBBB0E03BAE7FC773BC1744086B62BE1ADB0C567D751755B34BD
Malicious:	false
Reputation:	low
Preview:	tyGab/sEI5bcp1ulEULsJpk8maADmxx0

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=ZvvGLQAAAG9rCQNx
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1511540
Entropy (8bit):	5.363202487938861
Encrypted:	false
SSDEEP:	12288:7qHzmRjLkT3XRkOvKjuKjOdYKkWrqOAJXJTfJ0aC+QD9jQsyxR5GcsGV19cQ0Ql8:o888hhfqL/DYMCq/DYMC+
MD5:	5EC24B0BB02FF58BCC8597FB5F333080
SHA1:	AF42EC60286D7BD338637F50B9215C5DD582BDE0
SHA-256:	17353C3739427CEE3FA41BF2C8280F836DEE82F29193E4286EB5CC9D68E045B2
SHA-512:	8DA64F3436A125327449B5B093D24C6D38BBFA9D4319AEDE1DC876DF8DE52CADA9897ABB852D5A7A18A0FA9EE52A4CA46F3793A2E50E03AC0A83E3CF9BF761DD
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-dependencies/resources/8.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{306:function(o,a,r){"use strict";r.r(a),function(o){r.d(a,"dig_accordion",(function(){return l})),r.d(a,"dig_accordion_item",(function(){return lt})),r.d(a,"dig_accordion_panel",(function(){return dt})),r.d(a,"dig_back_to_top",(function(){return bt})),r.d(a,"dig_button",(function(){return Mt})),r.d(a,"dig_card",(function(){return St})),r.d(a,"dig_card_media",(function(){return Ct})),r.d(a,"dig_checkbox_group",(function(){return $t})),r.d(a,"dig_divider",(function(){return ei})),r.d(a,"dig_form",(function(){return ii})),r.d(a,"dig_icon",(function(){return li})),r.d(a,"dig_input_password",(function(){return di})),r.d(a,"dig_input_tel",(function(){return fi})),r.d(a,"dig_input_text",(function(){return ni})),r.d(a,"dig_link",(function(){return ui})),r.d(a,"dig_media",(function(){return mi})),r.d(a,"dig_modal",(function(){return vi})),r.d(a,"dig_nav_option",(function(){return xi})),r.d(a,"dig_paper",(function(){return Hi})),r.d(a,"dig

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29200)
Category:	dropped
Size (bytes):	140139
Entropy (8bit):	5.318888769165162
Encrypted:	false
SSDEEP:	3072:FrdcOMul79jEcUMnDlENaHYjDTnVaysxhvllYNtCauZ:FwM9jEcUMneaHYjDTnVaysxhvlUtCa0
MD5:	8F70DF01CEE0242A17F494CAAFAF2644
SHA1:	2E24A0960D8F8B69CE8132DCF19D4506552420C5
SHA-256:	D818DDFB5F08D8C41561AF3FDB0B5164128977FD3B6261718B2D2EA901837EC5
SHA-512:	2408BE722CC0592FFB96B62E6650D39D1B705AA53262E620974B9EDEE36CB070576530868F31691DC764D9E0BADA0B1D6E2446C2E6A9C690FCD40E64C94DAA6E
Malicious:	false
Reputation:	low
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="/etc.clientlibs/uefalcon/clientlibs/",n(n.s=303)}({0:function(t,e,n){"use strict";(function(t,r,i){va

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39444, version 1.0
Category:	downloaded
Size (bytes):	39444
Entropy (8bit):	7.99433181240545
Encrypted:	true
SSDEEP:	768:CiJW59T7Pf8+Rzit2tXNOCbrKG2/3q1nBi+TYfUaMeUiYK08:3Odf8+R2t23fKp/aYfU7tiYK08
MD5:	3327C2A7977DB98E49B5369FCAFC658C
SHA1:	0A7FD87F9CDFB9BC3FDEDC92648EAE07CB040EC4
SHA-256:	C2F3554385A43C399EDC8FDD5FFA86B657EBB1BC266DFF0E14BFCCDD7E2E518A
SHA-512:	55B793EFF28C38014AD3AC6D8F7E8A04571D6609AE4F4421C511659DC10CAA6E3D5E51EBB2D83A4930862F8F7F18CCBF1F5741C1245326AF93A477D83CDA9883
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-black-webfont.woff2
Preview:	wOF2...............`............................?FFTM........8.`..^..V..u.....<..$.6.$..Z..p.. .....T..~?webf.[._.....~..V.....47...<%l:4..U.L.+/.`...E4...Q.......J."...z.I..E..QD.ul31w.@..-.1 @V...6....+....<N....YHm..}.^,pG....7....0.6V.c,....d....;.r.~..-.[y...Q0..T...X.g.=....d......-.u"n.).....]0..fZ.......:.I...d.....D..n.&./O......v.yU.UJ.1...j.ca..z)t.....x....p......H...D4./.r......?r..BD$@.....=e...e&..n....D.Cd...]X.lN.W.:...5.3.dB.j.vo. (..\........a.4~...+....Z..VmN..YT.....X..S...... ......I.No...;Y.....K...AEC...?.....WF ..K..T.....m...8....!6..AwVb..1.WV......,W....c.....!.^...Rp...1.ykV.1F..c.%k.R..-X.("`..w../va.[.X...........X..\|.x(.h.Y..z....B0.`..!.x$F......-])ie..q..)\r..H.@..4..e.77..t-[..%..O=....a.....-T...,.p.I...8o.@...T..>.8cyl.W......U..b"..0...r.......sR6P.4J.+....0..f.J..a...?.o..b.-......U...FO.\H&.O......._..H.".,?....~z..0J.+.$.....'3.2K.O.I..T.:...t]R.)S.....l.........+Iq..q.u.=..@,...%.....8......2...&..C.h

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17998)
Category:	downloaded
Size (bytes):	18618
Entropy (8bit):	5.640300193320173
Encrypted:	false
SSDEEP:	384:MolxP/aWS4dj4lfFVqEBSmur4+O5Un8OxuTtLRsFOuohfa8wnaeDg3z6MVRegEW9:DlMWSKcKDOhtLCONa8qae0rVReZWrPJ
MD5:	59D00FA56FB8B29068D96A431A52AE7B
SHA1:	9F8C5455383C49873A60CAEBACB1DECAAE0F909E
SHA-256:	76E6DCC56BA185BAB0F2E68B485146BC42E79395A67DF0F7C23A18790677DE09
SHA-512:	3BFF8DCB6FDF2B4DE78211D636AE0310891FE6653CD1C6CADE0AE8039AC0EB67659DA142040B6290133E0D928FA1D22061F0A043D86F232AD40527A80B30F7EE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var c=this\|\|self,C=function(d){return d},m=function(d,a){if(!(a=(d=null,c).trustedTypes,a)\|\|!a.createPolicy)return d;try{d=a.createPolicy("bg",{createHTML:C,createScript:C,createScriptURL:C})}catch(f){c.console&&c.console.error(f.message)}return d};(0,eval)(function(d,a){return(a=m())&&d.eval(a.createScript("1"))===1?function(f){return a.createScript(f)}:function(f){return""+f}}(c)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var dB=function(d,a,C){if(d.length==3){for(C=0;C<3;C++)a[C]+=d[C];for(C=(d=[13,8,13,12,16,5,3,10,15],0);C<9;C++)a[3](a,C%3,d[C])}},a2=function(d,a,C){return d.PE(function(m){C=m},false,a),C},cb=function(d,a,C,m,c,Z,e,F){return(F=X[(Z=(a=[27,-7,-92,-77,46,39,a,14,55,37],d&(e=f$,7)),m).V](m.uZ),F[m.V]=function(f){Z+=6+7*d,c=f,Z&=7},F).concat=function(f){return((c=(f=(f=C%16+1,+a

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (760)
Category:	dropped
Size (bytes):	101012
Entropy (8bit):	5.479189260167126
Encrypted:	false
SSDEEP:	3072:j2F1P3V7wiw0w3SNa3aGuWYe5mQZHSyUx+rHq:j41vV7wig5mQIyUx+rHq
MD5:	3E24D4D067AC58228B5004ABB50344EF
SHA1:	301C9DE328688542E2D1FB2347FBB671D2392298
SHA-256:	C44372172FD63C732549FBB0778BD7A8A73211262F9C5BD5D4AE18193DA67EFF
SHA-512:	B7465630D1221EF2A488E8FEF3B8E48A1F2636A277574AA12C67F62AF6D2BD4F6FFE6B54FF63F9168736744BA9ED1F0ABAB4DB054B118B0EAA9BF50CF1A1175D
Malicious:	false
Reputation:	low
Preview:	/. jQuery JavaScript Library v1.12.4-aem. http://jquery.com/.. Includes Sizzle.js. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2016-05-20T17:17Z. Sizzle CSS Selector user v2.2.1. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2015-10-17./.(function(B,ya){"object"===typeof module&&"object"===typeof module.exports?module.exports=B.document?ya(B,!0):function(za){if(!za.document)throw Error("jQuery requires a window with a document");return ya(za)}:ya(B)})("undefined"!==typeof window?window:this,function(B,ya){function za(a){var b=!!a&&"length"in a&&a.length,d=c.type(a);return"function"===d\|\|c.isWindow(a)?!1:"array"===d\|\|0===b\|\|"number"===typeof b&&0<b&&b-1 in a}function Wa(a,b,d){if(c.isFunction(b))return c.grep(a,function(e,f){return!!b.call(e,.f,e)!==d});if(b.nodeType)return c.grep(a,function(e)

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	dropped
Size (bytes):	9896
Entropy (8bit):	5.49351314230287
Encrypted:	false
SSDEEP:	192:pIUVupN9xa4Kh/rth66rHlu6lOZCTbKTPsGDzY037P2MuHRLl7s:g9MRjTM6KCTbKTPsGDzPLP2MuHk
MD5:	D06F94DEC994A8F6C80F88A1EEB5329D
SHA1:	C714F7AD76C12668A0F6157F58C31B18466CD962
SHA-256:	E86B2991A854F2A33096C02A59888E6EC8915DCA848A6964BBF0E9C871F50112
SHA-512:	7F8FA1AB35D58C37E9F0EFB13EE74C616E3E076DC7D835B4CFF7A3A32E91A1CE3F851A64FB8651DA9F83A776897E7669900DD26D244C0429BFEF3498B8FC2BDF
Malicious:	false
Reputation:	low
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","BrandTier":"RQqcwhV2J1","zoneId":"ZN_9NXfmD5iBoQORGm"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.**Version

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1617), with no line terminators
Category:	downloaded
Size (bytes):	1617
Entropy (8bit):	5.756773605912319
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXAAbDx1+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDA9:iEcxqKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	D8C8FC3500F440E98DD02F499D706A3A
SHA1:	61717D62BD3E912316C3A1FF3B6E4F521618DC39
SHA-256:	7324646ACE65AEB6E9183862D804C5C1C132B10A21987C83A45F68CFB449B7DE
SHA-512:	02C949C185423107665F70EA9D3C533569532387BBE394A004C108B28E8B0AD8A4FA40E3D76F2B71094F34491F519BAA526665123A00EFD976EFCE287DF7DFD8
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?render=6Lcg8t8aAAAAAEg-ugVYe6QCmneyyVZm6ExG-4vv
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6Lcg8t8aAAAAAEg-ugVYe6QCmneyyVZm6ExG-4vv');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkU

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	469
Entropy (8bit):	4.273010075259319
Encrypted:	false
SSDEEP:	12:trf1fDuifrm5ivXWihXnWQQrWhUru+Mn0:tT1fDuWvX1h3WAjln0
MD5:	FF3BE85BCF46D45AEEC12DDEDAE04B57
SHA1:	1558F184325E0C881B0D7591D9040516D2781D82
SHA-256:	DE761A54C27B972275CFD32F301226D24B469C47A7B302A505F7B9EA9FAA9D24
SHA-512:	753EEB7BF7FC56A80E86B3A63910EACB1A5EA5CF40592695F3F806E347104E28A202085C22054AA43C39D062124E5E0533CABB030FF0FE1E321A7C1C7BFB39D2
Malicious:	false
Reputation:	low
Preview:	<svg width="18" height="18" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M13.7 0.3C13.3 -0.1 12.7 -0.1 12.3 0.3L7 5.6L1.7 0.3C1.3 -0.1 0.7 -0.1 0.3 0.3C-0.1 0.7 -0.1 1.3 0.3 1.7L5.6 7L0.3 12.3C-0.1 12.7 -0.1 13.3 0.3 13.7C0.5 13.9 0.7 14 1 14C1.3 14 1.5 13.9 1.7 13.7L7 8.4L12.3 13.7C12.5 13.9 12.8 14 13 14C13.2 14 13.5 13.9 13.7 13.7C14.1 13.3 14.1 12.7 13.7 12.3L8.4 7L13.7 1.7C14.1 1.3 14.1 0.7 13.7 0.3Z" fill="#404040"/>.</svg>

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/fr/b.php?p=1531105787105294&e=ZvvGLQAAAG9rCQNx&t=2592000&o=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	164845
Entropy (8bit):	5.267187874336299
Encrypted:	false
SSDEEP:	3072:14oGqQ+gTKtJPs6m6mZ1xBfbiefEBBQj0jPzEnSgr:8HKtJIRjS4
MD5:	F93143D79908FC51A18F2A15B2678564
SHA1:	0C817A33E00B58868732A186E2CD14128DE507B7
SHA-256:	E5AF05490EB3E05B2436C48E43208C7B0864D137433FEF6F79D5328961C3EE5F
SHA-512:	B0CBBC14BCADA18A5D5BE1AC1786A0833C04F660593D17170D11A168F2806921F2DC2A3BB5F75E22767958776DE9EBC9CA1B81388ABED215FB2EA31D2BF86A8D
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-dcl_components.min.css
Preview:	@charset "utf-8";@import url(https://fonts.googleapis.com/css2?family=Source+Sans+3:wght@400;500;600;700&display=swap);.emcmUi-PlanComparisonTableColumnHeader{font:var(--saf-type-body-default-sm);padding:var(--saf-global-spacing-8) var(--saf-global-spacing-20)}.emcmUi-PlanComparisonTableColumnHeader-title{font:var(--saf-type-heading-xl)}.emcmUi-PlanComparisonTableColumnHeader-content{margin-top:var(--saf-global-spacing-8)}.emcmUi-PlanComparisonTableColumnHeader-dropdown{margin-top:var(--saf-global-spacing-24);margin-bottom:var(--saf-global-spacing-4);color:var(--saf-color-text-heavy)}.emcmUi-PlanComparisonTableColumnHeader .emcmUi-FormSelectControl-labelText{margin-bottom:var(--saf-global-spacing-3);color:var(--saf-color-text-heavy)}.emcmUi-PlanComparisonTableColumnHeader .emcmUi-FormSelectControl-input{margin-top:var(--saf-global-spacing-8)}.emcmUi-PlanComparisonTableColumnHeader .emcmUi-FormSelectControl-select{line-height:24px;color:var(--saf-color-text-heavy);padding-left:12px;padd

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	947
Entropy (8bit):	5.473257462078134
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WdcfMpNrl/nCHUZLZYVHZXnJyNxL8BMUNbY:si2N1V4NxwZG1idD/taXJywBf5Ldo
MD5:	B5E78CC5FA5847B051A9D97ACC6615FF
SHA1:	B54D4532F2AA96C8ED132BD9973E606CC5BAEEA4
SHA-256:	B0E87335760093659DB873FA3BE864E318C6E02EDC166CDE22B31F082FDB8CAB
SHA-512:	8CCDA65DFE647DA4287598666B0BC6F7C683BA8EA91F9EF33CCD40B8EF01474EFF3D4D8FDA9B9753D8685CC9AF8FB2BA5C7EC968144395157FF64A95F9F2CC2F
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=3u503kv&ref=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&upid=thm7oum&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=68d6cd4a-87cc-4465-9311-5feb95c2e6e0","https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=68d6cd4a-87cc-4465-9311-5feb95c2e6e0&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon","https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NjhkNmNkNGEtODdjYy00NDY1LTkzMTEtNWZlYjk1YzJlNmUw&gdpr=0&gdpr_consent=&ttd_tdid=68d6cd4a-87cc-4465-9311-5feb95c2e6e0"] );. })(this);. </script>. . </div>.</body>.</html>

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3950)
Category:	dropped
Size (bytes):	107840
Entropy (8bit):	4.976713009562999
Encrypted:	false
SSDEEP:	768:x7aCuEA6cz64zt+Yfh+cpxkpQUw/tLYCmCc5E6L9A:daCuEA6wzoQ+cpxTp/BIBE66
MD5:	AA3910648F8E7E2FAB34FC2F5F7C12E5
SHA1:	F0403FD61E544D7A728F63D32AFD0BE9485A71D9
SHA-256:	5663BA970B8456118FD28E0F2AEA8A2143A3126ADCCD4ABB81FC31E1A9B417B3
SHA-512:	0DB6E3CFD7EE925CEBF2BBCA6D9BEC789C731AB29654F326E22D3A2BF46E489A7F0EA5DA2A2503FD1DA4F8CA3B512DB01E8585BDC2550E0C4D56A08DF0A38E94
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],[./!************************************************!\. !* ../node_modules/core-js/modules/_export.js !. \************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(t,n,e){var v=e(/! ./_global /2),h=e(/! ./_core /12),g=e(/! ./_hide /10),m=e(/! ./_redefine /14),y=e(/! ./_ctx /15),_="prototype",x=function(t,n,e){var r,o,i,u=t&x.F,s=t&x.G,c=t&x.S,a=t&x.P,f=t&x.B,l=s?v:c?v[n]\|\|(v[n]={}):(v[n]\|\|{})[_],p=s?h:h[n]\|\|(h[n]={}),d=p[_]\|\|(p[_]={});for(r in e=s?n:e)o=((i=!u&&l&&void 0!==l[r])?l:e)[r],i=f&&i?y(o,v):a&&"function"==typeof o?y(Function.call,o):o,l&&m(l,r,o,t&x.U),p[r]!=o&&g(p,r,i),a&&d[r]!=o&&(d[r]=o)};v.core=h,x.F=1,x.G=2,x.S=4,x.P=8,x.B=16,x.W=32,x.U=64,x.R=128,t.exports=x},,./!*************************************************!\. !*** ../node_modules/core-js/modules/_global.js *

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.136248672727249
Encrypted:	false
SSDEEP:	3:YIzIX/GZR49aLVAL4n:YIyGvvVln
MD5:	905B1FBB26E082557FF0B3B3553CDA6C
SHA1:	8FE0790D6026998BDB2C9FFA3B915952E613E1B4
SHA-256:	F249B63CB2FCB66B47E86F906C98F8FD912E82DD035B4E53D7E72FC1960CFD16
SHA-512:	284567E83A5C15761498249B27B4B700AA081A65B858F29458E5D0F3DEBDEA93DD5CFAD94EEFAEB43837E70CC288B2A34EA168D2771CB57C993E269C287097CE
Malicious:	false
Reputation:	low
Preview:	{"message":"Missing Authentication Token"}

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78840
Entropy (8bit):	6.022413301778022
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIlbuhXwW4nxM:mGRFauOxLA/+IcTOjX/
MD5:	0CA290F7801B0434CFE66A0F300A324C
SHA1:	0891B431E5F2671A211DDD8F03ACF1D07792F076
SHA-256:	0C613DC5F9E10DFF735C7A102433381C97B89C4A26CE26C78D9FFAD1ADDDC528
SHA-512:	AF70C75F30B08D731042C45091681B55E398EA6E6D96189BC9935CE25584A57240C678FF44C0C0428F93BF1F6A504E0558BC63F233D66D1B9A5B477BA1EF1533
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16726), with no line terminators
Category:	downloaded
Size (bytes):	16726
Entropy (8bit):	5.23026839244105
Encrypted:	false
SSDEEP:	384:JwPd9hUyVYDsdU5sF59QF5vCAG57eCYk9p:JwbhUyWDR5sj9q5vCAGxpYk9p
MD5:	941C0E37EF2053C3BE028DDF82C29AEA
SHA1:	827E9FA842A31BBE39CC5414EE1E757FD024C3DB
SHA-256:	5FB4A88325AC0C0005047CDDD44A40980A77D7355AE119736A2465CAEE537C47
SHA-512:	84F27DDF54C579DE6F6F27B32279BA3933C351A6DEC0596CDFD9E3BE6099898496278430C80F78632EA0017D56625947D3F6560D79A43E8B6965CBD18A4CAD43
Malicious:	false
Reputation:	low
URL:	https://dx.mountain.com/spx?dxver=4.0.0&shaid=36732&tdr=&plh=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&cb=33401024174249196term=value
Preview:	var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"."+d[3]}catch(d){}}();(function () {var mntnis; async function fwto(resource, options = {}) { const { timeout = 1000 } = options; const controller = new AbortController(); const id = setTimeout(() => controller.abort(), timeout); const response = await fetch(resource, {...options, signal: controller.signal}); clearTimeout(id); return response.text(); } fwto("https://52.22.50.55/is", {timeout: 1000}).then(function (response) { return response; }).then(function (response) { mntnis = response; }).catch(function (err) { mntnis = err; }); var shaddslashes = function (s) {if (s != undefined && s != null) {s = s.replace(/%/g, "%25%32%35");s = s.replace(/\\/g, "%5C");s = s.replace(/'/g, "%27");s = s.replace(/"/g, "%22");s = s.replace(/\?/g, "%

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	716
Entropy (8bit):	4.273927894468957
Encrypted:	false
SSDEEP:	12:trZ1BuCbLHsLcejPsKffC6nSaFHhFUcivEv5MBdbW:tV1BumMpjA6nSaFBFUcie5MBdbW
MD5:	F90B2FF056BD72E0C4D9623442047D32
SHA1:	326B3DACE7F1FE17398C8B617996C5B43DD6CEE3
SHA-256:	6F80945AD6D97F191D6ABBEAA4352E861424809AF9BE8F90B6EEA25A1B1C318B
SHA-512:	1F041AD9B5F39CCE2D79A9C5B47123A5A882597BCC81DF149B6816AF974C55F62306E256FB99B1CC4CD7253BE26AA5438C913F011095406AAB3067F5771D0185
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="18" viewBox="0 0 16 18" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M12.4688 13.0312C11.75 11.8125 10.4688 11 9 11H7C5.5 11 4.21875 11.8125 3.53125 13.0312C4.625 14.25 6.21875 15 8 15C9.75 15 11.3438 14.25 12.4688 13.0312ZM0 9C0 6.15625 1.5 3.53125 4 2.09375C6.46875 0.65625 9.5 0.65625 12 2.09375C14.4688 3.53125 16 6.15625 16 9C16 11.875 14.4688 14.5 12 15.9375C9.5 17.375 6.46875 17.375 4 15.9375C1.5 14.5 0 11.875 0 9ZM8 9.5C8.78125 9.5 9.53125 9.09375 9.9375 8.375C10.3438 7.6875 10.3438 6.84375 9.9375 6.125C9.53125 5.4375 8.78125 5 8 5C7.1875 5 6.4375 5.4375 6.03125 6.125C5.625 6.84375 5.625 7.6875 6.03125 8.375C6.4375 9.09375 7.1875 9.5 8 9.5Z" fill="#404040"/>.</svg>.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	420655
Entropy (8bit):	5.349824066254744
Encrypted:	false
SSDEEP:	6144:9XqCzGIQnxhqPIMs/7ooynNUO7yWE7qjEhQBLnqvxyYKFKs:1qjnxhqgUE7qFnq6V
MD5:	E299B47727F3FBA334AD8BD6109CAB04
SHA1:	A5B4E82B461552AA131DE3F244D2BCD89F3FEF73
SHA-256:	27FF6F8B30F633A9E1954D6CC94756127292AA99560255E414BBB75B37416594
SHA-512:	2937C88A68B603D253E69BE88B802FFE619DF35E143B1222B46DF96DED15970F219BDBB65B1D65FCE003867507476B7A6E5C711CD505755641E486C10B2DC8E1
Malicious:	false
Reputation:	low
Preview:	/** . * onetrust-banner-sdk. * v202308.1.0. * by OneTrust LLC. * Copyright 2023 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function R(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (538)
Category:	dropped
Size (bytes):	8130
Entropy (8bit):	5.54587769268953
Encrypted:	false
SSDEEP:	192:8r8DryrSqTr6yGIiN7tNnDre7xeGN7bTfAum9O1frqXShjQrp:8rurcrDG7RNnDrieOAOhrqUjQrp
MD5:	3B86602C4E1E0B41D9673F674A75CD4B
SHA1:	BA362B30BD258C43D0A93008769BE7888D36012C
SHA-256:	5875086F3516F697BCC46F4DF5069E95AB5101CB4B7DE1EC6EC2FC8108B9C682
SHA-512:	3FAFEC84B255D4F43D47B1747D334AD6CE3896020D753F7E98AF4A1CC26B62935797C4704640E1D90C62413F2D9A91C854D125CAE071065E04B0B0D80F64C845
Malicious:	false
Reputation:	low
Preview:	(function(d){"object"===typeof module&&module.exports?module.exports=d():(window.Granite=window.Granite\|\|{}).Sling=d()})(function(){return{SELECTOR_INFINITY:".infinity",CHARSET:"_charset_",STATUS:":status",STATUS_BROWSER:"browser",OPERATION:":operation",OPERATION_DELETE:"delete",OPERATION_MOVE:"move",DELETE_SUFFIX:"@Delete",TYPEHINT_SUFFIX:"@TypeHint",COPY_SUFFIX:"@CopyFrom",MOVE_SUFFIX:"@MoveFrom",ORDER:":order",REPLACE:":replace",DESTINATION:":dest",SAVE_PARAM_PREFIX:":saveParamPrefix",IGNORE_PARAM:":ignore",.REQUEST_LOGIN_PARAM:"sling:authRequestLogin",LOGIN_URL:"/system/sling/login.html",LOGOUT_URL:"/system/sling/logout.html"}});.(function(d){"object"===typeof module&&module.exports?module.exports=d():(window.Granite=window.Granite\|\|{}).Util=d()})(function(){return{patchText:function(d,h){if(h)if("[object Array]"!==Object.prototype.toString.call(h))d=d.replace("{0}",h);else for(var f=0;f<h.length;f++)d=d.replace("{"+f+"}",h[f]);return d},getTopWindow:function(){var d=window;if(this

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	420655
Entropy (8bit):	5.349824066254744
Encrypted:	false
SSDEEP:	6144:9XqCzGIQnxhqPIMs/7ooynNUO7yWE7qjEhQBLnqvxyYKFKs:1qjnxhqgUE7qFnq6V
MD5:	E299B47727F3FBA334AD8BD6109CAB04
SHA1:	A5B4E82B461552AA131DE3F244D2BCD89F3FEF73
SHA-256:	27FF6F8B30F633A9E1954D6CC94756127292AA99560255E414BBB75B37416594
SHA-512:	2937C88A68B603D253E69BE88B802FFE619DF35E143B1222B46DF96DED15970F219BDBB65B1D65FCE003867507476B7A6E5C711CD505755641E486C10B2DC8E1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202308.1.0. * by OneTrust LLC. * Copyright 2023 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function R(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4474)
Category:	dropped
Size (bytes):	4505
Entropy (8bit):	5.10166848748134
Encrypted:	false
SSDEEP:	96:vKgAcmLvkqQov48hFYeJT3+XdGpIuYeA11ESGI7wIFY+d:vhAcOkAnvaXEpITeSi4Y+d
MD5:	F3F6BB12E873D35EC002E1954CC3D4A9
SHA1:	BFE58C96947F4BA2518EDB3735AC099F1899F914
SHA-256:	DFE8C5F15301F1EE408346AFD4E2FBCC8DC7AA6D59A2BF1D49E31197088443A0
SHA-512:	F0230DF7456ED11B0D2A13D2CD04BCBAA33664720C61A3319FB755C753C722EB7DCC9A5E6C23B7AE5F0D3FE2FAFE64D46D50D4F43BD679E21867835C8F37418E
Malicious:	false
Reputation:	low
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[16],{1020:function(e,t,a){"use strict";a.r(t);var n=a(36),r=a(0),c=a.n(r),i=a(15),s=a(764),l=a(5),o=a.n(l),u=a(683),d=a(684),m=function e(t){var a=t.children,n=t.title,r=t.handleItemClick,l=t.isExpanded,m=Object(i.a)("SiteFooterNavList");return c.a.createElement("li",{className:m({states:o()({expanded:l})}),"data-rehydratable":Object(s.a)(e.displayName),"data-title":n},c.a.createElement("button",{className:o()(m({descendantName:"title"}),m({descendantName:"mobileShow"})),onClick:function(){return r(n)},role:"button","aria-label":"Thomas Reuters","aria-haspopup":!0,"aria-expanded":l},c.a.createElement("span",{className:"".concat(m({descendantName:"text"}),"\n u-typographySmallCaps")},n),c.a.createElement("span",{className:m({descendantName:"caret"})},l?c.a.createElement(d.a,null):c.a.createElement(u.a,null))),c.a.createElement("h3",{className:o()(m({descendantName:"title"}),m({descendantName:"desktopShow"}))},c.a.create

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 793 x 446, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	139761
Entropy (8bit):	7.993525145786807
Encrypted:	true
SSDEEP:	3072:Y1wj51fV9fP7dInMl9zyp8oWJ/GWrua5CcIGBM2RNQqMJk1mm:91fvPSM+VWLr5C/GVjum
MD5:	5B62FEC25BDA244CF699F1511BD0AE6A
SHA1:	1478782EDA78183E0368E4A6EE6D0C17CFF5F266
SHA-256:	0D5ABEB9839E835E6D5460D6C71A2F81E67ED523BA7C1C04D1AE9CD14989BF01
SHA-512:	E931397D59852173AD07228EB3A4C5C6193E591FA89B1C8C6E614C1419FC0A180A79116AB10E106931440DC9805C64C4F1AD20FDFB947BDBF847EA3B5987A00A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............e.....pHYs.................sRGB.........gAMA......a...!.IDATx....d..'.:".......NJ.Dj.um..Y....~....8..f.oh{_....t...tW..$UI...Fq.EqKf&s......;p.sN.....7#...w...w..`..?.....#.B`..?..\......HSy..!u:.....o..g...t...Z]]...............?\|H.]...9z....^..[.Jz.4....../..!...d.P\|..r....>...?.0.......P..y.C_.5M..u.+..u..s]~sb.dqj......@D?...u.]AmNhQN.'..]S.H...6..,.KhQNKY...P[..Y.E-...h.....4..L.:...+k......<.NO.]..2........i.....p...g.L....}.....P.>..Bo.X..P.:].V...C./>c.3.....4-.?{.4=......d.....?.hamH..NH'..<..j'..j......S...=.....uf.L.3z..".}zE.8te....c..?...uZt..........}9.J.w...t..{.............nO....:-.wt...O.~.....'....d..tuu@..VhI..3".....7+..g.3A.&.h..nX+............b.{.^1(%.....D.!.z..p... .1.!].@...9Bo..&-....;..1....q..eZX\.Y.v..!z.....u.........A<.a......hB\|.x-.!.E..JG.............:!.....g..XEvk.......UC......4....<N..P..Z.Sm..s53._6E.Z.J...T...B#..".Tda=..!.....!.:.X........mc.u..8.;.;(Xp.>.i...

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	5.054902972880033
Encrypted:	false
SSDEEP:	12:t4wPkzQJWT4nmdU/gKm7Ktex3mQSihq1bsGmVtkNe:t4wPsscU/dIKQxWQjQnr8
MD5:	84A82C23C09E88EFCAEEE4BABB9A4077
SHA1:	B04AB644DC9F00807207B93F495C6C603646C898
SHA-256:	83F92F357C20C679BAED9AC44D33F7DFA3FC020F3F45BB92AB1C02B43ECE837B
SHA-512:	4EEBEB2E14B572A462F784671F60971A892F9F576992BF6FC25B4B04088CF229712D65EF30A2426CC9DC97445B32A4D648E6535F5CEE7EED0E70BDC07FABA486
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/play-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Play icon" class="nc-icon-wrapper" width="24" height="24" viewBox="0 0 24 24" fill="#404040"><title>button play</title>.<path d='M20.555,11.168l-15-10c-0.307-0.204-0.702-0.224-1.026-0.05C4.203,1.292,4,1.631,4,2v20 c0,0.369,0.203,0.708,0.528,0.882C4.676,22.961,4.838,23,5,23c0.194,0,0.388-0.057,0.555-0.168l15-10C20.833,12.646,21,12.334,21,12 S20.833,11.354,20.555,11.168z'></path>.</svg>..

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4112
Entropy (8bit):	4.695583257438527
Encrypted:	false
SSDEEP:	96:4ecVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoq:4ecVWNXK3XuXW5O
MD5:	18D9365B9B8040D6064790CA68F4AEF9
SHA1:	FB950838056C16FE634FA8717FCEAAFBAED8C6BE
SHA-256:	1DBDEA01BC70F9C6E30C9EDD37D8F3BE67510C9CEF2EAA1DD057A4C6F8D98C3C
SHA-512:	0F4602FF5F6AD847DE86CE7A3C3F8430E5A940AAB161141E92BD643FD3F30F96E8845A9ED772592F494DC91682B48B3D09CAA5C0E5510228980E31BC3076B591
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/11007479.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {..

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (25109)
Category:	dropped
Size (bytes):	25262
Entropy (8bit):	5.308227869477617
Encrypted:	false
SSDEEP:	768:yoUjeU5luNgHP1g8fEHJNIdPJWt8f4U0nd10WzsG8hJomld:ycNg13l4UeCJomr
MD5:	16AADAD5651F0194FF594BDE3A4459BE
SHA1:	92DC7537D4B40B37BDBE59314838183349A67D52
SHA-256:	E6D12729495339DF704E1E45D6AF9B7CAACFCD3335C38194B66F1BCAE7DF1135
SHA-512:	321D2CACFE79E2B0ED0269AAEF534293254BD4942A876C3F1D176E4030B267A3D3A7E3CF142F6CE8061AE4DF969EF8AF1CB1172774C3ACB2D9ADF354A93CF7BE
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EP8757b503532a44a68eee17773f6f10a0/AppMeasurement_Module_AudienceManagement.js`..function AppMeasurement_Module_AudienceManagement(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.setup=function(e){n.DIL&&e&&(e.disableDefaultRequest=!0,e.disableCORS=!0,e.secureDataCollection=!1,t.instance=n.DIL.create(e),t.tools=n.DIL.tools)},t.isReady=function(){return!!t.instance},t.getEventCallConfigParams=function(){return t.instance&&t.instance.api&&t.instance.api.getEventCallConfigParams?t.instance.api.getEventCallConfigParams():{}},t.passData=function(e){t.instance&&t.instance.api&&t.instance.api.passData&&t.instance.api.passData(e)}}!function(){"use strict";var e,t,n;"function"!=typeof window.DIL&&(window.DIL=function(e){function t(e){return void 0===e\|\|!0===e}function n(){W\|\|(W=!0,q.registerRequest(),X())}var s,i,r,o,a,d,u,c,l,f,p,h,g,m

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7252), with no line terminators
Category:	downloaded
Size (bytes):	7252
Entropy (8bit):	5.455083205997804
Encrypted:	false
SSDEEP:	192:poIBArTQRD1ERE3x3OEQaklTeATQRD1ERZkIya6r:qIUTuDOK3x3OEQaklRuDOrkJ
MD5:	D252CD5C36971BD90252166113DB3569
SHA1:	A28FCAF9D4FB779BB1CBA420D8C53B2BDA72208B
SHA-256:	934D53AF15A68C7EF50860EB98B0679BACDB2503C3261775C28E0EBAA284B87A
SHA-512:	1F6CB12DD204FA49A22406044E634651E57CE258D2BAE7096837CEE26728221CFE11CB53BBC73B6CC6F6025C2E1BEF80F8F47034D6396344F3B95E5032486264
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/runtime~main-673d70cb759be2d5742b369e690eff73.js
Preview:	!function(f){function e(e){for(var a,c,r=e[0],d=e[1],n=e[2],t=0,o=[];t<r.length;t++)c=r[t],Object.prototype.hasOwnProperty.call(i,c)&&i[c]&&o.push(i[c][0]),i[c]=0;for(a in d)Object.prototype.hasOwnProperty.call(d,a)&&(f[a]=d[a]);for(p&&p(e);o.length;)o.shift()();return s.push.apply(s,n\|\|[]),b()}function b(){for(var e,a=0;a<s.length;a++){for(var c=s[a],r=!0,d=1;d<c.length;d++){var n=c[d];0!==i[n]&&(r=!1)}r&&(s.splice(a--,1),e=u(u.s=c[0]))}return e}var c={},l={21:0},i={21:0},s=[];function u(e){if(c[e])return c[e].exports;var a=c[e]={i:e,l:!1,exports:{}};return f[e].call(a.exports,a,a.exports,u),a.l=!0,a.exports}u.e=function(s){var e=[];l[s]?e.push(l[s]):0!==l[s]&&{5:1,8:1,10:1,13:1,17:1,18:1,22:1,23:1,24:1,32:1}[s]&&e.push(l[s]=new Promise(function(e,c){for(var a="stylesheets/"+({0:"vendors~access-code~player~polyfills~unreleased",1:"vendors~access-code~player~unreleased~whitelisted-embed",2:"vendors~access-code~player-pomo~whitelisted-embed",3:"vendors~access-code~player~unreleased",4:"

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64864)
Category:	downloaded
Size (bytes):	104243
Entropy (8bit):	5.297745834075309
Encrypted:	false
SSDEEP:	1536:ZNhGavt4iVBUAIQWS2DCIodhR6ws66u0e9UAEZge:ZNhGarr0mRv2ge
MD5:	57F4D503FBC9A049419FB47E6B80968B
SHA1:	60D892897439675D6F87A7887B82CA290F0034DC
SHA-256:	EBDCCF0F346825CE0A0D6AA61B31562B8B602526253838C41093A8AA1425E34C
SHA-512:	867788ACD59E286B7F8D33B3271C8DEBE3ED6CD5F2EB42B9002F47BCE46B237019D66850BB9F372EF0243B5E62873EA4038C20DD810B3FEB0C910FEE9A6A3009
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/vendors~access-code~player-pomo~whitelisted-embed-06b5f9ded2fe0065e32a795e40e9cab7.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{1071:./!***************************************************************!\. !* ../node_modules/react-dom/cjs/react-dom.production.min.js !. \***************************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){"use strict";./* @license React v16.7.0. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /var l=n(/! react /583),v=n(/! object-assign /436),r=n(/! scheduler */1072);function z(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function(e,t,n,r,l,i,a,o){var u,c;if(!e)throw(e=void 0)===t?e=Error("Minified e

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53906)
Category:	downloaded
Size (bytes):	53936
Entropy (8bit):	5.448282977001152
Encrypted:	false
SSDEEP:	768:/xdnNzRChMQIt7wjqLTFCRfsp8FZyBxQqbPJJKXmfVoqWR:pdNz8MQI5wCTs5spWWbhkkJy
MD5:	59739E7FA80BDB59FAF18C5D65F906EE
SHA1:	1D1577166A790F2BD6829A5D91AC6E1462A2380E
SHA-256:	2C39BBDF6668D0A9582C24217641EC993AF4472D2FD6BF864A293991DA76F049
SHA-512:	49562E0DA9804B7353954CFE6947DF2C582F095590E06684DAE9D10F6DD4E51395FCEBD5BB99DC3BA7882F751C26580F2A9BC8B33B6AA493322CC3FB9B32A44B
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/0.js
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[0],{159:function(e,t){e.exports=function(e){return e.webpackPolyfill\|\|(e.deprecate=function(){},e.paths=[],e.children\|\|(e.children=[]),Object.defineProperty(e,"loaded",{enumerable:!0,get:function(){return e.l}}),Object.defineProperty(e,"id",{enumerable:!0,get:function(){return e.i}}),e.webpackPolyfill=1),e}},695:function(e,t,n){(function(e){e.exports=function(){"use strict";var t,n;function s(){return t.apply(null,arguments)}function i(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e){return void 0===e}function o(e){return"number"==typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function u(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function l(e,t){var n,s=[];for(n=0;n<e.length;++n)s.push(t(e[n],n));return s}function h(e,t){return Object.prototype.has

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	65577
Entropy (8bit):	5.353937566241126
Encrypted:	false
SSDEEP:	768:ezDY9eR7s83Hw4oUnaOGE477KKIY0MnZez7T7nM1En0wEJPddhMHKvOWISQS31F:0DDFs83Hw48ZO7T7nwEYFRQSFF
MD5:	70187A383ADB805DD9FA0F16588B48C8
SHA1:	E1ED844DB90FC16308EAB60276BD9679784D9F01
SHA-256:	30ADBC7E799238C336B56A1E20DB67910F2A114FC3BC6CED6C550B4C873318AA
SHA-512:	C860317CE2F70CF96C9A93F36C7FB608217601CC6E63B45A9F2E9571FDB7C6AA286AF566AE532F23AA054B1D83DAD6097BF5435CF6B8C9C2CAFE750273050B87
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.47: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return jr},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return Ar}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (886)
Category:	downloaded
Size (bytes):	1033
Entropy (8bit):	5.513677610862805
Encrypted:	false
SSDEEP:	24:9tKpct/BstKJzFc2mEeZVnOoRWjGeHe5eI31YZF3scQfw:f/t/BaGKdwSoK3leicQfw
MD5:	F889B95246C5B5B2B216923FF38B88C1
SHA1:	DC0F0B34E64104DFDF28418F66F3585F5918CCBA
SHA-256:	42FC9B80CA35FE18286D2A164561AB2B2927C33F58D344F216D7A27307FF6AE7
SHA-512:	BB7A12707BEE07D95A3394DE8CD2A3A6FA9A2D2FBF215A1BD8AA0292BE1FCDB7B8B95B01DDC5FDEEDA8FB383517E52527BDD7559F9416BA7C0BF5710438B4EAE
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1043e003412140f8ab9e58fbe496aab7-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1043e003412140f8ab9e58fbe496aab7-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1043e003412140f8ab9e58fbe496aab7-source.min.js', " Facebook Pixel Code -->\n<script>\n!function(f,b,e,v,n,t,s)\n{if(f.fbq)return;n=f.fbq=function(){n.callMethod?\nn.callMethod.apply(n,arguments):n.queue.push(arguments)};\nif(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';\nn.queue=[];t=b.createElement(e);t.async=!0;\nt.src=v;s=b.getElementsByTagName(e)[0];\ns.parentNode.insertBefore(t,s)}(window,document,'script',\n'https://connect.facebook.net/en_US/fbevents.js');\nfbq('set', 'autoConfig', false, '156351445072315');\nfbq('init', '156351445072315'); \nfbq('track', 'PageView');\n</script>\n<noscript>\n<img height=\"1\" width=\"1\" \nsrc=\"https://www.facebook.com/tr?id=156351445072315&ev=PageView\n&noscript=1\"/>\n</noscript>\n End

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.75
Encrypted:	false
SSDEEP:	3:Vd4H3dNWju0w:kH3Cju0w
MD5:	E0EBEC1B4248146BFF9939611B5E8B21
SHA1:	8A8FC269183222DAAE5A0A97943E2B8EE14087BD
SHA-256:	38E9FD371A2F637DC12924A5FF5DC9AE4AB5D494C47F7F1B4F3249EF864A0328
SHA-512:	F457E8489AB520F54BF9A19BB327F9AB6BDAEC14F62DE62B7A01086F3A1A1D92EFE3E5E8918A724BBFB2DC0BFEEABA9C4406028FADDD167165AFCE07CE690326
Malicious:	false
Reputation:	low
URL:	https://18.210.229.244/is
Preview:	WxehYiEzV5wQ61abu8TMgsKIGhYyxiS2

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (645)
Category:	dropped
Size (bytes):	104941
Entropy (8bit):	5.403413067660838
Encrypted:	false
SSDEEP:	768:ucZpO34TKSJv/HWk/RU+eI1D8shZ1Bbfz+qIS137FC1UJhYplpCDyHh8Oy0vMrmS:ucj9JRF1DJhBbfz+QR4n/6mY7mbY
MD5:	4AEF8C9CAF79317EDB0667812BA89F53
SHA1:	BA49E5003CD5EFF5273FA031F1C8EE7A7FA82203
SHA-256:	51A1F8053F3E51386A72383B9E18E584EEEBD125506D926352246E35E9899CF7
SHA-512:	419ADB65DD86F3CD8A326F98357C5CB780AB9D8F87FA5BC7C12B52E2FB7F55358DE3277CEB30BF4CCC987F08CB7E5DCF2E19A2B029C5A1FE840C3F3D0ADF5392
Malicious:	false
Reputation:	low
Preview:	;/* Version 281eccdb0a28fe3b4dbfbf942f8b88ed v:21.4.0.3405, c:30de095c7d8f35f3f926215f37b39accad0317b8, b:21.4.0.3405 */(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={},x=window.console,B=x&&"function"==typeof x.log?x:{log:function(){}};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();var t=this&&this.Tc\|\|function(){var a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(a,h){a.__proto__=h}\|\|function(a,h){for(var e in h)h.hasOwnProperty(e)&&(a[e]=h[e])};return function(b,h){function e(){this.constructor=b}a(b,h);b.prototype=null===h?Object.create(h):.(e.prototype=h.prototype,new e)}}();(function(a){(function(a){a.setUpMonitors=function(){for(var a=[],b=0;b<arguments.length;b++)a[b]=arguments[b];for(b=0;b<a.length;b++){var c=a[b];c&&c.setUp()}}})(a.monitor\|\|(a.monitor={}))})(g\|\|(g={}));(function(a){(function(b){function h(a){return b.refs.slice.apply(a,b.refs.slice.call(arguments,1))}function e(a,m)

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.389822782008754
Encrypted:	false
SSDEEP:	3:mSnuZoSoICkuLaY:mSnuZoSckuLaY
MD5:	127749F5A47A8FBB8DEF236A77FA139A
SHA1:	96B013888F67B39C9DC884D7EDA9F4189C88D0B7
SHA-256:	0C8192B2C9B1376DF3EB9BB98502668E0C3D7854887E5069748DBF054DB8C3FA
SHA-512:	4C13A2667306FEE2F968B05E29B20642697A6372C06291B073E658D14ABE94127D7452CC4F907EC7AB136FDB7B7D280EFB88C5A978BF89538159633B7C3987AE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgmVVSwp7_vd6RIFDZFhlU4SBQ1TWkfFEgUNpZM2JA==?alt=proto
Preview:	ChsKBw2RYZVOGgAKBw1TWkfFGgAKBw2lkzYkGgA=

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x605, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9460
Entropy (8bit):	7.941709412117304
Encrypted:	false
SSDEEP:	192:ldyrFEL2jnGqCP5Pmox/WyF4e/FPPKt9oA6cVZFlJdAavB:lgrqL2jz2Pmox0e1PCP6WlJhB
MD5:	A7B61ACB795B1700437DF809F7B2A1C5
SHA1:	44CE8D444F788AB32D1B215C2135E88B0C689EB8
SHA-256:	F10FF95C4E73507F675167F8D63820393BBDC916536DA6D31C98A55BAEDC0A34
SHA-512:	07BBD7284DCBB9C4544BBC075B66987446034AEE9CF189B5F3D27864E4EAF357CB8CC45000044D4E72C047B3A2A07DB250D0A9B2747C3B263F2B4504BAECE741
Malicious:	false
Reputation:	low
URL:	https://thomsonreuters.scene7.com/is/image/thomsonreutersPROD/support-background-full-size
Preview:	RIFF.$..WEBPVP8 .$.........].>)..C!...Jl..BZ[.].F..?`.?.Y\|...?...?.~....?.../....o.....}...........K....1..._............"..g..t._... ..0R..[.......\|.....a..z[...........L{i$....s.F....c...D...Q.. .@:.%....D...Q...,....C..X.(.3.q.5erX...a...~...18.u.......Q..1Y.L..i.@.7k...f.k......s..'.'../.EyD...Q.. .@:.%....D...Q.. .+B>8.>........@.v.'.3.D......n.&X0..@.E..s...........3...........@...D...Q.. .@:.%....D...Q...q..yU.>3.B}......zo/t.....Z]$mD.../.FTf....%n.>.........Vi^.r4...d.A....A(.t.J .....A....A(.t.....u..M..'..d....E/q...+..Qa...cq..#.f..6...p.."..K..}C....-a'..)C.....D...Q.. .@:.%....D...U....]R..#..b.D.8.......p[...UBT.#...U.k.$....."..&.Q....2....9R..Oo.....D...Q.. .@:.%....D...P...~:!.^...['.......#.......;...s...C.T..I.\/!....Z<K^..v..9.._&......W...um.k>.....Q.. .@:.%....D...Q...&...Q.Pu.b.....J.......j.>O.l7,k.%......n9.h.&..J.m..5G.2a}.=F...d....U1...Lm..S.j)T..U1...Li..+.<...91\|l*...B........C_.....B... x.$.......,.ux.......C..-...

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29200)
Category:	downloaded
Size (bytes):	140139
Entropy (8bit):	5.318888769165162
Encrypted:	false
SSDEEP:	3072:FrdcOMul79jEcUMnDlENaHYjDTnVaysxhvllYNtCauZ:FwM9jEcUMneaHYjDTnVaysxhvlUtCa0
MD5:	8F70DF01CEE0242A17F494CAAFAF2644
SHA1:	2E24A0960D8F8B69CE8132DCF19D4506552420C5
SHA-256:	D818DDFB5F08D8C41561AF3FDB0B5164128977FD3B6261718B2D2EA901837EC5
SHA-512:	2408BE722CC0592FFB96B62E6650D39D1B705AA53262E620974B9EDEE36CB070576530868F31691DC764D9E0BADA0B1D6E2446C2E6A9C690FCD40E64C94DAA6E
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="/etc.clientlibs/uefalcon/clientlibs/",n(n.s=303)}({0:function(t,e,n){"use strict";(function(t,r,i){va

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 773 x 505, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	152462
Entropy (8bit):	7.985965182319608
Encrypted:	false
SSDEEP:	3072:BVro1A6bTi21SiMRzu7GDyeu6nCMqFWF0iUnfkOysGdG8/EJ:xO1SiMRlDZu6n2W2n3ys7bJ
MD5:	ED326B086A05EBFFDF0F4946C5B15BA3
SHA1:	013C8E8B0196955C1D802F8627BFF6D4AAA23C2F
SHA-256:	42144C5AAA8EEC252145605BF67D1B80C5A40EA81954FCA7064EF9E13D9BB277
SHA-512:	0B3F3423AE8873550E9CDBCDB73257669D9A2BE83995034EEE004C26B8A1D68BAD5026E9FF46330638C0BAF72303A639FB60CC9DFB045102455E408959743E26
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............2....pHYs.................sRGB.........gAMA......a...S#IDATx......?.zs.*..........L..c.p..\|.;.??.~6.l.....q..`..&....PF9.]m....y.oj.gzfg......twU..zU.RUy..c...555.8v..i....uuuMhoo........R.^.g.......,..y.7?O...>.......sz.\|8.\..9.._..3......G.....C..^<m.Y.Q\\LR...y.i..}....JEEE&.\....}C...4rC.Y.7..4...B/.z...p~.~...j..r<.=N...x=.g..P...5..\C......o.O.n#...mkk......Cc.>M.........^....x..:...x..5...y.9....I....>.D...h...{....[....D].2.xV....L>B..O...=.7....\|II.I.....I+\|..H9..)..#/.%.n...}&A'.....+.....I..7..m...v^.S._B..3.!............#u"\|...s.~...8M&...)....<...h+)......H......}$...}QwB.<..C....WZZ.....<....5]7.V.E...u..S.cg.9..(S.s)..5.q.y.............-.P6~#o]n\|.L\...=d.......'.u>....r..y>>...FxD......).L.+......K.....8.3.I.....5klN.........w.~? >.%]C..4V....~.y.4.k.%.N.z.........\|t92g.....,.R.^F..}...'$.......rO._.......O.....uI.{@UUU'.....x.E.u.9...CN..c........B...H..'.r....T........,..I#B9 ...).!!.).3.N.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1558)
Category:	downloaded
Size (bytes):	2703
Entropy (8bit):	5.053502551927549
Encrypted:	false
SSDEEP:	24:lD58ewzpTQoU+Cr2hzjiTQoU+C+zIU/d4aTQoU+CSC9GuSLLRoJVwav365YreMDj:lD58jHC9HC+UUjHCZ9YRoJVDvq5YrQ14
MD5:	616E7C6B4B0E0D5576977F8E8A6AA123
SHA1:	D9921072A15A71E338526265540EC8CB25BA4D23
SHA-256:	B1942A42DE69A6CE8AA171994E1D1483D2085EF135AA396E5D714FA7C16977C3
SHA-512:	C192F4C1954A925080764D90C706D3A4D55DAF9DE6040E3DABF1E45D33F07F5DF0088B8EC85DE8672262407BDA6303A35BD195D345CD30C51007064444545F31
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/error-page-82554406c600e58fb4ab73976372569d.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{127:./!*************************************************************!\. !* ../node_modules/babel-runtime/core-js/json/stringify.js !. \*************************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,n,t){e.exports={default:t(/! core-js/library/fn/json/stringify /290),__esModule:!0}},290:./!***********************************************************!\. !* ../node_modules/core-js/library/fn/json/stringify.js !. \**********************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,n,t){var t=t(/! ../../modules/_core /31),a=t.JSON\|\|(t.JSON={stringify:JSON.stringify});e.exports=function(e){return a.stringify.apply(a,arguments)}},322:./!***********

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.950212064914747
Encrypted:	false
SSDEEP:	3:Sn:S
MD5:	D97623D172F087D9640DA9ACD38830FF
SHA1:	515BD358BB7D990930F0E2B3DE399DB1787A2567
SHA-256:	FE04A9DC88D3F3BE8D4F6BC63A9A80F45A4C6D8460E7551DAB849457C091920A
SHA-512:	CE6A1969F698A616663F1A19CCFA12A37A4F6D782432D8A08AEB7879EFD3E2BECF168422EA66BC47E74F6BA865EFAAE6EABE3C4FABA280D7A21F3A94D7C55DA1
Malicious:	false
Reputation:	low
Preview:	<p></p>

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	160
Entropy (8bit):	5.1043427083989235
Encrypted:	false
SSDEEP:	3:tumreckdCnagm5+/nL6AN04hVUa3WZgR01LaRrnJBKyxzxlswnMeqK55l:tuLVdCnag8540kUam59aRV8yxzrswH5X
MD5:	CD86BA1FDB1C25AC5090D00AC6228C3D
SHA1:	1D3698DF5D66720258F74FD100017DAB7A806116
SHA-256:	3030AF6EC7568794116F83D7E42E74F8F702AA322B7285E152C4BE065D55C3A8
SHA-512:	9134BDEB677461BC6DFFE0EDC2FBC50E2BDF584762422933ED8B353165AF945ED3E41CC7750C201BB347A44C04856051EADB383DABB325D88AB3465E6B6FCC23
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSTwmfqZVIaInV_xIFDdoaSgUSBQ1Hh0ESEgUNEvZNIRIFDZ7iLQMSBQ3JyyFZEgUN0_qp9BIFDZh_Mv8SBQ2SBVTOEgUNo19UVRIFDWFYg00=?alt=proto
Preview:	CnYKCw3aGkoFGgQIAxgBCgsNR4dBEhoECAUYAQoLDRL2TSEaBAgJGAEKCw2e4i0DGgQIDRgBCgsNycshWRoECCQYAQoLDdP6qfQaBAgjGAEKBw2YfzL/GgAKCw2SBVTOGgQIPBgBCgcNo19UVRoACgcNYViDTRoA

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (25109)
Category:	downloaded
Size (bytes):	25262
Entropy (8bit):	5.308227869477617
Encrypted:	false
SSDEEP:	768:yoUjeU5luNgHP1g8fEHJNIdPJWt8f4U0nd10WzsG8hJomld:ycNg13l4UeCJomr
MD5:	16AADAD5651F0194FF594BDE3A4459BE
SHA1:	92DC7537D4B40B37BDBE59314838183349A67D52
SHA-256:	E6D12729495339DF704E1E45D6AF9B7CAACFCD3335C38194B66F1BCAE7DF1135
SHA-512:	321D2CACFE79E2B0ED0269AAEF534293254BD4942A876C3F1D176E4030B267A3D3A7E3CF142F6CE8061AE4DF969EF8AF1CB1172774C3ACB2D9ADF354A93CF7BE
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EP8757b503532a44a68eee17773f6f10a0/AppMeasurement_Module_AudienceManagement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EP8757b503532a44a68eee17773f6f10a0/AppMeasurement_Module_AudienceManagement.js`..function AppMeasurement_Module_AudienceManagement(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.setup=function(e){n.DIL&&e&&(e.disableDefaultRequest=!0,e.disableCORS=!0,e.secureDataCollection=!1,t.instance=n.DIL.create(e),t.tools=n.DIL.tools)},t.isReady=function(){return!!t.instance},t.getEventCallConfigParams=function(){return t.instance&&t.instance.api&&t.instance.api.getEventCallConfigParams?t.instance.api.getEventCallConfigParams():{}},t.passData=function(e){t.instance&&t.instance.api&&t.instance.api.passData&&t.instance.api.passData(e)}}!function(){"use strict";var e,t,n;"function"!=typeof window.DIL&&(window.DIL=function(e){function t(e){return void 0===e\|\|!0===e}function n(){W\|\|(W=!0,q.registerRequest(),X())}var s,i,r,o,a,d,u,c,l,f,p,h,g,m

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	4.955304967425108
Encrypted:	false
SSDEEP:	96:npyIr40wULONUuGbCBHxY9ZHUfCZakF1a2qs+XFqO2aCvjRjGA7jJjiZ5M4SQ:FmYOCdbnZ0fC0PdsaFqaCLRxJgFv
MD5:	69656D56B0ADF9E6D25BF12DB1A72C3C
SHA1:	77E351B1C2C22805277D9AB54ECB4D999C8E529A
SHA-256:	886C55949150D100F5AB35E12D33D340DC5D48770F331DFAB15212A957337D1F
SHA-512:	639B96871EE73BECA49A3BF1D6ED4F888DF39A24A585978F17FE03A1C8B2386BDBED1F117035D2D12FAAAA5CE044090FD23D0F0B96B7C5253FD198F7CADAA0A3
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202308.1.0","OptanonDataJSON":"88f9c6ac-fbaa-4d32-a2e8-ad5925270c35","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"0f60c065-5ea4-49a7-8e40-0501426d035f","Name":"Global Opt In","Countries":["tw","ma","in","jp","kr","za","cl","my","co","ca"],"States":{},"LanguageSwitcherPlaceholder":{"default":"en","zh-Hant":"zh-Hant","pt":"pt","ko-KR":"ko-KR","es-CL":"es-CL","fr":"fr","es":"es","ja-JP":"ja-JP"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Standard Template","Conditions":[],"GCEnable":false,"IsGPPEnabled":false},{"Id"

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (538)
Category:	downloaded
Size (bytes):	8130
Entropy (8bit):	5.54587769268953
Encrypted:	false
SSDEEP:	192:8r8DryrSqTr6yGIiN7tNnDre7xeGN7bTfAum9O1frqXShjQrp:8rurcrDG7RNnDrieOAOhrqUjQrp
MD5:	3B86602C4E1E0B41D9673F674A75CD4B
SHA1:	BA362B30BD258C43D0A93008769BE7888D36012C
SHA-256:	5875086F3516F697BCC46F4DF5069E95AB5101CB4B7DE1EC6EC2FC8108B9C682
SHA-512:	3FAFEC84B255D4F43D47B1747D334AD6CE3896020D753F7E98AF4A1CC26B62935797C4704640E1D90C62413F2D9A91C854D125CAE071065E04B0B0D80F64C845
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/clientlibs/granite/utils.min.js
Preview:	(function(d){"object"===typeof module&&module.exports?module.exports=d():(window.Granite=window.Granite\|\|{}).Sling=d()})(function(){return{SELECTOR_INFINITY:".infinity",CHARSET:"_charset_",STATUS:":status",STATUS_BROWSER:"browser",OPERATION:":operation",OPERATION_DELETE:"delete",OPERATION_MOVE:"move",DELETE_SUFFIX:"@Delete",TYPEHINT_SUFFIX:"@TypeHint",COPY_SUFFIX:"@CopyFrom",MOVE_SUFFIX:"@MoveFrom",ORDER:":order",REPLACE:":replace",DESTINATION:":dest",SAVE_PARAM_PREFIX:":saveParamPrefix",IGNORE_PARAM:":ignore",.REQUEST_LOGIN_PARAM:"sling:authRequestLogin",LOGIN_URL:"/system/sling/login.html",LOGOUT_URL:"/system/sling/logout.html"}});.(function(d){"object"===typeof module&&module.exports?module.exports=d():(window.Granite=window.Granite\|\|{}).Util=d()})(function(){return{patchText:function(d,h){if(h)if("[object Array]"!==Object.prototype.toString.call(h))d=d.replace("{0}",h);else for(var f=0;f<h.length;f++)d=d.replace("{"+f+"}",h[f]);return d},getTopWindow:function(){var d=window;if(this

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64441)
Category:	downloaded
Size (bytes):	591445
Entropy (8bit):	5.3012849626802545
Encrypted:	false
SSDEEP:	6144:vfpV1vSqMvhVnMVnxVnDVnHVnDVnlAVnbnVnoVnvVnqVnqYVn9KVnCVnCVnwvocr:ZbaXH3VScbwp+
MD5:	9DCC7B2141E55A00D80278F44CB11DAC
SHA1:	C2C28C34CC921D5EBC75BC5510F2D00607D28903
SHA-256:	CB855913AE61EF6C5975E97B32473EFA319E3B80F82249A393C9135A59D0177A
SHA-512:	C5E7504F17C2666B38667D5C68C5C25967CC9747061A4CBB823F8C11C3955A34FCF10DBC530026963773929B9464125C5E0BB4A38509424124594F4E84AAC962
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-dcl_components.min.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/etc.clientlibs/uefalcon/clientlibs/",n(n.s=298)}({298:function(e,t,n){"use strict";n.r(t);n(299),n(3

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65381)
Category:	dropped
Size (bytes):	99032
Entropy (8bit):	5.331883107112835
Encrypted:	false
SSDEEP:	1536:BohwPtMecozvX4msRApBHAIcqvxpztg5nn2kCOYkRbPnVQSvOgbesQ2nlz7eD7HX:BohwqejLXsO2doczEMb1XRs
MD5:	F40D2E30F066F7E6EABDF7D9D99E967E
SHA1:	34F7C438C519092932272C27694B54FA9F93DD82
SHA-256:	27E5A3AD59A9E0213824B548D9703155B454CFCFFC7690842436AFF86CB310C1
SHA-512:	AAB120104BA63C1014845896BABD7541E748479D8E847069CB8DDC169208DD77CF14BC55341AB0CD9E5B1C027DDB0031583C63DEA55B39E84A5A5B53141EAFC4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see dnb_coretag_eu_v6.min.js.LICENSE.txt /.// Version 6.0.0.// For opt-out information, please visit: https://d41.co/.!function(){var t={355:function(t,r,e){"use strict";e(9070),e(7941),e(2526),e(7327),e(5003),e(4747),e(9337),e(3321),e(1817),e(2165),e(2443),e(3680),e(3706),e(408),e(489),e(8304),e(7042);var n=e(5937),o=e.n(n),i=(e(6992),e(1532),e(1539),e(8783),e(3948),e(9720),e(6699),e(8674),e(2222),e(4916),e(4723),e(8862),e(4644)),u=e.n(i);function a(t){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},a(t)}function c(){c=function(){return t};var t={},r=Object.prototype,e=r.hasOwnProperty,n=Object.defineProperty\|\|function(t,r,e){t[r]=e.value},o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",u=o.asyncIterator\|\|"@@asyncIterator",s=o.toStringTag\|\|"@@toStringTag";function f(t,r,e)

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.170841226104828
Encrypted:	false
SSDEEP:	24:tTvRumKJlOjCabuoRN0qoNEGVVImVQ1r8LzM1AW:17KJAjCa6QNCNpPLzu
MD5:	7517937A7CDC3CD268CD85DA114A98BA
SHA1:	9DFC4ECD94CB1661AC7664BDFA5D136960884997
SHA-256:	044E2B7338101925DD047F3111D840726A4BB8C160BB6668EE86CC8F4E69EDFA
SHA-512:	1D42D8E17386C5DC02B0425875F98FE4F01849DEA70CB6F080312C9E3DBE9CCC4CAEA461216F8C3E8BD32D94B151D38B03A55D43294C62802BD4C7D444774ABA
Malicious:	false
Reputation:	low
Preview:	<svg width="18" height="16" viewBox="0 0 18 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M9 16C6.125 16 3.5 14.5 2.0625 12C0.625 9.53125 0.625 6.5 2.0625 4C3.5 1.53125 6.125 0 9 0C11.8438 0 14.4688 1.53125 15.9062 4C17.3438 6.5 17.3438 9.53125 15.9062 12C14.4688 14.5 11.8438 16 9 16ZM6.28125 5.1875V5.21875C6.15625 5.59375 6.34375 6.03125 6.75 6.1875C7.125 6.3125 7.5625 6.125 7.6875 5.71875L7.71875 5.6875C7.75 5.59375 7.84375 5.53125 7.9375 5.53125H9.75C10.0312 5.53125 10.25 5.71875 10.25 6C10.25 6.15625 10.1562 6.3125 10 6.40625L8.625 7.1875C8.375 7.3125 8.25 7.5625 8.25 7.84375V8.25C8.25 8.6875 8.5625 9 9 9C9.40625 9 9.71875 8.6875 9.75 8.28125L10.75 7.6875C11.3438 7.34375 11.75 6.6875 11.75 6C11.75 4.90625 10.8438 4 9.75 4H7.9375C7.1875 4 6.53125 4.46875 6.28125 5.1875ZM8 11C8 11.5625 8.4375 12 9 12C9.53125 12 10 11.5625 10 11C10 10.4688 9.53125 10 9 10C8.4375 10 8 10.4688 8 11Z" fill="#404040"/>.</svg>.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	409
Entropy (8bit):	5.123455956829721
Encrypted:	false
SSDEEP:	12:trIJ0uCiABvR6VQ6Hchllt4JrBvR6VQ6HchllR:tcJ0uZAd4nHchlltId4nHchllR
MD5:	4E70C6D67E06CFBD384C550B6039C9CB
SHA1:	FB0D4BC2584CA29AC4A78816BAE441D1B5D850AB
SHA-256:	65A11118B80A19EE8B1C1B1B95103F54EED07EA777DA8315291BB72D7C6F6883
SHA-512:	470DFAF1A8A04DF92A5DBDA27C8353AB83A43E8F2EDF2D27B07CC4698ECCBBF0C0F462A08ECDFB8FD61F2137BA9069E4C11004F488A91982980D5F2F5665F744
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/brand-right-arrow.svg
Preview:	<svg width="19" height="14" viewBox="0 0 19 14" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1.0835 7.41699H17.7502" stroke="#FA6400" stroke-width="1.5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M11.917 1.5835L17.7503 7.41683L11.917 13.2502" stroke="#FA6400" stroke-width="1.5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	716
Entropy (8bit):	4.273927894468957
Encrypted:	false
SSDEEP:	12:trZ1BuCbLHsLcejPsKffC6nSaFHhFUcivEv5MBdbW:tV1BumMpjA6nSaFBFUcie5MBdbW
MD5:	F90B2FF056BD72E0C4D9623442047D32
SHA1:	326B3DACE7F1FE17398C8B617996C5B43DD6CEE3
SHA-256:	6F80945AD6D97F191D6ABBEAA4352E861424809AF9BE8F90B6EEA25A1B1C318B
SHA-512:	1F041AD9B5F39CCE2D79A9C5B47123A5A882597BCC81DF149B6816AF974C55F62306E256FB99B1CC4CD7253BE26AA5438C913F011095406AAB3067F5771D0185
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/user-icon-v1.5.svg
Preview:	<svg width="16" height="18" viewBox="0 0 16 18" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M12.4688 13.0312C11.75 11.8125 10.4688 11 9 11H7C5.5 11 4.21875 11.8125 3.53125 13.0312C4.625 14.25 6.21875 15 8 15C9.75 15 11.3438 14.25 12.4688 13.0312ZM0 9C0 6.15625 1.5 3.53125 4 2.09375C6.46875 0.65625 9.5 0.65625 12 2.09375C14.4688 3.53125 16 6.15625 16 9C16 11.875 14.4688 14.5 12 15.9375C9.5 17.375 6.46875 17.375 4 15.9375C1.5 14.5 0 11.875 0 9ZM8 9.5C8.78125 9.5 9.53125 9.09375 9.9375 8.375C10.3438 7.6875 10.3438 6.84375 9.9375 6.125C9.53125 5.4375 8.78125 5 8 5C7.1875 5 6.4375 5.4375 6.03125 6.125C5.625 6.84375 5.625 7.6875 6.03125 8.375C6.4375 9.09375 7.1875 9.5 8 9.5Z" fill="#404040"/>.</svg>.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5258)
Category:	downloaded
Size (bytes):	5259
Entropy (8bit):	5.060180329787528
Encrypted:	false
SSDEEP:	96:D95qbslDCpFqImxwoD9N9JT3c5E/9CQipDwdGOddh:h5TdCpFqImxZ5NvAE/9PipDwEOddh
MD5:	FB9F7DAE39619642ED5890E40763EF2E
SHA1:	BC50FA89795E534B7E417E834C70CB674A9D30B4
SHA-256:	70712C8650FEECC46403B5801B9D5B72D5B2D6BA1D1CF0317E105603982321BF
SHA-512:	4E710BEA7BB3C8534D12D485260466B15785C6286CBEBE7BC562B9AD020A6E87A70139385FA6F1338F9048E1787ECF3FA4C48821675153F68D9BDFEA47E926DA
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js
Preview:	!function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e){return function(e){if(Array.isArray(e))return r(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(e){if("string"==typeof e)return r(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?r(e,t):void 0}}(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function r(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];re

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39408, version 1.0
Category:	downloaded
Size (bytes):	39408
Entropy (8bit):	7.994564002642912
Encrypted:	true
SSDEEP:	768:+poDg8E57Zc2tOFBO0bYk8KNzY4m4wcrqHHmYKASbC6wPr3MhYcWfB:+6U6gs3zY943ydQJxWfB
MD5:	DE994D71A311E3119703DD67EF632F04
SHA1:	10B54BF0224C0FDC3F35D319883AF6A534B5B1F2
SHA-256:	DA3F6D3B0AD913A9BA0A63ACACA0FA9161F0BB65FFF5A677A380485A399A0221
SHA-512:	18C6FD4D558B7947EDF70E675B55FEE07D74B90275D1C0D2DBEF4A33F53AA6A86E00E26205E3284ABE746319BBB81DEF33615A93ACB2538680D50F104A2FE40D
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-regular-webfont.woff2
Preview:	wOF2...................~........................?FFTM.....Z..8.`..^..~..u........_.6.$..Z..p.. ..D..T...?webf.[}c....C}..(.m.8.6..vZ.6.j.7.7.....[39.[UI<F.......e.$.v.r... ..jZE.U....AX@L..uB.5X.X....^&G...U.. ..+.....v........J......gJ.V^`....U..nQ..qY.l.\.V.....)O..i..... a..C.....z..r..M...2..G.'.D".W..!`w.. .>.!(..,..r.`[...D...l.fe.}...4....o.~'..t...Y.G.:U..o.ff%......pT.JT~1.0..T.....p.J#...m...e./#....?..X=.wi../.N....[..>}`...EV.....Q.....h..d.S.............i..n....0.....[N...\.G..0kc+F$...I]b.z...=.....V...=.....J..L@.....0".B..DlL.:.P.....V..qQ.....{..D7.*..y3WpaV..8.Yt.....2.......;..u....Z..m.\9...!Fo...Y..s.l.5.E...?:...!....K.T.+<;...E..n~I....../..>].3..@..7.....?....p...L...#.Se.u.3..p..,.q....../86<A.....`..L}...!..nm.....~.:..$`...k-....}n9}._69=Q..l...>.<r.M_..O...G...R\...5@%......8J.....)..!\...9............7)..r.l...ed...c}..jF%..SU..&....)..lR.[.)c. .7r..MZK..0OD..,...B.R...R9.\.....+...U:............L.....b

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3950)
Category:	downloaded
Size (bytes):	107840
Entropy (8bit):	4.976713009562999
Encrypted:	false
SSDEEP:	768:x7aCuEA6cz64zt+Yfh+cpxkpQUw/tLYCmCc5E6L9A:daCuEA6wzoQ+cpxTp/BIBE66
MD5:	AA3910648F8E7E2FAB34FC2F5F7C12E5
SHA1:	F0403FD61E544D7A728F63D32AFD0BE9485A71D9
SHA-256:	5663BA970B8456118FD28E0F2AEA8A2143A3126ADCCD4ABB81FC31E1A9B417B3
SHA-512:	0DB6E3CFD7EE925CEBF2BBCA6D9BEC789C731AB29654F326E22D3A2BF46E489A7F0EA5DA2A2503FD1DA4F8CA3B512DB01E8585BDC2550E0C4D56A08DF0A38E94
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/main-ab1683751ceb5311c459312f0eb3d545.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],[./!************************************************!\. !* ../node_modules/core-js/modules/_export.js !. \************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(t,n,e){var v=e(/! ./_global /2),h=e(/! ./_core /12),g=e(/! ./_hide /10),m=e(/! ./_redefine /14),y=e(/! ./_ctx /15),_="prototype",x=function(t,n,e){var r,o,i,u=t&x.F,s=t&x.G,c=t&x.S,a=t&x.P,f=t&x.B,l=s?v:c?v[n]\|\|(v[n]={}):(v[n]\|\|{})[_],p=s?h:h[n]\|\|(h[n]={}),d=p[_]\|\|(p[_]={});for(r in e=s?n:e)o=((i=!u&&l&&void 0!==l[r])?l:e)[r],i=f&&i?y(o,v):a&&"function"==typeof o?y(Function.call,o):o,l&&m(l,r,o,t&x.U),p[r]!=o&&g(p,r,i),a&&d[r]!=o&&(d[r]=o)};v.core=h,x.F=1,x.G=2,x.S=4,x.P=8,x.B=16,x.W=32,x.U=64,x.R=128,t.exports=x},,./!*************************************************!\. !*** ../node_modules/core-js/modules/_global.js *

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
URL:	https://px.mountain.com/st?ga_tracking_id=G-1111111&shpt=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22G-1111111%22%2C%22shpt%22%3A%22HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&available_ga=%5B%5D&hardcoded_ga=G-1111111&dxver=4.0.0&shaid=36732&plh=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&shadditional=googletagmanager%3Dtrue&shoid=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&cb=1727776315295117&shguid=b47d2d02-7bf9-32e6-9936-6d8315ad9dde&shgts=1727776317132
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31988)
Category:	downloaded
Size (bytes):	70075
Entropy (8bit):	5.351014994797908
Encrypted:	false
SSDEEP:	1536:L+i0S1TpywbZi31SPTnODPEGnVbg94ePcwD4wP1nN69X1SiraqXztGV51Aui:qY7ZbpwDw1u
MD5:	C6ED741BF77BB7697EDC4B20970EDDAA
SHA1:	ABB3F457397606F27136A41C02CE7FC87FC00E09
SHA-256:	D5ECF2F6D5B7937DD1AA50165B89193436347D55CB130951D41E028B1F09D3AF
SHA-512:	768B11552A21C317B539E43EABFAA5CD328EABCB3401DEA617552F314A02335D9D541B8299946C65130EB60F8AB947C9ADB085A41BDDFF3B59CA4970F0703619
Malicious:	false
Reputation:	low
URL:	https://j.6sc.co/6si.min.js
Preview:	!function(){var t={},e={},n={},i={},r={},o={},a={},s={},u={},l={},c={},d={},f={},h={},p={},m={},v={},b={},y={},g={},w={},_={},E={},k={},S={},C={},T={},F={},x={},A={},I={},M={},U={},L={},P={},N=this&&this.__spreadArray\|\|function(t,e,n){if(n\|\|2===arguments.length)for(var i,r=0,o=e.length;r<o;r++)!i&&r in e\|\|(i\|\|(i=Array.prototype.slice.call(e,0,r)),i[r]=e[r]);return t.concat(i\|\|Array.prototype.slice.call(e))},D=this&&this.__extends\|\|function(){var t=function(e,n){return(t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])})(e,n)};return function(e,n){function i(){this.constructor=e}if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");t(e,n),e.prototype=null===n?Object.create(n):(i.prototype=n.prototype,new i)}}(),O=this&&this.__assign\|\|function(){return O=Object.assign\|\|function(t){for(var e,n=1,i=argument

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnZ2R0xRQUFBRzlyQ1FOeA==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	318303
Entropy (8bit):	5.700267132432917
Encrypted:	false
SSDEEP:	3072:tDOPtMTPtMzs59yYXbjnJcsiWucFAoyZergnv4FaavDix4f3RnMjLFNQ:tDLyYKsrxFAFZerWwzf3RnMjrQ
MD5:	52589E1BEB5378830C714420DAF03199
SHA1:	23E1E4371C13831B62C00D23822AA43E0D68F3C2
SHA-256:	3A4EDAE7C2CE897B06360AE4C46625181E5C2CABAEE7A71BDA32E55A29D027C4
SHA-512:	B15666113354FC0D7D18392C751988F6E25D6665F217CF5D9A460A8D6B69D2E232D9B0D14A47B2F1382D8F2CCC311C94FF376C6E5D3CACEE45F5A6BACA22E838
Malicious:	false
Reputation:	low
Preview:	/! For license information please see survey-v2.c285531737fe89cbffd2.js.LICENSE.txt /.!function(){var e={62:function(e,t,n){n.p=hj.scriptDomain},3270:function(e,t,n){"use strict";n.r(t);var r=n(5933),o=n.n(r)()((function(e){return e[1]}));o.push([e.id,"._hj-widget-container ._hj-QJHfS__styles__consentMain,._hj_feedback_container ._hj-QJHfS__styles__consentMain{display:flex;flex-direction:column}._hj-widget-container ._hj-QJHfS__styles__consentMain ._hj-iuh5p__styles__consentButtonsWrapper,._hj_feedback_container ._hj-QJHfS__styles__consentMain ._hj-iuh5p__styles__consentButtonsWrapper{display:flex;flex-direction:row;justify-content:center}._hj-widget-container ._hj-cK\\+L-__styles__consentMessage,._hj_feedback_container ._hj-cK\\+L-__styles__consentMessage{color:#7c7c7c !important}._hj-widget-container ._hj-cK\\+L-__styles__consentMessage._hj-RTq8B__styles__dark,._hj_feedback_container ._hj-cK\\+L-__styles__consentMessage._hj-RTq8B__styles__dark{color:rgba(255,255,255,0.6) !important

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	dropped
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32766)
Category:	dropped
Size (bytes):	46308
Entropy (8bit):	5.35661763154835
Encrypted:	false
SSDEEP:	768:jhsHSr5VtIYIGa6IY9mkYhhm7S/5I0XlTCrOoboxI5WdPD6DrVySysmy/Yu:jpjtIYIFh0bYhhYS/y+VCdsHGISl/
MD5:	710BEA8BE780F21A6A985DDEAC1109AA
SHA1:	8AE8196608D439BE0E38B3F4A1A6245543E99325
SHA-256:	6D6A5200D473D340D2A995D23A9B5BD8090F2FE1ABA0B52787A02C442E507684
SHA-512:	203C85EE6C1376BA4F8724CB7A9E51BCFF54F8C6EB08721E37449F0A7EF315FC23511DC3404453E45B2EB64572EAC67D514E0F7F2D5DE8DE3A1C4B2FAA59F16F
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/EX7f8dfe07dfd547b7a9f546be5b8b3b19-libraryCode_source.js`..function AppMeasurement_Module_Media(e){var t=this;t.s=e,(e=window).s_c_in\|\|(e.s_c_il=[],e.s_c_in=0),t._il=e.s_c_il,t._in=e.s_c_in,t._il[t._in]=t,e.s_c_in++,t._c="s_m",t.list=[],t.open=function(e,n,a,i){var r,o={},c=new Date,s="";if(n\|\|(n=-1),e&&a){if(t.list\|\|(t.list={}),t.list[e]&&t.close(e),i&&i.id&&(s=i.id),s)for(r in t.list)!Object.prototype[r]&&t.list[r]&&t.list[r].R==s&&t.close(t.list[r].name);o.name=e,o.length=n,o.offset=0,o.e=0,o.playerName=t.playerName?t.playerName:a,o.R=s,o.C=0,o.a=0,o.timestamp=Math.floor(c.getTime()/1e3),o.k=0,o.u=o.timestamp,o.c=-1,o.n="",o.g=-1,o.D=0,o.I={},o.G=0,o.m=0,o.f="",o.B=0,o.L=0,o.A=0,o.F=0,o.l=!1,o.v="",o.J="",o.K=0,o.r=!1,o.H="",o.complete=0,o.Q=0,o.p=0,o.q=0,t.list[e]=o}},t.openAd=function(e,n,a,i,r,o,c,s){var l={};t.open(e,n,a,s),(l=t.list[e])&&(l.l=!0,l.v=i,l.J=r,l.K=o,l.H=c)},t.M=func

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	176
Entropy (8bit):	5.135508685237179
Encrypted:	false
SSDEEP:	3:tumreckdCnagm5+/nL6AN04hVUa3WZgR01LaRrnJBKyxzxlswnMeqK55TOunAOfT:tuLVdCnag8540kUam59aRV8yxzrswH5P
MD5:	D95B1DB53E4BB6453814F45848876755
SHA1:	D2904771058FFA19FFB8DD8381FB2DB7A2D525BC
SHA-256:	C2E9B4AF5B07C82BF403FF47B8A0DFD1589C8E79368A689028E1F6AD006E4FA1
SHA-512:	C345E88396F506F33BA3EC99CCB93F3E498FBF0F91952E5AE7854EC01305C779D80D47A62232BEA78E97C50C1710C66119D4DE30996EB11D8ABB0B54267741D5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSTwmfqZVIaInV_xIFDdoaSgUSBQ1Hh0ESEgUNEvZNIRIFDZ7iLQMSBQ3JyyFZEgUN0_qp9BIFDZh_Mv8SBQ2SBVTOEgUNo19UVRIFDWFYg00SEAm3G50OXI47AhIFDaWTNiQ=?alt=proto
Preview:	CnYKCw3aGkoFGgQIAxgBCgsNR4dBEhoECAUYAQoLDRL2TSEaBAgJGAEKCw2e4i0DGgQIDRgBCgsNycshWRoECCQYAQoLDdP6qfQaBAgjGAEKBw2YfzL/GgAKCw2SBVTOGgQIPBgBCgcNo19UVRoACgcNYViDTRoACgkKBw2lkzYkGgA=

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53906)
Category:	dropped
Size (bytes):	53936
Entropy (8bit):	5.448282977001152
Encrypted:	false
SSDEEP:	768:/xdnNzRChMQIt7wjqLTFCRfsp8FZyBxQqbPJJKXmfVoqWR:pdNz8MQI5wCTs5spWWbhkkJy
MD5:	59739E7FA80BDB59FAF18C5D65F906EE
SHA1:	1D1577166A790F2BD6829A5D91AC6E1462A2380E
SHA-256:	2C39BBDF6668D0A9582C24217641EC993AF4472D2FD6BF864A293991DA76F049
SHA-512:	49562E0DA9804B7353954CFE6947DF2C582F095590E06684DAE9D10F6DD4E51395FCEBD5BB99DC3BA7882F751C26580F2A9BC8B33B6AA493322CC3FB9B32A44B
Malicious:	false
Reputation:	low
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[0],{159:function(e,t){e.exports=function(e){return e.webpackPolyfill\|\|(e.deprecate=function(){},e.paths=[],e.children\|\|(e.children=[]),Object.defineProperty(e,"loaded",{enumerable:!0,get:function(){return e.l}}),Object.defineProperty(e,"id",{enumerable:!0,get:function(){return e.i}}),e.webpackPolyfill=1),e}},695:function(e,t,n){(function(e){e.exports=function(){"use strict";var t,n;function s(){return t.apply(null,arguments)}function i(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e){return void 0===e}function o(e){return"number"==typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function u(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function l(e,t){var n,s=[];for(n=0;n<e.length;++n)s.push(t(e[n],n));return s}function h(e,t){return Object.prototype.has

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3442), with no line terminators
Category:	dropped
Size (bytes):	3444
Entropy (8bit):	5.139779092713654
Encrypted:	false
SSDEEP:	96:/snIQwsx1LcT3+MJRjBJcWYErFZWJCkH3WgmIqJmaF:sIFA1E3LDZuxXWgva
MD5:	32CDF627C1BB8DEA237F0752FFA8A385
SHA1:	2AFEBFA2E6EBC2FE77BB12C65BC061297E24DDA3
SHA-256:	07AEF3F9371C8C6001FAC50469EBA07549E562B7F1D67394F27C1A20F917FAAC
SHA-512:	4C2C417A6C09618BB09CCA1AC25E17B5922E872539328642711BCA4F9CA81579774D9BB43CBDA82398DB83AB6EF216243DE529F59D2F6CE927B426FAC1885AF5
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:o})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(o,r,function(t){return e[t]}.bind(null,r));return o},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/etc.clientlibs/uefalcon/clientlibs/",n(n.s=301)}({301:function(e,t,n){"use strict";n.r(t);n(302)},30

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13186
Entropy (8bit):	5.230333531204009
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXfn/OoH6iAHyPtJJAR:7Iy5P/i
MD5:	4D4429A2DFAA8A27FBE9659E8E717F74
SHA1:	28AD4885FF33594FA46ECED61BD42874926AA17C
SHA-256:	EA5DB5581E262D77D1A43FBB3F0FA3661B51D097B40CA38F584B4943F47CF2E0
SHA-512:	708D4DE5F9147040A26202060CEC1199E36A16AACD1CE967E0A4ED8FAE34081DC1584E4E490B57C2A430259EDFD7EF84F050F275487D2496FB824A787CBF8AC4
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 793 x 446, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	139761
Entropy (8bit):	7.993525145786807
Encrypted:	true
SSDEEP:	3072:Y1wj51fV9fP7dInMl9zyp8oWJ/GWrua5CcIGBM2RNQqMJk1mm:91fvPSM+VWLr5C/GVjum
MD5:	5B62FEC25BDA244CF699F1511BD0AE6A
SHA1:	1478782EDA78183E0368E4A6EE6D0C17CFF5F266
SHA-256:	0D5ABEB9839E835E6D5460D6C71A2F81E67ED523BA7C1C04D1AE9CD14989BF01
SHA-512:	E931397D59852173AD07228EB3A4C5C6193E591FA89B1C8C6E614C1419FC0A180A79116AB10E106931440DC9805C64C4F1AD20FDFB947BDBF847EA3B5987A00A
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/en/products/highq/_jcr_content/root/container/container/tabs/item_1665177412591/image_copy_copy.coreimg.png/1669639663326/234582.png
Preview:	.PNG........IHDR..............e.....pHYs.................sRGB.........gAMA......a...!.IDATx....d..'.:".......NJ.Dj.um..Y....~....8..f.oh{_....t...tW..$UI...Fq.EqKf&s......;p.sN.....7#...w...w..`..?.....#.B`..?..\......HSy..!u:.....o..g...t...Z]]...............?\|H.]...9z....^..[.Jz.4....../..!...d.P\|..r....>...?.0.......P..y.C_.5M..u.+..u..s]~sb.dqj......@D?...u.]AmNhQN.'..]S.H...6..,.KhQNKY...P[..Y.E-...h.....4..L.:...+k......<.NO.]..2........i.....p...g.L....}.....P.>..Bo.X..P.:].V...C./>c.3.....4-.?{.4=......d.....?.hamH..NH'..<..j'..j......S...=.....uf.L.3z..".}zE.8te....c..?...uZt..........}9.J.w...t..{.............nO....:-.wt...O.~.....'....d..tuu@..VhI..3".....7+..g.3A.&.h..nX+............b.{.^1(%.....D.!.z..p... .1.!].@...9Bo..&-....;..1....q..eZX\.Y.v..!z.....u.........A<.a......hB\|.x-.!.E..JG.............:!.....g..XEvk.......UC......4....<N..P..Z.Sm..s53._6E.Z.J...T...B#..".Tda=..!.....!.:.X........mc.u..8.;.;(Xp.>.i...

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16743), with no line terminators
Category:	downloaded
Size (bytes):	16743
Entropy (8bit):	5.232669405002056
Encrypted:	false
SSDEEP:	384:JwPU9hUyVYDsdU5sF59QF5vCAG57eWYk9p:Jw0hUyWDR5sj9q5vCAGxRYk9p
MD5:	54B8D542E1B84F501F3A2A41F69FAD1A
SHA1:	9EEEC52FC7603B92A23AFCCD1E25ECBA9BC6C0E2
SHA-256:	254D21BAFBE4C17F23B5AB9FEDCBC4CA3D80F6E9291081299CD4CE3F70D3A6CE
SHA-512:	61A8B5E3258930550D367E11C48908D59A7904154F7DD00DB8A85E2B388ECCB676FC42588E23692E4954DABA3D8D4FF3DE59E46DE66350EA5C4257D0FEA7B54A
Malicious:	false
Reputation:	low
URL:	https://dx.mountain.com/spx?dxver=4.0.0&shaid=36732&tdr=&plh=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo&cb=53431726174497960term=value
Preview:	var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"."+d[3]}catch(d){}}();(function () {var mntnis; async function fwto(resource, options = {}) { const { timeout = 1000 } = options; const controller = new AbortController(); const id = setTimeout(() => controller.abort(), timeout); const response = await fetch(resource, {...options, signal: controller.signal}); clearTimeout(id); return response.text(); } fwto("https://44.212.189.233/is", {timeout: 1000}).then(function (response) { return response; }).then(function (response) { mntnis = response; }).catch(function (err) { mntnis = err; }); var shaddslashes = function (s) {if (s != undefined && s != null) {s = s.replace(/%/g, "%25%32%35");s = s.replace(/\\/g, "%5C");s = s.replace(/'/g, "%27");s = s.replace(/"/g, "%22");s = s.replace(/\?/g,

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	32
Entropy (8bit):	4.5625
Encrypted:	false
SSDEEP:	3:d8UTvDfZCYF8n:dZDxH8
MD5:	86723A95068C045658600578B6D4A6AC
SHA1:	B52A3CBC5329698193B48F5C94DF3A4DFCA492FE
SHA-256:	C005978D6510387F2067DE4959A1BF808FC41D712C628ADF31F62C8A34508D8C
SHA-512:	468279F8AC3C886441E2FA2CE6A564D31A4CECCF520F2E5E023B85C65C1C3569F053A439F5AB6C8BE9C4F86FD4FBB63984A8AF0AF2D18CA77320AABE27972A95
Malicious:	false
Reputation:	low
Preview:	wx7K5zi16ufynWviHzlE3g615shFBELx

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (352), with no line terminators
Category:	dropped
Size (bytes):	352
Entropy (8bit):	4.795252889051518
Encrypted:	false
SSDEEP:	6:2LGSjTLk8LaXiCMGhBaVmOgO09NFfd2ZfGn3mEc7xJtJDDmEcivIcmEcHtA3vNNd:2XHk8eXkGXaU/J9NWZun3mEcBhmEczcN
MD5:	B89B77C0E31813EA0DD3C4D152E6F5FB
SHA1:	541937077CE26ED5EDC5AE91580929876936E4BF
SHA-256:	CBF0788ABCB487C683601008ECBA42A9F04BB04A864A8FB6D6ADB2777BA84F9D
SHA-512:	EC70F6C341EEEDF5C92740798A7CFE2C9CBF5D2EC0934CEAC523C3931C4B8A5F992F6887B0EB5754BEC8C304EE80573B1C653C893A8FA177A28ABD44C73E491A
Malicious:	false
Reputation:	low
Preview:	(function(e,b){b(e).ready(function(){var a=b(".chatBotTrackingVariables"),c=a.data("tracking-campaign-code"),d=a.data("tracking-channel-code");a=a.data("tracking-sfdc-code");try{c&&window.localStorage.setItem("cid",c),d&&window.localStorage.setItem("chl",d),a&&window.localStorage.setItem("sfdccampaignid",a)}catch(f){console.error(f)}})})(document,$);

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 634 x 678, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	44882
Entropy (8bit):	7.955705520718984
Encrypted:	false
SSDEEP:	768:KL982P13j/MCMn57QoH9rtBouhKkEJHpnfpPaFaVAF+lx0FjVBQNS16L8xG1VAcp:639jSNQYxtuLlpnYEveDV16L8IsAL
MD5:	6FE7F2D330CFDAB9AD8CBC0FE239C8A8
SHA1:	A058C0CDCA0E2142015035053A6B56B9E05238D3
SHA-256:	893078CFF6F245F1C759DEC0C3B683BFDBE1BDC8BCFCD9BF7A14AA69D2EF361A
SHA-512:	F284ED355F6D22D26B2CD361EA3C4DE256B3D6CDF25D6ED0B13EA2B61B27B7E17168ACD6B519E5B3E08EF626A19BCD98AEE435F6ADDC8DD2E64824D70E7F6325
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/tr_spiral_pattern_desktop.png
Preview:	.PNG........IHDR...z..........V3X....pHYs.................sRGB.........gAMA......a.....IDATx..U....O...H.?.`D..T0..I.. ....B.T@.....T`M.d.\|....;..2B.q.~..Z..e..=:.}..!......g..O?....>.w..'.....>...{.....}.........}!..B.!.0#.@..c..........=....i...~.z....B...{B.!#A..7j.%.T..{Z.w..c]..u....onn..B....!...1..k5.N.I..:=j.v......H..I...VWW.l.j#...Y../.~OBH{.G.i../WVV..{.d\...'......k.u........T..X..M...C..#v...6........B..^..#...u...\WT..............I...<..I.i..z..&y.a...........n......\.s5....U..F.B...G.i..SsB=.3..<...g]..w...].{.R.7....4..!.!..E.}Go.5...R!?...Bo....u.[.....j...+O........x.!%...c..BC....T...R.]b1..Z._.~..+$..(......$R....K.......MKO...u..\H...L&..\|.E.Z..I.1XuK..q.t[]].....T...':.;....Q...R1..j...E..`...{.K...?...........?.F?w.C..............677.B....z...h.C.j.R...s.q...jx....yij..j.-....q..y1.u~..c....5.....G.....y.W..........[= l...'....:q4a`..[....BH=0G....F.o9V....P..d..);4.....B...<8l..=....y....=B..ge5..%Q\...

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48232
Entropy (8bit):	5.112163450461012
Encrypted:	false
SSDEEP:	768:P2YlaJuUMAilp1EyzemDjG0sjEbXaR0kg7yseZ1TfI9ol2Rek:uYab6EjAG0sjEbXaR0kg7yseZ1E9h
MD5:	49F6AAC73A3A7EF3E2C0972877AD456B
SHA1:	FE65C3C87300CC8661E7E1A9C42CD44B3693A734
SHA-256:	C000900AB52CAF5EAC28E4BE1F2410C6D5B72D3D6B8A0A7A5908A0813A92BD3C
SHA-512:	B77B90278B218880FE2608BD57DC934DF47881671925B2AD0C2F5E4F462C795AA9E5C00C0CA4F70C65D5ABCC8FCEE9C8F8EC7A90DD640CE620DA2819E8CB8C61
Malicious:	false
Reputation:	low
URL:	https://cdn.schemaapp.com/highlighter/prod/ThomsonReuters/v2/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20
Preview:	{"accountId":"http:\/\/schemaapp.com\/db\/ThomsonReuters","url":"https:\/\/legal.thomsonreuters.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Template20240819161820","publishDate":"2024-09-04T19:15:19.000Z","label":"Experiment: Marketing Product Pages","updated":"2024-09-09T13:57:48.880Z","categorizedBy":["Product"],"@type":"HighlightTemplate","hasHighlight":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Highlight-20240830155400877-316336","xPath":"( \/\/meta[@property=\"og:image\"]\/@content )","propertyPath":["image","ImageObject","url"],"@type":"TagXPathDefined"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Highlight-20240830155451224-318431","@type":"TagXPathDefined","xPath":"( \/\/meta[@property=\"og:image\"]\/@content )","propertyPath":["mainEntityOfPage","WebPage","primaryImageOfPage","ImageObject","url"]},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Highlight-202408301551

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 773 x 505, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	152462
Entropy (8bit):	7.985965182319608
Encrypted:	false
SSDEEP:	3072:BVro1A6bTi21SiMRzu7GDyeu6nCMqFWF0iUnfkOysGdG8/EJ:xO1SiMRlDZu6n2W2n3ys7bJ
MD5:	ED326B086A05EBFFDF0F4946C5B15BA3
SHA1:	013C8E8B0196955C1D802F8627BFF6D4AAA23C2F
SHA-256:	42144C5AAA8EEC252145605BF67D1B80C5A40EA81954FCA7064EF9E13D9BB277
SHA-512:	0B3F3423AE8873550E9CDBCDB73257669D9A2BE83995034EEE004C26B8A1D68BAD5026E9FF46330638C0BAF72303A639FB60CC9DFB045102455E408959743E26
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/en/products/highq/_jcr_content/root/container_614525998/container/image_copy.coreimg.png/1669639036912/234507.png
Preview:	.PNG........IHDR...............2....pHYs.................sRGB.........gAMA......a...S#IDATx......?.zs.*..........L..c.p..\|.;.??.~6.l.....q..`..&....PF9.]m....y.oj.gzfg......twU..zU.RUy..c...555.8v..i....uuuMhoo........R.^.g.......,..y.7?O...>.......sz.\|8.\..9.._..3......G.....C..^<m.Y.Q\\LR...y.i..}....JEEE&.\....}C...4rC.Y.7..4...B/.z...p~.~...j..r<.=N...x=.g..P...5..\C......o.O.n#...mkk......Cc.>M.........^....x..:...x..5...y.9....I....>.D...h...{....[....D].2.xV....L>B..O...=.7....\|II.I.....I+\|..H9..)..#/.%.n...}&A'.....+.....I..7..m...v^.S._B..3.!............#u"\|...s.~...8M&...)....<...h+)......H......}$...}QwB.<..C....WZZ.....<....5]7.V.E...u..S.cg.9..(S.s)..5.q.y.............-.P6~#o]n\|.L\...=d.......'.u>....r..y>>...FxD......).L.+......K.....8.3.I.....5klN.........w.~? >.%]C..4V....~.y.4.k.%.N.z.........\|t92g.....,.R.^F..}...'$.......rO._.......O.....uI.{@UUU'.....x.E.u.9...CN..c........B...H..'.r....T........,..I#B9 ...).!!.).3.N.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	640
Entropy (8bit):	4.306049766653289
Encrypted:	false
SSDEEP:	12:trCv4/RuCYSFDTx7QlK00Nrn7+XoceNjpxrmVj3LpLlyXrWuvQnhIAW:tuv4/RuqDT6l4NrCYckpxrmJ3LBlwdQa
MD5:	2B7A7DE3C96F2B4F01069AC9CCEFAEDA
SHA1:	2A4E17487BBB59565DBA2080FF539919556B1A7A
SHA-256:	11F5E74C0E46E2B78A1E06F95D58CCC707DE4E9BDBF6A0A264CE038020CB3820
SHA-512:	E4D25CC5EC31BB1E698BA317F9838DBF2753EB2874B7D6B37981B52BF6804DD4D179B071C83A454241F4E7AB2457841810C2E1D58070223C7C9D96EB6CE275E5
Malicious:	false
Reputation:	low
Preview:	<svg width="17" height="17" viewBox="0 0 17 17" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M13 6.5C13 7.9375 12.5312 9.28125 11.75 10.3438L15.6875 14.3125C16.0938 14.6875 16.0938 15.3438 15.6875 15.7188C15.3125 16.125 14.6562 16.125 14.2812 15.7188L10.3125 11.75C9.25 12.5625 7.90625 13 6.5 13C2.90625 13 0 10.0938 0 6.5C0 2.9375 2.90625 0 6.5 0C10.0625 0 13 2.9375 13 6.5ZM6.5 11C8.09375 11 9.5625 10.1562 10.375 8.75C11.1875 7.375 11.1875 5.65625 10.375 4.25C9.5625 2.875 8.09375 2 6.5 2C4.875 2 3.40625 2.875 2.59375 4.25C1.78125 5.65625 1.78125 7.375 2.59375 8.75C3.40625 10.1562 4.875 11 6.5 11Z" fill="#404040"/>.</svg>.

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.389822782008754
Encrypted:	false
SSDEEP:	3:mSnuZoSqaoxICkY:mSnuZoSqaoJkY
MD5:	1253B0D57EA2758C8D8A1D680E0769BF
SHA1:	814382821F770C426637335E0A4B41FA085DBF4C
SHA-256:	9E8409CD0E10F0B32272114F21361AD49914CAF981E1546C582E48B4CA5CD3E4
SHA-512:	2F8BBA9A845E83CEB76CF3CAF464D30422B60C2D1D2DA54B8A0FEF81A119DC69122AF0E457965A092652B8F5DA5860A4981B7CF1A84D88696A4AD6445A3A4DFA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgn1UglMjkmzqBIFDZFhlU4SBQ2lkzYkEgUNU1pHxQ==?alt=proto
Preview:	ChsKBw2RYZVOGgAKBw2lkzYkGgAKBw1TWkfFGgA=

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22502)
Category:	downloaded
Size (bytes):	22503
Entropy (8bit):	5.3081657913101346
Encrypted:	false
SSDEEP:	384:n83CmwWtdvD5ABwXCX+3rpheTJ8eMAB6LxbnmcY2Jo7pJ:ndmw0D5ABwXhdheTJHexzeJ
MD5:	F9D299A63749C9A58C948201F85F4412
SHA1:	4878DA695F0D388ED248E3FE48A2261A2547D4E8
SHA-256:	872D4E2AE170A25A803A61B0DDE9FE4CE7AE5B80BD59E333EB139161EC22E495
SHA-512:	466469EBEF67587E45D2B49431B164C810D4BD3FFC48D71CEF4238E1E2ECE435D166A5AE7BAFBEC153E65A8E96FC77ADAB21078E984D5F60627C3A4107D6BDC8
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}};(g=v=v\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=i=i

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.107.100", baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	33597
Entropy (8bit):	7.747088259982219
Encrypted:	false
SSDEEP:	768:rprF9vAbpvA/Zp2aQ4t+62aP4HbDgdG4Xic:raGUalQm4Hwo4yc
MD5:	F2AF8D00E1A4C29A797C7E69CB98EDBA
SHA1:	DF8D282CE8AB8130DDD7751DFD76F151C0A3AC59
SHA-256:	88BF5F9E6C546575E7D01734692B1D21A9651A3963DAE4689A8C5C0559A6CDAA
SHA-512:	862CD01D6B53EEA55669A59189876A12E117C995B13AF4EED1066E54F9692DDE4B40AAD8CB858B13BCE3F34A97BDEC6BEADE8CE946B9610E5B6B3A060DD866F6
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Lavc57.107.100....C...........................................................##$++3...............................................................................1!A..2"qQ..a4r.s3t...T#...BR.5.b.D.$S.6...C...%.e.u..U.d.......................1!Q.A".Ra.2.q...B.#...b..Sr3............"...................?....................._..Bi..o......r..=.B......^.....J...%.....H..a..H... ..........YU..... .B@....J....%...&.`.. ......... ...'.J@.$....P.X.@. "... ....J...%(H..%.... .@A)BA ..&.6..\|.\|.{...7.u.y..9...:.....{....@..........H.................._..Bi..o......c.}..]......W......BA ..&. ..$..0l...%.....H.....".H.....%...H...%..A(..@.a..@.)@.........E........ .......(.%(....$.$. ....%(H..%.... .@A)BA ..&.6..\|.\|.{...7.u.y..(.o.....Q.p................................_..Bi..o.....?.M}..J#..=.y/wQ(K"....,....$..-..........$....$..Z..........TJ.H.....).T...@.........B@......B........BA ...H....H(..@..@..J...P.X.H... .@......(.&.6}..i..:....._7.u.y..(.............

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7252), with no line terminators
Category:	dropped
Size (bytes):	7252
Entropy (8bit):	5.455083205997804
Encrypted:	false
SSDEEP:	192:poIBArTQRD1ERE3x3OEQaklTeATQRD1ERZkIya6r:qIUTuDOK3x3OEQaklRuDOrkJ
MD5:	D252CD5C36971BD90252166113DB3569
SHA1:	A28FCAF9D4FB779BB1CBA420D8C53B2BDA72208B
SHA-256:	934D53AF15A68C7EF50860EB98B0679BACDB2503C3261775C28E0EBAA284B87A
SHA-512:	1F6CB12DD204FA49A22406044E634651E57CE258D2BAE7096837CEE26728221CFE11CB53BBC73B6CC6F6025C2E1BEF80F8F47034D6396344F3B95E5032486264
Malicious:	false
Reputation:	low
Preview:	!function(f){function e(e){for(var a,c,r=e[0],d=e[1],n=e[2],t=0,o=[];t<r.length;t++)c=r[t],Object.prototype.hasOwnProperty.call(i,c)&&i[c]&&o.push(i[c][0]),i[c]=0;for(a in d)Object.prototype.hasOwnProperty.call(d,a)&&(f[a]=d[a]);for(p&&p(e);o.length;)o.shift()();return s.push.apply(s,n\|\|[]),b()}function b(){for(var e,a=0;a<s.length;a++){for(var c=s[a],r=!0,d=1;d<c.length;d++){var n=c[d];0!==i[n]&&(r=!1)}r&&(s.splice(a--,1),e=u(u.s=c[0]))}return e}var c={},l={21:0},i={21:0},s=[];function u(e){if(c[e])return c[e].exports;var a=c[e]={i:e,l:!1,exports:{}};return f[e].call(a.exports,a,a.exports,u),a.l=!0,a.exports}u.e=function(s){var e=[];l[s]?e.push(l[s]):0!==l[s]&&{5:1,8:1,10:1,13:1,17:1,18:1,22:1,23:1,24:1,32:1}[s]&&e.push(l[s]=new Promise(function(e,c){for(var a="stylesheets/"+({0:"vendors~access-code~player~polyfills~unreleased",1:"vendors~access-code~player~unreleased~whitelisted-embed",2:"vendors~access-code~player-pomo~whitelisted-embed",3:"vendors~access-code~player~unreleased",4:"

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	dropped
Size (bytes):	993
Entropy (8bit):	5.294868178059381
Encrypted:	false
SSDEEP:	24:E1o6XIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1JXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	AACD27D21BA749B6932B5D0F9C988B09
SHA1:	C9B299D9FBD9F077F023320E4696A711CE32B73E
SHA-256:	BA0CFFC6C0E7816B31F61CE610D3E2B8795A23CF90EED111866A414140006D8B
SHA-512:	6E3B4BA003DF8E9521C0D4AD3C3D098DC20F7E017212B886C2F0E85880B97D22825164DDBA7893FB01EE4602C028F7EC8F4B1A20072FAF2C82718352C59B8565
Malicious:	false
Reputation:	low
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/26636eff\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (553)
Category:	dropped
Size (bytes):	3681
Entropy (8bit):	5.310615162639586
Encrypted:	false
SSDEEP:	48:IGUXERTgdf3nfLzeJpMJvAdFADGKCnt0gzCH9Uum33Es3PBH0Or/1mSh/F4ksiiN:BDzFHXz4M3r9LjqziiN
MD5:	011C0FC0D0CF131BDFF879743A353002
SHA1:	9336BA4F6BD99531147F284CF217D473EB6FA3C0
SHA-256:	2DBB30AF18C1CC025D432F934A8B23478A3539D525BFA6100FB097E2DCDAFE57
SHA-512:	0681C12F9DA2507D19D32CE68C2B4A6ACA9F56A8F9BCC5CF3840B1757FD15DE1EF1411069913D566D39933DA586401585DA7481F0762795CF0E4DD64A2410E00
Malicious:	false
Reputation:	low
Preview:	(function(g,e){e.Granite=e.Granite\|\|{};e.Granite.$=e.Granite.$\|\|g;e._g=e._g\|\|{};e._g.$=e._g.$\|\|g;var k=Granite.HTTP;g.ajaxSetup({externalize:!0,encodePath:!0,hook:!0,beforeSend:function(h,c){"undefined"!==typeof G_IS_HOOKED&&G_IS_HOOKED(c.url)\|\|(c.externalize&&(c.url=k.externalize(c.url)),c.encodePath&&(c.url=k.encodePathOfURI(c.url)));c.hook&&(h=k.getXhrHook(c.url,c.type,c.data))&&(c.url=h.url,h.params&&("GET"===c.type.toUpperCase()?c.url+="?"+g.param(h.params):c.data=g.param(h.params)))},statusCode:{403:function(h){"Authentication Failed"===.h.getResponseHeader("X-Reason")&&k.handleLoginRedirect()}}});g.ajaxSettings.traditional=!0})(jQuery,this);.(function(g){window.Granite.csrf\|\|(window.Granite.csrf=g(window.Granite.HTTP))})(function(g){function e(){this._handler=[]}function k(a){var b="//"+document.location.host,d=document.location.protocol+b;return a===d\|\|a.slice(0,d.length+1)===d+"/"\|\|a===b\|\|a.slice(0,b.length+1)===b+"/"\|\|!/^(\/\/\|http:\|https:).*/.test(a)}function h(a){window.con

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (645)
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.157128355194952
Encrypted:	false
SSDEEP:	12:jvgeHhSRvvct/BeHhSRvOLXb3dhiomT6QmsnuWcaKYWx0tWUqFWdxL3n8mtPd:9Mnct/BsMq3Pio4nfuWccWwWUqFW373d
MD5:	FB1C0797B02B2CD11B05AFBF8FFF41D1
SHA1:	E8940C69A88D148F753261AAE3A4ED7D754DC856
SHA-256:	C4178F5EF5266AE1576AC7F5E0B8EFC945933996E054BAD6754C00EC9EB65864
SHA-512:	50D1D3C8CE42004830EEE34BB2BB0939CA2344C8A39B317A18C319C2B131C060F9683AEA9FEC2FF1B2601D631FD0BD2B0B8B7519F8AA5122B946EDA08C4D0165
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCfe32cc4532d941ffa076b0d824f6f537-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCfe32cc4532d941ffa076b0d824f6f537-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCfe32cc4532d941ffa076b0d824f6f537-source.min.js', "<script src=\"https://js.adsrvr.org/up_loader.1.1.0.js\" type=\"text/javascript\"></script>\n <script type=\"text/javascript\">\n ttd_dom_ready( function() {\n if (typeof TTDUniversalPixelApi === 'function') {\n var universalPixelApi = new TTDUniversalPixelApi();\n universalPixelApi.init(\"3u503kv\", [\"thm7oum\"], \"https://insight.adsrvr.org/track/up\");\n }\n });\n</script>\n\n\n\n\n\n\n\n\n");

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48232
Entropy (8bit):	5.112163450461012
Encrypted:	false
SSDEEP:	768:P2YlaJuUMAilp1EyzemDjG0sjEbXaR0kg7yseZ1TfI9ol2Rek:uYab6EjAG0sjEbXaR0kg7yseZ1E9h
MD5:	49F6AAC73A3A7EF3E2C0972877AD456B
SHA1:	FE65C3C87300CC8661E7E1A9C42CD44B3693A734
SHA-256:	C000900AB52CAF5EAC28E4BE1F2410C6D5B72D3D6B8A0A7A5908A0813A92BD3C
SHA-512:	B77B90278B218880FE2608BD57DC934DF47881671925B2AD0C2F5E4F462C795AA9E5C00C0CA4F70C65D5ABCC8FCEE9C8F8EC7A90DD640CE620DA2819E8CB8C61
Malicious:	false
Reputation:	low
Preview:	{"accountId":"http:\/\/schemaapp.com\/db\/ThomsonReuters","url":"https:\/\/legal.thomsonreuters.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Template20240819161820","publishDate":"2024-09-04T19:15:19.000Z","label":"Experiment: Marketing Product Pages","updated":"2024-09-09T13:57:48.880Z","categorizedBy":["Product"],"@type":"HighlightTemplate","hasHighlight":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Highlight-20240830155400877-316336","xPath":"( \/\/meta[@property=\"og:image\"]\/@content )","propertyPath":["image","ImageObject","url"],"@type":"TagXPathDefined"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Highlight-20240830155451224-318431","@type":"TagXPathDefined","xPath":"( \/\/meta[@property=\"og:image\"]\/@content )","propertyPath":["mainEntityOfPage","WebPage","primaryImageOfPage","ImageObject","url"]},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Highlight-202408301551

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	153156
Entropy (8bit):	5.313184589772049
Encrypted:	false
SSDEEP:	1536:PpbrUzacicmSKzO9R0cFMX/kC7dCqGjHlUHNaVcZRxRBA04VKsuntF0dTGgQ18u5:Wza1ke70eNaVGAvkF2kl
MD5:	2630B3D7AD4A41FAC67742216E506D83
SHA1:	DDA36227690CB7C9EC74DE3667DD595D59FB8EEC
SHA-256:	CD5EB76033D96219A0C4FE45FB0DF10202E1FEBCB4D086FB1305F1B3304A6B1A
SHA-512:	DF4BBC981FDD148A6EC0E97CBCCB16B66C9054EB144A6055EAC76A2B34FEFE071617E6AA00338A7D2C990ED7D521BA1FB95D086C20B4A37BB95C0820C9B9124D
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r),warn:n.warn.bind(e,r),error:n.error.bind(e,r)};function o(t,e){return function(){for(var n=[],r=0;r<arguments.length;r++)n[r]=arguments[r];try{return t.apply(void 0,n)}catch(t){i.error(e,t)}}}var a,s=function(t,e,n){if(n\|\|2===arguments.length)for(var r,i=0,o=e.length;i<o;i++)!r&&i in e\|\|(r\|\|(r=Array.prototype.slice.call(e,0,i)),r[i]=e[i]);return t.concat(r\|\|Array.prototype.slice.call(e))},u=!1;function c(t){u=t}function l(t){return function(){return d(t,this,arguments)}}function d(t,e,n){try{return t.apply(e,n)}catch(t){if(f(t),a)try{a(t)}catch(t){f(t)}}}function f(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];u&&i.error.apply(i,s(["[MONITOR]"],t,!1))}function p(t,e){return-1!==t.indexOf(e)}function v(t){if(Array.from)r

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43386
Category:	downloaded
Size (bytes):	12103
Entropy (8bit):	7.985508379818304
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVc2VhjIJ0STPz03aWagq692yvggkbH:+tjRIm6SoITu3khUTPjI5TI3afb6YmwH
MD5:	BED9B675380C07EDC84C03D0F362B192
SHA1:	0FC4DCF8CB37F303985159B5A9348BB9AE5C6397
SHA-256:	3AE25E7FC8C3E9A41A480D9E39BA0E43845FFD78B0529695530925F6575852D9
SHA-512:	25CFA4027E02D6EEFC95202417A02843556BDA5D28685735FFC102F3C63327CFAAF59B9565E3B23F2BC26C0274EFDD0F69CCA8AD9A3A6DCEA4D903722DCE9FB6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1948)
Category:	downloaded
Size (bytes):	226693
Entropy (8bit):	3.7550207725489297
Encrypted:	false
SSDEEP:	3072:4TURMS+7ER5XMsIrrYGTOHjAr0RABhgtGBRD9nhxhlcIrrG2x8rrd98rrKTZ+IrJ:4M
MD5:	A8748E8EF9390BB0FA125C4EF66E78F6
SHA1:	BFD007761F5724D37B631E3AEF37BFBD3CED8E17
SHA-256:	693188DF450AF08551BDF7FEC30CFB967AFD3133C6AD2C01467FD687A6235BFA
SHA-512:	111ECF7B4EA0FB8939A16B21FA9E1EBC5045256CCD559A16EBC0631E56376F98DA4ED2743016FCB18526B5B62ACBCB9B874E367CFBFB8E5D6ABB1F9D24DAB69C
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/en/search-results
Preview:	<!DOCTYPE html>.<html lang="en-US">... <head>. <meta charset="utf-8"/>.. <link rel="icon" href="/favicon.ico"/>. . <meta content="width=device-width, initial-scale=1" name="viewport"/>.. . . . . <script src="https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js" type="text/javascript">. </script>. <script>. window.DD_RUM && window.DD_RUM.init({. clientToken: "pub62df06fe98be88d223c0b56e30910186",. applicationId: "fe534364-701c-4d56-b4be-020a7e03efa2",. site: 'datadoghq.com',. service: "legal.thomsonreuters.com",. env: "prod",. // Specify a version number to identify the deployed version of your application in Datadog. // version: '1.0.0',. sessionSampleRate: 100,. sessionReplaySampleRate: 20,. trackUserInteractions:

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:IfaoxICkY:IfaoJkY
MD5:	468C83A2BEB002F2F8FC0F24B88A6CCD
SHA1:	DF34AFEC7ED3F5D4A27A2F2E779D51FB50D4B7F7
SHA-256:	E815414DAE24AB0700C1684C84D62BD5926DE930F9BCFF537ADA9F30AF3EB844
SHA-512:	781BC31FF7D73A5BF0BB3D6081721AB30B0FFFF168293978B8464EC697481E81E24A872EF9B60FB87D6A48AECC3B12B4B4719718465AF243AE00BB86ABEB3E24
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwnxViFDO_BI4BIFDaWTNiQSBQ1TWkfF?alt=proto
Preview:	ChIKBw2lkzYkGgAKBw1TWkfFGgA=

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1617), with no line terminators
Category:	dropped
Size (bytes):	1617
Entropy (8bit):	5.756773605912319
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXAAbDx1+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDA9:iEcxqKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	D8C8FC3500F440E98DD02F499D706A3A
SHA1:	61717D62BD3E912316C3A1FF3B6E4F521618DC39
SHA-256:	7324646ACE65AEB6E9183862D804C5C1C132B10A21987C83A45F68CFB449B7DE
SHA-512:	02C949C185423107665F70EA9D3C533569532387BBE394A004C108B28E8B0AD8A4FA40E3D76F2B71094F34491F519BAA526665123A00EFD976EFCE287DF7DFD8
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6Lcg8t8aAAAAAEg-ugVYe6QCmneyyVZm6ExG-4vv');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkU

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	104368
Entropy (8bit):	4.709547684875481
Encrypted:	false
SSDEEP:	192:CSp0gRcAeex3riXk1wt+e7WRRSTlCxcj5uzmC/7+LoVxenbIXUGtx9VpJt1IIK33:CSZAH6ukop
MD5:	1449CCEC31849E04DD8925C0B12C1901
SHA1:	D1ACB96C8E64CE8163C9B53DCD4821CCA46B82CB
SHA-256:	496B333F0DFDF021578E17248D8AC3101F02B4F6F1D7C94FF4444C4E65C133E0
SHA-512:	C4A05D830484F639608B540594BACF18DEF621D6B6F006A4A0379CA3FDBE33AC31DC468A27794909AFE6D96688CF6A4047ADA4916DC233A115546E1337113A10
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-base.min.css
Preview:	.cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}..cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;cursor:pointer}..cmp-tabs__tab--active{border-color:inherit}..cmp-tabs__tabpanel{display:none}..cmp-tabs__tabpanel--active{display:block}..cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}..cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;cursor:pointer}..cmp-tabs__tab--active{border-color:inherit}..cmp-tabs__tabpanel{display:none}..cmp-tabs__tabpanel--active{display:block}..cmp-image__image{width:100%}..aem-Grid{display:block;width:100%}..aem-Grid::before,.aem-Grid::after{display:table;content:" "}..aem-Grid::after{clear:both}..aem-Grid-newComponent{clear:both;margin:0}..aem-GridColumn{box-sizing:border-box;clear:both}..aem-GridShowHidden>.aem-Grid>.aem-GridColumn{display:block !important}..aem-GridColumn{padding:0 12px}.@media(min-width:992px){.ae

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	dropped
Size (bytes):	569
Entropy (8bit):	5.0122171962792645
Encrypted:	false
SSDEEP:	12:2DpeGXLsmyprd/umbdb+/9hXO1cDW/J1QWRoMEvWR1yQyadS6g8uLdARdxs:2D0GXARfWmx6/9ZO1yyQWRoFeR15y8VC
MD5:	1778E79223513F3EFBBB301CB67A2EBB
SHA1:	C5C1139A04EE0EEFAEAD48963F1E04850E83BD5A
SHA-256:	A15C7445269831BE1AC1FDCE58DD72789DD157295652688D25AE0C9B537F06C9
SHA-512:	1FEB3AE0FCECF9B75CE77741BC9F3FC2C34CF9801E12866AAB66BF97D96AE611D0EF420C612CC2E7408E4601BF47838DEAD3D6BE6C0F2F5375DC83335FCC7C86
Malicious:	false
Reputation:	low
Preview:	(function(g,h){h(window).on("load",function(){g.querySelectorAll(".SmartCrop").forEach(function(b){var a=b.querySelector("img");if(a){var d=b.getAttribute("data-image-src"),e=b.getAttribute("data-image-srcset"),f=new Image;f.addEventListener("error",function(){if(d&&e&&(a.setAttribute("src",d),a.setAttribute("srcset",e),"PICTURE"===a.parentElement.nodeName)){var c=a.cloneNode(!1);a.parentElement.replaceWith(c)}(c=b.querySelector(".SmartCrop-warn"))&&c.classList.remove("u-hiddenVisually")},{once:!0});.f.setAttribute("src",a.getAttribute("src"))}})})})(document,$);

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	dropped
Size (bytes):	228950
Entropy (8bit):	5.3785070939542905
Encrypted:	false
SSDEEP:	1536:8wmvBwvwCPMwe57D1pTT5OFm7eTX423SDyDbGw5frPSfFse84qaIGG4xQrZBYGCn:0BwvwCPMwa1LOFw/KEFsb9h4yt7bScYx
MD5:	AFD64EB21F50CF48FC7D612705BFCFAD
SHA1:	BB6993E414F52837B99583F23A2424C341D6B5F9
SHA-256:	B59AEA27FA8369F30285B9C3875597435DFCE1FC0571555ADCC11D210CB9BD1B
SHA-512:	A58E7B7CE5070BD2D116158D26DE015F6F76C0B9423C99BD89F544B0ACE366B5F1ED5A369A02D2B3CCF51CEBC3E5A6AB87E12D8FF4EA43F723B33A6471A289CE
Malicious:	false
Reputation:	low
Preview:	/! For license information please see modules.0721e7cf944cf9d78a0b.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65510), with no line terminators
Category:	downloaded
Size (bytes):	87078
Entropy (8bit):	5.039979092432434
Encrypted:	false
SSDEEP:	768:9z04O2mJRsDWx8NNyS3hZVMbbVV6bT3h1/rDvJdI23JBO:h04O2RDWxTlfVV6bjh1zV2
MD5:	FADF698E2957A61B20E6BF7C1F5D285D
SHA1:	743CCD43CC746962251F0BCE8FF61D7172CEFAC3
SHA-256:	D13317B4A2C8D1A89BC7FA4C68D78F60CE56F4247450D02E76A1BD0BA76EF3F2
SHA-512:	70829CCB3251546A5E5DAEA02599C3D05C17FA8837BE888E5DF1FA19BA5ED3B3134A7C9A436B7300E9DB1F95064CDCEF73F13B2E107F4EF44AC9DF4DAA15E413
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.css
Preview:	@charset "utf-8";@font-face{font-display:swap;font-family:Knowledge2017;font-style:normal;font-weight:200;src:url(https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-ultralight-webfont.woff2) format("woff2"),url(https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-ultralight-webfont.woff) format("woff")}@font-face{font-display:swap;font-family:Knowledge2017;font-style:italic;font-weight:200;src:url(https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-ultralightitalic-webfont.woff2) format("woff2"),url(https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-ultralightitalic-webfont.woff) format("woff")}@font-face{font-display:swap;font-family:Knowledge2017;font-style:normal;font-weight:300;src:url(https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-light-webfont.woff2) format("woff2"),url(https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 792 x 446, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	294264
Entropy (8bit):	7.99518395153022
Encrypted:	true
SSDEEP:	6144:rV6ynaBl50F/hzIPldtMkZmybTyJrlW6443eKgxpfHEwkbxsENMT8zcna:rVTnaBlKbIPldtIyb+TWcuxpcFu5a
MD5:	413FDD4D7E5E3575041B9D804EB80480
SHA1:	9A7BA733EE92581AB314EFB4425AF108DBD9A711
SHA-256:	5722990E693040F114AB05E57A64325A006E4E78D3B0214C586F77CED4217FC8
SHA-512:	1BEADA564C118ED8AED06CB0CD2A4A38195995C7C16C950B2682C88684DD52847D8CC3E148036AFB446FAB8B5F9EFE84FB97DBEF98F85DAB5BD478CED4BACFAA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs.................sRGB.........gAMA......a...}.IDATx....d9.0..]....u....==......o.d..}..8\|!...c>rT.\|..T....T.......3...{ddu.!..~/..).........B.A...C.Ne.py.....]~(Y.HA...a.#/...h..9)..0.!...`...<.m....4D@/.{......_.-.c..h......2..o........NU..../.........)....g....X..e.a......#".^.....G.2;..;_../......++0.vpxx...:._..._..&..0C...b..vE7..)..8i.e....h9..."rc...D.;....0..$.\.?..oA...5.A.E.l..........T..C.....B!.B...@..#?....J..].9...........FHE~.qe)....HYb.r.5.....Q. P..K.)....ZH...L....#...f..,E..).R.R.?F!.R.s.r...x.d...,Fb+.Sf..\|.9i....8#})........d(%43.wZP<.o.b..mj,."+T...0v+.."..jN.H.{L..6.QF]ACl.K...... ,..P1-......T0.T....}....T....Zu.........r..j.S.W.:....."..C.u'.\U..5.bib.M..1..+'+Zv2%Ca.U...D..iX....U..y.n{>...r.t..5(%7..?N"....-2..........l...S..3.. .)u.s......~..+s..Rsc.t...R.....g..X.....$^.j.....uH....l..5A.w.....$'(. .....-.-..6.0oA.T.O....Q./....v.n..c,,2.r0.k).n...)..I.....*y'GQu.$w.\|...nZI......c

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	dropped
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1108
Entropy (8bit):	4.902290690618306
Encrypted:	false
SSDEEP:	12:7mcARJwQ6ANX2k9OK2Ad9NcdtvmqaCKWcKTt+zzWRsVJLcwC23F3SXdCrJXdQJP:oF6M2lKfg/FcKWJIvoZ2
MD5:	F0764CDB4EBBBCEBEA3B2B2E4B212BC9
SHA1:	3A2BBBB58C6DE173DEC98F1BEF69D078382C4808
SHA-256:	C27EC9D6E40F2AA90480BF72CC41E970707FAB7E76BE734578C484ABEE113514
SHA-512:	95B9F53C14463D6079293E528D41A707EBB2FE2551244B2F6154574B76C72FD2E98EF14FD691E894DFF8CFF74C3E37B1A3D7BD16D00AA4B073D1E01D1B3F55C9
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/emcm/components/content/article-paragraph/clientlibs.min.css
Preview:	table.responsiveTable td:before{display:none}.@media only screen and (max-width:540px){table.responsiveTable td:before{display:block}.table.responsiveTable{width:100%;border-collapse:collapse}.table.responsiveTable tr:nth-of-type(odd){background:#eee}.table.responsiveTable th{background:#333;color:white;font-weight:bold}.table.responsiveTable td,table.responsiveTable th{padding:6px;border:1px solid #ccc}.table.responsiveTable,table.responsiveTable thead,table.responsiveTable tbody,table.responsiveTable th,table.responsiveTable td,table.responsiveTable tr{display:block}.table.responsiveTable thead tr{position:absolute;top:-9999px;left:-9999px}.table.responsiveTable td{position:relative;padding-left:50% !important;display:block;width:auto}.table.responsiveTable td:before{position:absolute;top:6px;left:6px;width:-11%;padding-right:10px;white-space:nowrap;display:block;font-weight:bold}.table.responsiveTable td{border-left:.0625rem solid #d0d0d0 !important;border-right:.0625rem solid #d0d0

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (925)
Category:	downloaded
Size (bytes):	1072
Entropy (8bit):	5.404903644864476
Encrypted:	false
SSDEEP:	24:9pzct/BspQTuZAwobVSqFU1OW15uBuEozOszOIyXUQU5ucXUQUjL0NxXUQpta:Ut/BpuWwgvFUEw5uIEo6sJQU5ulQU/08
MD5:	E1714E19B700702E2CEF78AC1CBEA071
SHA1:	6AE320694610F7907FD4C6A1F52371A1FBBB3F05
SHA-256:	1BD8BC61F5169AE526F26E4A23B83756C27C609CC4601F44E88BC813F48C82D6
SHA-512:	CCA654DB27E6DCF3E8C4AE797DCB083747354620247F9EE4F683DB06211235A1EAFB50C4AE65063925D91D48443EF2A7BFBA352EAE7BD1B281F6DBABB84C33A2
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1127c9543dd5441c840a88ac5e98d26d-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1127c9543dd5441c840a88ac5e98d26d-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1127c9543dd5441c840a88ac5e98d26d-source.min.js', "try{var uidField=document.querySelector(\"input[name=UniqueID]\");if(uidField){var dd=(today=new Date).getDate(),mm=today.getMonth()+1,hh=today.getHours(),m=today.getMinutes(),ss=today.getSeconds(),yyyy=today.getFullYear();dd<10&&(dd=\"0\"+dd),mm<10&&(mm=\"0\"+mm),hh<10&&(hh=\"0\"+hh),m<10&&(m=\"0\"+m),ss<10&&(ss=\"0\"+ss);var datestr=\"\",today=datestr.concat(yyyy,mm,dd,hh,m,ss);uidField.value=today+\"_\"+_satellite.getVisitorId().getMarketingCloudVisitorID(),console.log(\"In Forms: Transaction ID rule, UniqueID field was successfully set.\")}else console.log(\"In Forms: Transaction ID rule, UniqueID field was not found on the page when this rule ran.\")}catch(e){console.log(\"In Forms: Transact

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (886)
Category:	dropped
Size (bytes):	1033
Entropy (8bit):	5.513677610862805
Encrypted:	false
SSDEEP:	24:9tKpct/BstKJzFc2mEeZVnOoRWjGeHe5eI31YZF3scQfw:f/t/BaGKdwSoK3leicQfw
MD5:	F889B95246C5B5B2B216923FF38B88C1
SHA1:	DC0F0B34E64104DFDF28418F66F3585F5918CCBA
SHA-256:	42FC9B80CA35FE18286D2A164561AB2B2927C33F58D344F216D7A27307FF6AE7
SHA-512:	BB7A12707BEE07D95A3394DE8CD2A3A6FA9A2D2FBF215A1BD8AA0292BE1FCDB7B8B95B01DDC5FDEEDA8FB383517E52527BDD7559F9416BA7C0BF5710438B4EAE
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1043e003412140f8ab9e58fbe496aab7-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1043e003412140f8ab9e58fbe496aab7-source.min.js', " Facebook Pixel Code -->\n<script>\n!function(f,b,e,v,n,t,s)\n{if(f.fbq)return;n=f.fbq=function(){n.callMethod?\nn.callMethod.apply(n,arguments):n.queue.push(arguments)};\nif(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';\nn.queue=[];t=b.createElement(e);t.async=!0;\nt.src=v;s=b.getElementsByTagName(e)[0];\ns.parentNode.insertBefore(t,s)}(window,document,'script',\n'https://connect.facebook.net/en_US/fbevents.js');\nfbq('set', 'autoConfig', false, '156351445072315');\nfbq('init', '156351445072315'); \nfbq('track', 'PageView');\n</script>\n<noscript>\n<img height=\"1\" width=\"1\" \nsrc=\"https://www.facebook.com/tr?id=156351445072315&ev=PageView\n&noscript=1\"/>\n</noscript>\n End

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4568), with no line terminators
Category:	downloaded
Size (bytes):	4568
Entropy (8bit):	5.782248378720509
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU4qhi0+6W:1DY0hf1bT47OIqWb1pqhi0pW
MD5:	4A267D5BACFCA6FEE85A0C5C9B982960
SHA1:	87CA97A6D43A7B83A9E0EAE76335EE8BD9102BA1
SHA-256:	B0537C56BDAFBCBC1D3E20D0689AA322EEB9CBA2D8C6E8E84A357CC83AB230E6
SHA-512:	B3A38602579112ABEEFE0D1A1EF83685847EAD20762D0ECF340D34583D1276FBCCE1AFFE7B011351E1A436C86572A0DFD4A60A706F4DD6300368AF0DDAE9AFFF
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11093504263/?random=1727776356892&cv=11&fst=1727776356892&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results&hn=www.googleadservices.com&frm=0&tiba=Search%20results%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	65577
Entropy (8bit):	5.353937566241126
Encrypted:	false
SSDEEP:	768:ezDY9eR7s83Hw4oUnaOGE477KKIY0MnZez7T7nM1En0wEJPddhMHKvOWISQS31F:0DDFs83Hw48ZO7T7nwEYFRQSFF
MD5:	70187A383ADB805DD9FA0F16588B48C8
SHA1:	E1ED844DB90FC16308EAB60276BD9679784D9F01
SHA-256:	30ADBC7E799238C336B56A1E20DB67910F2A114FC3BC6CED6C550B4C873318AA
SHA-512:	C860317CE2F70CF96C9A93F36C7FB608217601CC6E63B45A9F2E9571FDB7C6AA286AF566AE532F23AA054B1D83DAD6097BF5435CF6B8C9C2CAFE750273050B87
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.47/clarity.js
Preview:	/* clarity-js v0.7.47: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return jr},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return Ar}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (553)
Category:	dropped
Size (bytes):	3618
Entropy (8bit):	5.336332106774489
Encrypted:	false
SSDEEP:	48:5XePPnLjEwu0/dOdWzL5eJpMRcI28tYXCntpngzCH9UumKs3Es3PeoeFmjfl1hn7:5++angz4MNrmBas3yBAI
MD5:	56934E461FF6C436F962A5990541A527
SHA1:	646455C5A2FB79B49F90AE33880BA26F85EBCF41
SHA-256:	515394110439A7AAFE62229BBDA44A768A1D938A2053D92764FAE16B2ABA5E81
SHA-512:	B1055AE1463E7CCF78B785BF7603F139C71C3859F1EBEFC6EC5608EE3B6F064ECB2D81EFB69732AEB4ABE8B5AEA71184C225C8BFECEFD37263EDF749660482C3
Malicious:	false
Reputation:	low
Preview:	(function(d){d.Granite=d.Granite\|\|{};d.Granite.HTTP=d.Granite.HTTP\|\|{};var f=null;d.Granite.HTTP.externalize=d.Granite.HTTP.externalize\|\|function(g){if(null===f)a:{var n=/^(?:http\|https):\/\/[^/]+(\/.)\/(?:etc\.clientlibs\|etc(\/.)\/clientlibs\|libs(\/.)\/clientlibs\|apps(\/.)\/clientlibs\|etc\/designs).\.js(\?.)?$/;try{if(d.CQURLInfo)f=CQURLInfo.contextPath\|\|"";else{for(var h=document.getElementsByTagName("script"),k=0;k<h.length;k++){var l=n.exec(h[k].src);if(l){f=l[1];break a}}f=""}}catch(p){}}try{0===.g.indexOf("/")&&f&&0!==g.indexOf(f+"/")&&(g=f+g)}catch(p){}return g}})(this);.(function(d){window.Granite.csrf\|\|(window.Granite.csrf=d(window.Granite.HTTP))})(function(d){function f(){this._handler=[]}function g(a){var b="//"+document.location.host,c=document.location.protocol+b;return a===c\|\|a.slice(0,c.length+1)===c+"/"\|\|a===b\|\|a.slice(0,b.length+1)===b+"/"\|\|!/^(\/\/\|http:\|https:)./.test(a)}function n(a){window.console&&console.warn("CSRF data not available;The data may be una

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2593)
Category:	dropped
Size (bytes):	2624
Entropy (8bit):	5.328574016124741
Encrypted:	false
SSDEEP:	48:/MIYCAXAZoCWZ+/YnDAsNn6Ir356XeY311FObS2DuVErAzAHXsy4/:EZCAQZoCWZ+/kDAsp6IL5keY311FOu2e
MD5:	ECBAF5A08AEDAEDCF6AE527124D4D016
SHA1:	C9B627F471B70BA7504A4DE0EC5928D5985E8D0A
SHA-256:	6549131586658A6A3FB2A09C651D23D52AC3D58BBCDAB1CCAA68CC2474863D16
SHA-512:	10AED39301A9BB4FA805C9AFFDC6200FF83C260D0CBD12C204C07163AFF4ABAEC8AF4715D8679417F260664A2507D8D06006B9BC54A6678D28A80C6E61A95F0C
Malicious:	false
Reputation:	low
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[24],{1008:function(e,t,r){"use strict";r.r(t);var a,o="loading"in HTMLImageElement.prototype,n="loading"in HTMLIFrameElement.prototype,i="onscroll"in window;function c(e){var t,r,a=[];"picture"===e.parentNode.tagName.toLowerCase()&&((r=(t=e.parentNode).querySelector("source[data-lazy-remove]"))&&t.removeChild(r),a=Array.prototype.slice.call(e.parentNode.querySelectorAll("source"))),a.push(e),a.forEach(function(e){e.hasAttribute("data-lazy-srcset")&&(e.setAttribute("srcset",e.getAttribute("data-lazy-srcset")),e.removeAttribute("data-lazy-srcset"))}),e.setAttribute("src",e.getAttribute("data-lazy-src")),e.removeAttribute("data-lazy-src")}function s(e){var t=document.createElement("div");for(t.innerHTML=function(e){var t=e.textContent\|\|e.innerHTML,r="data:image/svg+xml,%3Csvg xmlns=%27http://www.w3.org/2000/svg%27 viewBox=%270 0 "+((t.match(/width=['"](\d+)['"]/)\|\|!1)[1]\|\|1)+" "+((t.match(/height=['"](\d+)['"]/)\|\|!1)[1]\|\|1)+"%27%3E%3C

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	18118
Entropy (8bit):	4.440055715524098
Encrypted:	false
SSDEEP:	384:58+kApfOCmocWfuosdIBvkSlcN4oUR8S7YhwiLji5QvI5g2rj:6J4WfchlWUYhheQA
MD5:	929699E0258077AF710BBA24E66153A2
SHA1:	C6BF9423ECB24EFC5D10D7207DBACDAF1C60A79E
SHA-256:	614CB70CFB1A6F80ECC577933F33E16E626FC7FABADE20D6CEC7A6106547193D
SHA-512:	423B869994853920C8E6E04774C39007CF2444716B9682B0B1E9C62CA18D71695FB34AED5C0EE8793DFDC7FA5E9058D19BB3049B0AB4BEF2B32A73E7A8EFE6F0
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/tr-rebranded-logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 225 30.6" style="enable-background:new 0 0 225 30.6;" xml:space="preserve">.<style type="text/css">...st0{fill:#212322;}...st1{fill:#D64000;}...st2{fill:#E82C00;}.</style>. <path class="st0" d="M253.9,546.2V567h12c6.9,0,11.3-4.1,11.3-10.3s-4.4-10.4-11.3-10.4L253.9,546.2L253.9,546.2z M239.2,534.2h27.9..c15.1,0,25.1,8.8,25.1,22.5c0,8.7-4.6,15.6-11.7,19l13.5,26.1h-16.2l-11.5-22.7H254v22.7h-14.7L239.2,534.2L239.2,534.2z"/>. <path class="st0" d="M333.5,571.1c-1-6.1-5.2-9.5-11.5-9.5s-10.5,3.6-11.2,9.5H333.5z M296.1,577c0-15.5,10.3-25.5,25.8-25.5..c15.6,0,25.2,9.3,25.4,23.8c0,1.5-0.1,3.1-0.4,4.6h-36.5v0.7c0.3,7,4.9,11.3,11.8,11.3c5.6,0,9.5-2.4,10.7-7h13.6..c-1.6,9.7-10.3,17.4-23.7,17.4C306.2,602.3,296.1,592.4,296.

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	1.9560481186376761
Encrypted:	false
SSDEEP:	96:jGpxkqkiJpAsnNKYOcHp+5BsTxXqr84jsG+9SJv5iszM6U0Nikm0pAp:jGvUu3smsfsIzCh/P
MD5:	430ACCE94BA315DEF125DD60AF0D607E
SHA1:	8BF93E33CDC999C2C8EDB0C1180F236366CB6309
SHA-256:	3CEED549E912A62EFCCE446E8B1EECCC26D3BD118E399DBA26940BD847404920
SHA-512:	7DEBDA56FAEC3A332EB4ECA9BC3DE50B81C9BA5FC5BC7918D368A97D50DDD0633850A657C9089D04D30A65A7B1D3405E22E2EEE90500D673627DAED82ABAD1E3
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................@...@...@...@...........................................................................................................................................................@...@...@...............@.T.@...@...@.T..................................

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.136248672727249
Encrypted:	false
SSDEEP:	3:YIzIX/GZR49aLVAL4n:YIyGvvVln
MD5:	905B1FBB26E082557FF0B3B3553CDA6C
SHA1:	8FE0790D6026998BDB2C9FFA3B915952E613E1B4
SHA-256:	F249B63CB2FCB66B47E86F906C98F8FD912E82DD035B4E53D7E72FC1960CFD16
SHA-512:	284567E83A5C15761498249B27B4B700AA081A65B858F29458E5D0F3DEBDEA93DD5CFAD94EEFAEB43837E70CC288B2A34EA168D2771CB57C993E269C287097CE
Malicious:	false
Reputation:	low
Preview:	{"message":"Missing Authentication Token"}

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (871)
Category:	dropped
Size (bytes):	1018
Entropy (8bit):	5.184868475544792
Encrypted:	false
SSDEEP:	24:9vtzuct/Bsvtz5v+QDsWpGGFmOtyuo+XsVQRWUn3WXaDd:fztt/B0z5ZDsWsmVo+XsOwUn1B
MD5:	077BA8E91BBE33ED94AE6CCC777EEBF3
SHA1:	A5D00166703566CC2F022851DAE3D74142D271DE
SHA-256:	FAC1658C1FA279790DF41323BA4D9C9BC22D3915E2B040187229BD6ACC721B00
SHA-512:	BC3C5E95B9743979E498287A726EE511B5C5D0A314EB62AD01A124E1785B7CAD4C6679904C8B2ACD333C1EEF1DBB227473C758F43051824ECE5E2A1611AB04CD
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC0202c5abf5c84397b72147008aebed67-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC0202c5abf5c84397b72147008aebed67-source.min.js', "<script type=\"text/javascript\">\n\tvar _elqQ = _elqQ \|\| []; \n\t_elqQ.push(['elqSetSiteId', '1575097598']); // INSTANCE: SIE\n\t_elqQ.push(['elqUseFirstPartyCookie', 'trail.thomsonreuters.com']);\n\t_elqQ.push(['elqTrackPageView']);\n (function() {\n function async_load() {\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//img04.en25.com/i/elqCfg.min.js';\n var x = document.getElementsByTagName('script')[0];\n x.parentNode.insertBefore(s, x);\n }\n async_load(); //modification for GTM/Adobe compatibility\n })(

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	409
Entropy (8bit):	5.123455956829721
Encrypted:	false
SSDEEP:	12:trIJ0uCiABvR6VQ6Hchllt4JrBvR6VQ6HchllR:tcJ0uZAd4nHchlltId4nHchllR
MD5:	4E70C6D67E06CFBD384C550B6039C9CB
SHA1:	FB0D4BC2584CA29AC4A78816BAE441D1B5D850AB
SHA-256:	65A11118B80A19EE8B1C1B1B95103F54EED07EA777DA8315291BB72D7C6F6883
SHA-512:	470DFAF1A8A04DF92A5DBDA27C8353AB83A43E8F2EDF2D27B07CC4698ECCBBF0C0F462A08ECDFB8FD61F2137BA9069E4C11004F488A91982980D5F2F5665F744
Malicious:	false
Reputation:	low
Preview:	<svg width="19" height="14" viewBox="0 0 19 14" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1.0835 7.41699H17.7502" stroke="#FA6400" stroke-width="1.5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M11.917 1.5835L17.7503 7.41683L11.917 13.2502" stroke="#FA6400" stroke-width="1.5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=52807&time=1727776337849&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo
Preview:	{}

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64864)
Category:	dropped
Size (bytes):	104243
Entropy (8bit):	5.297745834075309
Encrypted:	false
SSDEEP:	1536:ZNhGavt4iVBUAIQWS2DCIodhR6ws66u0e9UAEZge:ZNhGarr0mRv2ge
MD5:	57F4D503FBC9A049419FB47E6B80968B
SHA1:	60D892897439675D6F87A7887B82CA290F0034DC
SHA-256:	EBDCCF0F346825CE0A0D6AA61B31562B8B602526253838C41093A8AA1425E34C
SHA-512:	867788ACD59E286B7F8D33B3271C8DEBE3ED6CD5F2EB42B9002F47BCE46B237019D66850BB9F372EF0243B5E62873EA4038C20DD810B3FEB0C910FEE9A6A3009
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{1071:./!***************************************************************!\. !* ../node_modules/react-dom/cjs/react-dom.production.min.js !. \***************************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){"use strict";./* @license React v16.7.0. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /var l=n(/! react /583),v=n(/! object-assign /436),r=n(/! scheduler */1072);function z(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function(e,t,n,r,l,i,a,o){var u,c;if(!e)throw(e=void 0)===t?e=Error("Minified e

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16727), with no line terminators
Category:	dropped
Size (bytes):	16727
Entropy (8bit):	5.230137983736295
Encrypted:	false
SSDEEP:	384:JwPu9hUyVYDsdU5sF59QF5vCAG57eNYk9p:JwuhUyWDR5sj9q5vCAGxoYk9p
MD5:	3B969BD8D3D421D7D91DE488131A4B90
SHA1:	E1D3C18AD0589035B960EDD0163B747FF83A1BC9
SHA-256:	F7C8B23941A619AC684A02A1ECDE98D4948564611651D78B64BFEA430EEC6C8D
SHA-512:	91077CCCFB601BD11BF65B6B4F709E17687F8D1542E4E7B7F4619C5FC5B9D8035505396A0595462E901088619FAE95DC0749CCA85C29407DD390314822851E66
Malicious:	false
Reputation:	low
Preview:	var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"."+d[3]}catch(d){}}();(function () {var mntnis; async function fwto(resource, options = {}) { const { timeout = 1000 } = options; const controller = new AbortController(); const id = setTimeout(() => controller.abort(), timeout); const response = await fetch(resource, {...options, signal: controller.signal}); clearTimeout(id); return response.text(); } fwto("https://52.71.121.170/is", {timeout: 1000}).then(function (response) { return response; }).then(function (response) { mntnis = response; }).catch(function (err) { mntnis = err; }); var shaddslashes = function (s) {if (s != undefined && s != null) {s = s.replace(/%/g, "%25%32%35");s = s.replace(/\\/g, "%5C");s = s.replace(/'/g, "%27");s = s.replace(/"/g, "%22");s = s.replace(/\?/g,

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2299), with no line terminators
Category:	dropped
Size (bytes):	2299
Entropy (8bit):	5.065713404473587
Encrypted:	false
SSDEEP:	48:WF4rTdOe3lBXsfgvMYyYvTEV+m4ewxhAk8P:CWVBXsg+Y+45n2P
MD5:	BD244E1B891B02E1257DC6FB99604EB6
SHA1:	296C431C92027441C5B184F88B5C2E6A0AE7464C
SHA-256:	81F845E2D1EF874C2C93F6200FB004EEBEA26DD567D854D59F7A572F1B9B66E1
SHA-512:	35742B760D92EE5BBDC8838DF9A60FC203DD00FB4DBA00D70D3CF6FAF7374BD4F6E4AA65F821850AA3BB2EA0EB2FD84C43D1D97B450977A65242982C85C9440E
Malicious:	false
Reputation:	low
Preview:	function schemaLoad(h,g,f,b,d){window.schema_highlighter=window.schema_highlighter!==undefined?window.schema_highlighter:{accountId:h,key:g,stripUrls:f===undefined?true:f,testMode:b,fetchFromHighlightJsCache:d,output:true};const k=new Set(["Brother","KaplanNorthAmericaLLC","Aetna/AetnaMedicare"]);if(window.schema_highlighter!==undefined&&window.schema_highlighter.accountId!==undefined&&!k.has(window.schema_highlighter.accountId)&&window.schema_highlighter.accountId.startsWith("SonovaAG")&&window.schema_highlighter.fetchFromHighlightJsCache){window.schema_highlighter.fetchFromHighlightJsCache=false}if(window.schema_highlighter.accountId===undefined&&h===undefined){return}else{if(window.schema_highlighter.accountId===undefined&&h!==undefined){window.schema_highlighter.accountId=h;window.schema_highlighter.key=g;window.schema_highlighter.stripUrls=f===undefined?true:f;window.schema_highlighter.testMode=b;window.schema_highlighter.fetchFromHighlightJsCache=d;window.schema_highlighter.outpu

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4599), with no line terminators
Category:	dropped
Size (bytes):	4599
Entropy (8bit):	5.792799682120861
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUOqAil6z:1DY0hf1bT47OIqWb13qAily
MD5:	CDA12369F828920012E72AEFFD720BF8
SHA1:	BF268BB78EF7E82AB9A2F9644376457644C3D991
SHA-256:	05DAEAEA1039DA55A613615BDD36A2BF272ABCDE03B34F3B7F0E8FFEA167299E
SHA-512:	99FB41D483DE0F6CEE7972FC6E114F7814FF85819D54F58E86467383989FF006040D17BED820256737751A45BD7B3FB1722746EFAA8563DA5BD7C86EDDF56638
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10527)
Category:	dropped
Size (bytes):	258087
Entropy (8bit):	5.573346311703434
Encrypted:	false
SSDEEP:	3072:72wzFARXKiKj3WuNHt7t8VbFN6Om+vGcsthVmbuCqx:72wvi+NHt7t8VbFcOm+v8KbHS
MD5:	7F817D82810C6D62679D7243155FA1C7
SHA1:	A9A527BB31CE63A3E55E06E800F9FD25E5F88E0E
SHA-256:	BFB419FBDCA63DF2887EA8EF239CC67C7697A26C6A8B8AEE6844B568BF4A38E4
SHA-512:	08D1AF5020A8F195430405F98EA38DD5C68907BC973EF2843FB4148042AD1600C9C998021F2751A6CF8E4A7C943B23D24384310F9F78ECCD2A365B78157B9C1E
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{1160:./!*******************************************************************!\. !* ../player/components/fullscreenWrapper/FullscreenWrapper.scss !. \*******************************************************************/./! no static exports found /./! exports used: fullscreenWrapper /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){e.exports={fullscreenWrapper:"_29Gjr"}},1161:./!************************************************!\. !* ../player/components/spinner/Spinner.scss !. \***********************************************/./! no static exports found /./! exports used: show, spinner /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){e.exports={spinner:"giifV",spin:"_3pWeg",highlight:"_1Nluf",show:"_20Z54"}},1162:./!******************************************!\. !* ../player/components/icon/Icon.scss !. \**********

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.502958617524926
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdtrQb:si2N1V4NxwZG1wo
MD5:	E136DDC50FA23CA2658886D753EECDA1
SHA1:	11C81ADFF010E7307D46B329AB45BE9902649C7B
SHA-256:	A217F69351069DA2AD38A5743662C2713469C2AD262217031D2EA890158FE434
SHA-512:	C1B3F6BDB60A789816845B9856B6DCA110AE4B1C6F37345866A744D1BC41515F314AD8144AE389F41050336522D0D007C5232E185C2A1C1087E9FEC7DDB089F4
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=3u503kv&ref=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results%23t%3DLegal%26sort%3Drelevancy&upid=thm7oum&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. . </div>.</body>.</html>

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	downloaded
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202308.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x355, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4918
Entropy (8bit):	7.793066261784075
Encrypted:	false
SSDEEP:	96:evxbNiiiiiiiiD52FiiiiiiiWXyU4BDS01BcAitSItFt+05n4ecMbyU:ehNiiiiiiiiNoiiiiiiilU4BZbcAiN+O
MD5:	3A1DC1F8A62D0F09A3A4406ACC937002
SHA1:	F94095333D190E487F14C4621D96207FB30E3612
SHA-256:	429C9334DEFF38BCB423808CEE1EB324BBD7FB7EFAD1BA5ED87F3CA01A9D7AD0
SHA-512:	778AD64450725BEBCDBE004756C4E590A976C1B803FC14D2B85FCC993E03A2645180976C6FA869354D9E751BB41B0A0828CEF9411CF4D7845018E77DFC76EC6B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ".........c....%........}....^.......=Cq.............3..K..h?.}..w.{.W.?./.>......c.s...a........}.=..}...c.....s...G..Z_.....\|+.b..........?..}. ...t..G...h.z}S.....i..c.o.?.F......~).......+.?.!?n..}......_......a.....o.o.....~M.M.....?..i?}...........3......B.f}..P.O.<i.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.Li.LfM.8yk..O.m..m..m..m..m..m..m..m..m..m..g..........:Ig..W..M.cM.cM.cM.cM.cM.cM.cM.cM.cM.cM..T/}.a.g.Qu{<.@.*.Vv......D.D.D.D.D.D.D.D.D.D.D..lC..2x.h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h..h.. I{.?._.......>~...Y...1..1..1..1..1..1..1..1..1..1..I$h...?.....I..-...M...O.<i.Li.Li.Li.Li.Li.Li.Li.Lg"...LY..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..m..[.t..EJd?P...w...n.2x.h..h..h..h..h..h..h..h..h..h....z1...+...6..U"....847H.8E.h..4.&4.&4.&4.&4.&4.&4.&4.&4.&4......,...'.6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6..6.....p.-..-e1

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4566), with no line terminators
Category:	downloaded
Size (bytes):	4566
Entropy (8bit):	5.786604882953141
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUXXzi0+BF:1DY0hf1bT47OIqWb1eXzi0a
MD5:	134EFED54DC8E2EEE995333850534C72
SHA1:	B96E8199ED2FFA238171C1E490CC9306EE221347
SHA-256:	BF1DB622990F49F10EB7640D8122CDE337438EFB183B7354EB4CA2CC4ECF8800
SHA-512:	A2AD5DF5767FE7229EA5D3F441F3723A0B9FA5F7BB05788564A3CAB64B7B3B7F1554664656B6A6E5F5D8C5D51D1A0268D339FBF427E4E49E8513771E86267584
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/996834583/?random=1727776356858&cv=11&fst=1727776356858&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results&hn=www.googleadservices.com&frm=0&tiba=Search%20results%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.921030304008144
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKzaXORdQzXWaee:PLKdXNQKGeOL
MD5:	59EE3965FCB16F88E9BDC20B9CD8612E
SHA1:	3D93A27E4DAC9DDA01DC5BBCCA9E1F53E827DAF2
SHA-256:	020A92F2FB27981D1398F916AE17400F8F11473962EBD858B7BF6901814EDD7B
SHA-512:	3E4C07D9CE3DEDE2998A59C32A3FE12D781AAE33C4AFE8D2B9B0D12C18EB96257373098497B5F3C909EC1EDE64FEB4B4074DBDB9678B4D6B019CD64360222849
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	660
Entropy (8bit):	4.532016424283523
Encrypted:	false
SSDEEP:	12:YGKvxaNmmi+B3dNpH5xM/h/bEpUAxaNmr2yy3954+SVVKcnGz:Yd4N7HQJBNlsKcGz
MD5:	E0D248B5CEBA79BE07D44731581E4B1B
SHA1:	57918C1C4D9F0635F45ABBE93E3DC1A4C1D03915
SHA-256:	0B96905923D1C096BE22BEB729FE7F5E4B7F1CA4E8787C5A412C28986094C28F
SHA-512:	3409A6FD7C7240074DAC821C1301DBFAB4FC59325B19CA51427230B2311D4A292AE1B4A53FF092DAFB477F1E937D639A1D007CFD572E964A927E29FB9B97E165
Malicious:	false
Reputation:	low
URL:	https://eps.6sc.co/v3/company/details
Preview:	{"company":{"domain":"","name":"","region":"","country":"United States","state":"New York","city":"New York City","industry":"","companyId":"","country_iso_code":"US","address":"","zip":"","phone":"","employee_range":"","revenue_range":"","employee_count":"","annual_revenue":"","is_blacklisted":false,"state_code":"","is_6qa":false,"geoIP_country":"United States","geoIP_state":"New York","geoIP_city":"New York City","company_match":"No Match","additional_comment":"No company name or domain was found","industry_v2":[],"sic_description":"","sic":"","naics":"","naics_description":""},"scores":[],"segments":{"ids":[],"names":[],"list":[]},"confidence":"NA"}

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (925)
Category:	dropped
Size (bytes):	1072
Entropy (8bit):	5.404903644864476
Encrypted:	false
SSDEEP:	24:9pzct/BspQTuZAwobVSqFU1OW15uBuEozOszOIyXUQU5ucXUQUjL0NxXUQpta:Ut/BpuWwgvFUEw5uIEo6sJQU5ulQU/08
MD5:	E1714E19B700702E2CEF78AC1CBEA071
SHA1:	6AE320694610F7907FD4C6A1F52371A1FBBB3F05
SHA-256:	1BD8BC61F5169AE526F26E4A23B83756C27C609CC4601F44E88BC813F48C82D6
SHA-512:	CCA654DB27E6DCF3E8C4AE797DCB083747354620247F9EE4F683DB06211235A1EAFB50C4AE65063925D91D48443EF2A7BFBA352EAE7BD1B281F6DBABB84C33A2
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1127c9543dd5441c840a88ac5e98d26d-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1127c9543dd5441c840a88ac5e98d26d-source.min.js', "try{var uidField=document.querySelector(\"input[name=UniqueID]\");if(uidField){var dd=(today=new Date).getDate(),mm=today.getMonth()+1,hh=today.getHours(),m=today.getMinutes(),ss=today.getSeconds(),yyyy=today.getFullYear();dd<10&&(dd=\"0\"+dd),mm<10&&(mm=\"0\"+mm),hh<10&&(hh=\"0\"+hh),m<10&&(m=\"0\"+m),ss<10&&(ss=\"0\"+ss);var datestr=\"\",today=datestr.concat(yyyy,mm,dd,hh,m,ss);uidField.value=today+\"_\"+_satellite.getVisitorId().getMarketingCloudVisitorID(),console.log(\"In Forms: Transaction ID rule, UniqueID field was successfully set.\")}else console.log(\"In Forms: Transaction ID rule, UniqueID field was not found on the page when this rule ran.\")}catch(e){console.log(\"In Forms: Transact

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (537)
Category:	dropped
Size (bytes):	684
Entropy (8bit):	5.385224761240713
Encrypted:	false
SSDEEP:	12:jvgeHhhteQuct/BeHhhteQTLdd+QQsQeJ20IXF9RrC63dp73izRWx3B6p4fc0qip:9hoLct/BshoK+huJ20Erf3L+RWx3Beax
MD5:	9429F9E3170A8269975FA55872A26505
SHA1:	29614BF3C82B508692F6CDB04D33009102B86FAD
SHA-256:	70214F5DE977BEF7405CF897C7C2E26478DF0E2F5660865404B64133536DFB36
SHA-512:	8A438EE77FAB034CB3663E6C92E5CA5C2D502A702320740FD90B72EEED3467AC4D0F0192C7C8797879D0FAB6BEA36CDC766DAC3638E7E7B8746423B07A94BCEE
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCd37f24b9aa7043f1a5b88b1d4cf80db5-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCd37f24b9aa7043f1a5b88b1d4cf80db5-source.min.js', "!function(t,e){if(!t.rdt){var n=t.rdt=function(){n.sendEvent?n.sendEvent.apply(n,arguments):n.callQueue.push(arguments)};n.callQueue=[];var r=e.createElement(\"script\");r.src=\"https://www.redditstatic.com/ads/pixel.js\",r.async=!0;var a=e.getElementsByTagName(\"script\")[0];a.parentNode.insertBefore(r,a)}}(window,document),rdt(\"init\",\"t2_3fnooq8w\"),rdt(\"track\",\"PageVisit\");");

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4474)
Category:	downloaded
Size (bytes):	4505
Entropy (8bit):	5.10166848748134
Encrypted:	false
SSDEEP:	96:vKgAcmLvkqQov48hFYeJT3+XdGpIuYeA11ESGI7wIFY+d:vhAcOkAnvaXEpITeSi4Y+d
MD5:	F3F6BB12E873D35EC002E1954CC3D4A9
SHA1:	BFE58C96947F4BA2518EDB3735AC099F1899F914
SHA-256:	DFE8C5F15301F1EE408346AFD4E2FBCC8DC7AA6D59A2BF1D49E31197088443A0
SHA-512:	F0230DF7456ED11B0D2A13D2CD04BCBAA33664720C61A3319FB755C753C722EB7DCC9A5E6C23B7AE5F0D3FE2FAFE64D46D50D4F43BD679E21867835C8F37418E
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/emcm-ui/bundle/v24.69.0/16.js
Preview:	(this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[16],{1020:function(e,t,a){"use strict";a.r(t);var n=a(36),r=a(0),c=a.n(r),i=a(15),s=a(764),l=a(5),o=a.n(l),u=a(683),d=a(684),m=function e(t){var a=t.children,n=t.title,r=t.handleItemClick,l=t.isExpanded,m=Object(i.a)("SiteFooterNavList");return c.a.createElement("li",{className:m({states:o()({expanded:l})}),"data-rehydratable":Object(s.a)(e.displayName),"data-title":n},c.a.createElement("button",{className:o()(m({descendantName:"title"}),m({descendantName:"mobileShow"})),onClick:function(){return r(n)},role:"button","aria-label":"Thomas Reuters","aria-haspopup":!0,"aria-expanded":l},c.a.createElement("span",{className:"".concat(m({descendantName:"text"}),"\n u-typographySmallCaps")},n),c.a.createElement("span",{className:m({descendantName:"caret"})},l?c.a.createElement(d.a,null):c.a.createElement(u.a,null))),c.a.createElement("h3",{className:o()(m({descendantName:"title"}),m({descendantName:"desktopShow"}))},c.a.create

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x605, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	9460
Entropy (8bit):	7.941709412117304
Encrypted:	false
SSDEEP:	192:ldyrFEL2jnGqCP5Pmox/WyF4e/FPPKt9oA6cVZFlJdAavB:lgrqL2jz2Pmox0e1PCP6WlJhB
MD5:	A7B61ACB795B1700437DF809F7B2A1C5
SHA1:	44CE8D444F788AB32D1B215C2135E88B0C689EB8
SHA-256:	F10FF95C4E73507F675167F8D63820393BBDC916536DA6D31C98A55BAEDC0A34
SHA-512:	07BBD7284DCBB9C4544BBC075B66987446034AEE9CF189B5F3D27864E4EAF357CB8CC45000044D4E72C047B3A2A07DB250D0A9B2747C3B263F2B4504BAECE741
Malicious:	false
Reputation:	low
Preview:	RIFF.$..WEBPVP8 .$.........].>)..C!...Jl..BZ[.].F..?`.?.Y\|...?...?.~....?.../....o.....}...........K....1..._............"..g..t._... ..0R..[.......\|.....a..z[...........L{i$....s.F....c...D...Q.. .@:.%....D...Q...,....C..X.(.3.q.5erX...a...~...18.u.......Q..1Y.L..i.@.7k...f.k......s..'.'../.EyD...Q.. .@:.%....D...Q.. .+B>8.>........@.v.'.3.D......n.&X0..@.E..s...........3...........@...D...Q.. .@:.%....D...Q...q..yU.>3.B}......zo/t.....Z]$mD.../.FTf....%n.>.........Vi^.r4...d.A....A(.t.J .....A....A(.t.....u..M..'..d....E/q...+..Qa...cq..#.f..6...p.."..K..}C....-a'..)C.....D...Q.. .@:.%....D...U....]R..#..b.D.8.......p[...UBT.#...U.k.$....."..&.Q....2....9R..Oo.....D...Q.. .@:.%....D...P...~:!.^...['.......#.......;...s...C.T..I.\/!....Z<K^..v..9.._&......W...um.k>.....Q.. .@:.%....D...Q...&...Q.Pu.b.....J.......j.>O.l7,k.%......n9.h.&..J.m..5G.2a}.=F...d....U1...Lm..S.j)T..U1...Li..+.<...91\|l*...B........C_.....B... x.$.......,.ux.......C..-...

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	318303
Entropy (8bit):	5.700267132432917
Encrypted:	false
SSDEEP:	3072:tDOPtMTPtMzs59yYXbjnJcsiWucFAoyZergnv4FaavDix4f3RnMjLFNQ:tDLyYKsrxFAFZerWwzf3RnMjrQ
MD5:	52589E1BEB5378830C714420DAF03199
SHA1:	23E1E4371C13831B62C00D23822AA43E0D68F3C2
SHA-256:	3A4EDAE7C2CE897B06360AE4C46625181E5C2CABAEE7A71BDA32E55A29D027C4
SHA-512:	B15666113354FC0D7D18392C751988F6E25D6665F217CF5D9A460A8D6B69D2E232D9B0D14A47B2F1382D8F2CCC311C94FF376C6E5D3CACEE45F5A6BACA22E838
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/survey-v2.c285531737fe89cbffd2.js
Preview:	/! For license information please see survey-v2.c285531737fe89cbffd2.js.LICENSE.txt /.!function(){var e={62:function(e,t,n){n.p=hj.scriptDomain},3270:function(e,t,n){"use strict";n.r(t);var r=n(5933),o=n.n(r)()((function(e){return e[1]}));o.push([e.id,"._hj-widget-container ._hj-QJHfS__styles__consentMain,._hj_feedback_container ._hj-QJHfS__styles__consentMain{display:flex;flex-direction:column}._hj-widget-container ._hj-QJHfS__styles__consentMain ._hj-iuh5p__styles__consentButtonsWrapper,._hj_feedback_container ._hj-QJHfS__styles__consentMain ._hj-iuh5p__styles__consentButtonsWrapper{display:flex;flex-direction:row;justify-content:center}._hj-widget-container ._hj-cK\\+L-__styles__consentMessage,._hj_feedback_container ._hj-cK\\+L-__styles__consentMessage{color:#7c7c7c !important}._hj-widget-container ._hj-cK\\+L-__styles__consentMessage._hj-RTq8B__styles__dark,._hj_feedback_container ._hj-cK\\+L-__styles__consentMessage._hj-RTq8B__styles__dark{color:rgba(255,255,255,0.6) !important

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (567)
Category:	dropped
Size (bytes):	24157
Entropy (8bit):	5.363272575684598
Encrypted:	false
SSDEEP:	384:ljk9w/4EPgHoj8Az3iPFiS0ED6lEsH3yQVyF/6WC3SJ4JcMNN3ja3jfUDLZQSQ5U:ljk9w/4EPgHoj8Az3iPFiS7D6lEsH3yW
MD5:	9DB973972EDB3F06F7748DA88BF92A83
SHA1:	B2C3E19A8827A7D5AAE93F6EE94560073FAF18B6
SHA-256:	A8631AA205C84CBFD6E3662535669FDC6BBAB33E743D9BAAD9A122643CE5B456
SHA-512:	43D842538D2A7DD6A96A315F383D684D1B28C11419374354CF69AFD972B36E6675E110AF01DB00F087D219121EDFFE9FCE3BF32C2E9F2C69F57B9666D977E855
Malicious:	false
Reputation:	low
Preview:	Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector);Element.prototype.closest\|\|(Element.prototype.closest=function(v){var m=this;if(!document.documentElement.contains(m))return null;do{if(m.matches(v))return m;m=m.parentElement\|\|m.parentNode}while(null!==m&&1===m.nodeType);return null});.(function(){function v(h){function w(b){d._config=b;b.element.removeAttribute("data-cmp-is");x(b.options);B(b.element);if(d._elements.item){d._elements.item=Array.isArray(d._elements.item)?d._elements.item:[d._elements.item];d._elements.button=Array.isArray(d._elements.button)?d._elements.button:[d._elements.button];d._elements.panel=Array.isArray(d._elements.panel)?d._elements.panel:[d._elements.panel];(b=window.CQ.CoreComponents.container.utils.getDeepLinkItem(d,"item"))&&!b.hasAttribute(r.item.expanded)&&.c(b,!0);if(d._properties.singleExpansion)if(b)for(var e=0;e<d._elements.item.length;e++)d._elements.item[e].id!==b.id

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.538909765557392
Encrypted:	false
SSDEEP:	3:4bFmzEkYn:4RuEkY
MD5:	CB4B300FAE68ABBEEEFB53FA55055F11
SHA1:	E1F614753556EE09B88A39532D63D082F1D3BA7F
SHA-256:	04095BEF0220CA1F463802E87CC9042E6669F73DCDC944E103EFB919A29DC3B6
SHA-512:	32325A6F33438974C1D8888A7D8A62DA01A7D32B948F2909B01A7C67130E84DBFB165F8895BCDA9B0C8C66900135FA68CAD2A5F43F7D71EDADCA5A872E1C45E5
Malicious:	false
Reputation:	low
URL:	https://52.22.50.55/is
Preview:	exAJ4269f9EjCz5ghvO7yEZ3jt2hMzE8

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=68d6cd4a-87cc-4465-9311-5feb95c2e6e0&expiration=1730368347&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23680)
Category:	dropped
Size (bytes):	305646
Entropy (8bit):	5.561319458973416
Encrypted:	false
SSDEEP:	3072:fWFkUeQ65WHnXSJKQK0+FzOhOJjt+/Kjrv+aUPdm6NIh7R5EtzG2+4jRY9ea9:+n+yXqQyGjrvzFCIhl5OzG2+4jaT
MD5:	06E3CA004025849E841B7446ED84A3FE
SHA1:	C58314892C18807FBDD4C6339F65E382269178A6
SHA-256:	9B2AA9CABCF3F41C5B8876ED9CB3A09A89729995EEDBA971AB71E127CA08C593
SHA-512:	D97DDF873202F430041A56ED0466247F7648BE1F9C15D18B7143F3223079F3D9D148806A7D8C1689EAB7B0BB1F38F88DC0FB62615DBF13A4B8A229A34FCBE34A
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":40,"vtp_instanceDestinationId":"AW-996834583","tag_id":118},{"function":"__ogt_ads_datatos","priority":40,"vtp_instanceDestinationId":"AW-11093504263","tag_id":148},{"function":"__ogt_1p_data_v2","priority":30,"vtp_isAutoEnabled":false,"vtp_isManualEnabled":false,"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vt

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16728), with no line terminators
Category:	downloaded
Size (bytes):	16728
Entropy (8bit):	5.230850069232849
Encrypted:	false
SSDEEP:	384:JwPi9hUyVYDsdU5sF59QF5vCAG57eNYk9p:JwShUyWDR5sj9q5vCAGxoYk9p
MD5:	EA6140C91785F77152A4B08C997AA7DE
SHA1:	7CFD481181AC3E82DD35AF18383595AB74914F3B
SHA-256:	CB42E699AF083652544DDEF7E48C8C912FCCA6C345099FACE29370C541AB9921
SHA-512:	7B0692D59342138FD5118CD4BB1F76E39ABB9E41262D976930FB5EB2ABC59D7C2B4DC684268F22C24DA2590C2DB884739952224EF8F2757B168E6E0572ADC354
Malicious:	false
Reputation:	low
URL:	https://dx.mountain.com/spx?dxver=4.0.0&shaid=36732&tdr=&plh=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results&cb=89694712653718110term=value
Preview:	var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"."+d[3]}catch(d){}}();(function () {var mntnis; async function fwto(resource, options = {}) { const { timeout = 1000 } = options; const controller = new AbortController(); const id = setTimeout(() => controller.abort(), timeout); const response = await fetch(resource, {...options, signal: controller.signal}); clearTimeout(id); return response.text(); } fwto("https://18.210.229.244/is", {timeout: 1000}).then(function (response) { return response; }).then(function (response) { mntnis = response; }).catch(function (err) { mntnis = err; }); var shaddslashes = function (s) {if (s != undefined && s != null) {s = s.replace(/%/g, "%25%32%35");s = s.replace(/\\/g, "%5C");s = s.replace(/'/g, "%27");s = s.replace(/"/g, "%22");s = s.replace(/\?/g,

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11093504263?random=1727776335218&cv=11&fst=1727776335218&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo&hn=www.googleadservices.com&frm=0&tiba=Request%20a%20Demo%20-%20HighQ%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14087)
Category:	dropped
Size (bytes):	14136
Entropy (8bit):	5.289031230064601
Encrypted:	false
SSDEEP:	384:IKHfR0WUDjGUnRP/NGkJtBveyyKIig9gjaxIm6VTHG:nHfqrnRDJveyyJig9gOKm6c
MD5:	0A898F6EDF2D77595F7378557DD8FB96
SHA1:	C538AC7767548E4499AAD30A1F35E2AA2A20EA11
SHA-256:	71D18AF9EE879A36717E1EA3367B669031E3F6B12CB0AA1373FD200D278C4E6A
SHA-512:	374950127BCF694AC5D63689EFC0998BE58AC8FB5C62AE962435BC8A025302470FE5BCBF69EBFA1B017DE8CFC219DB8813FD46FDB14A7A9F2727A0E4C6A07C9B
Malicious:	false
Reputation:	low
Preview:	!function(){let d=null,c=["debug","info","warn","error"],l=c.reduce((e,a,t)=>(e[a]=function(){var n="debug"===a?"log":a;if(d&&console&&"function"==typeof console[n]){var e=c.indexOf(d.toString().toLocaleLowerCase());if(!0===d\|\|-1<e&&e<=t){for(var i=arguments.length,o=new Array(i),r=0;r<i;r++)o[r]=arguments[r];let[e,...t]=[...o];console[n](a.toUpperCase()+" - (TTD) "+e,...t)}}},e),{});function e(e){d=e}let s=null,o={},u={},p={},f={};function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";i(e)}function r(e,t){n(t),function i(e,o){let r=g(e,o,s.triggerElements);let t=g(e,o,s.cssSelectors);u[o]=u[o]\|\|[];p[o]=p[o]\|\|[];f[o]=f[o]\|\|[];for(var n of t)n&&n.tagName&&"INPUT"===n.tagName&&p[o].push(n);l.debug(`triggers ["${o}"] `,r);l.debug(`validInputs ["${o}"] `,t);r.forEach(e=>{u[o].push(e)});for(let n=0;n<r.length;n++){var a=function(){try{l.debug("Detect event: ",s.detectionEventType,"on element, ",r[n]);let e=Object.entries(p).map(e=>e[1]).flatMap(e=>e);for(var t

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11093504263?random=1727776356892&cv=11&fst=1727776356892&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results&hn=www.googleadservices.com&frm=0&tiba=Search%20results%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1906x1431, components 3
Category:	dropped
Size (bytes):	45487
Entropy (8bit):	7.161432425817959
Encrypted:	false
SSDEEP:	768:EHnD0H2Qg0d8LYPiK5IFYmOtTnSe2ZZbM0f1aK1XB2jnNQ0TMGew5n:aD0HJZaWoYmOtTSe2/bM0YKmj+nGe4n
MD5:	3711D78C09664C78E902AE743FAB2422
SHA1:	AFBCFA0818E3D297228491185295C74706933A1F
SHA-256:	3ACFF96DFE388D9EC12208B018B7C8876E6841C7163730E9C0A83E673846F152
SHA-512:	26D645D6D70D62B34CBF5881884338D5DFF6A48D92221CE6F2419571A914AA2E9C7E6E5EAE1438650293081F947AED35F5AB12588D04EDAEA342633C15A23A52
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky............./http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 2023 Macintosh" xmpMM:InstanceID="xmp.iid:92763DFD620311ED9D69F93EC37A60AF" xmpMM:DocumentID="xmp.did:92763DFE620311ED9D69F93EC37A60AF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:92763DFB620311ED9D69F93EC37A60AF" stRef:documentID="xmp.did:92763DFC620311ED9D69F93EC37A60AF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................#%'%#.//33//@@@@@@@@@@@@@@@......................&.....&0#....#0+.'''.+550055@

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18683), with no line terminators
Category:	downloaded
Size (bytes):	18683
Entropy (8bit):	5.0751432780517
Encrypted:	false
SSDEEP:	384:2GwJTOiFAtkzBeynnnYKBrNrwrRrd4DreshDweKB6PVUZFF7D8um/F:D8TOiFAqBeknPpMtx4DqshDweKYKFF7O
MD5:	50D2A8B41AC2B5C951B7A33FBBE5B48E
SHA1:	B1DFEFE7B5CEDCB3E4BF2FC8E50F0F8FE1C44A50
SHA-256:	3D5190A15CC2AD4AF4AEC089BB74238D01762520F17FD8EB5EC1E6E872CA7F6B
SHA-512:	566BE3F507B81458AC942F1C304C804DE5BE6BF8C986332423A25CE8CD38781A7BE29CD36295569410389EA896F79F5D8152560925A03EC3077C07D746D01925
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.js
Preview:	!function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="/etc.clientlibs/uefalcon/clientlibs/",o(o.s=305)}({2:function(e,t,o){"use strict";function n(e,t){var

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32760)
Category:	downloaded
Size (bytes):	362940
Entropy (8bit):	5.367781619700903
Encrypted:	false
SSDEEP:	6144:uZV17gljnSKTI/dEE1L1zPQuLVr3uwg2dljzSi:kV1k7S7/VzPQuL5uEzD
MD5:	2F666D973A89F966E0E5F7AB1C44EFA1
SHA1:	455B0D2A27D67F3A1701DC668FBEDD4AC1059498
SHA-256:	6C28070FBDB8552A154270E640E3EEA0244B0D0D6BC316A0ED7318FC232C1B4B
SHA-512:	FF614C407FDC8DDCB6AD4CF146749C56C7072FA1F5E166B87D47E3DDF650B2670852AF873E7DA0CA72ADD6191EB437C339D6F79407CA5293C1AE9CA3FE91CFCE
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/launch-f0760189cfc5.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/launch-f0760189cfc5.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-09-25T09:19:57Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN66420846c385475a9c8c2d936b38b2d5",stage:"production"},dataElements:{jobDescription:{defaultValue:"",cleanText:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.careers.jobDescription"}},userAccountRegion:{defaultValue:"",forceLowerCase:!0,cleanText:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.user.profileInfo.accountRegion"}},customProp5:{defaultValue:"",cleanText:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.custom.customProp5"}},totalBalance:{defaultValue:"

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=581986983351571217&ttd_tdid=68d6cd4a-87cc-4465-9311-5feb95c2e6e0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4112
Entropy (8bit):	4.695583257438527
Encrypted:	false
SSDEEP:	96:4ecVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoq:4ecVWNXK3XuXW5O
MD5:	18D9365B9B8040D6064790CA68F4AEF9
SHA1:	FB950838056C16FE634FA8717FCEAAFBAED8C6BE
SHA-256:	1DBDEA01BC70F9C6E30C9EDD37D8F3BE67510C9CEF2EAA1DD057A4C6F8D98C3C
SHA-512:	0F4602FF5F6AD847DE86CE7A3C3F8430E5A940AAB161141E92BD643FD3F30F96E8845A9ED772592F494DC91682B48B3D09CAA5C0E5510228980E31BC3076B591
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {..

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17343), with no line terminators
Category:	downloaded
Size (bytes):	17343
Entropy (8bit):	5.575405658902273
Encrypted:	false
SSDEEP:	384:y3NgxfC+31VnyLCV1xOzZCVry9gylChOzK1P1zOzvOzclyZssOUEUU4s3Urs/sD6:0mQezAzIwn8wzA9Cz2zDmGIHkQE47jY2
MD5:	F5AB115F7D237B94188E8B1FA3DE1F2A
SHA1:	80C23517338AFBD88DA9A1D5EF1BC134E8E16F97
SHA-256:	01D871B346166B73270A290C6E80104935AF35BB6C7640E4D3E90BDDFC9BDB86
SHA-512:	61B795BCE656F13569A1E998AE2516CEEC8A79517C7E572251F8E14A2B169F1D6FB0551310A21507D964AEE0F99FDBE87FF72CC41D88554AAA0160A7B25779DD
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/996834583?random=1727776356858&cv=11&fst=1727776356858&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results&hn=www.googleadservices.com&frm=0&tiba=Search%20results%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":7776000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s488782044.1727776304","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s488782044.1727776304\u0026ig_key=1sNHM0ODg3ODIwNDQuMTcyNzc3NjMwNA!2sZ3JtZg!3sAAptDV545Got\u0026tag_eid=44800267","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s5TF1SQ!2sZ3JtZg!3sAAptDV545Got","1i44800267"],"userBiddingSignals":[["903838704","5482137","6714099386","470862665"],null,1727776358514810],"ads":[{"renderUrl":"https://tdsf.double

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	18118
Entropy (8bit):	4.440055715524098
Encrypted:	false
SSDEEP:	384:58+kApfOCmocWfuosdIBvkSlcN4oUR8S7YhwiLji5QvI5g2rj:6J4WfchlWUYhheQA
MD5:	929699E0258077AF710BBA24E66153A2
SHA1:	C6BF9423ECB24EFC5D10D7207DBACDAF1C60A79E
SHA-256:	614CB70CFB1A6F80ECC577933F33E16E626FC7FABADE20D6CEC7A6106547193D
SHA-512:	423B869994853920C8E6E04774C39007CF2444716B9682B0B1E9C62CA18D71695FB34AED5C0EE8793DFDC7FA5E9058D19BB3049B0AB4BEF2B32A73E7A8EFE6F0
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px". viewBox="0 0 225 30.6" style="enable-background:new 0 0 225 30.6;" xml:space="preserve">.<style type="text/css">...st0{fill:#212322;}...st1{fill:#D64000;}...st2{fill:#E82C00;}.</style>. <path class="st0" d="M253.9,546.2V567h12c6.9,0,11.3-4.1,11.3-10.3s-4.4-10.4-11.3-10.4L253.9,546.2L253.9,546.2z M239.2,534.2h27.9..c15.1,0,25.1,8.8,25.1,22.5c0,8.7-4.6,15.6-11.7,19l13.5,26.1h-16.2l-11.5-22.7H254v22.7h-14.7L239.2,534.2L239.2,534.2z"/>. <path class="st0" d="M333.5,571.1c-1-6.1-5.2-9.5-11.5-9.5s-10.5,3.6-11.2,9.5H333.5z M296.1,577c0-15.5,10.3-25.5,25.8-25.5..c15.6,0,25.2,9.3,25.4,23.8c0,1.5-0.1,3.1-0.4,4.6h-36.5v0.7c0.3,7,4.9,11.3,11.8,11.3c5.6,0,9.5-2.4,10.7-7h13.6..c-1.6,9.7-10.3,17.4-23.7,17.4C306.2,602.3,296.1,592.4,296.

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 193 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2598
Entropy (8bit):	7.24493548656537
Encrypted:	false
SSDEEP:	48:uAO6A9uJRqzkHioklJabaQSPI6frFXaNu+eStx0b5sn9:ltJwzUiXaCPI6Ajebe9
MD5:	FE7500E2F7F1AE9AD381AB2949C23BFA
SHA1:	01394C38C599B99D1C5CDDF93B76B6ED38C5B084
SHA-256:	E67E13B7502AAEBDBBC3C75E443C7EDF0473326DC7BB8CD5F271DC522F201A2B
SHA-512:	62209C708418C59EA5EBF77D0BE145FE50F229C8239A7FF1ABE4A68910205FEBDD40229BE9342FF82061069B7DEC46EE336100979D15C412479F827BDA8AA6C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............9......PLTEGpL....g..d..d..e..e..e..d..h..g..f..s..g..i..f..o..d........j..d..d..f..g..d..e..d..q..e..e........m..e..j..j..e..h..e.....f..f..e..d..d..d..e..d..d..d..u..d..d..f..d..e..d..f..d..d..f..d..g..j..f..e..m..f..e..d..e..k..e..e..f..d..f..d..d..d..e..d..e..d..e..d..d..d..e..d.@@@@@@@@@EEEFFF@@@OOO@@@@@@DDDDDD@@@@@@@@@AAABBB@@@AAAUUU@@@AAA@@@@@@@@@@@@@@@AAABBB@@@@@@@@@@@@AAADDD@@@@@@DDD@@@@@@@@@BBBEEE@@@@@@@@@@@@@@@CCC@@@HHH@@@@@@@@@@@@CCC@@@@@@.d..d..j..e..f.@@@@@@FFFNNN@@@@@@@@@AAA@@@AAA@@@@@@BBBAAAAAAAAA@@@@@@AAA@@@@@@@@@@@@DDDAAA@@@@@@fff@@@.e..d.AAA@@@@@@CCC@@@JJJfff...@@@AAAAAABBBCCC....e..q..e..d.AAAAAABBB@@@@@@AAA@@@BBBDDDBBB@@@.d..g..d.@@@@@@@@@@@@AAA@@@AAAAAA@@@PPP.e..g..e.@@@AAA@@@@@@@@@@@@.d..f.AAAHHH@@@.d..d..e..d..d..d.AAAAAAAAAAAAAAA@@@.d..d..e..e.QV.....tRNS../.wv.5.#.n.6.x.u...Y.s%...`X...N..T,O.!D2e..dL......hg.'....*.\~..H....]?+.....y.=..B...........$8........i.....Z.....+..&...;!....3..cv..D.....W.....7.?j...5R\:..J..G....

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12697)
Category:	downloaded
Size (bytes):	162837
Entropy (8bit):	5.666249871957987
Encrypted:	false
SSDEEP:	1536:Mhan8vA0i2loaRPtNPU9ArHMM184Q27UdETqTJkM9YEZXP4/0YhLu3U2oivtNool:9nxrUThMuEZg/0Ygui8dFl3c
MD5:	11AE62BD40F94084570E7876E91C36F1
SHA1:	1C796182BFBBBE0DCF14F17F21C07CC0A10D72F3
SHA-256:	015AB330A0AB09AD2CAE02499083AF5BA66D0846F9930E03A990F227D09F17D9
SHA-512:	9A26ECEE2902EBE62C42B50516B8C03F5DD75A807AE04C4BF78B1D0C6ED01896B15B7AA4F2731F0F957BF60AB49CE0F47C49FD4A4F893C29561FD30DD8E9E84D
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/vendors~player~player-pomo~unreleased-a6e8ad61b8e4d06cd1a2ebf36ee81e20.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{1077:./!*****************************************!\. !* ../node_modules/lodash/_baseTrim.js !. \*****************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(t,n,r){var e=r(/! ./_trimmedEndIndex /1078),i=/^\s+/;t.exports=function(t){return t&&t.slice(0,e(t)+1).replace(i,"")}},1078:./!*************************************************!\. !* ../node_modules/lodash/_trimmedEndIndex.js !. \************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(t,n){var r=/\s/;t.exports=function(t){for(var n=t.length;n--&&r.test(t.charAt(n)););return n}},1079:./!*******************************************!\. !* ../node_modules/lodash/_getRawTag.js !. \************************

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	228950
Entropy (8bit):	5.3785070939542905
Encrypted:	false
SSDEEP:	1536:8wmvBwvwCPMwe57D1pTT5OFm7eTX423SDyDbGw5frPSfFse84qaIGG4xQrZBYGCn:0BwvwCPMwa1LOFw/KEFsb9h4yt7bScYx
MD5:	AFD64EB21F50CF48FC7D612705BFCFAD
SHA1:	BB6993E414F52837B99583F23A2424C341D6B5F9
SHA-256:	B59AEA27FA8369F30285B9C3875597435DFCE1FC0571555ADCC11D210CB9BD1B
SHA-512:	A58E7B7CE5070BD2D116158D26DE015F6F76C0B9423C99BD89F544B0ACE366B5F1ED5A369A02D2B3CCF51CEBC3E5A6AB87E12D8FF4EA43F723B33A6471A289CE
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.0721e7cf944cf9d78a0b.js
Preview:	/! For license information please see modules.0721e7cf944cf9d78a0b.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1416
Entropy (8bit):	3.955727172934045
Encrypted:	false
SSDEEP:	24:tVvnjuS4BVYTmq2MCHNUIR2AnsscXMQz2TZNl8J+jbmc+LDW:rnp4BVf1BHNXsscXMQqTZj8gjbmcSy
MD5:	1DDC32F814084E4C711E0F6C63E4CA5B
SHA1:	383A0EFD410169BFE64F2C5170C85D2A5354B09F
SHA-256:	3BF5C6182696919148EBC672C02D3E1CA90C0D83E8F029F57676FD8D72B1C4E1
SHA-512:	C378DC0C0C13A6292022F2F5001103E08F62EA8B583599F829F8BFA287B867AE1629150699633BA824C04E72BCE3A82948BC8B0B75A2A2AF4BA395F342BF6B77
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1 2.25C1 1.5625 1.53125 1 2.25 1H3.75C4.4375 1 5 1.5625 5 2.25V3.75C5 4.46875 4.4375 5 3.75 5H2.25C1.53125 5 1 4.46875 1 3.75V2.25ZM1 7.25C1 6.5625 1.53125 6 2.25 6H3.75C4.4375 6 5 6.5625 5 7.25V8.75C5 9.46875 4.4375 10 3.75 10H2.25C1.53125 10 1 9.46875 1 8.75V7.25ZM5 12.25V13.75C5 14.4688 4.4375 15 3.75 15H2.25C1.53125 15 1 14.4688 1 13.75V12.25C1 11.5625 1.53125 11 2.25 11H3.75C4.4375 11 5 11.5625 5 12.25ZM6 2.25C6 1.5625 6.53125 1 7.25 1H8.75C9.4375 1 10 1.5625 10 2.25V3.75C10 4.46875 9.4375 5 8.75 5H7.25C6.53125 5 6 4.46875 6 3.75V2.25ZM10 7.25V8.75C10 9.46875 9.4375 10 8.75 10H7.25C6.53125 10 6 9.46875 6 8.75V7.25C6 6.5625 6.53125 6 7.25 6H8.75C9.4375 6 10 6.5625 10 7.25ZM6 12.25C6 11.5625 6.53125 11 7.25 11H8.75C9.4375 11 10 11.5625 10 12.25V13.75C10 14.4688 9.4375 15 8.75 15H7.25C6.53125 15 6 14.4688 6 13.75V12.25ZM15 2.25V3.75C15 4.46875 14.4375 5 13.75 5H12.25C11.5312 5 11

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1558)
Category:	dropped
Size (bytes):	2703
Entropy (8bit):	5.053502551927549
Encrypted:	false
SSDEEP:	24:lD58ewzpTQoU+Cr2hzjiTQoU+C+zIU/d4aTQoU+CSC9GuSLLRoJVwav365YreMDj:lD58jHC9HC+UUjHCZ9YRoJVDvq5YrQ14
MD5:	616E7C6B4B0E0D5576977F8E8A6AA123
SHA1:	D9921072A15A71E338526265540EC8CB25BA4D23
SHA-256:	B1942A42DE69A6CE8AA171994E1D1483D2085EF135AA396E5D714FA7C16977C3
SHA-512:	C192F4C1954A925080764D90C706D3A4D55DAF9DE6040E3DABF1E45D33F07F5DF0088B8EC85DE8672262407BDA6303A35BD195D345CD30C51007064444545F31
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[15],{127:./!*************************************************************!\. !* ../node_modules/babel-runtime/core-js/json/stringify.js !. \*************************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,n,t){e.exports={default:t(/! core-js/library/fn/json/stringify /290),__esModule:!0}},290:./!***********************************************************!\. !* ../node_modules/core-js/library/fn/json/stringify.js !. \**********************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,n,t){var t=t(/! ../../modules/_core /31),a=t.JSON\|\|(t.JSON={stringify:JSON.stringify});e.exports=function(e){return a.stringify.apply(a,arguments)}},322:./!***********

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57440)
Category:	dropped
Size (bytes):	228852
Entropy (8bit):	5.327867725281467
Encrypted:	false
SSDEEP:	1536:8RhpIvFN0FJ2HAE6ImWK3yi/WbHPDAhFKYWE026N/YpdSa45tINAoTGPMe:ohpIdYpRyNHPDOFHWEeaBTGPMe
MD5:	30750DC6CC1F99033BF53EAAB0815583
SHA1:	986976D4ED6B67F0993F2F462BF6B4C062035F30
SHA-256:	6E2175BC0565F4AD58BE2649D0A39D2C6D16234756C2B33ED85C7DFADCEF4C30
SHA-512:	1946F262DA1EB60503761D8706C0A85A3A64C554A9E5DE108B673B32FB617A86DF9F8D8849903E7B0A7459107242993C83FC501073DCDBE126A1815D4D9C91F3
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[30],{1055:./!*******************************************************!\. !* ../node_modules/react/cjs/react.production.min.js !. \*******************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){"use strict";./* @license React v16.12.0. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /var s=n(/! object-assign */436),r="function"==typeof Symbol&&Symbol.for,f=r?Symbol.for("react.element"):60103,c=r?Symbol.for("react.portal"):60106,o=r?Symbol.for("react.fragment"):60107,i=r?Symbol.for("react.strict_mode"):60108,a=r?Symbol.for("react.profiler"):60114,u=r?Symbol.for("react.provider"):60109,l=r?Symbol.for("react.context"):60110,d=r?Sy

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1416
Entropy (8bit):	3.955727172934045
Encrypted:	false
SSDEEP:	24:tVvnjuS4BVYTmq2MCHNUIR2AnsscXMQz2TZNl8J+jbmc+LDW:rnp4BVf1BHNXsscXMQqTZj8gjbmcSy
MD5:	1DDC32F814084E4C711E0F6C63E4CA5B
SHA1:	383A0EFD410169BFE64F2C5170C85D2A5354B09F
SHA-256:	3BF5C6182696919148EBC672C02D3E1CA90C0D83E8F029F57676FD8D72B1C4E1
SHA-512:	C378DC0C0C13A6292022F2F5001103E08F62EA8B583599F829F8BFA287B867AE1629150699633BA824C04E72BCE3A82948BC8B0B75A2A2AF4BA395F342BF6B77
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/apps-icon-v1.5.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1 2.25C1 1.5625 1.53125 1 2.25 1H3.75C4.4375 1 5 1.5625 5 2.25V3.75C5 4.46875 4.4375 5 3.75 5H2.25C1.53125 5 1 4.46875 1 3.75V2.25ZM1 7.25C1 6.5625 1.53125 6 2.25 6H3.75C4.4375 6 5 6.5625 5 7.25V8.75C5 9.46875 4.4375 10 3.75 10H2.25C1.53125 10 1 9.46875 1 8.75V7.25ZM5 12.25V13.75C5 14.4688 4.4375 15 3.75 15H2.25C1.53125 15 1 14.4688 1 13.75V12.25C1 11.5625 1.53125 11 2.25 11H3.75C4.4375 11 5 11.5625 5 12.25ZM6 2.25C6 1.5625 6.53125 1 7.25 1H8.75C9.4375 1 10 1.5625 10 2.25V3.75C10 4.46875 9.4375 5 8.75 5H7.25C6.53125 5 6 4.46875 6 3.75V2.25ZM10 7.25V8.75C10 9.46875 9.4375 10 8.75 10H7.25C6.53125 10 6 9.46875 6 8.75V7.25C6 6.5625 6.53125 6 7.25 6H8.75C9.4375 6 10 6.5625 10 7.25ZM6 12.25C6 11.5625 6.53125 11 7.25 11H8.75C9.4375 11 10 11.5625 10 12.25V13.75C10 14.4688 9.4375 15 8.75 15H7.25C6.53125 15 6 14.4688 6 13.75V12.25ZM15 2.25V3.75C15 4.46875 14.4375 5 13.75 5H12.25C11.5312 5 11

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=52807&time=1727776308580&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq
Preview:	{}

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4599), with no line terminators
Category:	downloaded
Size (bytes):	4599
Entropy (8bit):	5.789298432566991
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUOqAil6E:1DY0hf1bT47OIqWb13qAilZ
MD5:	93BF31CF22BC412312177960ED8B6958
SHA1:	A772489537D3376115871651F8AC525BD2AFAFD4
SHA-256:	17C8A9CC4E5C13C934E3ADF24F8A4FF38C4B86AFBA299DF8B02F02F3FEBBB6C4
SHA-512:	2C3DDEC278FD79C74208AB158910434AEF30840E19AF3E242ECA9D20FBAA3A4AE78E742943DAE2896C3F7D288B58CDBED2F758D19D7F751D3B9EB9C2E70C908A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11093504263/?random=1727776335218&cv=11&fst=1727776335218&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo&hn=www.googleadservices.com&frm=0&tiba=Request%20a%20Demo%20-%20HighQ%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4597), with no line terminators
Category:	downloaded
Size (bytes):	4597
Entropy (8bit):	5.792925049067438
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUPXdil6E:1DY0hf1bT47OIqWb1CXdilh
MD5:	89AB77EA89314F353CA106CB53CF6F89
SHA1:	16C4710DBFEF203144A803041139E22A8FA12065
SHA-256:	3F971F42A33BADC49CB489D82C66630A83CB5127B09A82FF487FA308BEEF4428
SHA-512:	86EF6281EC40D60785EFDC6C1F1F9E49DD4EAA5A43000833CD3BAFFF9351152FD7960F3306C7A706BC7C03458217303FA0085F7C7D3A3D26D1CC195D6966BF9E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/996834583/?random=1727776335187&cv=11&fst=1727776335187&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq%2Frequest-demo&hn=www.googleadservices.com&frm=0&tiba=Request%20a%20Demo%20-%20HighQ%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	231860
Entropy (8bit):	5.458017496816048
Encrypted:	false
SSDEEP:	3072:5fLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713zW:5fLeYc+6JaH8N7QQGArHu5s713q
MD5:	20EA15103C2FCC0334E520EEC1CDEA80
SHA1:	4AA44A30B21B09EA568053179EEE320413764455
SHA-256:	57E4FAB3E926D0392DFC236B18CC28628ABF957EFE96C5D5A592B617EC108A90
SHA-512:	6E0475F88E657357ABF9A3917421C7B504BF0385C8A930E2C5CF464AB96CC8BC42F1D42D202053C9A834D2D7CB6AEFECAAE937C95E05313DB9B4FCBE4F406785
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37084, version 1.0
Category:	downloaded
Size (bytes):	37084
Entropy (8bit):	7.9940597525195605
Encrypted:	true
SSDEEP:	768:xRrYmZnKfpJYhnuss3LwKz8W28hrR3UGKxhskX2dKfA/I7VrXuRbCpXl:r8WKfpeuSK1BRTKYkX7A/I0b6Xl
MD5:	1A95235BF04710A43AD179255DF6449B
SHA1:	3C5D8D591E05EB87476D8FC368A48E393D1BEB7F
SHA-256:	DC134E696951FB4B1C03E2FEB33D185826A4FB5616F0E553BC8274DBF41BC066
SHA-512:	C507693E425FBAFFB5DCA4B226B2F13A609658C65E3054D303B9B576FA7ACE68DCD1737EA040A3672CB4B42F91A7816A5DFE49B0A579CCEC96A4FBEC4EEE77CF
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-bold-webfont.woff2
Preview:	wOF2..............w....k........................?FFTM.....\..8.`..^..D..u.....$....6.$..Z..p.. ..4..T..T?webf.[.R.....(.UW.0..+..=A.MN..v.K.......U........d"cvI....T..../s..."2:=..c..f.%..&.E0.q.'.I...N...9eQp6...d.......SYs. ....on.Y.j.T9....TV..^;S'2.,h]$$../(=JN{........Y.,7A.....Q......z...!.65}..A]U1.S^.(c...0.3C....~.U..a..P....8.0%.Nb.H.X."7I../.R5.1nJ.....%J.M3.$H..4.fA)...c'....Cr.)DY..c>......`/:....3....OA{6.........j.N..?).Q......^.AL..W...:<......E.)g.0u......%.ak.....g.0.h.3tS.P..&.*.2.T....5..=T-[h...z#.4.U"..6..P..1p..0f.aN..W..FP.0....vU..RW..e...hnY.F.U....b...[b( 9J@....................U.kX..4`...F...3U.7.pw.6..eE..2bI\|:!u.........h..hiv.. 9.....^...#"d....R6.B8.Ce.8..F..ehM.w........3}...s.T.4.r......)..M.w.Y!.....eu.@.{.T..E.....!.KHnHnHj..F.....5K..;;......E&......9.D.Q.c.$.Ap.%.o-. ... ...s).."T...Rp......{..I../'i9...Dc...<....d.,.e..../w.C.......@(.....2...."..w.q.....t.$......C.E#..Z.8................$E...+.5

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	dropped
Size (bytes):	738
Entropy (8bit):	5.051615524404409
Encrypted:	false
SSDEEP:	12:2SSSlxYgE+lkf0ZJnnYpAtexyY91kIDxRR1DMn10F4+EoijgQ4dlSsNM9q40AsOy:2GxpErfOtwx1kIDxRRJM57o2gQGlSsNT
MD5:	CC91D15296E99E46E25DEB15CD670AC8
SHA1:	3B7AA1E9028C3F173C52F2FBBCD40B1C113C0E1F
SHA-256:	88949BFEECD2D22696D3C4D48F7B8927AAD06B0F0C69B5B5640860DFC1DAA3AE
SHA-512:	7A8C033A6D42D8258530A2A3CD29C6BB851BC7ABA1A7B9801C2641A5C7E8645C2155F6FDAA6DB4EB775C49C424B04E345F5806D04608483D6711B867BD2437BD
Malicious:	false
Reputation:	low
Preview:	(function(g,l){function k(b){var f=[],c;for(c in b)if("object"===typeof b[c]){var a=k(b[c]),e="product"==a["0"].name?a["0"].value:c;a=a.map(function(d){var h={};h.name=e+"_"+d.name;h.value=d.value;return h});f=f.concat(a)}else a={},a.name=c,a.value=b[c],f.push(a);return f}l(g).ready(function(){try{var b=g.getElementById("eloqua_form");if(!b)return;var f=b.parentNode;var c=JSON.parse(localStorage.getItem("_6senseCompanyDetails"));if(!c)return}catch(e){console.error(e);return}b=[];for(var a in c)"segments"!==.a&&(b=k(c[a]),b.forEach(function(e){var d=g.createElement("input");d.setAttribute("type","hidden");d.setAttribute("name",e.name);d.setAttribute("id",e.name);d.setAttribute("value",e.value);f.appendChild(d)}))})})(document,$);

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23680)
Category:	downloaded
Size (bytes):	305640
Entropy (8bit):	5.561292114256766
Encrypted:	false
SSDEEP:	3072:fWFkUeQ65WHn6SJKQK0+FzOhOJjt+/Kjrv+aUPdm6NIh7R5EtzG2+4jRY9ea9:+n+y6qQyGjrvzFCIhl5OzG2+4jaT
MD5:	20720969D08AFDFCD4467C651D134F27
SHA1:	541C93CFD3A9C02C4BBE8567DEDAA2860965A80D
SHA-256:	3BB820DFCF7CE22BEAADAB2B1FD0D9AD500831EA4F27C0E50068A007DC1C23A1
SHA-512:	AC731C6202F95EA828AF7F25D361B3504CA197A552E1A45D2137BF38752781048B5C467DEC548887BDA5F802AD0BC290621114AB9D59D9C6DE8AAE659C0BEC94
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-996834583
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":40,"vtp_instanceDestinationId":"AW-996834583","tag_id":118},{"function":"__ogt_ads_datatos","priority":40,"vtp_instanceDestinationId":"AW-11093504263","tag_id":148},{"function":"__ogt_1p_data_v2","priority":30,"vtp_isAutoEnabled":false,"vtp_isManualEnabled":false,"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vt

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:HhCkuLaY:HUkuLaY
MD5:	01DB194D7AC2234111246AFB6640A464
SHA1:	80F41CB7B73F34B54FAC95B8636DF5A68F7DF99E
SHA-256:	055C796B29A7286F1166F61819897E8E7103116350E065FB87676B5F04944984
SHA-512:	00FC295201B640AC88FAC898B90504296BF2376C4C03FDE6C06D1E6FBBE841CBFB9FA8B7965F51ED8817E34B1A6B580756E2F08300FA93F62CE513AD5C4DCDFA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkwWOyPQaMKxhIFDVNaR8USBQ2lkzYk?alt=proto
Preview:	ChIKBw1TWkfFGgAKBw2lkzYkGgA=

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
URL:	https://px.mountain.com/st?ga_tracking_id=G-1111111&shpt=Search%20results%20%7C%20Thomson%20Reuters&ga_info=%7B%22status%22%3A%22FAILED%22%2C%22ga_tracking_id%22%3A%22G-1111111%22%2C%22shpt%22%3A%22Search%20results%20%7C%20Thomson%20Reuters%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%7D%2C%22message%22%3A%22Could%20not%20evaluate%20some%20of%20the%20GA%20parameters%20due%20to%20timeout%20reached%20(3000ms).%20Check%20the%20execution_workflow%20for%20details.%22%7D&available_ga=%5B%5D&hardcoded_ga=G-1111111&dxver=4.0.0&shaid=36732&plh=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results&cb=89694712653718110term%3Dvalue&shadditional=googletagmanager%3Dtrue&shoid=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fsearch-results%23t%3DLegal%26sort%3Drelevancy
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (454), with no line terminators
Category:	dropped
Size (bytes):	454
Entropy (8bit):	5.10161670565884
Encrypted:	false
SSDEEP:	12:PYsJXd1rKTADalG4DBtEY7ANlEJ60UuSv2l5bOp:PZZfr2E66uSvygp
MD5:	1CC231244C69DF09B69E35CC1B9CC44E
SHA1:	DDAC9E40FDE52DAC9BE66F1335FE96116A14F8F7
SHA-256:	6B4D7DB23373D0DB8B4344D08399EB9846D3DF4073E865DCA0AA804E4E5CA88B
SHA-512:	069588EEBE9DC764D12A91CC1F95DB71C9D5B307C6228EDA5A860214B5C19C94B0D87078893FC00D3E2C6E9808CC2C5AE9E09FE2E92729200986A035515FF978
Malicious:	false
Reputation:	low
Preview:	window.onload=function(){var a=document.querySelectorAll(".tr-LongformRichText table");if(0!==a.length){var c="";a.forEach(function(b,f){var d=b.querySelectorAll("tr:first-child th");if(!(4>d.length)){var e="responsiveTable-"+f;b.id=e;b.classList.add("responsiveTable");d.forEach(function(g,h){c+="#"+e+" td:nth-of-type("+(h+1)+'):before {content:"'+g.innerText+'"} '})}});a=document.createElement("style");a.textContent=c;document.head.appendChild(a)}};

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.612457348662773
Encrypted:	false
SSDEEP:	3:YTyLV/VfsqPNVcSLQzRE9Ldu1S4:YWLV9soDLQmpdwS4
MD5:	69EE36929D2172DEA5C1763BAC240040
SHA1:	77EF82FC4B7757D445E8901E16D785AA44E3B1DF
SHA-256:	45DA241A91C843B268ADA7481CDECE1AA679F2720931EFFEA28D83E1398D66A9
SHA-512:	FDA2E41AF332441315A0BC6352DD1B9350F92E13447CD1A58CBAA96748271C26780A653EA94F023808F572D1E329C855EF6A0E3B51558BF474ABA614AB26051A
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_3fnooq8w_telemetry
Preview:	{"version_hash":"8d515a58","url":"https://www.redditstatic.com/ads/8d515a58/pixel.js"}

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (537)
Category:	downloaded
Size (bytes):	684
Entropy (8bit):	5.385224761240713
Encrypted:	false
SSDEEP:	12:jvgeHhhteQuct/BeHhhteQTLdd+QQsQeJ20IXF9RrC63dp73izRWx3B6p4fc0qip:9hoLct/BshoK+huJ20Erf3L+RWx3Beax
MD5:	9429F9E3170A8269975FA55872A26505
SHA1:	29614BF3C82B508692F6CDB04D33009102B86FAD
SHA-256:	70214F5DE977BEF7405CF897C7C2E26478DF0E2F5660865404B64133536DFB36
SHA-512:	8A438EE77FAB034CB3663E6C92E5CA5C2D502A702320740FD90B72EEED3467AC4D0F0192C7C8797879D0FAB6BEA36CDC766DAC3638E7E7B8746423B07A94BCEE
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCd37f24b9aa7043f1a5b88b1d4cf80db5-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCd37f24b9aa7043f1a5b88b1d4cf80db5-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCd37f24b9aa7043f1a5b88b1d4cf80db5-source.min.js', "!function(t,e){if(!t.rdt){var n=t.rdt=function(){n.sendEvent?n.sendEvent.apply(n,arguments):n.callQueue.push(arguments)};n.callQueue=[];var r=e.createElement(\"script\");r.src=\"https://www.redditstatic.com/ads/pixel.js\",r.async=!0;var a=e.getElementsByTagName(\"script\")[0];a.parentNode.insertBefore(r,a)}}(window,document),rdt(\"init\",\"t2_3fnooq8w\"),rdt(\"track\",\"PageVisit\");");

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1948)
Category:	downloaded
Size (bytes):	270486
Entropy (8bit):	3.6454619236359807
Encrypted:	false
SSDEEP:	3072:37U9MS+7YR5eMsIrrYGTOHjAr0RABhgtGBRD9nhxhlcIrrG2x8rrd98rrKTZ+Irq:bW
MD5:	5769B8FB8C0411740513086D74D5CFA0
SHA1:	76E7055A38423B2F55CABC7EBAEC021CF817DE41
SHA-256:	F2C5198E3EBDE8545EFBD96903FB71FE861DA56C1F9CA5944BBA067389995F26
SHA-512:	E78E7775758C0149671B8F0883599EBA465ECB1123B20E57E97E5632B468E1CCB7B5C31EF3B303096448518658ADBA91AD73CCA77549CE7C68EDAA4F39EC2BEA
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/en/products/highq/request-demo
Preview:	<!DOCTYPE html>.<html lang="en-US">.. <head>. <meta charset="utf-8"/>. . <meta content="width=device-width, initial-scale=1" name="viewport"/>.. . . . . <script src="https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js" type="text/javascript">. </script>. <script>. window.DD_RUM && window.DD_RUM.init({. clientToken: "pub62df06fe98be88d223c0b56e30910186",. applicationId: "fe534364-701c-4d56-b4be-020a7e03efa2",. site: 'datadoghq.com',. service: "legal.thomsonreuters.com",. env: "prod",. // Specify a version number to identify the deployed version of your application in Datadog. // version: '1.0.0',. sessionSampleRate: 100,. sessionReplaySampleRate: 20,. trackUserInteractions: true,.

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13360)
Category:	downloaded
Size (bytes):	25285
Entropy (8bit):	5.279700001376637
Encrypted:	false
SSDEEP:	384:wy7hBc1bpt9YlnBFYierMbYUye2LYU+bnMhjURHjXo20wwCi1kMYm53Nx:wyAn9YNYiPbYJe2YMKHbo20PCy5YmTx
MD5:	B9D6B72D13D44F89A96DE90208A2739B
SHA1:	97E7B073397C7B9B169E973FCD79445DEA2AB139
SHA-256:	08C481804956AB731D74A9918B1EB31DBD5CB2830659E71CE4B68A75EE1E7346
SHA-512:	1077388C51778818F2E037E3CA24FA615D0504001B6ADB074E35251C2465C22020B5A07A8CA2AD55D3C345DB8789A14D959766A1D1FDDF53BE26AFF8732BC4EA
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-466896.js?sv=5
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":466896,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":true,"legal_name":"Thomson Reuters","privacy_policy_url":"","deferred_page_contents":[],"record_targeting_rules":[{"component":"url","match_operation":"simple","pattern":"https://legal.thomsonreuters.com/en/promo/black-friday","negate":false},{"component":"url","match_operation":"simple","pattern":"https://legal.thomsonreuters.com/en/promo/cyber-monday","negate":false},{"component":"url","match_operation":"simple","pattern":"https://store.legal.thomsonreuters.com/law-products/cart","negate":false},{"component":"url","match_operation":"simple","pattern":"https://legal.

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13186
Entropy (8bit):	5.230333531204009
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXfn/OoH6iAHyPtJJAR:7Iy5P/i
MD5:	4D4429A2DFAA8A27FBE9659E8E717F74
SHA1:	28AD4885FF33594FA46ECED61BD42874926AA17C
SHA-256:	EA5DB5581E262D77D1A43FBB3F0FA3661B51D097B40CA38F584B4943F47CF2E0
SHA-512:	708D4DE5F9147040A26202060CEC1199E36A16AACD1CE967E0A4ED8FAE34081DC1584E4E490B57C2A430259EDFD7EF84F050F275487D2496FB824A787CBF8AC4
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1462)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.429948110028507
Encrypted:	false
SSDEEP:	24:9WUct/BsWitdN8L+ch9HwiI02yWEGDyfVpY/+wurwoRWxEtRWxoD1bpYIcOpXCeZ:it/BUtdGNh/0tGvwxEtwxoRbpYIckCw
MD5:	EE457693BEC588B3F9063FD55E98ED37
SHA1:	69B13F3C09FBA78DE61E1F746E949A3D044B8D9C
SHA-256:	C27449E050483C9495A752345347468DB54AFEBB57553A386C6F146C2D7ACA4D
SHA-512:	AE30300E548949C55D0B164F55CD5E3BD625123639176E9FFDC33C765CEDDEA719C29E0BD4D997E0E4FA673B02199782C0D25BADADB9DFF7E73A56F1EC1BF3A9
Malicious:	false
Reputation:	low
Preview:	// For license information, see `https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCcd58eb141ac949fe96b1930007a2066f-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RCcd58eb141ac949fe96b1930007a2066f-source.min.js', " MNTN Tracking Pixel-->\n INSTALL ON ALL PAGES OF SITE-->\n<script type=\"text/javascript\">\n\t(function(){\"use strict\";var e=null,b=\"4.0.0\",\n\tn=\"36732\",\n\tadditional=\"term=value\",\n\tt,r,i;try{t=top.document.referer!==\"\"?encodeURIComponent(top.document.referrer.substring(0,2048)):\"\"}catch(o){t=document.referrer!==null?document.referrer.toString().substring(0,2048):\"\"}try{r=window&&window.top&&document.location&&window.top.location===document.location?document.location:window&&window.top&&window.top.location&&\"\"!==window.top.location?window.top.location:document.location}catch(u){r=document.location}try{i=parent.location.href!==\"\"?encodeURIComponent(parent.location.hr

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	4.3413895961447135
Encrypted:	false
SSDEEP:	12:t4HnOWLHGfCd/QYlZpUai7FSr6cPJUpA3ie0zQcozjS50J0JZRjTToEksiU4pyCp:t4HOsGqdQYlHU46mqpOumzjCvTozsiUW
MD5:	A5C5D6146A6E55E4A0FE3567602B1E46
SHA1:	C75FF1B713378AEC779FB248E22DAA513ACA725B
SHA-256:	901BB0E03B8C3C0A1CF4C487A177417328BB7D8C94106ECEFCEEDD7D7F6C4DDC
SHA-512:	D21D979974542243A4D70036F87BFC0549B6793B809ED09044946BE2A25C47811A99E20FDB1F3044082A5509664101D4BCA241A1CA7B09FE80084CEAFA092368
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_close.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.296 0-20.581-3.919-28.419-11.769L174.167 231.003 68.609 336.563c-7.843 7.844-18.128 11.769-28.416 11.769-10.285 0-20.563-3.919-28.413-11.769-15.699-15.698-15.699-41.139 0-56.85l105.54-105.549L11.774 68.611c-15.699-15.699-15.699-41.145 0-56.844 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16743), with no line terminators
Category:	dropped
Size (bytes):	16743
Entropy (8bit):	5.232669405002056
Encrypted:	false
SSDEEP:	384:JwPU9hUyVYDsdU5sF59QF5vCAG57eWYk9p:Jw0hUyWDR5sj9q5vCAGxRYk9p
MD5:	54B8D542E1B84F501F3A2A41F69FAD1A
SHA1:	9EEEC52FC7603B92A23AFCCD1E25ECBA9BC6C0E2
SHA-256:	254D21BAFBE4C17F23B5AB9FEDCBC4CA3D80F6E9291081299CD4CE3F70D3A6CE
SHA-512:	61A8B5E3258930550D367E11C48908D59A7904154F7DD00DB8A85E2B388ECCB676FC42588E23692E4954DABA3D8D4FF3DE59E46DE66350EA5C4257D0FEA7B54A
Malicious:	false
Reputation:	low
Preview:	var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"."+d[3]}catch(d){}}();(function () {var mntnis; async function fwto(resource, options = {}) { const { timeout = 1000 } = options; const controller = new AbortController(); const id = setTimeout(() => controller.abort(), timeout); const response = await fetch(resource, {...options, signal: controller.signal}); clearTimeout(id); return response.text(); } fwto("https://44.212.189.233/is", {timeout: 1000}).then(function (response) { return response; }).then(function (response) { mntnis = response; }).catch(function (err) { mntnis = err; }); var shaddslashes = function (s) {if (s != undefined && s != null) {s = s.replace(/%/g, "%25%32%35");s = s.replace(/\\/g, "%5C");s = s.replace(/'/g, "%27");s = s.replace(/"/g, "%22");s = s.replace(/\?/g,

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4624), with no line terminators
Category:	downloaded
Size (bytes):	4624
Entropy (8bit):	5.790181022449837
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUqXciYTX:1DY0hf1bT47OIqWb1nXciO
MD5:	8B47BFC570CE75BA3E83F9757FD262F8
SHA1:	ADC45F126BFA7BED53CEEC78A6C151E41C27AF18
SHA-256:	6C84E054821938A0597ED78AAC8B67044CC5F4CB541505EAEF9D8D3758AC424A
SHA-512:	18725F48C3235F421D436313B29226711D776841D9AD6390C8CF6EAF2C04B319A596B5D7F3E849D4EE71182EE4E02C0987151FD7AE98A0A6296184EB96E36B00
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/996834583/?random=1727776303589&cv=11&fst=1727776303589&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&hn=www.googleadservices.com&frm=0&tiba=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38974), with LF, NEL line terminators
Category:	dropped
Size (bytes):	378599
Entropy (8bit):	5.290426394011973
Encrypted:	false
SSDEEP:	6144:C1TuDueMRP2JqAxDiLHrbIxmGvGcra/d1ghKv+D:QhUsHMTsGw+D
MD5:	E29709257E04218CFE7211940C5B835D
SHA1:	ADF78A01642351B441C5657B54E2599F6F046EAA
SHA-256:	0914B1ACDAD8777319B9D044A113F0FF5C47268B302552E4DF39611187CF55D9
SHA-512:	8DBF8FEA0B324199848653A67C21F3600F790A4053336F18BE3A52E0D4454ECBE123856FC6012611147C9D6C49C15B1CBB029ECC3247CE1BA8B3338020AC57FC
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.DCL=t():e.DCL=t()}(this,function(){return function(e){function t(t){for(var n,o,i=t[0],a=t[1],u=0,l=[];u<i.length;u++)o=i[u],r[o]&&l.push(r[o][0]),r[o]=0;for(n in a)Object.prototype.hasOwnProperty.call(a,n)&&(e[n]=a[n]);for(c&&c(t);l.length;)l.shift()()}var n={},r={22:0};function o(t){if(n[t])return n[t].exports;var r=n[t]={i:t,l:!1,exports:{}};return e[t].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.e=function(e){var t=[],n=r[e];if(0!==n)if(n)t.push(n[2]);else{var i=new Promise(function(t,o){n=r[e]=[t,o]});t.push(n[2]=i);var a,u=document.getElementsByTagName("head")[0],c=document.createElement("script");c.charset="utf-8",c.timeout=120,o.nc&&c.setAttribute("nonce",o.nc),c.src=function(e){return o.p+""+({}[e]\|\|e)+".js"}(e),a=function(t){c.onerror=c.onload=null,clearTimeout(l);var n=r[e];if(0!==n){if(n){var o=t&&("load

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39336, version 1.0
Category:	downloaded
Size (bytes):	39336
Entropy (8bit):	7.994710425666304
Encrypted:	true
SSDEEP:	768:AUKLmMzXMVYQrF7VUUHbGs4JP2sXQufk42hvOfVEVcmaWh0N+:SXMucZCll2sXFfk4sOfVElQ+
MD5:	9423006FB52301A35A4CE76F99E114AF
SHA1:	09DA7CE93B1794CB62E2FE2B8A385192BC9D7DED
SHA-256:	CF3DF7EC597ED2BE8F6F04DBF57BF2BDC1245C8CFDE2D5921B2341606207A7EB
SHA-512:	C6F4210E0C0E625F8C0FEB2FAEDB150D4649150C443DA8BAB1F3BD4B94C96EBAF223D6D66C9A9DBA4D7002E3744FB6328A80B0C6143C6C466ACB9B9C8B076229
Malicious:	false
Reputation:	low
URL:	https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-light-webfont.woff2
Preview:	wOF2...............4...8........................?FFTM........8.`..^..L..u.....p....6.$..Z..p.. .....T...?webf.[.`......gX.n2....4....6...6.f=...j..iQn...........O..1...}BH. RT..uk...LL..1%........ji....TeNRH.-j..F.3..D..e.$.G.....N[#K,..6O.C[-.u}..q..c..Q.[.K...C$......X..ML.3.U......B..C.....U..?.m...LF......F.......]..P.{Han.%J..v.q8.&Z...X.n...t..N.P.(\....t...._.E...#Sr.B...#.{......&p..D._..A.@..."(...!?L.:.p..._<..L.d.:HL.W......z6x....<.....w.......Pd....y..1:9..@&.r ...6.\.H..<Aq..".......V/..@_...<.m.?X..Q...J.LJD1.gc..a.B.E..EZ.(.m.n.$+!..J..G5.%.....W^..y]..~Q..\|gZ...Z.bN..vf'.~q..~.....#...%.,.{j...zW....E.BQ]....7.?.x}`6..r.X.....l..H..M.....?9._..i.j.A.Xa.\.d.\l..+.w..+..?... .:......6...X0J..6.%.<#....<..++.^....W.^x......{.....gz..._.P!.....!..Q...L.T..)..4u,.;.2t.aG.%,...M,Y~.;......SB..\|.......^1.J.,M3.....$...w.#..{~n.449v.V<..}....[.d......y...........1y..^.o.d..BA...7x....?6W.o.....K.b.......t...F........i.L\|h.....o....

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65381)
Category:	downloaded
Size (bytes):	99032
Entropy (8bit):	5.331883107112835
Encrypted:	false
SSDEEP:	1536:BohwPtMecozvX4msRApBHAIcqvxpztg5nn2kCOYkRbPnVQSvOgbesQ2nlz7eD7HX:BohwqejLXsO2doczEMb1XRs
MD5:	F40D2E30F066F7E6EABDF7D9D99E967E
SHA1:	34F7C438C519092932272C27694B54FA9F93DD82
SHA-256:	27E5A3AD59A9E0213824B548D9703155B454CFCFFC7690842436AFF86CB310C1
SHA-512:	AAB120104BA63C1014845896BABD7541E748479D8E847069CB8DDC169208DD77CF14BC55341AB0CD9E5B1C027DDB0031583C63DEA55B39E84A5A5B53141EAFC4
Malicious:	false
Reputation:	low
URL:	https://v2.d41.co/tags/dnb_coretag_v6.min.js
Preview:	/! For license information please see dnb_coretag_eu_v6.min.js.LICENSE.txt /.// Version 6.0.0.// For opt-out information, please visit: https://d41.co/.!function(){var t={355:function(t,r,e){"use strict";e(9070),e(7941),e(2526),e(7327),e(5003),e(4747),e(9337),e(3321),e(1817),e(2165),e(2443),e(3680),e(3706),e(408),e(489),e(8304),e(7042);var n=e(5937),o=e.n(n),i=(e(6992),e(1532),e(1539),e(8783),e(3948),e(9720),e(6699),e(8674),e(2222),e(4916),e(4723),e(8862),e(4644)),u=e.n(i);function a(t){return a="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},a(t)}function c(){c=function(){return t};var t={},r=Object.prototype,e=r.hasOwnProperty,n=Object.defineProperty\|\|function(t,r,e){t[r]=e.value},o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",u=o.asyncIterator\|\|"@@asyncIterator",s=o.toStringTag\|\|"@@toStringTag";function f(t,r,e)

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4150)
Category:	dropped
Size (bytes):	60206
Entropy (8bit):	5.2995038348350745
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXHM9ZK0BKJnYTZ02LKVsdmpyKcicQ:RIT7OXs9ZKAKtYj8wKcHQ
MD5:	17006894EDBC60B11E055C76F75B381F
SHA1:	D3A067B16C73EF66AF4A5C63FF8073F5C6287F77
SHA-256:	A622EB40E467828DF3B0E8BFCD6220CF4A47016406E2FE9711DFC380DF300687
SHA-512:	E1A51EBAFD60AA7A460EAE1BF68AF863A33D964EA4C64CDDFDD3861D6845430C495DF94F995F6FFE28237D56D3869F62CE4C627E6AFB72FDD7BF88C49DC116CC
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	62243
Entropy (8bit):	5.409110995042521
Encrypted:	false
SSDEEP:	768:/i2VpDUAE3q7h7snQpWWzlj18nQrHoQqhF:s/3IgGDzlj18nQrSF
MD5:	8B73B216AC0A0730279EBB5FC109C29C
SHA1:	4D0A7239EE5F70D143300E772DE91B4768A7F4A4
SHA-256:	0A0721D78278F9A6C3DD3F639BAD1B3105D2DF9E97E3D4A74DBEC66D6B92C7EC
SHA-512:	4EFB681C418B2EC3266A5824515155E23F41677B0059D659F3CBED77F144206032B206907745E7E0AE6F4A01E99E7710F848D31B815BA15E4DD7E4A6B9F10F78
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1727776340053&id=t2_3fnooq8w&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=744e8800-d940-4b54-8767-3fffd6b7a998&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1727776360158&id=t2_3fnooq8w&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=744e8800-d940-4b54-8767-3fffd6b7a998&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_5afed25b&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (454), with no line terminators
Category:	downloaded
Size (bytes):	454
Entropy (8bit):	5.10161670565884
Encrypted:	false
SSDEEP:	12:PYsJXd1rKTADalG4DBtEY7ANlEJ60UuSv2l5bOp:PZZfr2E66uSvygp
MD5:	1CC231244C69DF09B69E35CC1B9CC44E
SHA1:	DDAC9E40FDE52DAC9BE66F1335FE96116A14F8F7
SHA-256:	6B4D7DB23373D0DB8B4344D08399EB9846D3DF4073E865DCA0AA804E4E5CA88B
SHA-512:	069588EEBE9DC764D12A91CC1F95DB71C9D5B307C6228EDA5A860214B5C19C94B0D87078893FC00D3E2C6E9808CC2C5AE9E09FE2E92729200986A035515FF978
Malicious:	false
Reputation:	low
URL:	https://legal.thomsonreuters.com/etc.clientlibs/emcm/components/content/article-paragraph/clientlibs.min.js
Preview:	window.onload=function(){var a=document.querySelectorAll(".tr-LongformRichText table");if(0!==a.length){var c="";a.forEach(function(b,f){var d=b.querySelectorAll("tr:first-child th");if(!(4>d.length)){var e="responsiveTable-"+f;b.id=e;b.classList.add("responsiveTable");d.forEach(function(g,h){c+="#"+e+" td:nth-of-type("+(h+1)+'):before {content:"'+g.innerText+'"} '})}});a=document.createElement("style");a.textContent=c;document.head.appendChild(a)}};

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4566), with no line terminators
Category:	dropped
Size (bytes):	4566
Entropy (8bit):	5.782608938389773
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUXXzi0+x:1DY0hf1bT47OIqWb1eXzi0Q
MD5:	8DCBBA7DBAA4F32F846152F939AF9E7B
SHA1:	7B5BF7F6E06D1D087E8606AFC4CEAC7FD1F19691
SHA-256:	594F9D41966C8CEE6F546E2214395AF53BE162BF07495E680A51DC39DD4FF7EC
SHA-512:	D5E0C80748F5CCE94E43FCADEA8E4C86410381BEA5CA5C59B900C2415646923C746AAE950CF0228C05F8CBD98F7B52EC5B09FF2EBD5C4272398C753D87CEC621
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.921030304008144
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKzaXORdQzXWaee:PLKdXNQKGeOL
MD5:	59EE3965FCB16F88E9BDC20B9CD8612E
SHA1:	3D93A27E4DAC9DDA01DC5BBCCA9E1F53E827DAF2
SHA-256:	020A92F2FB27981D1398F916AE17400F8F11473962EBD858B7BF6901814EDD7B
SHA-512:	3E4C07D9CE3DEDE2998A59C32A3FE12D781AAE33C4AFE8D2B9B0D12C18EB96257373098497B5F3C909EC1EDE64FEB4B4074DBDB9678B4D6B019CD64360222849
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2552)
Category:	downloaded
Size (bytes):	38833
Entropy (8bit):	5.396122319952389
Encrypted:	false
SSDEEP:	384:KS6y4qqRniuko00PXI5FFxfxY4oYw/lLrJv8LdCV+eMIFrXzmmLhDd9D10i1HcZH:xGnicg5l0b/ltkrO1570gM0NnRDjHHM
MD5:	EEBB03B1B0E746977A74E05652A8AB26
SHA1:	2AE74B816507E6246A2A9D50076A2870D30A3F00
SHA-256:	7576BBDE791D8F3C2D5F2DCF8026751809D07C23AD4DBBC4068691DF9FCF8F1A
SHA-512:	876D5E89339CD78E5C4A735ED0FDEB76460781452408684AD2AA18E583C70A23E26F12B9113E838D0935674A2D8ACD43C4FD8C7EAE7EDB825E0C93D261DDF211
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/stylesheets/player-pomo-6a44004ddd8cc38b85c6c18986c805e8.css
Preview:	._29Gjr{height:100%;width:inherit;position:-ms-device-fixed}...giifV{position:absolute;z-index:1;left:50%;top:50%;transform:translate(-50%, -50%);border:5px solid rgba(35,35,35,0.8);width:3em;height:3em;border-radius:50%;opacity:0;-webkit-animation:_3pWeg 1.1s cubic-bezier(0.6, 0.2, 0, 0.8) infinite,_1Nluf 1.1s linear infinite;animation:_3pWeg 1.1s cubic-bezier(0.6, 0.2, 0, 0.8) infinite,_1Nluf 1.1s linear infinite;transition:opacity 0.2s;pointer-events:none}.giifV._20Z54{opacity:1}@-webkit-keyframes _3pWeg{0%{transform:translate(-50%, -50%) rotate(0deg)}100%{transform:translate(-50%, -50%) rotate(360deg)}}@keyframes _3pWeg{0%{transform:translate(-50%, -50%) rotate(0deg)}100%{transform:translate(-50%, -50%) rotate(360deg)}}@-webkit-keyframes _1Nluf{0%{border-top-color:#ccc}35%{border-top-color:#fff}100%{border-top-color:#ccc}}@keyframes _1Nluf{0%{border-top-color:#ccc}35%{border-top-color:#fff}100%{border-top-color:#ccc}}@media screen and (-ms-high-contrast: active), screen and (forced

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 11:51:26.669725895 CEST	192.168.2.6	1.1.1.1	0xd4d0	Standard query (0)	highq.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:26.670173883 CEST	192.168.2.6	1.1.1.1	0xb597	Standard query (0)	highq.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:27.192403078 CEST	192.168.2.6	1.1.1.1	0x9bc4	Standard query (0)	www.highq.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.194042921 CEST	192.168.2.6	1.1.1.1	0x9742	Standard query (0)	www.highq.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:27.712419033 CEST	192.168.2.6	1.1.1.1	0x7942	Standard query (0)	legal.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.712558985 CEST	192.168.2.6	1.1.1.1	0x49e5	Standard query (0)	legal.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:28.556119919 CEST	192.168.2.6	1.1.1.1	0xf50e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.556543112 CEST	192.168.2.6	1.1.1.1	0xda1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:28.848340034 CEST	192.168.2.6	1.1.1.1	0x276b	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.848479986 CEST	192.168.2.6	1.1.1.1	0x2736	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:28.850584030 CEST	192.168.2.6	1.1.1.1	0x2b51	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.850739956 CEST	192.168.2.6	1.1.1.1	0x5c60	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 1, 2024 11:51:28.851161003 CEST	192.168.2.6	1.1.1.1	0x6ec7	Standard query (0)	cdn.appdynamics.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.851372957 CEST	192.168.2.6	1.1.1.1	0x42d2	Standard query (0)	cdn.appdynamics.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:28.852379084 CEST	192.168.2.6	1.1.1.1	0x2e1b	Standard query (0)	app-data.gcs.trstatic.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.852546930 CEST	192.168.2.6	1.1.1.1	0x42a6	Standard query (0)	app-data.gcs.trstatic.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:29.558430910 CEST	192.168.2.6	1.1.1.1	0x71b9	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:29.559040070 CEST	192.168.2.6	1.1.1.1	0xac29	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 1, 2024 11:51:29.935518980 CEST	192.168.2.6	1.1.1.1	0x6b9e	Standard query (0)	app-data.gcs.trstatic.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:29.936057091 CEST	192.168.2.6	1.1.1.1	0xf2e8	Standard query (0)	app-data.gcs.trstatic.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:31.417258024 CEST	192.168.2.6	1.1.1.1	0xea79	Standard query (0)	cdn.appdynamics.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.418129921 CEST	192.168.2.6	1.1.1.1	0x713e	Standard query (0)	cdn.appdynamics.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:31.419173002 CEST	192.168.2.6	1.1.1.1	0xd156	Standard query (0)	www.datadoghq-browser-agent.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.419795036 CEST	192.168.2.6	1.1.1.1	0x97aa	Standard query (0)	www.datadoghq-browser-agent.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:31.420650005 CEST	192.168.2.6	1.1.1.1	0x27ab	Standard query (0)	legal.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.421232939 CEST	192.168.2.6	1.1.1.1	0x3eaf	Standard query (0)	legal.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:31.685662031 CEST	192.168.2.6	1.1.1.1	0xdfd6	Standard query (0)	rum.browser-intake-datadoghq.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.686281919 CEST	192.168.2.6	1.1.1.1	0x70f0	Standard query (0)	rum.browser-intake-datadoghq.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:33.299979925 CEST	192.168.2.6	1.1.1.1	0xfb36	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.300437927 CEST	192.168.2.6	1.1.1.1	0x760f	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:33.338146925 CEST	192.168.2.6	1.1.1.1	0x21a6	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.338776112 CEST	192.168.2.6	1.1.1.1	0x464e	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:33.717921019 CEST	192.168.2.6	1.1.1.1	0xd126	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.718344927 CEST	192.168.2.6	1.1.1.1	0x96bb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:33.795437098 CEST	192.168.2.6	1.1.1.1	0xacc5	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.795948029 CEST	192.168.2.6	1.1.1.1	0x827d	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:33.809437990 CEST	192.168.2.6	1.1.1.1	0x13d5	Standard query (0)	thomsonreuters.scene7.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.809931993 CEST	192.168.2.6	1.1.1.1	0xe17b	Standard query (0)	thomsonreuters.scene7.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:34.605005980 CEST	192.168.2.6	1.1.1.1	0x6769	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.605489016 CEST	192.168.2.6	1.1.1.1	0xdb45	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:34.723118067 CEST	192.168.2.6	1.1.1.1	0x51f4	Standard query (0)	cdn.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.723253012 CEST	192.168.2.6	1.1.1.1	0x19a7	Standard query (0)	cdn.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:34.808487892 CEST	192.168.2.6	1.1.1.1	0x32ad	Standard query (0)	data.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.808670044 CEST	192.168.2.6	1.1.1.1	0xdbbd	Standard query (0)	data.schemaapp.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:35.934454918 CEST	192.168.2.6	1.1.1.1	0x18f2	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.934840918 CEST	192.168.2.6	1.1.1.1	0xa6fb	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.010461092 CEST	192.168.2.6	1.1.1.1	0x30e9	Standard query (0)	v2.d41.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.011564970 CEST	192.168.2.6	1.1.1.1	0x3a89	Standard query (0)	v2.d41.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.192183971 CEST	192.168.2.6	1.1.1.1	0x62b1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.192681074 CEST	192.168.2.6	1.1.1.1	0xd36d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.195365906 CEST	192.168.2.6	1.1.1.1	0xc212	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.195713997 CEST	192.168.2.6	1.1.1.1	0x4873	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.197997093 CEST	192.168.2.6	1.1.1.1	0xefd3	Standard query (0)	thomsonreuters.scene7.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.198179960 CEST	192.168.2.6	1.1.1.1	0x8b4a	Standard query (0)	thomsonreuters.scene7.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.199733019 CEST	192.168.2.6	1.1.1.1	0xd13e	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.199862003 CEST	192.168.2.6	1.1.1.1	0x9f22	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.204211950 CEST	192.168.2.6	1.1.1.1	0xf73b	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.204519987 CEST	192.168.2.6	1.1.1.1	0x46d9	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.205476046 CEST	192.168.2.6	1.1.1.1	0xd66c	Standard query (0)	cdn.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.205678940 CEST	192.168.2.6	1.1.1.1	0xfd72	Standard query (0)	cdn.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.403650045 CEST	192.168.2.6	1.1.1.1	0x23f	Standard query (0)	store.legal.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.404159069 CEST	192.168.2.6	1.1.1.1	0x485c	Standard query (0)	store.legal.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.859306097 CEST	192.168.2.6	1.1.1.1	0x4438	Standard query (0)	westservicesinc.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.859306097 CEST	192.168.2.6	1.1.1.1	0x33a2	Standard query (0)	westservicesinc.tt.omtrdc.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.861479044 CEST	192.168.2.6	1.1.1.1	0x27e2	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.861479044 CEST	192.168.2.6	1.1.1.1	0x4dfc	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.861959934 CEST	192.168.2.6	1.1.1.1	0x9a8a	Standard query (0)	westthomson.demdex.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.862124920 CEST	192.168.2.6	1.1.1.1	0xf53b	Standard query (0)	westthomson.demdex.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.862593889 CEST	192.168.2.6	1.1.1.1	0xfa13	Standard query (0)	westthomsoncom.sc.omtrdc.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:36.862593889 CEST	192.168.2.6	1.1.1.1	0xedb9	Standard query (0)	westthomsoncom.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.561340094 CEST	192.168.2.6	1.1.1.1	0x30c6	Standard query (0)	data.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.561583996 CEST	192.168.2.6	1.1.1.1	0x566e	Standard query (0)	data.schemaapp.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:37.562042952 CEST	192.168.2.6	1.1.1.1	0x920	Standard query (0)	v2.d41.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.562230110 CEST	192.168.2.6	1.1.1.1	0xc35b	Standard query (0)	v2.d41.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:37.563885927 CEST	192.168.2.6	1.1.1.1	0xab8e	Standard query (0)	paapi4153.d41.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.563965082 CEST	192.168.2.6	1.1.1.1	0x116	Standard query (0)	paapi4153.d41.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:37.564507961 CEST	192.168.2.6	1.1.1.1	0x6a70	Standard query (0)	store.legal.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.564682961 CEST	192.168.2.6	1.1.1.1	0xabf1	Standard query (0)	store.legal.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:37.768313885 CEST	192.168.2.6	1.1.1.1	0x4bd	Standard query (0)	api.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.768465996 CEST	192.168.2.6	1.1.1.1	0x9384	Standard query (0)	api.schemaapp.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:37.796076059 CEST	192.168.2.6	1.1.1.1	0x1a92	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.796439886 CEST	192.168.2.6	1.1.1.1	0xb8c0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:40.615019083 CEST	192.168.2.6	1.1.1.1	0xac7f	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.615325928 CEST	192.168.2.6	1.1.1.1	0x8cdf	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:40.616084099 CEST	192.168.2.6	1.1.1.1	0xe50e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.616528988 CEST	192.168.2.6	1.1.1.1	0x9df2	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:41.513240099 CEST	192.168.2.6	1.1.1.1	0xb77	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:41.513380051 CEST	192.168.2.6	1.1.1.1	0xa8c1	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:41.522023916 CEST	192.168.2.6	1.1.1.1	0xb1c3	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:41.522146940 CEST	192.168.2.6	1.1.1.1	0x9224	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.100836039 CEST	192.168.2.6	1.1.1.1	0x4952	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.101773024 CEST	192.168.2.6	1.1.1.1	0x81d4	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.104588985 CEST	192.168.2.6	1.1.1.1	0x1842	Standard query (0)	westthomsoncom.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.104846001 CEST	192.168.2.6	1.1.1.1	0xecd3	Standard query (0)	westthomsoncom.sc.omtrdc.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.110013962 CEST	192.168.2.6	1.1.1.1	0xdf91	Standard query (0)	westservicesinc.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.110410929 CEST	192.168.2.6	1.1.1.1	0xdd89	Standard query (0)	westservicesinc.tt.omtrdc.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.111661911 CEST	192.168.2.6	1.1.1.1	0xea67	Standard query (0)	paapi4153.d41.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.112263918 CEST	192.168.2.6	1.1.1.1	0x8bce	Standard query (0)	paapi4153.d41.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.117444038 CEST	192.168.2.6	1.1.1.1	0x2483	Standard query (0)	api.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.118050098 CEST	192.168.2.6	1.1.1.1	0xf2da	Standard query (0)	api.schemaapp.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.575447083 CEST	192.168.2.6	1.1.1.1	0x4fbd	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.575751066 CEST	192.168.2.6	1.1.1.1	0x8c0d	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.576807022 CEST	192.168.2.6	1.1.1.1	0x238e	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.577063084 CEST	192.168.2.6	1.1.1.1	0x3825	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.577814102 CEST	192.168.2.6	1.1.1.1	0x2132	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.578212976 CEST	192.168.2.6	1.1.1.1	0x24ea	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:44.837668896 CEST	192.168.2.6	1.1.1.1	0xb5e0	Standard query (0)	eps.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.837846994 CEST	192.168.2.6	1.1.1.1	0x4aab	Standard query (0)	eps.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:45.587934971 CEST	192.168.2.6	1.1.1.1	0x3712	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.588118076 CEST	192.168.2.6	1.1.1.1	0xd8f0	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:45.776179075 CEST	192.168.2.6	1.1.1.1	0x1278	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.776321888 CEST	192.168.2.6	1.1.1.1	0x3232	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:45.778744936 CEST	192.168.2.6	1.1.1.1	0x34bb	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.778908014 CEST	192.168.2.6	1.1.1.1	0x487b	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:47.044527054 CEST	192.168.2.6	1.1.1.1	0x35b5	Standard query (0)	api.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.044702053 CEST	192.168.2.6	1.1.1.1	0xe064	Standard query (0)	api.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:47.448281050 CEST	192.168.2.6	1.1.1.1	0x183	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.448436975 CEST	192.168.2.6	1.1.1.1	0x537	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:47.684497118 CEST	192.168.2.6	1.1.1.1	0xfd8	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.684622049 CEST	192.168.2.6	1.1.1.1	0x58ae	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:47.685055971 CEST	192.168.2.6	1.1.1.1	0x8bb0	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.685184002 CEST	192.168.2.6	1.1.1.1	0xe71e	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:47.685921907 CEST	192.168.2.6	1.1.1.1	0x9c22	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.686039925 CEST	192.168.2.6	1.1.1.1	0x9439	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.204260111 CEST	192.168.2.6	1.1.1.1	0xd507	Standard query (0)	j.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.204390049 CEST	192.168.2.6	1.1.1.1	0x619a	Standard query (0)	j.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.205574989 CEST	192.168.2.6	1.1.1.1	0xf37c	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.205705881 CEST	192.168.2.6	1.1.1.1	0x3e79	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.309890985 CEST	192.168.2.6	1.1.1.1	0xd8e6	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.310334921 CEST	192.168.2.6	1.1.1.1	0x3276	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.311281919 CEST	192.168.2.6	1.1.1.1	0xf0b2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.311424017 CEST	192.168.2.6	1.1.1.1	0x7ea1	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.313715935 CEST	192.168.2.6	1.1.1.1	0xbfbc	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.313898087 CEST	192.168.2.6	1.1.1.1	0x1fdf	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.336093903 CEST	192.168.2.6	1.1.1.1	0x8c7e	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.336483002 CEST	192.168.2.6	1.1.1.1	0xd478	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.667274952 CEST	192.168.2.6	1.1.1.1	0x7781	Standard query (0)	ipv6.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.667660952 CEST	192.168.2.6	1.1.1.1	0x3022	Standard query (0)	ipv6.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.668294907 CEST	192.168.2.6	1.1.1.1	0x8667	Standard query (0)	c.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.668651104 CEST	192.168.2.6	1.1.1.1	0x6252	Standard query (0)	c.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.669145107 CEST	192.168.2.6	1.1.1.1	0xb104	Standard query (0)	eps.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.669452906 CEST	192.168.2.6	1.1.1.1	0xa423	Standard query (0)	eps.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.861921072 CEST	192.168.2.6	1.1.1.1	0x6fd3	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.862270117 CEST	192.168.2.6	1.1.1.1	0x9414	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:51:48.936100960 CEST	192.168.2.6	1.1.1.1	0x4d17	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.936666012 CEST	192.168.2.6	1.1.1.1	0xfbb5	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:49.097058058 CEST	192.168.2.6	1.1.1.1	0xad42	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.097656012 CEST	192.168.2.6	1.1.1.1	0x3ab5	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:49.314178944 CEST	192.168.2.6	1.1.1.1	0xd1ce	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.314327002 CEST	192.168.2.6	1.1.1.1	0xac56	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:49.541271925 CEST	192.168.2.6	1.1.1.1	0x8d69	Standard query (0)	dx.mountain.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.541513920 CEST	192.168.2.6	1.1.1.1	0x8908	Standard query (0)	dx.mountain.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:49.637639046 CEST	192.168.2.6	1.1.1.1	0x89bd	Standard query (0)	ws.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.637788057 CEST	192.168.2.6	1.1.1.1	0xf54a	Standard query (0)	ws.hotjar.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:49.851032019 CEST	192.168.2.6	1.1.1.1	0xf101	Standard query (0)	content.hotjar.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.851262093 CEST	192.168.2.6	1.1.1.1	0x8a71	Standard query (0)	content.hotjar.io	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.042376041 CEST	192.168.2.6	1.1.1.1	0x17b6	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.042640924 CEST	192.168.2.6	1.1.1.1	0x7ad3	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.083364964 CEST	192.168.2.6	1.1.1.1	0x6a4	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.083925009 CEST	192.168.2.6	1.1.1.1	0x607d	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.357598066 CEST	192.168.2.6	1.1.1.1	0xde03	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.357743025 CEST	192.168.2.6	1.1.1.1	0x81eb	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.359608889 CEST	192.168.2.6	1.1.1.1	0xd518	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.359759092 CEST	192.168.2.6	1.1.1.1	0xa0e9	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.385654926 CEST	192.168.2.6	1.1.1.1	0x328b	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.386017084 CEST	192.168.2.6	1.1.1.1	0x3728	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.389137983 CEST	192.168.2.6	1.1.1.1	0x1262	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.389287949 CEST	192.168.2.6	1.1.1.1	0xc9cb	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.408416986 CEST	192.168.2.6	1.1.1.1	0xff59	Standard query (0)	api.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.408571959 CEST	192.168.2.6	1.1.1.1	0x9822	Standard query (0)	api.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.424438000 CEST	192.168.2.6	1.1.1.1	0x20f5	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.424561024 CEST	192.168.2.6	1.1.1.1	0xa5cb	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:50.896049976 CEST	192.168.2.6	1.1.1.1	0x679e	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.896279097 CEST	192.168.2.6	1.1.1.1	0x2522	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:51.013206959 CEST	192.168.2.6	1.1.1.1	0xa44a	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.013410091 CEST	192.168.2.6	1.1.1.1	0x7a0c	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:51.021011114 CEST	192.168.2.6	1.1.1.1	0x6a6e	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.789442062 CEST	192.168.2.6	1.1.1.1	0xac7b	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.790139914 CEST	192.168.2.6	1.1.1.1	0xee8a	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:51.921919107 CEST	192.168.2.6	1.1.1.1	0x27ad	Standard query (0)	dx.mountain.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.922118902 CEST	192.168.2.6	1.1.1.1	0x9e9	Standard query (0)	dx.mountain.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:51.926558971 CEST	192.168.2.6	1.1.1.1	0xdec0	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.926733017 CEST	192.168.2.6	1.1.1.1	0xeef7	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:51.937810898 CEST	192.168.2.6	1.1.1.1	0xe6fd	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.938047886 CEST	192.168.2.6	1.1.1.1	0x7e90	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:51.949959993 CEST	192.168.2.6	1.1.1.1	0xac97	Standard query (0)	content.hotjar.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.950136900 CEST	192.168.2.6	1.1.1.1	0x28ff	Standard query (0)	content.hotjar.io	65	IN (0x0001)	false
Oct 1, 2024 11:51:51.954876900 CEST	192.168.2.6	1.1.1.1	0x2021	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.955312014 CEST	192.168.2.6	1.1.1.1	0xb1f4	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.263490915 CEST	192.168.2.6	1.1.1.1	0x45f6	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.263490915 CEST	192.168.2.6	1.1.1.1	0xc97e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.470613956 CEST	192.168.2.6	1.1.1.1	0x7fd6	Standard query (0)	img04.en25.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.470809937 CEST	192.168.2.6	1.1.1.1	0x834d	Standard query (0)	img04.en25.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.479954958 CEST	192.168.2.6	1.1.1.1	0xb95a	Standard query (0)	partner.mediawallahscript.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.480221987 CEST	192.168.2.6	1.1.1.1	0xd8ed	Standard query (0)	partner.mediawallahscript.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.480667114 CEST	192.168.2.6	1.1.1.1	0xc32	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.480870962 CEST	192.168.2.6	1.1.1.1	0x6b9e	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.481827974 CEST	192.168.2.6	1.1.1.1	0x756e	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.482019901 CEST	192.168.2.6	1.1.1.1	0x23fa	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.482609987 CEST	192.168.2.6	1.1.1.1	0xa200	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.482815981 CEST	192.168.2.6	1.1.1.1	0xb47b	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.681854963 CEST	192.168.2.6	1.1.1.1	0xa747	Standard query (0)	surveystats.hotjar.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.682029963 CEST	192.168.2.6	1.1.1.1	0x5556	Standard query (0)	surveystats.hotjar.io	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.747602940 CEST	192.168.2.6	1.1.1.1	0x5a57	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:52.747602940 CEST	192.168.2.6	1.1.1.1	0x4da5	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:53.472373962 CEST	192.168.2.6	1.1.1.1	0x709b	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:53.472537041 CEST	192.168.2.6	1.1.1.1	0x2023	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.045376062 CEST	192.168.2.6	1.1.1.1	0x2adb	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.045530081 CEST	192.168.2.6	1.1.1.1	0x598b	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.063640118 CEST	192.168.2.6	1.1.1.1	0x6b1c	Standard query (0)	trail.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.063782930 CEST	192.168.2.6	1.1.1.1	0x97b	Standard query (0)	trail.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.089732885 CEST	192.168.2.6	1.1.1.1	0xfd8d	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.090076923 CEST	192.168.2.6	1.1.1.1	0x5ac8	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.094400883 CEST	192.168.2.6	1.1.1.1	0xbc9a	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.094739914 CEST	192.168.2.6	1.1.1.1	0x6944	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.096271992 CEST	192.168.2.6	1.1.1.1	0xc5fa	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.096708059 CEST	192.168.2.6	1.1.1.1	0xff5b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.098162889 CEST	192.168.2.6	1.1.1.1	0x96df	Standard query (0)	img04.en25.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.098853111 CEST	192.168.2.6	1.1.1.1	0x2947	Standard query (0)	img04.en25.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.101135969 CEST	192.168.2.6	1.1.1.1	0x53e2	Standard query (0)	surveystats.hotjar.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.101440907 CEST	192.168.2.6	1.1.1.1	0xf60e	Standard query (0)	surveystats.hotjar.io	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.104983091 CEST	192.168.2.6	1.1.1.1	0x9171	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.105125904 CEST	192.168.2.6	1.1.1.1	0xe712	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.136821985 CEST	192.168.2.6	1.1.1.1	0xf4d	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.137161970 CEST	192.168.2.6	1.1.1.1	0xfbde	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.267446995 CEST	192.168.2.6	1.1.1.1	0x37ef	Standard query (0)	px.mountain.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.267621040 CEST	192.168.2.6	1.1.1.1	0x3bf0	Standard query (0)	px.mountain.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:54.624629021 CEST	192.168.2.6	1.1.1.1	0x251e	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.624808073 CEST	192.168.2.6	1.1.1.1	0xe2e7	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:55.134371042 CEST	192.168.2.6	1.1.1.1	0xaf9f	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.134634018 CEST	192.168.2.6	1.1.1.1	0x47e2	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Oct 1, 2024 11:51:55.550101995 CEST	192.168.2.6	1.1.1.1	0x5bf0	Standard query (0)	px.mountain.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:55.550101995 CEST	192.168.2.6	1.1.1.1	0xb04c	Standard query (0)	px.mountain.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.591429949 CEST	192.168.2.6	1.1.1.1	0xf559	Standard query (0)	trail.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.591969967 CEST	192.168.2.6	1.1.1.1	0xf0e8	Standard query (0)	trail.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:55.937607050 CEST	192.168.2.6	1.1.1.1	0x44e5	Standard query (0)	trail.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.938509941 CEST	192.168.2.6	1.1.1.1	0x1037	Standard query (0)	trail.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:56.046426058 CEST	192.168.2.6	1.1.1.1	0x2853	Standard query (0)	gs.mountain.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:56.046601057 CEST	192.168.2.6	1.1.1.1	0xd7a6	Standard query (0)	gs.mountain.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:56.543298960 CEST	192.168.2.6	1.1.1.1	0xfef7	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:56.543504000 CEST	192.168.2.6	1.1.1.1	0x14ed	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:57.222928047 CEST	192.168.2.6	1.1.1.1	0x321d	Standard query (0)	gs.mountain.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:57.222928047 CEST	192.168.2.6	1.1.1.1	0xf548	Standard query (0)	gs.mountain.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.077104092 CEST	192.168.2.6	1.1.1.1	0x18ad	Standard query (0)	zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.077270031 CEST	192.168.2.6	1.1.1.1	0x68d7	Standard query (0)	zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.092757940 CEST	192.168.2.6	1.1.1.1	0x723b	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.092976093 CEST	192.168.2.6	1.1.1.1	0x9d9f	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.153291941 CEST	192.168.2.6	1.1.1.1	0x2ad9	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.153489113 CEST	192.168.2.6	1.1.1.1	0x8d7e	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.534522057 CEST	192.168.2.6	1.1.1.1	0x13af	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.534672976 CEST	192.168.2.6	1.1.1.1	0x745c	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.676922083 CEST	192.168.2.6	1.1.1.1	0x9933	Standard query (0)	assets.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.678000927 CEST	192.168.2.6	1.1.1.1	0x4272	Standard query (0)	assets.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.678508997 CEST	192.168.2.6	1.1.1.1	0x2c63	Standard query (0)	cdn.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.678873062 CEST	192.168.2.6	1.1.1.1	0xe730	Standard query (0)	cdn.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.737030029 CEST	192.168.2.6	1.1.1.1	0xc392	Standard query (0)	zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.737360001 CEST	192.168.2.6	1.1.1.1	0xf7b	Standard query (0)	zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.845666885 CEST	192.168.2.6	1.1.1.1	0x1b1f	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.846021891 CEST	192.168.2.6	1.1.1.1	0xd440	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:58.849262953 CEST	192.168.2.6	1.1.1.1	0x87e3	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.849395037 CEST	192.168.2.6	1.1.1.1	0x91ac	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 1, 2024 11:51:59.359905958 CEST	192.168.2.6	1.1.1.1	0x838b	Standard query (0)	assets.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:59.360110998 CEST	192.168.2.6	1.1.1.1	0x6555	Standard query (0)	assets.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:51:59.610596895 CEST	192.168.2.6	1.1.1.1	0xd8ea	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:59.610724926 CEST	192.168.2.6	1.1.1.1	0x27ea	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 1, 2024 11:51:59.860146046 CEST	192.168.2.6	1.1.1.1	0xa9b	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:59.860290051 CEST	192.168.2.6	1.1.1.1	0xe3d0	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:01.214513063 CEST	192.168.2.6	1.1.1.1	0xd7af	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:01.214732885 CEST	192.168.2.6	1.1.1.1	0xb08d	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 1, 2024 11:52:06.079004049 CEST	192.168.2.6	1.1.1.1	0x607a	Standard query (0)	fra-col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:06.079005003 CEST	192.168.2.6	1.1.1.1	0xf365	Standard query (0)	fra-col.eum-appdynamics.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:07.360394001 CEST	192.168.2.6	1.1.1.1	0x1ee4	Standard query (0)	fra-col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:07.360555887 CEST	192.168.2.6	1.1.1.1	0x5686	Standard query (0)	fra-col.eum-appdynamics.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:15.189834118 CEST	192.168.2.6	1.1.1.1	0xb178	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:20.770019054 CEST	192.168.2.6	1.1.1.1	0x9f2e	Standard query (0)	metrics.hotjar.io	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:20.770169020 CEST	192.168.2.6	1.1.1.1	0x2238	Standard query (0)	metrics.hotjar.io	65	IN (0x0001)	false
Oct 1, 2024 11:52:27.679541111 CEST	192.168.2.6	1.1.1.1	0x428b	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:27.679680109 CEST	192.168.2.6	1.1.1.1	0x6e62	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Oct 1, 2024 11:52:27.695337057 CEST	192.168.2.6	1.1.1.1	0xf651	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:27.695456982 CEST	192.168.2.6	1.1.1.1	0xe0fc	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:28.442276001 CEST	192.168.2.6	1.1.1.1	0xa973	Standard query (0)	legal.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:28.442492008 CEST	192.168.2.6	1.1.1.1	0xfa12	Standard query (0)	legal.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:32.140558004 CEST	192.168.2.6	1.1.1.1	0xcb47	Standard query (0)	rum.browser-intake-datadoghq.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:32.140769958 CEST	192.168.2.6	1.1.1.1	0xb98d	Standard query (0)	rum.browser-intake-datadoghq.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:33.184906006 CEST	192.168.2.6	1.1.1.1	0xf92a	Standard query (0)	legal.thomsonreuters.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:33.185472012 CEST	192.168.2.6	1.1.1.1	0xae8e	Standard query (0)	legal.thomsonreuters.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:34.071360111 CEST	192.168.2.6	1.1.1.1	0x9119	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:34.071729898 CEST	192.168.2.6	1.1.1.1	0xe25a	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:34.962862015 CEST	192.168.2.6	1.1.1.1	0x9b2c	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:34.965087891 CEST	192.168.2.6	1.1.1.1	0x4c72	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:36.619199991 CEST	192.168.2.6	1.1.1.1	0xcc31	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:37.363235950 CEST	192.168.2.6	1.1.1.1	0xbcd7	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:37.363409042 CEST	192.168.2.6	1.1.1.1	0xb45e	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:38.049324989 CEST	192.168.2.6	1.1.1.1	0x69b1	Standard query (0)	app-data.gcs.trstatic.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.049468040 CEST	192.168.2.6	1.1.1.1	0x4081	Standard query (0)	app-data.gcs.trstatic.net	65	IN (0x0001)	false
Oct 1, 2024 11:52:38.079233885 CEST	192.168.2.6	1.1.1.1	0xd118	Standard query (0)	data.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.079387903 CEST	192.168.2.6	1.1.1.1	0x6926	Standard query (0)	data.schemaapp.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:38.135555029 CEST	192.168.2.6	1.1.1.1	0x8c30	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.135723114 CEST	192.168.2.6	1.1.1.1	0x447b	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:38.239834070 CEST	192.168.2.6	1.1.1.1	0xa668	Standard query (0)	v2.d41.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.240139961 CEST	192.168.2.6	1.1.1.1	0xef12	Standard query (0)	v2.d41.co	65	IN (0x0001)	false
Oct 1, 2024 11:52:38.242227077 CEST	192.168.2.6	1.1.1.1	0x3e03	Standard query (0)	platform.cloud.coveo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.242491961 CEST	192.168.2.6	1.1.1.1	0x9eee	Standard query (0)	platform.cloud.coveo.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:38.305651903 CEST	192.168.2.6	1.1.1.1	0x4fa4	Standard query (0)	app-data.gcs.trstatic.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.305915117 CEST	192.168.2.6	1.1.1.1	0xd5ac	Standard query (0)	app-data.gcs.trstatic.net	65	IN (0x0001)	false
Oct 1, 2024 11:52:40.827213049 CEST	192.168.2.6	1.1.1.1	0x281e	Standard query (0)	analytics.cloud.coveo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:40.827389002 CEST	192.168.2.6	1.1.1.1	0x7e65	Standard query (0)	analytics.cloud.coveo.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:41.757204056 CEST	192.168.2.6	1.1.1.1	0xe71d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:41.757365942 CEST	192.168.2.6	1.1.1.1	0x78fc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:42.321876049 CEST	192.168.2.6	1.1.1.1	0x9081	Standard query (0)	westthomsoncom.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:42.322046995 CEST	192.168.2.6	1.1.1.1	0x92cd	Standard query (0)	westthomsoncom.sc.omtrdc.net	65	IN (0x0001)	false
Oct 1, 2024 11:52:42.555191994 CEST	192.168.2.6	1.1.1.1	0xda2e	Standard query (0)	platform.cloud.coveo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:42.555347919 CEST	192.168.2.6	1.1.1.1	0x8e09	Standard query (0)	platform.cloud.coveo.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:43.012049913 CEST	192.168.2.6	1.1.1.1	0x1ed5	Standard query (0)	analytics.cloud.coveo.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.012181044 CEST	192.168.2.6	1.1.1.1	0xf769	Standard query (0)	analytics.cloud.coveo.com	65	IN (0x0001)	false
Oct 1, 2024 11:52:43.219902992 CEST	192.168.2.6	1.1.1.1	0x97a0	Standard query (0)	westthomson.demdex.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.219902992 CEST	192.168.2.6	1.1.1.1	0xa183	Standard query (0)	westthomson.demdex.net	65	IN (0x0001)	false
Oct 1, 2024 11:52:47.965445995 CEST	192.168.2.6	1.1.1.1	0x8912	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:47.965596914 CEST	192.168.2.6	1.1.1.1	0x810f	Standard query (0)	b.6sc.co	65	IN (0x0001)	false
Oct 1, 2024 11:52:49.019023895 CEST	192.168.2.6	1.1.1.1	0xb0c0	Standard query (0)	b.6sc.co	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:49.019175053 CEST	192.168.2.6	1.1.1.1	0x211d	Standard query (0)	b.6sc.co	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 11:51:26.678602934 CEST	1.1.1.1	192.168.2.6	0xd4d0	No error (0)	highq.com		155.46.172.255	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.213500023 CEST	1.1.1.1	192.168.2.6	0x9bc4	No error (0)	www.highq.com	a204422-web-1621559077.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:27.213500023 CEST	1.1.1.1	192.168.2.6	0x9bc4	No error (0)	a204422-web-1621559077.us-east-1.elb.amazonaws.com		34.239.208.227	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.213500023 CEST	1.1.1.1	192.168.2.6	0x9bc4	No error (0)	a204422-web-1621559077.us-east-1.elb.amazonaws.com		3.83.74.183	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.213500023 CEST	1.1.1.1	192.168.2.6	0x9bc4	No error (0)	a204422-web-1621559077.us-east-1.elb.amazonaws.com		18.205.83.226	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.237106085 CEST	1.1.1.1	192.168.2.6	0x9742	No error (0)	www.highq.com	a204422-web-1621559077.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:27.722985983 CEST	1.1.1.1	192.168.2.6	0x7942	No error (0)	legal.thomsonreuters.com	d2ea2b9yqhjp4b.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:27.722985983 CEST	1.1.1.1	192.168.2.6	0x7942	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.125	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.722985983 CEST	1.1.1.1	192.168.2.6	0x7942	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.35	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.722985983 CEST	1.1.1.1	192.168.2.6	0x7942	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.722985983 CEST	1.1.1.1	192.168.2.6	0x7942	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:27.740144014 CEST	1.1.1.1	192.168.2.6	0x49e5	No error (0)	legal.thomsonreuters.com	d2ea2b9yqhjp4b.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:28.562881947 CEST	1.1.1.1	192.168.2.6	0xf50e	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.563155890 CEST	1.1.1.1	192.168.2.6	0xda1	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:28.856692076 CEST	1.1.1.1	192.168.2.6	0x276b	No error (0)	www.datadoghq-browser-agent.com		13.33.219.205	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.857448101 CEST	1.1.1.1	192.168.2.6	0x2b51	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.857448101 CEST	1.1.1.1	192.168.2.6	0x2b51	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.858808994 CEST	1.1.1.1	192.168.2.6	0x5c60	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 1, 2024 11:51:28.860080004 CEST	1.1.1.1	192.168.2.6	0x6ec7	No error (0)	cdn.appdynamics.com		3.160.150.127	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.860080004 CEST	1.1.1.1	192.168.2.6	0x6ec7	No error (0)	cdn.appdynamics.com		3.160.150.62	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.860080004 CEST	1.1.1.1	192.168.2.6	0x6ec7	No error (0)	cdn.appdynamics.com		3.160.150.128	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.860080004 CEST	1.1.1.1	192.168.2.6	0x6ec7	No error (0)	cdn.appdynamics.com		3.160.150.64	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.876436949 CEST	1.1.1.1	192.168.2.6	0x42a6	No error (0)	app-data.gcs.trstatic.net	d22lao95g8jow9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:28.887486935 CEST	1.1.1.1	192.168.2.6	0x2e1b	No error (0)	app-data.gcs.trstatic.net	d22lao95g8jow9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:28.887486935 CEST	1.1.1.1	192.168.2.6	0x2e1b	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.63	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.887486935 CEST	1.1.1.1	192.168.2.6	0x2e1b	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.887486935 CEST	1.1.1.1	192.168.2.6	0x2e1b	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.17	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:28.887486935 CEST	1.1.1.1	192.168.2.6	0x2e1b	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.105	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:29.566185951 CEST	1.1.1.1	192.168.2.6	0x71b9	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:29.566185951 CEST	1.1.1.1	192.168.2.6	0x71b9	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:29.566785097 CEST	1.1.1.1	192.168.2.6	0xac29	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 1, 2024 11:51:29.942939997 CEST	1.1.1.1	192.168.2.6	0x6b9e	No error (0)	app-data.gcs.trstatic.net	d22lao95g8jow9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:29.942939997 CEST	1.1.1.1	192.168.2.6	0x6b9e	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:29.942939997 CEST	1.1.1.1	192.168.2.6	0x6b9e	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.63	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:29.942939997 CEST	1.1.1.1	192.168.2.6	0x6b9e	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.17	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:29.942939997 CEST	1.1.1.1	192.168.2.6	0x6b9e	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.105	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:30.015984058 CEST	1.1.1.1	192.168.2.6	0xf2e8	No error (0)	app-data.gcs.trstatic.net	d22lao95g8jow9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:31.426877022 CEST	1.1.1.1	192.168.2.6	0xea79	No error (0)	cdn.appdynamics.com		3.160.150.128	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.426877022 CEST	1.1.1.1	192.168.2.6	0xea79	No error (0)	cdn.appdynamics.com		3.160.150.64	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.426877022 CEST	1.1.1.1	192.168.2.6	0xea79	No error (0)	cdn.appdynamics.com		3.160.150.62	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.426877022 CEST	1.1.1.1	192.168.2.6	0xea79	No error (0)	cdn.appdynamics.com		3.160.150.127	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.428360939 CEST	1.1.1.1	192.168.2.6	0xd156	No error (0)	www.datadoghq-browser-agent.com		13.33.219.205	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.442486048 CEST	1.1.1.1	192.168.2.6	0x3eaf	No error (0)	legal.thomsonreuters.com	d2ea2b9yqhjp4b.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:31.444963932 CEST	1.1.1.1	192.168.2.6	0x27ab	No error (0)	legal.thomsonreuters.com	d2ea2b9yqhjp4b.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:31.444963932 CEST	1.1.1.1	192.168.2.6	0x27ab	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.35	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.444963932 CEST	1.1.1.1	192.168.2.6	0x27ab	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.444963932 CEST	1.1.1.1	192.168.2.6	0x27ab	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.444963932 CEST	1.1.1.1	192.168.2.6	0x27ab	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.125	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.692971945 CEST	1.1.1.1	192.168.2.6	0xdfd6	No error (0)	rum.browser-intake-datadoghq.com	l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:31.692971945 CEST	1.1.1.1	192.168.2.6	0xdfd6	No error (0)	l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com		3.233.158.33	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.692971945 CEST	1.1.1.1	192.168.2.6	0xdfd6	No error (0)	l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com		3.233.158.35	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.692971945 CEST	1.1.1.1	192.168.2.6	0xdfd6	No error (0)	l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com		3.233.158.34	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:31.693649054 CEST	1.1.1.1	192.168.2.6	0x70f0	No error (0)	rum.browser-intake-datadoghq.com	l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:33.307096004 CEST	1.1.1.1	192.168.2.6	0xfb36	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:33.308099031 CEST	1.1.1.1	192.168.2.6	0x760f	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:33.345808029 CEST	1.1.1.1	192.168.2.6	0x21a6	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:33.345808029 CEST	1.1.1.1	192.168.2.6	0x21a6	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.44	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.345808029 CEST	1.1.1.1	192.168.2.6	0x21a6	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.93	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.345808029 CEST	1.1.1.1	192.168.2.6	0x21a6	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.47	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.345808029 CEST	1.1.1.1	192.168.2.6	0x21a6	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.357492924 CEST	1.1.1.1	192.168.2.6	0x464e	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:33.724998951 CEST	1.1.1.1	192.168.2.6	0xd126	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:33.725127935 CEST	1.1.1.1	192.168.2.6	0x96bb	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:33.802922010 CEST	1.1.1.1	192.168.2.6	0xacc5	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:33.803141117 CEST	1.1.1.1	192.168.2.6	0x827d	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:33.820374012 CEST	1.1.1.1	192.168.2.6	0xe17b	No error (0)	thomsonreuters.scene7.com	wildcard.scene7.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:33.820801020 CEST	1.1.1.1	192.168.2.6	0x13d5	No error (0)	thomsonreuters.scene7.com	wildcard.scene7.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:34.612091064 CEST	1.1.1.1	192.168.2.6	0x6769	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.612091064 CEST	1.1.1.1	192.168.2.6	0x6769	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.612365961 CEST	1.1.1.1	192.168.2.6	0xdb45	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:34.730261087 CEST	1.1.1.1	192.168.2.6	0x19a7	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:34.730676889 CEST	1.1.1.1	192.168.2.6	0x51f4	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:34.730676889 CEST	1.1.1.1	192.168.2.6	0x51f4	No error (0)	cdn-cf.vidyard.com		18.245.31.62	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.730676889 CEST	1.1.1.1	192.168.2.6	0x51f4	No error (0)	cdn-cf.vidyard.com		18.245.31.111	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.730676889 CEST	1.1.1.1	192.168.2.6	0x51f4	No error (0)	cdn-cf.vidyard.com		18.245.31.126	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.730676889 CEST	1.1.1.1	192.168.2.6	0x51f4	No error (0)	cdn-cf.vidyard.com		18.245.31.48	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.842159986 CEST	1.1.1.1	192.168.2.6	0xdbbd	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:34.847109079 CEST	1.1.1.1	192.168.2.6	0x32ad	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:34.847109079 CEST	1.1.1.1	192.168.2.6	0x32ad	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.22	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.847109079 CEST	1.1.1.1	192.168.2.6	0x32ad	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.127	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.847109079 CEST	1.1.1.1	192.168.2.6	0x32ad	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.39	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:34.847109079 CEST	1.1.1.1	192.168.2.6	0x32ad	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.49	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.150.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.152.53	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.26.215	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		3.254.33.149	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.109.49	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.147.230	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942451954 CEST	1.1.1.1	192.168.2.6	0x18f2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.134.193	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942650080 CEST	1.1.1.1	192.168.2.6	0xa6fb	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942650080 CEST	1.1.1.1	192.168.2.6	0xa6fb	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:35.942650080 CEST	1.1.1.1	192.168.2.6	0xa6fb	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.019925117 CEST	1.1.1.1	192.168.2.6	0x30e9	No error (0)	v2.d41.co		18.193.60.9	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.019925117 CEST	1.1.1.1	192.168.2.6	0x30e9	No error (0)	v2.d41.co		18.194.107.212	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.199130058 CEST	1.1.1.1	192.168.2.6	0x62b1	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.201625109 CEST	1.1.1.1	192.168.2.6	0xd36d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:36.202769041 CEST	1.1.1.1	192.168.2.6	0xc212	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.202769041 CEST	1.1.1.1	192.168.2.6	0xc212	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.202769041 CEST	1.1.1.1	192.168.2.6	0xc212	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.47	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.202769041 CEST	1.1.1.1	192.168.2.6	0xc212	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.93	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.202769041 CEST	1.1.1.1	192.168.2.6	0xc212	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.44	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.205943108 CEST	1.1.1.1	192.168.2.6	0x8b4a	No error (0)	thomsonreuters.scene7.com	wildcard.scene7.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.206820965 CEST	1.1.1.1	192.168.2.6	0xd13e	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.206830978 CEST	1.1.1.1	192.168.2.6	0x9f22	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.209690094 CEST	1.1.1.1	192.168.2.6	0xefd3	No error (0)	thomsonreuters.scene7.com	wildcard.scene7.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.211333036 CEST	1.1.1.1	192.168.2.6	0xf73b	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.211333036 CEST	1.1.1.1	192.168.2.6	0xf73b	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.211735964 CEST	1.1.1.1	192.168.2.6	0x46d9	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:36.213011026 CEST	1.1.1.1	192.168.2.6	0xd66c	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.213011026 CEST	1.1.1.1	192.168.2.6	0xd66c	No error (0)	cdn-cf.vidyard.com		18.245.31.111	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.213011026 CEST	1.1.1.1	192.168.2.6	0xd66c	No error (0)	cdn-cf.vidyard.com		18.245.31.126	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.213011026 CEST	1.1.1.1	192.168.2.6	0xd66c	No error (0)	cdn-cf.vidyard.com		18.245.31.62	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.213011026 CEST	1.1.1.1	192.168.2.6	0xd66c	No error (0)	cdn-cf.vidyard.com		18.245.31.48	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.215183973 CEST	1.1.1.1	192.168.2.6	0x4873	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.226939917 CEST	1.1.1.1	192.168.2.6	0xfd72	No error (0)	cdn.vidyard.com	cs6.cn.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.226939917 CEST	1.1.1.1	192.168.2.6	0xfd72	No error (0)	cs6.cn.wpc.omegacdn.net	cs6.wpc.apr-17a6a-2.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.451885939 CEST	1.1.1.1	192.168.2.6	0x23f	No error (0)	store.legal.thomsonreuters.com	legalsolutions.thomsonreuters.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.451885939 CEST	1.1.1.1	192.168.2.6	0x23f	No error (0)	legalsolutions.thomsonreuters.com	store.thomsonreuters.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.451885939 CEST	1.1.1.1	192.168.2.6	0x23f	No error (0)	store.thomsonreuters.com		155.46.172.12	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.452044964 CEST	1.1.1.1	192.168.2.6	0x485c	No error (0)	store.legal.thomsonreuters.com	legalsolutions.thomsonreuters.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.452044964 CEST	1.1.1.1	192.168.2.6	0x485c	No error (0)	legalsolutions.thomsonreuters.com	store.thomsonreuters.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.868221045 CEST	1.1.1.1	192.168.2.6	0x27e2	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.868221045 CEST	1.1.1.1	192.168.2.6	0x27e2	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.868221045 CEST	1.1.1.1	192.168.2.6	0x27e2	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869232893 CEST	1.1.1.1	192.168.2.6	0x4438	No error (0)	westservicesinc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869232893 CEST	1.1.1.1	192.168.2.6	0x4438	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869232893 CEST	1.1.1.1	192.168.2.6	0x4438	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869232893 CEST	1.1.1.1	192.168.2.6	0x4438	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.109.49	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.150.204	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.134.193	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.136.225	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.147.230	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869702101 CEST	1.1.1.1	192.168.2.6	0x4dfc	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.182.176	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.869988918 CEST	1.1.1.1	192.168.2.6	0x33a2	No error (0)	westservicesinc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.872287989 CEST	1.1.1.1	192.168.2.6	0xedb9	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.872287989 CEST	1.1.1.1	192.168.2.6	0xedb9	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.872287989 CEST	1.1.1.1	192.168.2.6	0xedb9	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875237942 CEST	1.1.1.1	192.168.2.6	0xf53b	No error (0)	westthomson.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875237942 CEST	1.1.1.1	192.168.2.6	0xf53b	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875237942 CEST	1.1.1.1	192.168.2.6	0xf53b	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	westthomson.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.252.162.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.152.53	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.136.225	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		46.137.24.228	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.147.230	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.134.193	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:36.875298023 CEST	1.1.1.1	192.168.2.6	0x9a8a	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.568706036 CEST	1.1.1.1	192.168.2.6	0x30c6	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.568706036 CEST	1.1.1.1	192.168.2.6	0x30c6	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.39	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.568706036 CEST	1.1.1.1	192.168.2.6	0x30c6	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.49	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.568706036 CEST	1.1.1.1	192.168.2.6	0x30c6	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.22	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.568706036 CEST	1.1.1.1	192.168.2.6	0x30c6	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.127	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.569648027 CEST	1.1.1.1	192.168.2.6	0x920	No error (0)	v2.d41.co		52.58.230.154	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.569648027 CEST	1.1.1.1	192.168.2.6	0x920	No error (0)	v2.d41.co		52.29.73.15	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.571897030 CEST	1.1.1.1	192.168.2.6	0x6a70	No error (0)	store.legal.thomsonreuters.com	legalsolutions.thomsonreuters.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.571897030 CEST	1.1.1.1	192.168.2.6	0x6a70	No error (0)	legalsolutions.thomsonreuters.com	store.thomsonreuters.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.571897030 CEST	1.1.1.1	192.168.2.6	0x6a70	No error (0)	store.thomsonreuters.com		155.46.172.12	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.579988956 CEST	1.1.1.1	192.168.2.6	0x566e	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.586844921 CEST	1.1.1.1	192.168.2.6	0x116	No error (0)	paapi4153.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.586844921 CEST	1.1.1.1	192.168.2.6	0x116	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.608616114 CEST	1.1.1.1	192.168.2.6	0xab8e	No error (0)	paapi4153.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.608616114 CEST	1.1.1.1	192.168.2.6	0xab8e	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.608616114 CEST	1.1.1.1	192.168.2.6	0xab8e	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		34.200.154.196	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.608616114 CEST	1.1.1.1	192.168.2.6	0xab8e	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		44.193.133.213	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.608616114 CEST	1.1.1.1	192.168.2.6	0xab8e	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		3.228.39.208	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.613127947 CEST	1.1.1.1	192.168.2.6	0xabf1	No error (0)	store.legal.thomsonreuters.com	legalsolutions.thomsonreuters.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.613127947 CEST	1.1.1.1	192.168.2.6	0xabf1	No error (0)	legalsolutions.thomsonreuters.com	store.thomsonreuters.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.788084984 CEST	1.1.1.1	192.168.2.6	0x4bd	No error (0)	api.schemaapp.com	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.788084984 CEST	1.1.1.1	192.168.2.6	0x4bd	No error (0)	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		52.202.121.139	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.788084984 CEST	1.1.1.1	192.168.2.6	0x4bd	No error (0)	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		18.235.188.159	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.788084984 CEST	1.1.1.1	192.168.2.6	0x4bd	No error (0)	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		54.209.147.197	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.788774014 CEST	1.1.1.1	192.168.2.6	0x9384	No error (0)	api.schemaapp.com	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:37.802736044 CEST	1.1.1.1	192.168.2.6	0x1a92	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:37.803401947 CEST	1.1.1.1	192.168.2.6	0xb8c0	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:40.621881962 CEST	1.1.1.1	192.168.2.6	0xac7f	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622232914 CEST	1.1.1.1	192.168.2.6	0x8cdf	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.622757912 CEST	1.1.1.1	192.168.2.6	0xe50e	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:40.623413086 CEST	1.1.1.1	192.168.2.6	0x9df2	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:40.623413086 CEST	1.1.1.1	192.168.2.6	0x9df2	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:41.519869089 CEST	1.1.1.1	192.168.2.6	0xb77	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:41.519869089 CEST	1.1.1.1	192.168.2.6	0xb77	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:41.519869089 CEST	1.1.1.1	192.168.2.6	0xb77	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:41.519869089 CEST	1.1.1.1	192.168.2.6	0xb77	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:41.519869089 CEST	1.1.1.1	192.168.2.6	0xb77	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:41.520220995 CEST	1.1.1.1	192.168.2.6	0xa8c1	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:41.530617952 CEST	1.1.1.1	192.168.2.6	0xb1c3	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:41.547404051 CEST	1.1.1.1	192.168.2.6	0x9224	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:42.974313021 CEST	1.1.1.1	192.168.2.6	0xeaa6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:42.974313021 CEST	1.1.1.1	192.168.2.6	0xeaa6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.109138966 CEST	1.1.1.1	192.168.2.6	0x81d4	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.109138966 CEST	1.1.1.1	192.168.2.6	0x81d4	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.109138966 CEST	1.1.1.1	192.168.2.6	0x81d4	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.109288931 CEST	1.1.1.1	192.168.2.6	0x4952	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.109288931 CEST	1.1.1.1	192.168.2.6	0x4952	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.109288931 CEST	1.1.1.1	192.168.2.6	0x4952	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.129328012 CEST	1.1.1.1	192.168.2.6	0xdf91	No error (0)	westservicesinc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.129328012 CEST	1.1.1.1	192.168.2.6	0xdf91	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.129328012 CEST	1.1.1.1	192.168.2.6	0xdf91	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.129328012 CEST	1.1.1.1	192.168.2.6	0xdf91	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.129707098 CEST	1.1.1.1	192.168.2.6	0xdd89	No error (0)	westservicesinc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.134804010 CEST	1.1.1.1	192.168.2.6	0xea67	No error (0)	paapi4153.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.134804010 CEST	1.1.1.1	192.168.2.6	0xea67	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.134804010 CEST	1.1.1.1	192.168.2.6	0xea67	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		3.228.39.208	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.134804010 CEST	1.1.1.1	192.168.2.6	0xea67	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		44.193.133.213	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.134804010 CEST	1.1.1.1	192.168.2.6	0xea67	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		34.200.154.196	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.137913942 CEST	1.1.1.1	192.168.2.6	0xf2da	No error (0)	api.schemaapp.com	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.141426086 CEST	1.1.1.1	192.168.2.6	0x1842	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.141426086 CEST	1.1.1.1	192.168.2.6	0x1842	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.141426086 CEST	1.1.1.1	192.168.2.6	0x1842	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.150711060 CEST	1.1.1.1	192.168.2.6	0x2483	No error (0)	api.schemaapp.com	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.150711060 CEST	1.1.1.1	192.168.2.6	0x2483	No error (0)	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		98.82.73.200	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.150711060 CEST	1.1.1.1	192.168.2.6	0x2483	No error (0)	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		44.211.3.219	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.150711060 CEST	1.1.1.1	192.168.2.6	0x2483	No error (0)	d-weu2g1x1o6.execute-api.us-east-1.amazonaws.com		44.193.88.171	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.155257940 CEST	1.1.1.1	192.168.2.6	0x8bce	No error (0)	paapi4153.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.155257940 CEST	1.1.1.1	192.168.2.6	0x8bce	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.583538055 CEST	1.1.1.1	192.168.2.6	0x8c0d	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.584084034 CEST	1.1.1.1	192.168.2.6	0x4fbd	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.584150076 CEST	1.1.1.1	192.168.2.6	0x3825	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.584542990 CEST	1.1.1.1	192.168.2.6	0x2132	No error (0)	td.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.585722923 CEST	1.1.1.1	192.168.2.6	0x238e	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:44.844717026 CEST	1.1.1.1	192.168.2.6	0xb5e0	No error (0)	eps.6sc.co		75.2.108.141	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:44.844717026 CEST	1.1.1.1	192.168.2.6	0xb5e0	No error (0)	eps.6sc.co		99.83.231.3	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.594651937 CEST	1.1.1.1	192.168.2.6	0x3712	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.594835997 CEST	1.1.1.1	192.168.2.6	0xd8f0	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 11:51:45.783416986 CEST	1.1.1.1	192.168.2.6	0x1278	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:45.783555984 CEST	1.1.1.1	192.168.2.6	0x3232	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785512924 CEST	1.1.1.1	192.168.2.6	0x487b	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785512924 CEST	1.1.1.1	192.168.2.6	0x487b	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:45.785536051 CEST	1.1.1.1	192.168.2.6	0x34bb	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.065644979 CEST	1.1.1.1	192.168.2.6	0x35b5	No error (0)	api.thomsonreuters.com	d1uy6ivt6fb41q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:47.065644979 CEST	1.1.1.1	192.168.2.6	0x35b5	No error (0)	d1uy6ivt6fb41q.cloudfront.net		18.66.102.21	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.065644979 CEST	1.1.1.1	192.168.2.6	0x35b5	No error (0)	d1uy6ivt6fb41q.cloudfront.net		18.66.102.45	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.065644979 CEST	1.1.1.1	192.168.2.6	0x35b5	No error (0)	d1uy6ivt6fb41q.cloudfront.net		18.66.102.120	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.065644979 CEST	1.1.1.1	192.168.2.6	0x35b5	No error (0)	d1uy6ivt6fb41q.cloudfront.net		18.66.102.26	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.093298912 CEST	1.1.1.1	192.168.2.6	0xe064	No error (0)	api.thomsonreuters.com	d1uy6ivt6fb41q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:47.455234051 CEST	1.1.1.1	192.168.2.6	0x183	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:47.456185102 CEST	1.1.1.1	192.168.2.6	0x537	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:47.691209078 CEST	1.1.1.1	192.168.2.6	0xfd8	No error (0)	cm.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.691652060 CEST	1.1.1.1	192.168.2.6	0xe71e	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:47.692132950 CEST	1.1.1.1	192.168.2.6	0x8bb0	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.692132950 CEST	1.1.1.1	192.168.2.6	0x8bb0	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:47.692827940 CEST	1.1.1.1	192.168.2.6	0x9439	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:47.693259001 CEST	1.1.1.1	192.168.2.6	0x9c22	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.211497068 CEST	1.1.1.1	192.168.2.6	0x619a	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.212650061 CEST	1.1.1.1	192.168.2.6	0x3e79	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.212876081 CEST	1.1.1.1	192.168.2.6	0xd507	No error (0)	j.6sc.co	j2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.213274002 CEST	1.1.1.1	192.168.2.6	0xf37c	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.213274002 CEST	1.1.1.1	192.168.2.6	0xf37c	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.213274002 CEST	1.1.1.1	192.168.2.6	0xf37c	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.213274002 CEST	1.1.1.1	192.168.2.6	0xf37c	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.213274002 CEST	1.1.1.1	192.168.2.6	0xf37c	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.316957951 CEST	1.1.1.1	192.168.2.6	0xd8e6	No error (0)	script.hotjar.com		13.32.27.107	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.316957951 CEST	1.1.1.1	192.168.2.6	0xd8e6	No error (0)	script.hotjar.com		13.32.27.54	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.316957951 CEST	1.1.1.1	192.168.2.6	0xd8e6	No error (0)	script.hotjar.com		13.32.27.19	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.316957951 CEST	1.1.1.1	192.168.2.6	0xd8e6	No error (0)	script.hotjar.com		13.32.27.21	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.318052053 CEST	1.1.1.1	192.168.2.6	0xf0b2	No error (0)	googleads.g.doubleclick.net		172.217.18.98	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.318088055 CEST	1.1.1.1	192.168.2.6	0x7ea1	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 11:51:48.319051027 CEST	1.1.1.1	192.168.2.6	0x7d96	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.319051027 CEST	1.1.1.1	192.168.2.6	0x7d96	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.319051027 CEST	1.1.1.1	192.168.2.6	0x7d96	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.320368052 CEST	1.1.1.1	192.168.2.6	0xbfbc	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.320583105 CEST	1.1.1.1	192.168.2.6	0x1fdf	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.343163013 CEST	1.1.1.1	192.168.2.6	0x8c7e	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.674601078 CEST	1.1.1.1	192.168.2.6	0x7781	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.675450087 CEST	1.1.1.1	192.168.2.6	0x3022	No error (0)	ipv6.6sc.co	ipv6-2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.675589085 CEST	1.1.1.1	192.168.2.6	0x8667	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.675962925 CEST	1.1.1.1	192.168.2.6	0xb104	No error (0)	eps.6sc.co		99.83.231.3	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.675962925 CEST	1.1.1.1	192.168.2.6	0xb104	No error (0)	eps.6sc.co		75.2.108.141	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:48.676754951 CEST	1.1.1.1	192.168.2.6	0x6252	No error (0)	c.6sc.co	c2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.869704008 CEST	1.1.1.1	192.168.2.6	0x9414	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.870671988 CEST	1.1.1.1	192.168.2.6	0x6fd3	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:48.943016052 CEST	1.1.1.1	192.168.2.6	0x4d17	No error (0)	cm.g.doubleclick.net		172.217.23.98	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.103799105 CEST	1.1.1.1	192.168.2.6	0xad42	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.103799105 CEST	1.1.1.1	192.168.2.6	0xad42	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.321058989 CEST	1.1.1.1	192.168.2.6	0xd1ce	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:49.321058989 CEST	1.1.1.1	192.168.2.6	0xd1ce	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:49.321213961 CEST	1.1.1.1	192.168.2.6	0xac56	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:49.321213961 CEST	1.1.1.1	192.168.2.6	0xac56	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:49.560175896 CEST	1.1.1.1	192.168.2.6	0x8d69	No error (0)	dx.mountain.com		34.238.149.65	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.560175896 CEST	1.1.1.1	192.168.2.6	0x8d69	No error (0)	dx.mountain.com		52.7.151.245	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.560175896 CEST	1.1.1.1	192.168.2.6	0x8d69	No error (0)	dx.mountain.com		44.209.137.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	ws.hotjar.com	wsky-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	wsky-live.live.eks.hotjar.com		52.16.153.177	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	wsky-live.live.eks.hotjar.com		54.229.166.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	wsky-live.live.eks.hotjar.com		52.213.163.63	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	wsky-live.live.eks.hotjar.com		52.210.250.156	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	wsky-live.live.eks.hotjar.com		54.75.75.22	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	wsky-live.live.eks.hotjar.com		34.245.251.7	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	wsky-live.live.eks.hotjar.com		99.80.39.116	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644507885 CEST	1.1.1.1	192.168.2.6	0x89bd	No error (0)	wsky-live.live.eks.hotjar.com		52.209.84.30	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.644829988 CEST	1.1.1.1	192.168.2.6	0xf54a	No error (0)	ws.hotjar.com	wsky-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:49.858182907 CEST	1.1.1.1	192.168.2.6	0xf101	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:49.858182907 CEST	1.1.1.1	192.168.2.6	0xf101	No error (0)	pacman-content-live.live.eks.hotjar.com		52.215.101.83	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.858182907 CEST	1.1.1.1	192.168.2.6	0xf101	No error (0)	pacman-content-live.live.eks.hotjar.com		54.73.193.221	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.858182907 CEST	1.1.1.1	192.168.2.6	0xf101	No error (0)	pacman-content-live.live.eks.hotjar.com		34.251.154.115	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:49.858786106 CEST	1.1.1.1	192.168.2.6	0x8a71	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.049732924 CEST	1.1.1.1	192.168.2.6	0x17b6	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.049732924 CEST	1.1.1.1	192.168.2.6	0x17b6	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.049732924 CEST	1.1.1.1	192.168.2.6	0x17b6	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.051733017 CEST	1.1.1.1	192.168.2.6	0x7ad3	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.051733017 CEST	1.1.1.1	192.168.2.6	0x7ad3	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.090938091 CEST	1.1.1.1	192.168.2.6	0x6a4	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.090938091 CEST	1.1.1.1	192.168.2.6	0x6a4	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.091034889 CEST	1.1.1.1	192.168.2.6	0x607d	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.364423037 CEST	1.1.1.1	192.168.2.6	0xde03	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.364423037 CEST	1.1.1.1	192.168.2.6	0xde03	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.364578962 CEST	1.1.1.1	192.168.2.6	0x81eb	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 1, 2024 11:51:50.366424084 CEST	1.1.1.1	192.168.2.6	0xd518	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.367657900 CEST	1.1.1.1	192.168.2.6	0xa0e9	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.368412018 CEST	1.1.1.1	192.168.2.6	0xc119	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.368412018 CEST	1.1.1.1	192.168.2.6	0xc119	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.368412018 CEST	1.1.1.1	192.168.2.6	0xc119	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.392786026 CEST	1.1.1.1	192.168.2.6	0x3728	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 1, 2024 11:51:50.392813921 CEST	1.1.1.1	192.168.2.6	0x328b	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.395876884 CEST	1.1.1.1	192.168.2.6	0x1262	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.396058083 CEST	1.1.1.1	192.168.2.6	0xc9cb	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.427161932 CEST	1.1.1.1	192.168.2.6	0x9822	No error (0)	api.thomsonreuters.com	d1uy6ivt6fb41q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.430212975 CEST	1.1.1.1	192.168.2.6	0xff59	No error (0)	api.thomsonreuters.com	d1uy6ivt6fb41q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.430212975 CEST	1.1.1.1	192.168.2.6	0xff59	No error (0)	d1uy6ivt6fb41q.cloudfront.net		18.66.102.45	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.430212975 CEST	1.1.1.1	192.168.2.6	0xff59	No error (0)	d1uy6ivt6fb41q.cloudfront.net		18.66.102.120	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.430212975 CEST	1.1.1.1	192.168.2.6	0xff59	No error (0)	d1uy6ivt6fb41q.cloudfront.net		18.66.102.21	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.430212975 CEST	1.1.1.1	192.168.2.6	0xff59	No error (0)	d1uy6ivt6fb41q.cloudfront.net		18.66.102.26	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.432137012 CEST	1.1.1.1	192.168.2.6	0x20f5	No error (0)	script.hotjar.com		13.32.27.21	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.432137012 CEST	1.1.1.1	192.168.2.6	0x20f5	No error (0)	script.hotjar.com		13.32.27.107	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.432137012 CEST	1.1.1.1	192.168.2.6	0x20f5	No error (0)	script.hotjar.com		13.32.27.54	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.432137012 CEST	1.1.1.1	192.168.2.6	0x20f5	No error (0)	script.hotjar.com		13.32.27.19	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:50.902710915 CEST	1.1.1.1	192.168.2.6	0x679e	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.902710915 CEST	1.1.1.1	192.168.2.6	0x679e	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.903734922 CEST	1.1.1.1	192.168.2.6	0x2522	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:50.903734922 CEST	1.1.1.1	192.168.2.6	0x2522	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.019862890 CEST	1.1.1.1	192.168.2.6	0xa44a	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.020261049 CEST	1.1.1.1	192.168.2.6	0x7a0c	Name error (3)	sync.search.spotxchange.com	none	none	65	IN (0x0001)	false
Oct 1, 2024 11:51:51.027904987 CEST	1.1.1.1	192.168.2.6	0x6a6e	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.796427965 CEST	1.1.1.1	192.168.2.6	0xac7b	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.796427965 CEST	1.1.1.1	192.168.2.6	0xac7b	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.796427965 CEST	1.1.1.1	192.168.2.6	0xac7b	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.796427965 CEST	1.1.1.1	192.168.2.6	0xac7b	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.796427965 CEST	1.1.1.1	192.168.2.6	0xac7b	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.796427965 CEST	1.1.1.1	192.168.2.6	0xac7b	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.796427965 CEST	1.1.1.1	192.168.2.6	0xac7b	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.796427965 CEST	1.1.1.1	192.168.2.6	0xac7b	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.929028988 CEST	1.1.1.1	192.168.2.6	0x27ad	No error (0)	dx.mountain.com		34.238.149.65	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.929028988 CEST	1.1.1.1	192.168.2.6	0x27ad	No error (0)	dx.mountain.com		44.209.137.118	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.929028988 CEST	1.1.1.1	192.168.2.6	0x27ad	No error (0)	dx.mountain.com		52.7.151.245	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.933310986 CEST	1.1.1.1	192.168.2.6	0xdec0	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.933310986 CEST	1.1.1.1	192.168.2.6	0xdec0	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.944730997 CEST	1.1.1.1	192.168.2.6	0xe6fd	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.944730997 CEST	1.1.1.1	192.168.2.6	0xe6fd	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.944730997 CEST	1.1.1.1	192.168.2.6	0xe6fd	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.945887089 CEST	1.1.1.1	192.168.2.6	0x7e90	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.945887089 CEST	1.1.1.1	192.168.2.6	0x7e90	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.956947088 CEST	1.1.1.1	192.168.2.6	0x28ff	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.957320929 CEST	1.1.1.1	192.168.2.6	0xac97	No error (0)	content.hotjar.io	pacman-content-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.957320929 CEST	1.1.1.1	192.168.2.6	0xac97	No error (0)	pacman-content-live.live.eks.hotjar.com		54.73.193.221	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.957320929 CEST	1.1.1.1	192.168.2.6	0xac97	No error (0)	pacman-content-live.live.eks.hotjar.com		52.215.101.83	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.957320929 CEST	1.1.1.1	192.168.2.6	0xac97	No error (0)	pacman-content-live.live.eks.hotjar.com		34.251.154.115	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.961709976 CEST	1.1.1.1	192.168.2.6	0x2021	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:51.961709976 CEST	1.1.1.1	192.168.2.6	0x2021	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:51.961910009 CEST	1.1.1.1	192.168.2.6	0xb1f4	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.270564079 CEST	1.1.1.1	192.168.2.6	0x45f6	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.271044016 CEST	1.1.1.1	192.168.2.6	0xc97e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.271044016 CEST	1.1.1.1	192.168.2.6	0xc97e	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.478790045 CEST	1.1.1.1	192.168.2.6	0x834d	No error (0)	img04.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.479835033 CEST	1.1.1.1	192.168.2.6	0x7fd6	No error (0)	img04.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.489028931 CEST	1.1.1.1	192.168.2.6	0xc32	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.489028931 CEST	1.1.1.1	192.168.2.6	0xc32	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.489041090 CEST	1.1.1.1	192.168.2.6	0x6b9e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.489041090 CEST	1.1.1.1	192.168.2.6	0x6b9e	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 1, 2024 11:51:52.489041090 CEST	1.1.1.1	192.168.2.6	0x6b9e	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 1, 2024 11:51:52.489048958 CEST	1.1.1.1	192.168.2.6	0x756e	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.489048958 CEST	1.1.1.1	192.168.2.6	0x756e	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.489048958 CEST	1.1.1.1	192.168.2.6	0x756e	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.489048958 CEST	1.1.1.1	192.168.2.6	0x756e	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.489048958 CEST	1.1.1.1	192.168.2.6	0x756e	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490180969 CEST	1.1.1.1	192.168.2.6	0xb47b	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490180969 CEST	1.1.1.1	192.168.2.6	0xb47b	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490190983 CEST	1.1.1.1	192.168.2.6	0xa200	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490190983 CEST	1.1.1.1	192.168.2.6	0xa200	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490190983 CEST	1.1.1.1	192.168.2.6	0xa200	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490190983 CEST	1.1.1.1	192.168.2.6	0xa200	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490190983 CEST	1.1.1.1	192.168.2.6	0xa200	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490200043 CEST	1.1.1.1	192.168.2.6	0xb95a	No error (0)	partner.mediawallahscript.com	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490200043 CEST	1.1.1.1	192.168.2.6	0xb95a	No error (0)	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com		34.246.233.184	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490200043 CEST	1.1.1.1	192.168.2.6	0xb95a	No error (0)	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com		99.80.164.233	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490209103 CEST	1.1.1.1	192.168.2.6	0x23fa	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.490652084 CEST	1.1.1.1	192.168.2.6	0xd8ed	No error (0)	partner.mediawallahscript.com	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.689337969 CEST	1.1.1.1	192.168.2.6	0xa747	No error (0)	surveystats.hotjar.io		18.172.112.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.689337969 CEST	1.1.1.1	192.168.2.6	0xa747	No error (0)	surveystats.hotjar.io		18.172.112.105	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.689337969 CEST	1.1.1.1	192.168.2.6	0xa747	No error (0)	surveystats.hotjar.io		18.172.112.11	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.689337969 CEST	1.1.1.1	192.168.2.6	0xa747	No error (0)	surveystats.hotjar.io		18.172.112.39	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:52.754452944 CEST	1.1.1.1	192.168.2.6	0x4da5	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.754452944 CEST	1.1.1.1	192.168.2.6	0x4da5	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.754960060 CEST	1.1.1.1	192.168.2.6	0x5a57	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:52.754960060 CEST	1.1.1.1	192.168.2.6	0x5a57	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:53.480004072 CEST	1.1.1.1	192.168.2.6	0x2023	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:53.480113029 CEST	1.1.1.1	192.168.2.6	0x709b	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:53.480113029 CEST	1.1.1.1	192.168.2.6	0x709b	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:53.480113029 CEST	1.1.1.1	192.168.2.6	0x709b	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:53.480113029 CEST	1.1.1.1	192.168.2.6	0x709b	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:53.480113029 CEST	1.1.1.1	192.168.2.6	0x709b	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.053097010 CEST	1.1.1.1	192.168.2.6	0x598b	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.053581953 CEST	1.1.1.1	192.168.2.6	0x2adb	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.053581953 CEST	1.1.1.1	192.168.2.6	0x2adb	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.053581953 CEST	1.1.1.1	192.168.2.6	0x2adb	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.053581953 CEST	1.1.1.1	192.168.2.6	0x2adb	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.053581953 CEST	1.1.1.1	192.168.2.6	0x2adb	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.096716881 CEST	1.1.1.1	192.168.2.6	0xfd8d	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.096716881 CEST	1.1.1.1	192.168.2.6	0xfd8d	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.096716881 CEST	1.1.1.1	192.168.2.6	0xfd8d	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.096716881 CEST	1.1.1.1	192.168.2.6	0xfd8d	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.096716881 CEST	1.1.1.1	192.168.2.6	0xfd8d	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.097865105 CEST	1.1.1.1	192.168.2.6	0x5ac8	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.101216078 CEST	1.1.1.1	192.168.2.6	0xbc9a	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.101216078 CEST	1.1.1.1	192.168.2.6	0xbc9a	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.101216078 CEST	1.1.1.1	192.168.2.6	0xbc9a	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.101216078 CEST	1.1.1.1	192.168.2.6	0xbc9a	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.102178097 CEST	1.1.1.1	192.168.2.6	0x6944	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.102178097 CEST	1.1.1.1	192.168.2.6	0x6944	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.103687048 CEST	1.1.1.1	192.168.2.6	0xc5fa	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.103687048 CEST	1.1.1.1	192.168.2.6	0xc5fa	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.103775024 CEST	1.1.1.1	192.168.2.6	0xff5b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.105597973 CEST	1.1.1.1	192.168.2.6	0x96df	No error (0)	img04.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.108477116 CEST	1.1.1.1	192.168.2.6	0x53e2	No error (0)	surveystats.hotjar.io		18.172.112.60	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.108477116 CEST	1.1.1.1	192.168.2.6	0x53e2	No error (0)	surveystats.hotjar.io		18.172.112.11	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.108477116 CEST	1.1.1.1	192.168.2.6	0x53e2	No error (0)	surveystats.hotjar.io		18.172.112.39	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.108477116 CEST	1.1.1.1	192.168.2.6	0x53e2	No error (0)	surveystats.hotjar.io		18.172.112.105	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.111857891 CEST	1.1.1.1	192.168.2.6	0xe712	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.111857891 CEST	1.1.1.1	192.168.2.6	0xe712	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 1, 2024 11:51:54.111857891 CEST	1.1.1.1	192.168.2.6	0xe712	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 1, 2024 11:51:54.112098932 CEST	1.1.1.1	192.168.2.6	0x9171	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.112098932 CEST	1.1.1.1	192.168.2.6	0x9171	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.119808912 CEST	1.1.1.1	192.168.2.6	0x2947	No error (0)	img04.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.144685030 CEST	1.1.1.1	192.168.2.6	0xf4d	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.144685030 CEST	1.1.1.1	192.168.2.6	0xf4d	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.144685030 CEST	1.1.1.1	192.168.2.6	0xf4d	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.144685030 CEST	1.1.1.1	192.168.2.6	0xf4d	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.144685030 CEST	1.1.1.1	192.168.2.6	0xf4d	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.144740105 CEST	1.1.1.1	192.168.2.6	0xfbde	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.274563074 CEST	1.1.1.1	192.168.2.6	0x37ef	No error (0)	px.mountain.com		52.89.99.220	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.274563074 CEST	1.1.1.1	192.168.2.6	0x37ef	No error (0)	px.mountain.com		35.85.106.161	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.274563074 CEST	1.1.1.1	192.168.2.6	0x37ef	No error (0)	px.mountain.com		52.37.218.4	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.274563074 CEST	1.1.1.1	192.168.2.6	0x37ef	No error (0)	px.mountain.com		35.81.173.170	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.274563074 CEST	1.1.1.1	192.168.2.6	0x37ef	No error (0)	px.mountain.com		52.42.124.195	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.274563074 CEST	1.1.1.1	192.168.2.6	0x37ef	No error (0)	px.mountain.com		34.210.219.79	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.274563074 CEST	1.1.1.1	192.168.2.6	0x37ef	No error (0)	px.mountain.com		44.235.191.156	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.283010006 CEST	1.1.1.1	192.168.2.6	0x97b	No error (0)	trail.thomsonreuters.com	s1575097598.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.283010006 CEST	1.1.1.1	192.168.2.6	0x97b	No error (0)	s1575097598.t.eloqua.com	p04i.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.292726994 CEST	1.1.1.1	192.168.2.6	0x6b1c	No error (0)	trail.thomsonreuters.com	s1575097598.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.292726994 CEST	1.1.1.1	192.168.2.6	0x6b1c	No error (0)	s1575097598.t.eloqua.com	p04i.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.292726994 CEST	1.1.1.1	192.168.2.6	0x6b1c	No error (0)	p04i.t.eloqua.com		130.35.231.29	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.632457972 CEST	1.1.1.1	192.168.2.6	0x251e	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:54.632457972 CEST	1.1.1.1	192.168.2.6	0x251e	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.632457972 CEST	1.1.1.1	192.168.2.6	0x251e	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.632457972 CEST	1.1.1.1	192.168.2.6	0x251e	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.632457972 CEST	1.1.1.1	192.168.2.6	0x251e	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:54.633039951 CEST	1.1.1.1	192.168.2.6	0xe2e7	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:55.142211914 CEST	1.1.1.1	192.168.2.6	0xaf9f	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:55.142890930 CEST	1.1.1.1	192.168.2.6	0x47e2	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:55.557564020 CEST	1.1.1.1	192.168.2.6	0xb04c	No error (0)	px.mountain.com		44.235.191.156	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.557564020 CEST	1.1.1.1	192.168.2.6	0xb04c	No error (0)	px.mountain.com		35.81.173.170	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.557564020 CEST	1.1.1.1	192.168.2.6	0xb04c	No error (0)	px.mountain.com		35.85.106.161	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.557564020 CEST	1.1.1.1	192.168.2.6	0xb04c	No error (0)	px.mountain.com		52.42.124.195	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.557564020 CEST	1.1.1.1	192.168.2.6	0xb04c	No error (0)	px.mountain.com		52.89.99.220	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.557564020 CEST	1.1.1.1	192.168.2.6	0xb04c	No error (0)	px.mountain.com		52.37.218.4	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:55.557564020 CEST	1.1.1.1	192.168.2.6	0xb04c	No error (0)	px.mountain.com		34.210.219.79	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:56.010504961 CEST	1.1.1.1	192.168.2.6	0xf0e8	No error (0)	trail.thomsonreuters.com	s1575097598.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.010504961 CEST	1.1.1.1	192.168.2.6	0xf0e8	No error (0)	s1575097598.t.eloqua.com	p04i.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.064433098 CEST	1.1.1.1	192.168.2.6	0x2853	No error (0)	gs.mountain.com		35.81.162.201	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:56.064433098 CEST	1.1.1.1	192.168.2.6	0x2853	No error (0)	gs.mountain.com		52.12.117.226	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:56.158241987 CEST	1.1.1.1	192.168.2.6	0x44e5	No error (0)	trail.thomsonreuters.com	s1575097598.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.158241987 CEST	1.1.1.1	192.168.2.6	0x44e5	No error (0)	s1575097598.t.eloqua.com	p04i.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.158241987 CEST	1.1.1.1	192.168.2.6	0x44e5	No error (0)	p04i.t.eloqua.com		130.35.231.29	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:56.268691063 CEST	1.1.1.1	192.168.2.6	0xf559	No error (0)	trail.thomsonreuters.com	s1575097598.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.268691063 CEST	1.1.1.1	192.168.2.6	0xf559	No error (0)	s1575097598.t.eloqua.com	p04i.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.268691063 CEST	1.1.1.1	192.168.2.6	0xf559	No error (0)	p04i.t.eloqua.com		130.35.231.29	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:56.377810001 CEST	1.1.1.1	192.168.2.6	0x1037	No error (0)	trail.thomsonreuters.com	s1575097598.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.377810001 CEST	1.1.1.1	192.168.2.6	0x1037	No error (0)	s1575097598.t.eloqua.com	p04i.t.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.551274061 CEST	1.1.1.1	192.168.2.6	0xfef7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:56.551274061 CEST	1.1.1.1	192.168.2.6	0xfef7	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:56.551287889 CEST	1.1.1.1	192.168.2.6	0x14ed	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:57.229990005 CEST	1.1.1.1	192.168.2.6	0x321d	No error (0)	gs.mountain.com		52.12.117.226	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:57.229990005 CEST	1.1.1.1	192.168.2.6	0x321d	No error (0)	gs.mountain.com		35.81.162.201	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.089329004 CEST	1.1.1.1	192.168.2.6	0x68d7	No error (0)	zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.089329004 CEST	1.1.1.1	192.168.2.6	0x68d7	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.089822054 CEST	1.1.1.1	192.168.2.6	0x18ad	No error (0)	zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.089822054 CEST	1.1.1.1	192.168.2.6	0x18ad	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.100373030 CEST	1.1.1.1	192.168.2.6	0x723b	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.102921963 CEST	1.1.1.1	192.168.2.6	0x9d9f	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.161079884 CEST	1.1.1.1	192.168.2.6	0x2ad9	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.161079884 CEST	1.1.1.1	192.168.2.6	0x2ad9	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.161079884 CEST	1.1.1.1	192.168.2.6	0x2ad9	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.161079884 CEST	1.1.1.1	192.168.2.6	0x2ad9	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.541482925 CEST	1.1.1.1	192.168.2.6	0x13af	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.541482925 CEST	1.1.1.1	192.168.2.6	0x13af	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.542607069 CEST	1.1.1.1	192.168.2.6	0x745c	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.542607069 CEST	1.1.1.1	192.168.2.6	0x745c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.684720039 CEST	1.1.1.1	192.168.2.6	0x9933	No error (0)	assets.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.685595989 CEST	1.1.1.1	192.168.2.6	0x2c63	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.685595989 CEST	1.1.1.1	192.168.2.6	0x2c63	No error (0)	cdn-cf.vidyard.com		18.245.31.111	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.685595989 CEST	1.1.1.1	192.168.2.6	0x2c63	No error (0)	cdn-cf.vidyard.com		18.245.31.48	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.685595989 CEST	1.1.1.1	192.168.2.6	0x2c63	No error (0)	cdn-cf.vidyard.com		18.245.31.62	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.685595989 CEST	1.1.1.1	192.168.2.6	0x2c63	No error (0)	cdn-cf.vidyard.com		18.245.31.126	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.699434996 CEST	1.1.1.1	192.168.2.6	0x4272	No error (0)	assets.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.706681967 CEST	1.1.1.1	192.168.2.6	0xe730	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.748699903 CEST	1.1.1.1	192.168.2.6	0xf7b	No error (0)	zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.748699903 CEST	1.1.1.1	192.168.2.6	0xf7b	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.750118017 CEST	1.1.1.1	192.168.2.6	0xc392	No error (0)	zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.750118017 CEST	1.1.1.1	192.168.2.6	0xc392	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.852963924 CEST	1.1.1.1	192.168.2.6	0xd440	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.852963924 CEST	1.1.1.1	192.168.2.6	0xd440	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.853154898 CEST	1.1.1.1	192.168.2.6	0x1b1f	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.853154898 CEST	1.1.1.1	192.168.2.6	0x1b1f	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:58.856041908 CEST	1.1.1.1	192.168.2.6	0x87e3	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.856041908 CEST	1.1.1.1	192.168.2.6	0x87e3	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.856041908 CEST	1.1.1.1	192.168.2.6	0x87e3	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:58.856041908 CEST	1.1.1.1	192.168.2.6	0x87e3	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:59.368356943 CEST	1.1.1.1	192.168.2.6	0x6555	No error (0)	assets.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:59.378129005 CEST	1.1.1.1	192.168.2.6	0x838b	No error (0)	assets.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:59.617439985 CEST	1.1.1.1	192.168.2.6	0x27ea	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:59.617537022 CEST	1.1.1.1	192.168.2.6	0xd8ea	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:59.617537022 CEST	1.1.1.1	192.168.2.6	0xd8ea	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:51:59.866935968 CEST	1.1.1.1	192.168.2.6	0xa9b	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:59.866935968 CEST	1.1.1.1	192.168.2.6	0xa9b	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:59.867338896 CEST	1.1.1.1	192.168.2.6	0xe3d0	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:51:59.867338896 CEST	1.1.1.1	192.168.2.6	0xe3d0	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:01.221457958 CEST	1.1.1.1	192.168.2.6	0xd7af	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:01.221457958 CEST	1.1.1.1	192.168.2.6	0xd7af	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:01.261996984 CEST	1.1.1.1	192.168.2.6	0xb08d	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:01.261996984 CEST	1.1.1.1	192.168.2.6	0xb08d	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:06.086363077 CEST	1.1.1.1	192.168.2.6	0x607a	No error (0)	fra-col.eum-appdynamics.com	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:06.086363077 CEST	1.1.1.1	192.168.2.6	0x607a	No error (0)	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		18.184.92.94	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:06.086363077 CEST	1.1.1.1	192.168.2.6	0x607a	No error (0)	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		18.196.132.53	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:06.086363077 CEST	1.1.1.1	192.168.2.6	0x607a	No error (0)	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		52.58.71.4	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:06.098110914 CEST	1.1.1.1	192.168.2.6	0xf365	No error (0)	fra-col.eum-appdynamics.com	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:07.368360043 CEST	1.1.1.1	192.168.2.6	0x1ee4	No error (0)	fra-col.eum-appdynamics.com	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:07.368360043 CEST	1.1.1.1	192.168.2.6	0x1ee4	No error (0)	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		18.184.92.94	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:07.368360043 CEST	1.1.1.1	192.168.2.6	0x1ee4	No error (0)	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		52.58.71.4	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:07.368360043 CEST	1.1.1.1	192.168.2.6	0x1ee4	No error (0)	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		18.196.132.53	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:07.369430065 CEST	1.1.1.1	192.168.2.6	0x5686	No error (0)	fra-col.eum-appdynamics.com	collector-proxy-alb-1167645830.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:15.196863890 CEST	1.1.1.1	192.168.2.6	0xb178	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:20.777282953 CEST	1.1.1.1	192.168.2.6	0x9f2e	No error (0)	metrics.hotjar.io	pacman-metrics-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:20.777282953 CEST	1.1.1.1	192.168.2.6	0x9f2e	No error (0)	pacman-metrics-live.live.eks.hotjar.com		52.48.85.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:20.777282953 CEST	1.1.1.1	192.168.2.6	0x9f2e	No error (0)	pacman-metrics-live.live.eks.hotjar.com		34.254.68.152	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:20.777282953 CEST	1.1.1.1	192.168.2.6	0x9f2e	No error (0)	pacman-metrics-live.live.eks.hotjar.com		52.49.50.55	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:20.777360916 CEST	1.1.1.1	192.168.2.6	0x2238	No error (0)	metrics.hotjar.io	pacman-metrics-live.live.eks.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:27.686299086 CEST	1.1.1.1	192.168.2.6	0x6e62	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:27.686415911 CEST	1.1.1.1	192.168.2.6	0x428b	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:27.686415911 CEST	1.1.1.1	192.168.2.6	0x428b	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:27.702049017 CEST	1.1.1.1	192.168.2.6	0xf651	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:27.702049017 CEST	1.1.1.1	192.168.2.6	0xf651	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:27.702049017 CEST	1.1.1.1	192.168.2.6	0xf651	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:27.702181101 CEST	1.1.1.1	192.168.2.6	0xe0fc	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:27.702181101 CEST	1.1.1.1	192.168.2.6	0xe0fc	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:28.453421116 CEST	1.1.1.1	192.168.2.6	0xa973	No error (0)	legal.thomsonreuters.com	d2ea2b9yqhjp4b.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:28.453421116 CEST	1.1.1.1	192.168.2.6	0xa973	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.125	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:28.453421116 CEST	1.1.1.1	192.168.2.6	0xa973	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:28.453421116 CEST	1.1.1.1	192.168.2.6	0xa973	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:28.453421116 CEST	1.1.1.1	192.168.2.6	0xa973	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.35	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:28.461728096 CEST	1.1.1.1	192.168.2.6	0xfa12	No error (0)	legal.thomsonreuters.com	d2ea2b9yqhjp4b.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:32.436614037 CEST	1.1.1.1	192.168.2.6	0xb98d	No error (0)	rum.browser-intake-datadoghq.com	l4-logs-http-rum-pub-s1-6386d34262e59173.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:32.437309027 CEST	1.1.1.1	192.168.2.6	0xcb47	No error (0)	rum.browser-intake-datadoghq.com	l4-logs-http-rum-pub-s0-7d264be627ade923.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:32.437309027 CEST	1.1.1.1	192.168.2.6	0xcb47	No error (0)	l4-logs-http-rum-pub-s0-7d264be627ade923.elb.us-east-1.amazonaws.com		3.233.158.30	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:32.437309027 CEST	1.1.1.1	192.168.2.6	0xcb47	No error (0)	l4-logs-http-rum-pub-s0-7d264be627ade923.elb.us-east-1.amazonaws.com		3.233.158.31	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:32.437309027 CEST	1.1.1.1	192.168.2.6	0xcb47	No error (0)	l4-logs-http-rum-pub-s0-7d264be627ade923.elb.us-east-1.amazonaws.com		3.233.158.32	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:33.205091000 CEST	1.1.1.1	192.168.2.6	0xae8e	No error (0)	legal.thomsonreuters.com	d2ea2b9yqhjp4b.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:33.206048965 CEST	1.1.1.1	192.168.2.6	0xf92a	No error (0)	legal.thomsonreuters.com	d2ea2b9yqhjp4b.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:33.206048965 CEST	1.1.1.1	192.168.2.6	0xf92a	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:33.206048965 CEST	1.1.1.1	192.168.2.6	0xf92a	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.125	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:33.206048965 CEST	1.1.1.1	192.168.2.6	0xf92a	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.35	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:33.206048965 CEST	1.1.1.1	192.168.2.6	0xf92a	No error (0)	d2ea2b9yqhjp4b.cloudfront.net		18.245.46.114	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:34.080323935 CEST	1.1.1.1	192.168.2.6	0xe25a	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:34.080535889 CEST	1.1.1.1	192.168.2.6	0x9119	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:34.969611883 CEST	1.1.1.1	192.168.2.6	0x9b2c	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:34.972135067 CEST	1.1.1.1	192.168.2.6	0x4c72	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:36.626669884 CEST	1.1.1.1	192.168.2.6	0xcc31	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:37.370342970 CEST	1.1.1.1	192.168.2.6	0xbcd7	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:37.370342970 CEST	1.1.1.1	192.168.2.6	0xbcd7	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:37.370395899 CEST	1.1.1.1	192.168.2.6	0xb45e	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 1, 2024 11:52:38.098720074 CEST	1.1.1.1	192.168.2.6	0x6926	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:38.109792948 CEST	1.1.1.1	192.168.2.6	0xd118	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:38.109792948 CEST	1.1.1.1	192.168.2.6	0xd118	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.39	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.109792948 CEST	1.1.1.1	192.168.2.6	0xd118	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.22	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.109792948 CEST	1.1.1.1	192.168.2.6	0xd118	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.49	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.109792948 CEST	1.1.1.1	192.168.2.6	0xd118	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.127	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.121431112 CEST	1.1.1.1	192.168.2.6	0x69b1	No error (0)	app-data.gcs.trstatic.net	d22lao95g8jow9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:38.121431112 CEST	1.1.1.1	192.168.2.6	0x69b1	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.17	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.121431112 CEST	1.1.1.1	192.168.2.6	0x69b1	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.121431112 CEST	1.1.1.1	192.168.2.6	0x69b1	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.105	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.121431112 CEST	1.1.1.1	192.168.2.6	0x69b1	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.63	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.136307001 CEST	1.1.1.1	192.168.2.6	0x4081	No error (0)	app-data.gcs.trstatic.net	d22lao95g8jow9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:38.142415047 CEST	1.1.1.1	192.168.2.6	0x8c30	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:38.142817974 CEST	1.1.1.1	192.168.2.6	0x447b	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:38.249917030 CEST	1.1.1.1	192.168.2.6	0xa668	No error (0)	v2.d41.co		18.192.30.99	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.249917030 CEST	1.1.1.1	192.168.2.6	0xa668	No error (0)	v2.d41.co		35.157.172.123	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.249929905 CEST	1.1.1.1	192.168.2.6	0x3e03	No error (0)	platform.cloud.coveo.com		99.83.254.102	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.249929905 CEST	1.1.1.1	192.168.2.6	0x3e03	No error (0)	platform.cloud.coveo.com		75.2.21.6	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.315105915 CEST	1.1.1.1	192.168.2.6	0xd5ac	No error (0)	app-data.gcs.trstatic.net	d22lao95g8jow9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:38.332990885 CEST	1.1.1.1	192.168.2.6	0x4fa4	No error (0)	app-data.gcs.trstatic.net	d22lao95g8jow9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:38.332990885 CEST	1.1.1.1	192.168.2.6	0x4fa4	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.105	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.332990885 CEST	1.1.1.1	192.168.2.6	0x4fa4	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.332990885 CEST	1.1.1.1	192.168.2.6	0x4fa4	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.17	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:38.332990885 CEST	1.1.1.1	192.168.2.6	0x4fa4	No error (0)	d22lao95g8jow9.cloudfront.net		13.35.58.63	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:40.834206104 CEST	1.1.1.1	192.168.2.6	0x281e	No error (0)	analytics.cloud.coveo.com		75.2.114.51	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:40.834206104 CEST	1.1.1.1	192.168.2.6	0x281e	No error (0)	analytics.cloud.coveo.com		99.83.141.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:41.764017105 CEST	1.1.1.1	192.168.2.6	0xe71d	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:41.764169931 CEST	1.1.1.1	192.168.2.6	0x78fc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 11:52:42.331145048 CEST	1.1.1.1	192.168.2.6	0x9081	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:42.331145048 CEST	1.1.1.1	192.168.2.6	0x9081	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:42.331145048 CEST	1.1.1.1	192.168.2.6	0x9081	No error (0)	westthomsoncom.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:42.573914051 CEST	1.1.1.1	192.168.2.6	0xda2e	No error (0)	platform.cloud.coveo.com		75.2.21.6	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:42.573914051 CEST	1.1.1.1	192.168.2.6	0xda2e	No error (0)	platform.cloud.coveo.com		99.83.254.102	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.029386044 CEST	1.1.1.1	192.168.2.6	0x1ed5	No error (0)	analytics.cloud.coveo.com		75.2.114.51	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.029386044 CEST	1.1.1.1	192.168.2.6	0x1ed5	No error (0)	analytics.cloud.coveo.com		99.83.141.71	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.241486073 CEST	1.1.1.1	192.168.2.6	0xa183	No error (0)	westthomson.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:43.241486073 CEST	1.1.1.1	192.168.2.6	0xa183	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:43.241486073 CEST	1.1.1.1	192.168.2.6	0xa183	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	westthomson.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.86.51	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.26.215	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.152.53	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.109.49	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.34.30.147	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.255.228.90	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:43.251658916 CEST	1.1.1.1	192.168.2.6	0x97a0	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.136.225	A (IP address)	IN (0x0001)	false
Oct 1, 2024 11:52:47.972513914 CEST	1.1.1.1	192.168.2.6	0x810f	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:47.972918987 CEST	1.1.1.1	192.168.2.6	0x8912	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:49.026249886 CEST	1.1.1.1	192.168.2.6	0x211d	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 11:52:49.027704954 CEST	1.1.1.1	192.168.2.6	0xb0c0	No error (0)	b.6sc.co	b2.6sc.co.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49715	155.46.172.255	80	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 11:51:26.684567928 CEST	424	OUT	GET / HTTP/1.1 Host: highq.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 11:51:27.188782930 CEST	125	IN	HTTP/1.0 301 Moved Permanently Location: http://www.highq.com/ Server: BigIP Connection: Keep-Alive Content-Length: 0
Oct 1, 2024 11:52:12.194263935 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 1, 2024 11:52:57.211184025 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49718	34.239.208.227	80	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 11:51:27.227751970 CEST	428	OUT	GET / HTTP/1.1 Host: www.highq.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 11:51:27.709717035 CEST	406	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 01 Oct 2024 09:51:27 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Server: nginx Location: https://legal.thomsonreuters.com/en/products/highq X-UA-Compatible: IE=edge Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 1, 2024 11:52:12.715017080 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 1, 2024 11:52:57.724247932 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49716	155.46.172.255	80	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 11:52:11.698529959 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49717	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:27 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 56 4b 4d 53 53 62 51 6a 43 6b 53 53 65 6c 54 46 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 30 33 65 33 66 63 66 35 65 62 38 39 39 34 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: VKMSSbQjCkSSelTF.1Context: 603e3fcf5eb89947
2024-10-01 09:51:27 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 09:51:27 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 56 4b 4d 53 53 62 51 6a 43 6b 53 53 65 6c 54 46 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 30 33 65 33 66 63 66 35 65 62 38 39 39 34 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 38 46 46 4f 62 35 53 74 35 2b 2b 4a 71 76 43 71 5a 4b 63 56 46 34 38 58 55 59 49 69 56 6c 36 6b 72 53 76 44 46 31 76 37 69 47 68 6e 6d 42 72 43 54 48 50 52 71 6a 47 43 4c 34 58 31 51 41 68 43 69 4d 32 44 37 56 59 4c 6a 79 63 49 4e 54 62 51 51 6b 31 6c 75 35 57 67 74 4a 67 54 33 43 47 45 4b 48 43 44 35 35 52 44 4a 47 44 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: VKMSSbQjCkSSelTF.2Context: 603e3fcf5eb89947<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAS8FFOb5St5++JqvCqZKcVF48XUYIiVl6krSvDF1v7iGhnmBrCTHPRqjGCL4X1QAhCiM2D7VYLjycINTbQQk1lu5WgtJgT3CGEKHCD55RDJGDh
2024-10-01 09:51:27 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 56 4b 4d 53 53 62 51 6a 43 6b 53 53 65 6c 54 46 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 30 33 65 33 66 63 66 35 65 62 38 39 39 34 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: VKMSSbQjCkSSelTF.3Context: 603e3fcf5eb89947<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 09:51:27 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 09:51:27 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 70 34 34 2b 37 45 63 65 65 30 47 48 4e 4e 30 6c 6c 77 44 57 37 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: p44+7Ecee0GHNN0llwDW7A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49719	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:28 UTC	684	OUT	GET /en/products/highq HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:28 UTC	1789	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 257585 Connection: close Date: Tue, 01 Oct 2024 09:44:03 GMT Set-Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; Expires=Tue, 08 Oct 2024 09:44:02 GMT; Path=/ Set-Cookie: AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; Expires=Tue, 08 Oct 2024 09:44:02 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Cache-Control: max-age=900, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Tue, 01 Oct 2024 09:44:03 GMT ETag: W/"3ee31-623672963a961" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:59:02 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com Content-Disposition: inline Vary: Accept-Encoding,User-Agent X-Cache: Hit from cloudfront Via: 1.1 f9b794511293751fa3df3ec945ab397e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 4M1GPm58PKYHFcJcVDDMPJD_3DGk06OLJrGEOzQIm6a18MQlaIVK8A== Age: 445
2024-10-01 09:51:28 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 0a 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html lang="en-US"> <head> <meta charset="utf-8"/> <link rel="icon" href="/favicon.ico"/> <meta content="width=device-width, initial-scale=1" name="viewport"/> <script src="https:/
2024-10-01 09:51:28 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 62 2d 48 65 61 64 65 72 2d 61 63 74 69 6f 6e 4e 61 76 69 67 61 74 69 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 62 62 2d 49 63 6f 6e 4c 69 73 74 2d 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 6d 65 6e 75 42 75 74 74 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </span> </a> <div class="bb-Header-actionNavigation"> <ul class="bb-IconList--horizontal menuButton"> <li>
2024-10-01 09:51:28 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 62 2d 4c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 65 6e 2f 6c 65 67 61 6c 2f 64 61 74 61 2d 64 6f 63 75 6d 65 6e 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 64 61 74 61 2d 64 72 69 76 65 6e 2d 69 6e 73 69 67 68 74 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <li> <a class="bb-Link" href="/en/legal/data-document-management/data-driven-insights">
2024-10-01 09:51:28 UTC	14808	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 0a 20 20 20 20 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 0a 20 20 20 20 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 0a 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 4e 61 76 69 67 61 74 69 6f 6e 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 32 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 62 2d 4d 65 67 61 6d 65 6e 75 2d 63 Data Ascii: </a> </div> </div> </div></div> </div> </div></div> </div><div class="secondaryNavigation aem-GridColumn aem-GridColumn--default--12"><div class="bb-Megamenu-c
2024-10-01 09:51:28 UTC	1576	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 62 2d 4c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 78 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 2f 65 6e 2f 74 61 78 2d 61 63 63 6f 75 6e 74 69 6e 67 2f 70 72 61 63 74 69 63 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 67 72 6f 77 74 68 2f 63 6c 69 65 6e 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 43 6c 69 65 6e 74 20 6d 61 6e 61 67 Data Ascii: <li> <a class="bb-Link" href="https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/client-management"> <span>Client manag
2024-10-01 09:51:28 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 62 2d 4c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 78 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 2f 65 6e 2f 74 61 78 2d 61 63 63 6f 75 6e 74 69 6e 67 2f 70 72 61 63 74 69 63 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 67 72 6f 77 74 68 2f 77 6f 72 6b 66 6c 6f 77 2d 6d 61 6e 61 67 65 6d 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 57 6f 72 6b 66 6c 6f 77 20 6d 61 6e 61 67 65 6d 65 6e 74 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <a class="bb-Link" href="https://tax.thomsonreuters.com/en/tax-accounting/practice-management-growth/workflow-management"> <span>Workflow management</span>
2024-10-01 09:51:28 UTC	16384	IN	Data Raw: 41 75 74 6f 6d 61 74 65 20 77 6f 72 6b 20 70 61 70 65 72 20 70 72 65 70 61 72 61 74 69 6f 6e 20 61 6e 64 20 65 6c 69 6d 69 6e 61 74 65 20 64 61 74 61 20 65 6e 74 72 79 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 0a 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 62 62 2d 4c 69 73 74 20 62 62 2d 4d 65 67 61 6d 65 6e 75 2d 61 64 64 69 74 69 6f 6e 61 6c 4c 69 6e 6b 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 62 2d 4c 69 6e 6b 20 62 62 2d 4c 69 6e 6b 2d 2d 6d 65 64 69 75 6d 22 20 68 72 Data Ascii: Automate work paper preparation and eliminate data entry</p> </a> </li> </ul> <div> <ul class="bb-List bb-Megamenu-additionalLinks"> <li> <a class="bb-Link bb-Link--medium" hr
2024-10-01 09:51:28 UTC	16384	IN	Data Raw: 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 65 6d 20 63 6c 61 73 73 3d 22 62 62 2d 6c 69 6e 6b 73 2d 69 63 6e 22 3e 3c 2f 65 6d 3e 0a 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 42 61 63 6b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 3c 68 32 20 63 6c 61 73 73 3d 22 62 62 2d 48 65 61 64 69 6e 67 36 20 62 62 2d 4d 65 67 61 6d 65 6e 75 2d 68 65 61 64 69 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 62 62 2d 49 63 6f 6e 20 66 69 72 73 74 20 62 62 2d 4d 65 67 61 6d 65 6e 75 2d 68 65 61 64 69 6e 67 49 63 6f 6e 22 20 68 72 65 66 3d 22 2f 65 6e 2f 72 69 73 6b 2d 66 72 61 75 64 2d 69 6e 76 65 73 74 69 67 61 74 Data Ascii: "> <em class="bb-links-icn"></em> </span> <span class="content">Back</span> </button> <h2 class="bb-Heading6 bb-Megamenu-heading"> <a class="bb-Icon first bb-Megamenu-headingIcon" href="/en/risk-fraud-investigat
2024-10-01 09:51:28 UTC	16384	IN	Data Raw: 6d 2f 65 6e 2f 77 68 6f 2d 77 65 2d 73 65 72 76 65 2f 6d 61 63 68 69 6e 65 2d 6c 65 61 72 6e 69 6e 67 2d 61 69 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 4d 61 63 68 69 6e 65 20 4c 65 61 72 6e 69 6e 67 20 26 61 6d 70 3b 20 41 49 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: m/en/who-we-serve/machine-learning-ai/"> <span>Machine Learning & AI</span> </a>
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 70 73 3a 2f 2f 77 77 77 2e 72 65 75 74 65 72 73 61 67 65 6e 63 79 2e 63 6f 6d 2f 65 6e 2f 70 6c 61 74 66 6f 72 6d 73 2f 72 65 75 74 65 72 73 63 6f 6d 2d 70 6c 61 74 66 6f 72 6d 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 75 74 65 72 73 2e 63 6f 6d 20 50 6c 61 74 66 6f 72 6d 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ps://www.reutersagency.com/en/platforms/reuterscom-platform/"> <span>Reuters.com Platform</span> </a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49729	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	553	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:29 UTC	859	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: jDFunkBoRQZ82jkCSA3wow== Last-Modified: Mon, 30 Sep 2024 02:09:16 GMT x-ms-request-id: caf749af-101e-00d4-6b39-13daaa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 65716 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8df0be5f4273-EWR
2024-10-01 09:51:29 UTC	510	IN	Data Raw: 35 37 65 37 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 57e7var OneTrustStub=function(t){"use strict";var a,o,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 64 6f 6d 50 75 72 69 66 79 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 44 6f 6d 50 75 72 69 66 79 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 Data Ascii: T","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigra
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 69 64 20 30 3b 6e 3c 69 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 Data Ascii: id 0;n<i.length;++n)if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototyp
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 Data Ascii: addEventListener("message",s.messageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=functi
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 5b 74 5d 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 69 2e 62 6f 64 79 3f 28 28 65 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 Data Ascii: [t]);return n\|\|(i.body?((e=i.createElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;r
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 6f 74 2d 74 72 75 73 74 65 64 2d 74 79 70 65 2d 70 6f 6c 69 63 79 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 5b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 2e 68 6f 73 74 6e 61 6d 65 5d 3b 74 72 79 Data Ascii: w.trustedTypes.createPolicy("ot-trusted-type-policy",{createHTML:function(t){return window.DOMPurify.sanitize(t)},createScript:function(t){return window.DOMPurify.sanitize(t)},createScriptURL:function(t){var e,i=[document.location.hostname,n.hostname];try
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 3d 22 74 72 75 65 22 3d 3d 3d 6c 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 6c 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e 49 66 42 75 6c 6b 44 6f 6d 61 69 6e 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 54 Data Ascii: iptElement.getAttribute("crossorigin")\|\|null,this.previewMode="true"===l.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(l.bannerDataParentURL,this.getLocation.bind(this))},f.prototype.setDomainIfBulkDomainEnabled=function(t){var e=t&&t.T
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 6d 65 2c 6c 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 Data Ascii: me,l.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},f.prototype.handleBulkDomainMgmt=function(t,e){window.sessionStorage&&window.sessionStorage
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f Data Ascii: ion(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o
2024-10-01 09:51:29 UTC	1369	IN	Data Raw: 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 70 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 70 5b 72 5d 26 26 30 3c 3d 70 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b Data Ascii: if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var p=t.RuleSet[u].States;if(p[r]&&0<=p[r].indexOf(s)){i=t.RuleSet[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49725	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	903	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.css HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:29 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 142072 Connection: close Date: Tue, 01 Oct 2024 09:44:35 GMT Set-Cookie: AWSALB=76JvqSisUaEAVQ8nhyYARFGq6W23RQ5fCtT3aGYFpAQoPjwY5vhbqOpySFR2da7T4TvuGkYriNVf3i6ucH0wGDotJ/st2F3x4spMQUbiXoGQlmdb8HiBGsCXg/RZ; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/ Set-Cookie: AWSALBCORS=76JvqSisUaEAVQ8nhyYARFGq6W23RQ5fCtT3aGYFpAQoPjwY5vhbqOpySFR2da7T4TvuGkYriNVf3i6ucH0wGDotJ/st2F3x4spMQUbiXoGQlmdb8HiBGsCXg/RZ; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:35 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "22af8-622c22f032900" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 16cea8ae3ccd098a5d0b3b2c45b25a84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: RCcdly10DfeuKbi47PnI-SLKBsGxVXkzwCDsdTqLDZ6TM21ZnlIjDQ== Age: 414
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 61 6e 73 2b 33 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 3b 38 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 2e 62 62 2d 42 6f 64 79 54 65 78 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 6f 75 72 63 65 20 53 61 6e 73 20 33 22 2c 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 22 53 65 67 6f 65 20 55 49 22 2c 72 6f 62 6f 74 6f 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 Data Ascii: @import url(https://fonts.googleapis.com/css2?family=Source+Sans+3:wght@300;400;500;600;700;800&display=swap);.bb-BodyText{font-family:"Source Sans 3",system-ui,-apple-system,"Segoe UI",roboto,helvetica,arial,sans-serif;font-weight:400;font-size:16px;line
2024-10-01 09:51:29 UTC	12111	IN	Data Raw: 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 20 2e 62 62 2d 49 63 6f 6e 2d 48 6f 6d 65 2e 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 2e 62 62 2d 49 63 6f 6e 2d 48 6f 6d 65 2d 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 2e 62 62 2d 49 63 6f 6e 2d 48 6f 6d 65 2d 57 68 69 74 65 2d 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 2e 62 62 2d 49 63 6f 6e 2d 48 6f 6d 65 2d 57 68 69 74 65 2e 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d Data Ascii: --secondary:disabled:active .bb-Icon-Home.disabled,.bb-Button--secondary:disabled:hover .bb-Icon-Home-disabled,.bb-Button--secondary:disabled:hover .bb-Icon-Home-White-disabled,.bb-Button--secondary:disabled:hover .bb-Icon-Home-White.disabled,.bb-Button--
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 7d 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 50 72 69 6d 61 72 79 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 50 72 69 6d 61 72 79 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 36 35 66 66 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 62 62 2d 42 75 74 74 Data Ascii: }.bb-Button--iconPrimary:focus-visible{outline:none}.bb-Button--iconPrimary:focus-visible:after{content:"";position:absolute;top:0;bottom:0;left:0;right:0;background-color:transparent;outline:2px solid #0065ff;outline-offset:2px;border-radius:4px}.bb-Butt
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 53 65 63 6f 6e 64 61 72 79 3e 73 70 61 6e 3a 6f 6e 6c 79 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 53 65 63 6f 6e 64 61 72 79 3e 2e 62 62 2d 49 63 6f 6e 2e 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 53 65 63 6f 6e 64 61 72 79 3e 2e 62 62 2d 49 63 6f 6e 2e 6c 61 73 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 30 70 78 3b 6d 69 Data Ascii: y{display:none}.bb-Button--iconSecondary>span:only-child{padding:0}.bb-Button--iconSecondary>.bb-Icon.first{-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;margin:0;padding:0}.bb-Button--iconSecondary>.bb-Icon.last{margin:0 0 0 10px;mi
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 50 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 20 2e 62 62 2d 49 63 6f 6e 2d 6d 65 73 73 61 67 65 2d 57 68 69 74 65 2d 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 45 6d 62 65 64 64 65 64 50 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 20 2e 62 62 2d 49 63 6f 6e 2d 6d 65 73 73 61 67 65 2d 57 68 69 74 65 2e 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 45 6d 62 65 64 64 65 64 50 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 20 2e 62 62 2d 49 63 6f 6e 2d 6d 65 73 73 61 67 65 2e 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 45 6d 62 65 64 64 65 64 50 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 20 2e 62 62 2d 49 63 6f 6e 2d 6d 65 73 73 61 67 65 2d 64 Data Ascii: Primary.disabled .bb-Icon-message-White-disabled,.bb-Button--iconEmbeddedPrimary.disabled .bb-Icon-message-White.disabled,.bb-Button--iconEmbeddedPrimary.disabled .bb-Icon-message.disabled,.bb-Button--iconEmbeddedPrimary.disabled:active .bb-Icon-message-d
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 69 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 2e 62 62 2d 49 63 6f 6e 2d 48 6f 6d 65 2d 57 68 69 74 65 2e 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 45 6d 62 65 64 64 65 64 54 65 72 74 69 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 2e 62 62 2d 49 63 6f 6e 2d 48 6f 6d 65 2e 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 45 6d 62 65 64 64 65 64 54 65 72 74 69 61 72 79 3a 64 69 73 61 62 6c 65 64 20 2e 62 62 2d 49 63 6f 6e 2d 48 6f 6d 65 2d 64 69 73 61 62 6c 65 64 2c 2e 62 62 2d 42 75 74 74 6f 6e 2d 2d 69 63 6f 6e 45 6d 62 65 64 64 65 64 54 65 72 74 69 61 72 79 3a 64 69 73 61 62 6c 65 64 20 2e 62 62 2d 49 63 6f 6e 2d 48 6f 6d 65 2d 57 68 69 74 65 2d 64 69 73 61 62 6c 65 64 Data Ascii: iary.disabled:hover .bb-Icon-Home-White.disabled,.bb-Button--iconEmbeddedTertiary.disabled:hover .bb-Icon-Home.disabled,.bb-Button--iconEmbeddedTertiary:disabled .bb-Icon-Home-disabled,.bb-Button--iconEmbeddedTertiary:disabled .bb-Icon-Home-White-disabled
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 61 76 69 67 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 3e 73 70 61 6e 2e 62 62 2d 49 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 31 70 78 29 7b 2e 62 62 2d 4e 61 76 69 67 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 3e 73 70 61 6e 2e 62 62 2d 49 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 62 62 2d 4e 61 76 69 67 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 3e 73 70 61 6e 2e 62 62 2d 49 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d Data Ascii: avigation-button>span.bb-Icon{display:-webkit-box;display:-ms-flexbox;display:flex}@media screen and (min-width:1201px){.bb-Navigation-button>span.bb-Icon{display:none}}@media screen and (max-width:1200px){.bb-Navigation-button>span.bb-Icon{display:block}
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 2d 73 65 67 6d 65 6e 74 41 72 65 61 5b 64 61 74 61 2d 73 68 6f 77 2d 61 6c 6c 2d 63 61 74 65 67 6f 72 69 65 73 5d 20 2e 62 62 2d 4d 65 67 61 6d 65 6e 75 2d 6d 61 69 6e 4c 69 73 74 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 62 62 2d 4d 65 67 61 6d 65 6e 75 2d 73 65 67 6d 65 6e 74 41 72 65 61 7b 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 62 62 2d 4d 65 67 61 6d 65 6e 75 2d 73 65 67 6d 65 6e 74 41 72 65 61 7b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c Data Ascii: -segmentArea[data-show-all-categories] .bb-Megamenu-mainList:last-of-type li:last-child{margin-bottom:0}@media screen and (min-width:768px){.bb-Megamenu-segmentArea{width:100%}}@media screen and (min-width:1024px){.bb-Megamenu-segmentArea{width:100%;displ
2024-10-01 09:51:30 UTC	15273	IN	Data Raw: 67 69 6e 3a 30 7d 2e 62 62 2d 41 70 70 73 4d 65 6e 75 2d 73 69 67 6e 49 6e 20 2e 62 62 2d 41 70 70 73 4d 65 6e 75 2d 73 69 67 6e 49 6e 2d 4c 69 73 74 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 32 70 78 29 7d 2e 62 62 2d 41 70 70 73 4d 65 6e 75 2d 73 69 67 6e 49 6e 20 2e 62 62 2d 41 70 70 73 4d 65 6e 75 2d 73 69 67 6e 49 6e 2d 49 74 65 6d 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 62 62 2d 41 70 70 73 4d 65 6e 75 2d 73 69 67 6e 49 6e 2e 73 69 67 6e 65 64 2d 69 6e 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 34 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 Data Ascii: gin:0}.bb-AppsMenu-signIn .bb-AppsMenu-signIn-List li:first-child{width:calc(100% - 42px)}.bb-AppsMenu-signIn .bb-AppsMenu-signIn-Item{display:-webkit-box;display:-ms-flexbox;display:flex}.bb-AppsMenu-signIn.signed-in{min-height:54px}@media screen and (mi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49724	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	909	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-dcl_components.min.css HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:29 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 164845 Connection: close Date: Tue, 01 Oct 2024 09:44:35 GMT Set-Cookie: AWSALB=xGBd8fID1rykurzamEbrVA6Ao5pu8SxvcjUbYo/bLI+fFhBZ6NWSPh706yOZUodluB/h1RDhnsWIMh/kO9ozgQelT7wbH/kGUOAfRnEdqr8iL/OhKB6GxETqntM6; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/ Set-Cookie: AWSALBCORS=xGBd8fID1rykurzamEbrVA6Ao5pu8SxvcjUbYo/bLI+fFhBZ6NWSPh706yOZUodluB/h1RDhnsWIMh/kO9ozgQelT7wbH/kGUOAfRnEdqr8iL/OhKB6GxETqntM6; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:35 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "283ed-622c22f032900" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f0393fc6725f4d719cff14263a50d286.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 1beq_OL3fdXYOm0tIDpJI_dt-AdLbuNe12jFJcKNjJFJbYlYozosUw== Age: 414
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 61 6e 73 2b 33 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 2e 65 6d 63 6d 55 69 2d 50 6c 61 6e 43 6f 6d 70 61 72 69 73 6f 6e 54 61 62 6c 65 43 6f 6c 75 6d 6e 48 65 61 64 65 72 7b 66 6f 6e 74 3a 76 61 72 28 2d 2d 73 61 66 2d 74 79 70 65 2d 62 6f 64 79 2d 64 65 66 61 75 6c 74 2d 73 6d 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 73 61 66 2d 67 6c 6f 62 61 6c 2d 73 70 61 63 69 6e 67 2d 38 29 20 76 61 72 28 2d 2d 73 61 66 2d 67 6c 6f 62 61 6c 2d 73 70 61 63 69 6e Data Ascii: @charset "utf-8";@import url(https://fonts.googleapis.com/css2?family=Source+Sans+3:wght@400;500;600;700&display=swap);.emcmUi-PlanComparisonTableColumnHeader{font:var(--saf-type-body-default-sm);padding:var(--saf-global-spacing-8) var(--saf-global-spacin
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 2d 6c 69 6e 65 2d 77 69 64 74 68 2d 74 68 69 6e 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 73 61 66 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 62 61 73 65 29 3b 66 6f 6e 74 3a 76 61 72 28 2d 2d 73 61 66 2d 74 79 70 65 2d 62 6f 64 79 2d 64 65 66 61 75 6c 74 2d 6d 64 29 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 65 6d 63 6d 55 69 2d 43 6f 6d 70 61 72 69 73 6f 6e 47 72 69 64 2d 72 6f 77 2d 2d 62 6f 64 79 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 65 6d 63 6d 55 69 2d 43 6f 6d 70 61 72 69 73 6f 6e 47 72 69 64 2d 72 6f 77 2d 2d 62 6f 64 79 3a 6e 74 68 2d 63 68 69 6c 64 28 6f Data Ascii: -line-width-thin) solid var(--saf-input-field-border-color-base);font:var(--saf-type-body-default-md);min-height:3.75rem;padding-bottom:.5rem;padding-top:1rem}.emcmUi-ComparisonGrid-row--body{vertical-align:top}.emcmUi-ComparisonGrid-row--body:nth-child(o
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 67 6f 6e 5b 73 74 72 6f 6b 65 3d 22 23 43 43 34 37 30 30 22 5d 2c 2e 65 6d 63 6d 55 69 2d 53 76 67 20 70 6f 6c 79 6c 69 6e 65 5b 73 74 72 6f 6b 65 3d 22 23 43 43 34 37 30 30 22 5d 2c 2e 65 6d 63 6d 55 69 2d 53 76 67 20 72 65 63 74 5b 73 74 72 6f 6b 65 3d 22 23 43 43 34 37 30 30 22 5d 7b 73 74 72 6f 6b 65 3a 23 64 63 34 33 30 30 7d 2e 65 6d 63 6d 55 69 2d 53 76 67 20 63 69 72 63 6c 65 5b 66 69 6c 6c 3d 22 23 43 43 34 37 30 30 22 5d 2c 2e 65 6d 63 6d 55 69 2d 53 76 67 20 67 5b 66 69 6c 6c 3d 22 23 43 43 34 37 30 30 22 5d 2c 2e 65 6d 63 6d 55 69 2d 53 76 67 20 70 61 74 68 5b 66 69 6c 6c 3d 22 23 43 43 34 37 30 30 22 5d 2c 2e 65 6d 63 6d 55 69 2d 53 76 67 20 70 6f 6c 79 67 6f 6e 5b 66 69 6c 6c 3d 22 23 43 43 34 37 30 30 22 5d 2c 2e 65 6d 63 6d 55 69 2d 53 76 Data Ascii: gon[stroke="#CC4700"],.emcmUi-Svg polyline[stroke="#CC4700"],.emcmUi-Svg rect[stroke="#CC4700"]{stroke:#dc4300}.emcmUi-Svg circle[fill="#CC4700"],.emcmUi-Svg g[fill="#CC4700"],.emcmUi-Svg path[fill="#CC4700"],.emcmUi-Svg polygon[fill="#CC4700"],.emcmUi-Sv
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 69 61 6c 6f 67 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 65 6d 63 6d 55 69 2d 54 61 62 6c 65 43 68 65 63 6b 62 6f 78 2d 69 6e 70 75 74 3a 64 69 73 61 62 6c 65 64 2b 6c 61 62 65 6c 20 2e 65 6d 63 6d 55 69 2d 54 61 62 6c 65 43 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 30 64 30 64 30 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 65 6d 63 6d 55 69 2d 54 61 62 6c 65 43 68 65 63 6b 62 6f 78 2d 69 6e 70 75 74 2b 6c 61 62 65 6c 20 2e 65 6d 63 6d 55 69 2d 54 61 62 6c 65 43 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 76 61 Data Ascii: ialog-color-background)}.emcmUi-TableCheckbox-input:disabled+label .emcmUi-TableCheckbox-checkbox{background-color:#f4f4f4;border-color:#d0d0d0;cursor:not-allowed}.emcmUi-TableCheckbox-input+label .emcmUi-TableCheckbox-checkbox:before{content:"";height:va
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 33 2e 38 37 35 72 65 6d 20 34 36 2e 32 35 72 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6d 63 6d 55 69 2d 42 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 2e 69 73 2d 6c 6f 61 64 69 6e 67 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 61 70 70 2d 64 61 74 61 2e 67 63 73 2e 74 72 Data Ascii: t;background-size:3.875rem 46.25rem;content:"";height:1.25rem;left:0;position:absolute;top:50%;-webkit-transform:translateY(-50%);transform:translateY(-50%);width:100%}.emcmUi-Button--secondary.is-loading:after{background-image:url(https://app-data.gcs.tr
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 3b 2d 2d 73 61 66 2d 66 6f 6e 74 2d 73 69 7a 65 2d 32 78 6c 3a 32 38 70 78 3b 2d 2d 73 61 66 2d 66 6f 6e 74 2d 73 69 7a 65 2d 33 78 6c 3a 33 32 70 78 3b 2d 2d 73 61 66 2d 66 6f 6e 74 2d 73 69 7a 65 2d 34 78 6c 3a 34 30 70 78 3b 2d 2d 73 61 66 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2d 61 63 74 69 76 65 3a 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 3b 2d 2d 73 61 66 2d 6c 69 6e 65 2d 77 69 64 74 68 2d 74 68 69 6e 3a 31 70 78 3b 2d 2d 73 61 66 2d 6c 69 6e 65 2d 77 69 64 74 68 2d 74 68 69 63 6b 3a 32 70 78 3b 2d 2d 73 61 66 2d 6c 69 6e 65 2d 77 69 64 74 68 2d 74 68 69 63 6b 65 72 3a 34 70 78 3b 2d 2d 73 61 66 2d 74 79 70 65 2d 68 65 61 64 69 6e 67 2d 6d 64 3a 35 30 30 20 31 36 70 78 2f 31 32 30 25 20 22 4b 6e 6f 77 6c 65 64 67 65 32 30 31 37 22 2c 22 Data Ascii: ;--saf-font-size-2xl:28px;--saf-font-size-3xl:32px;--saf-font-size-4xl:40px;--saf-button-primary-active:[object Object];--saf-line-width-thin:1px;--saf-line-width-thick:2px;--saf-line-width-thicker:4px;--saf-type-heading-md:500 16px/120% "Knowledge2017","
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 2d 2e 31 34 39 2d 2e 31 32 31 2d 2e 32 35 35 2d 2e 32 37 2d 2e 32 35 35 68 2d 31 2e 33 32 37 63 2d 2e 31 34 38 20 30 2d 2e 32 36 38 2e 31 30 36 2d 2e 32 36 38 2e 32 35 35 76 35 2e 35 38 32 63 30 20 31 2e 35 33 2d 2e 37 30 36 20 32 2e 32 35 35 2d 32 2e 31 35 35 20 32 2e 32 35 35 2d 31 2e 34 34 36 20 30 2d 32 2e 31 35 33 2d 2e 37 32 35 2d 32 2e 31 35 33 2d 32 2e 32 35 35 56 37 2e 30 38 38 63 30 2d 2e 31 34 39 2d 2e 31 32 2d 2e 32 35 35 2d 2e 32 36 39 2d 2e 32 35 35 68 2d 31 2e 33 32 35 63 2d 2e 31 34 37 20 30 2d 2e 32 36 39 2e 31 30 36 2d 2e 32 36 39 2e 32 35 35 76 35 2e 35 38 32 63 30 20 32 2e 38 35 38 20 31 2e 38 35 38 20 33 2e 37 39 36 20 34 2e 30 31 36 20 33 2e 37 39 36 20 32 2e 31 36 31 20 30 20 34 2e 30 32 2d 2e 39 33 38 20 34 2e 30 32 2d 33 2e 37 39 Data Ascii: -.149-.121-.255-.27-.255h-1.327c-.148 0-.268.106-.268.255v5.582c0 1.53-.706 2.255-2.155 2.255-1.446 0-2.153-.725-2.153-2.255V7.088c0-.149-.12-.255-.269-.255h-1.325c-.147 0-.269.106-.269.255v5.582c0 2.858 1.858 3.796 4.016 3.796 2.161 0 4.02-.938 4.02-3.79
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 6d 63 6d 55 69 2d 47 6c 6f 62 61 6c 46 6f 6f 74 65 72 2d 69 74 65 6d 73 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 7d 7d 2e 65 6d 63 6d 55 69 2d 47 6c 6f 62 61 6c 46 6f 6f 74 65 72 49 74 65 6d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 73 61 66 2d 6c 69 6e 65 2d 77 69 64 74 68 2d 74 68 69 6e 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 73 61 66 2d 63 6f 6c 6f 72 2d 67 72 61 79 2d 35 30 30 29 7d 2e 65 6d 63 6d 55 69 2d 47 6c 6f 62 61 6c 46 6f 6f 74 65 72 49 74 65 6d 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 65 6d 63 6d 55 69 2d 47 6c 6f Data Ascii: mcmUi-GlobalFooter-items{align-items:center;display:flex;flex-wrap:wrap;height:100%;margin:0}}.emcmUi-GlobalFooterItem{border-bottom:var(--saf-line-width-thin) solid var(--saf-color-gray-500)}.emcmUi-GlobalFooterItem:first-of-type{margin-top:0}.emcmUi-Glo
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 6d 7d 2e 65 6d 63 6d 55 69 2d 53 65 61 72 63 68 49 6e 70 75 74 2d 62 6f 78 20 2e 65 6d 63 6d 55 69 2d 41 6c 65 72 74 2e 69 73 2d 66 61 69 6c 75 72 65 20 2e 65 6d 63 6d 55 69 2d 41 6c 65 72 74 2d 69 63 6f 6e 7b 77 69 64 74 68 3a 31 72 65 6d 7d 2e 65 6d 63 6d 55 69 2d 53 65 61 72 63 68 49 6e 70 75 74 2d 63 61 6e 74 46 69 6e 64 41 64 64 72 65 73 73 42 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 23 30 30 35 64 61 32 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 73 61 66 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 6d 29 3b 70 61 64 64 69 6e 67 3a 2e 37 35 72 65 6d 20 31 2e 31 32 35 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 73 Data Ascii: m}.emcmUi-SearchInput-box .emcmUi-Alert.is-failure .emcmUi-Alert-icon{width:1rem}.emcmUi-SearchInput-cantFindAddressButton{color:#005da2;display:block;font-size:var(--saf-font-size-sm);padding:.75rem 1.125rem;text-align:left;width:100%;font-weight:var(--s
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 30 20 2e 33 36 34 2e 32 39 34 2e 36 36 2e 36 35 36 2e 36 36 61 2e 36 35 38 2e 36 35 38 20 30 20 30 30 2e 36 35 36 2d 2e 36 36 2e 36 35 38 2e 36 35 38 20 30 20 30 30 2d 2e 36 35 36 2d 2e 36 36 7a 6d 31 2e 35 36 39 20 31 2e 34 30 34 61 2e 34 38 32 2e 34 38 32 20 30 20 30 30 2d 2e 34 38 2e 34 38 34 2e 34 38 32 2e 34 38 32 20 30 20 31 30 2e 39 36 20 30 20 2e 34 38 32 2e 34 38 32 20 30 20 30 30 2d 2e 34 38 2d 2e 34 38 34 7a 6d 2e 36 36 20 31 2e 36 37 32 61 2e 33 35 2e 33 35 20 30 20 30 30 2d 2e 33 35 2e 33 35 31 2e 33 35 2e 33 35 20 30 20 30 30 2e 33 35 2e 33 35 32 2e 33 35 2e 33 35 20 30 20 30 30 2e 33 35 2d 2e 33 35 32 2e 33 35 2e 33 35 20 30 20 30 30 2d 2e 33 35 2d 2e 33 35 31 7a 6d 32 2e 33 38 38 2e 35 35 32 61 2e 36 32 2e 36 32 20 30 20 30 30 2d 2e 36 31 Data Ascii: 0 .364.294.66.656.66a.658.658 0 00.656-.66.658.658 0 00-.656-.66zm1.569 1.404a.482.482 0 00-.48.484.482.482 0 10.96 0 .482.482 0 00-.48-.484zm.66 1.672a.35.35 0 00-.35.351.35.35 0 00.35.352.35.35 0 00.35-.352.35.35 0 00-.35-.351zm2.388.552a.62.62 0 00-.61

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49726	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	899	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-base.min.css HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:29 UTC	1297	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 104368 Connection: close Date: Tue, 01 Oct 2024 09:44:35 GMT Set-Cookie: AWSALB=92jJgD7QntEKYQQmQWOaQYdMaXtSL7rxON/86gBblYAv0+6CV5viJa58D81MvtNiOOOjQxkQyOtlzSW86K8pAuyZsxF+qtUXPJGxvsju9+DEgCyM4BUmaWqBfJTh; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/ Set-Cookie: AWSALBCORS=92jJgD7QntEKYQQmQWOaQYdMaXtSL7rxON/86gBblYAv0+6CV5viJa58D81MvtNiOOOjQxkQyOtlzSW86K8pAuyZsxF+qtUXPJGxvsju9+DEgCyM4BUmaWqBfJTh; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 16 Oct 2023 05:56:32 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:35 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "197b0-607cf11694400" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9938d2bc2f9fab06207e42238c10bb32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: LllEwcJSq0ivEqz79eFBI5a5NQscjIsMO7Gijn3JAVntb938GiP7jQ== Age: 414
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 2e 63 6d 70 2d 74 61 62 73 5f 5f 74 61 62 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 0a 2e 63 6d 70 2d 74 61 62 73 5f 5f 74 61 62 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 0a 2e 63 6d 70 2d 74 61 62 73 5f 5f 74 61 62 2d 2d 61 63 74 69 76 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 0a 2e 63 6d 70 2d 74 61 62 73 5f 5f 74 61 62 70 61 6e 65 6c 7b 64 69 73 Data Ascii: .cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}.cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;cursor:pointer}.cmp-tabs__tab--active{border-color:inherit}.cmp-tabs__tabpanel{dis
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 Data Ascii: olumn.aem-GridColumn--offset--default--1{margin-left:8.33333333%}.aem-Grid.aem-Grid--12>.aem-GridColumn.aem-GridColumn--offset--default--2{margin-left:16.66666667%}.aem-Grid.aem-Grid--12>.aem-GridColumn.aem-GridColumn--offset--default--3{margin-left:25%
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 2d 6f 66 66 73 65 74 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 32 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 Data Ascii: -offset--default--11{margin-left:100%}.aem-Grid.aem-Grid--default--12>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:8.33333333%}.aem-Grid.aem-Grid--default--12>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;wid
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 31 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 33 2e 36 33 36 33 36 33 36 34 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 32 2e 37 32 37 32 37 32 37 33 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 39 7b 6d 61 72 67 69 6e 2d 6c Data Ascii: 1>.aem-GridColumn.aem-GridColumn--offset--phone--7{margin-left:63.63636364%}.aem-Grid.aem-Grid--11>.aem-GridColumn.aem-GridColumn--offset--phone--8{margin-left:72.72727273%}.aem-Grid.aem-Grid--11>.aem-GridColumn.aem-GridColumn--offset--phone--9{margin-l
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 31 31 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 31 31 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 70 68 6f 6e 65 2d 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 2e 30 39 30 39 30 39 30 39 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 70 68 6f 6e 65 2d 2d 31 31 3e 2e 61 65 6d Data Ascii: clear:none;width:100%}.aem-Grid.aem-Grid--phone--11>.aem-GridColumn.aem-GridColumn--offset--phone--0{margin-left:0}.aem-Grid.aem-Grid--phone--11>.aem-GridColumn.aem-GridColumn--offset--phone--1{margin-left:9.09090909%}.aem-Grid.aem-Grid--phone--11>.aem
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 36 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 35 34 2e 35 34 35 34 35 34 35 35 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 74 61 62 6c 65 74 2d 2d 37 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 36 33 2e 36 33 36 33 36 33 36 34 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 31 31 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 Data Ascii: Grid.aem-Grid--11>.aem-GridColumn.aem-GridColumn--tablet--6{float:left;clear:none;width:54.54545455%}.aem-Grid.aem-Grid--11>.aem-GridColumn.aem-GridColumn--tablet--7{float:left;clear:none;width:63.63636364%}.aem-Grid.aem-Grid--11>.aem-GridColumn.aem-Gri
2024-10-01 09:51:30 UTC	6064	IN	Data Raw: 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 74 61 62 6c 65 74 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 74 61 62 6c 65 74 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 6f 66 66 73 65 74 2d 2d 74 61 62 6c 65 74 2d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 30 25 7d 0a 2e 61 65 6d 2d 47 72 69 64 2e 61 65 6d 2d 47 72 69 64 2d 2d 74 61 62 6c 65 74 2d 2d 31 30 3e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d Data Ascii: -Grid.aem-Grid--tablet--10>.aem-GridColumn.aem-GridColumn--offset--tablet--7{margin-left:70%}.aem-Grid.aem-Grid--tablet--10>.aem-GridColumn.aem-GridColumn--offset--tablet--8{margin-left:80%}.aem-Grid.aem-Grid--tablet--10>.aem-GridColumn.aem-GridColumn--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49723	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	907	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-dependencies.min.css HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:29 UTC	1265	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 0 Connection: close Date: Tue, 01 Oct 2024 09:44:35 GMT Set-Cookie: AWSALB=lY4iAynxWo9GO+N4QhkYJbYX9v3Ck3/h3aAOMx7YpoLFCK+w1iIIdglGIwJ0/uYiwAGvaTA0iKBlDh9rVj/4TyEixhud0WZDnL9F4pX5aAKnOgDoaOEr9cCc1vkv; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/ Set-Cookie: AWSALBCORS=lY4iAynxWo9GO+N4QhkYJbYX9v3Ck3/h3aAOMx7YpoLFCK+w1iIIdglGIwJ0/uYiwAGvaTA0iKBlDh9rVj/4TyEixhud0WZDnL9F4pX5aAKnOgDoaOEr9cCc1vkv; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Thu, 01 Jul 2021 11:22:35 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:35 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "0-5c60e0e4814c0" X-Cache: Hit from cloudfront Via: 1.1 6b15a9d1514a5645abfd43cbf330ce48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: Eqjwzgy4DDijBjIoHTFb4KL5Gbz1f1BWgwp0odMoTaP16n-6xLIFWQ== Age: 414

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49728	13.33.219.205	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	560	OUT	GET /us1/v4/datadog-rum.js HTTP/1.1 Host: www.datadoghq-browser-agent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:29 UTC	599	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 153156 Connection: close Last-Modified: Mon, 09 Oct 2023 09:24:57 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 01 Oct 2024 09:51:29 GMT Cache-Control: max-age=14400, s-maxage=60 ETag: "2630b3d7ad4a41fac67742216e506d83" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d51f8b07f1cd9f6dbf62bb0b0c961f1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: zdhxNyAhgUM96GUH7lCCGex1yx1tam4G3LvmjJUyPzV9i8Zyt9XLtQ== Age: 58 Timing-Allow-Origin: *
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 65 3d 63 6f 6e 73 6f 6c 65 2c 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 3b 76 61 72 20 72 3d 22 44 61 74 61 64 6f 67 20 42 72 6f 77 73 65 72 20 53 44 4b 3a 22 2c 69 3d 7b 64 65 62 75 67 3a 6e 2e 64 65 62 75 67 2e 62 69 6e 64 28 65 2c 72 29 2c 6c 6f 67 3a 6e 2e 6c 6f 67 2e 62 69 6e 64 28 65 2c 72 29 2c 69 6e 66 6f 3a 6e 2e 69 6e 66 6f 2e 62 69 6e 64 28 65 2c 72 Data Ascii: !function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 6c 65 64 3a 6e 75 6c 6c 21 3d 64 65 3f 64 65 3a 64 65 3d 21 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 7c 7c 2f 48 65 61 64 6c 65 73 73 43 68 72 6f 6d 65 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 70 65 72 73 69 73 74 53 65 73 73 69 6f 6e 3a 28 65 3d 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6b 74 28 68 65 2c 62 65 28 74 29 2c 76 65 2c 65 29 7d 29 2c 72 65 74 72 69 65 76 65 53 65 73 73 69 6f 6e 3a 52 65 2c 63 6c 65 61 72 53 65 73 73 69 6f 6e 3a 49 65 28 74 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 78 74 28 68 65 29 29 7b 76 61 72 20 65 3d 78 74 28 53 65 29 2c 6e 3d 78 74 28 54 65 29 2c 72 3d 78 74 28 45 65 29 2c 69 3d 7b 7d 3b 65 26 26 28 69 2e 69 64 3d 65 29 Data Ascii: led:null!=de?de:de=!!window.chrome\|\|/HeadlessChrome/.test(window.navigator.userAgent),persistSession:(e=t,function(t){kt(he,be(t),ve,e)}),retrieveSession:Re,clearSession:Ie(t)};return function(t){if(!xt(he)){var e=xt(Se),n=xt(Te),r=xt(Ee),i={};e&&(i.id=e)
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 69 66 28 74 5b 6e 2d 31 5d 3e 74 5b 6e 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 74 29 7b 76 61 72 20 65 3d 42 6e 28 74 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 72 74 54 69 6d 65 2c 72 3d 65 2e 66 65 74 63 68 53 74 61 72 74 2c 69 3d 65 2e 72 65 64 69 72 65 63 74 53 74 61 72 74 2c 6f 3d 65 2e 72 65 64 69 72 65 63 74 45 6e 64 2c 61 3d 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 2c 73 3d 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 2c 75 3d 65 2e 63 6f 6e 6e 65 63 74 Data Ascii: e<arguments.length;e++)t[e]=arguments[e];for(var n=1;n<t.length;n+=1)if(t[n-1]>t[n])return!1;return!0}function Fn(t){var e=Bn(t);if(e){var n=e.startTime,r=e.fetchStart,i=e.redirectStart,o=e.redirectEnd,a=e.domainLookupStart,s=e.domainLookupEnd,u=e.connect
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 72 65 61 6b 7d 72 3d 72 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 69 66 28 6e 29 72 65 74 75 72 6e 20 74 69 28 51 72 28 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 2e 74 72 69 6d 28 29 29 29 7d 76 61 72 20 4b 72 2c 57 72 2c 58 72 3d 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 3d 3d 3d 4b 72 26 26 28 4b 72 3d 22 6c 61 62 65 6c 73 22 69 6e 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 4b 72 7d 28 29 29 7b 69 66 28 22 6c 61 62 65 6c 73 22 69 6e 20 74 26 26 74 2e 6c 61 62 65 6c 73 26 26 74 2e 6c 61 62 65 6c 73 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 65 69 28 74 2e 6c 61 62 65 6c 73 5b 30 5d 2c 65 29 7d 65 6c 73 65 20 Data Ascii: reak}r=r.parentElement}if(n)return ti(Qr(n.getAttribute(e).trim()))}var Kr,Wr,Xr=[function(t,e){if(function(){void 0===Kr&&(Kr="labels"in HTMLInputElement.prototype);return Kr}()){if("labels"in t&&t.labels&&t.labels.length>0)return ei(t.labels[0],e)}else
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 72 28 29 7d 29 29 2e 73 74 6f 70 2c 63 3d 28 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 77 69 6e 64 6f 77 29 2c 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 6f 3d 30 3a 28 6f 3d 31 2f 30 2c 61 3d 55 74 28 30 2c 69 2c 5b 22 70 61 67 65 68 69 64 65 22 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 70 61 67 65 68 69 64 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 28 6f 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 61 28 29 29 7d 29 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 2e 73 74 6f 70 29 2c 7b 67 65 74 20 74 69 6d 65 53 74 61 6d 70 28 29 Data Ascii: r()})).stop,c=(void 0===i&&(i=window),"hidden"===document.visibilityState?o=0:(o=1/0,a=Ut(0,i,["pagehide","visibilitychange"],(function(t){"pagehide"!==t.type&&"hidden"!==document.visibilityState\|\|(o=t.timeStamp,a())}),{capture:!0}).stop),{get timeStamp()
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2c 6f 3d 72 2e 6f 6e 46 61 69 6c 75 72 65 3b 65 2e 62 61 6e 64 77 69 64 74 68 4d 6f 6e 69 74 6f 72 2e 61 64 64 28 74 29 2c 6e 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 2e 62 61 6e 64 77 69 64 74 68 4d 6f 6e 69 74 6f 72 2e 72 65 6d 6f 76 65 28 74 29 2c 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 70 61 71 75 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 28 30 3d 3d 3d 74 2e 73 74 61 74 75 73 26 26 21 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 7c 7c 34 30 38 3d 3d 3d 74 2e 73 74 61 74 75 73 7c 7c 34 32 39 3d 3d 3d 74 2e 73 74 61 74 75 73 7c 7c 28 65 3d 74 2e 73 74 61 74 75 73 2c 65 3e 3d 35 30 30 29 29 3b 76 61 72 20 65 7d 28 6e 29 3f 28 65 2e 74 72 61 6e 73 70 6f 72 74 53 74 61 74 75 73 3d 30 2c 69 28 29 29 3a 28 Data Ascii: uccess,o=r.onFailure;e.bandwidthMonitor.add(t),n(t,(function(n){e.bandwidthMonitor.remove(t),!function(t){return"opaque"!==t.type&&(0===t.status&&!navigator.onLine\|\|408===t.status\|\|429===t.status\|\|(e=t.status,e>=500));var e}(n)?(e.transportStatus=0,i()):(
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 72 3d 4e 3b 65 6c 73 65 7b 76 61 72 20 75 3d 5b 78 72 28 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 22 2c 63 29 2c 78 72 28 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 68 65 63 6b 65 64 22 2c 63 29 2c 78 72 28 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 22 2c 63 29 2c 78 72 28 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 22 2c 63 29 2c 78 72 28 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 49 6e 64 65 78 22 2c 63 29 5d 3b 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 66 6f 72 Data Ascii: r=N;else{var u=[xr(HTMLInputElement.prototype,"value",c),xr(HTMLInputElement.prototype,"checked",c),xr(HTMLSelectElement.prototype,"value",c),xr(HTMLTextAreaElement.prototype,"value",c),xr(HTMLSelectElement.prototype,"selectedIndex",c)];r=function(){u.for
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 2c 6e 29 7b 76 61 72 20 72 3d 32 2a 65 2c 69 3d 32 2a 61 3b 72 65 74 75 72 6e 20 74 5b 72 5d 3c 74 5b 69 5d 7c 7c 74 5b 72 5d 3d 3d 3d 74 5b 69 5d 26 26 6e 5b 65 5d 3c 3d 6e 5b 61 5d 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 68 65 61 70 5b 61 5d 2c 72 3d 61 3c 3c 31 3b 72 3c 3d 74 2e 68 65 61 70 5f 6c 65 6e 26 26 28 72 3c 74 2e 68 65 61 70 5f 6c 65 6e 26 26 53 28 65 2c 74 2e 68 65 61 70 5b 72 2b 31 5d 2c 74 2e 68 65 61 70 5b 72 5d 2c 74 2e 64 65 70 74 68 29 26 26 72 2b 2b 2c 21 53 28 65 2c 6e 2c 74 2e 68 65 61 70 5b 72 5d 2c 74 2e 64 65 70 74 68 29 29 3b 29 74 2e 68 65 61 70 5b 61 5d 3d 74 2e 68 65 61 70 5b 72 5d 2c 61 3d 72 2c 72 3c 3c 3d 31 3b 74 2e 68 65 61 70 5b 61 5d 3d 6e 7d 2c 4c 3d 66 75 6e 63 Data Ascii: ,n){var r=2e,i=2a;return t[r]<t[i]\|\|t[r]===t[i]&&n[e]<=n[a]},R=function(t,e,a){for(var n=t.heap[a],r=a<<1;r<=t.heap_len&&(r<t.heap_len&&S(e,t.heap[r+1],t.heap[r],t.depth)&&r++,!S(e,n,t.heap[r],t.depth));)t.heap[a]=t.heap[r],a=r,r<<=1;t.heap[a]=n},L=func
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 6e 61 6d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 72 2e 67 7a 69 6e 64 65 78 2b 2b 29 3a 30 2c 78 74 28 72 2c 6e 29 7d 77 68 69 6c 65 28 30 21 3d 3d 6e 29 3b 72 2e 67 7a 68 65 61 64 2e 68 63 72 63 26 26 72 2e 70 65 6e 64 69 6e 67 3e 61 26 26 28 74 2e 61 64 6c 65 72 3d 4d 28 74 2e 61 64 6c 65 72 2c 72 2e 70 65 6e 64 69 6e 67 5f 62 75 66 2c 72 2e 70 65 6e 64 69 6e 67 2d 61 2c 61 29 29 2c 30 3d 3d 3d 6e 26 26 28 72 2e 67 7a 69 6e 64 65 78 3d 30 2c 72 2e 73 74 61 74 75 73 3d 39 31 29 7d 65 6c 73 65 20 72 2e 73 74 61 74 75 73 3d 39 31 3b 69 66 28 39 31 3d 3d 3d 72 2e 73 74 61 74 75 73 29 69 66 28 72 2e 67 7a 68 65 61 64 2e 63 6f 6d 6d 65 6e 74 29 7b 61 3d 72 2e 70 65 6e 64 69 6e 67 3b 64 6f 7b 69 66 28 72 2e 70 65 6e 64 69 6e 67 3d 3d 3d 72 2e 70 65 6e 64 69 6e Data Ascii: name.charCodeAt(r.gzindex++):0,xt(r,n)}while(0!==n);r.gzhead.hcrc&&r.pending>a&&(t.adler=M(t.adler,r.pending_buf,r.pending-a,a)),0===n&&(r.gzindex=0,r.status=91)}else r.status=91;if(91===r.status)if(r.gzhead.comment){a=r.pending;do{if(r.pending===r.pendin
2024-10-01 09:51:30 UTC	5700	IN	Data Raw: 22 72 75 6d 22 2c 74 29 7d 29 29 7d 28 73 29 3b 65 6c 73 65 7b 76 61 72 20 6d 3d 56 6f 28 65 2c 73 2c 75 2e 6f 62 73 65 72 76 61 62 6c 65 2c 63 2c 66 2c 68 2e 65 78 70 69 72 65 4f 62 73 65 72 76 61 62 6c 65 29 3b 61 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 2e 73 74 6f 70 28 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 65 2e 65 6e 61 62 6c 65 64 26 26 74 74 28 74 2e 63 75 73 74 6f 6d 65 72 44 61 74 61 54 65 6c 65 6d 65 74 72 79 53 61 6d 70 6c 65 52 61 74 65 29 26 26 28 51 6f 28 29 2c 74 61 28 29 2c 6e 2e 73 75 62 73 63 72 69 62 65 28 31 31 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 57 6f 3d 21 30 2c 4a 6f 28 4b 6f 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 42 79 74 65 73 2c 63 65 Data Ascii: "rum",t)}))}(s);else{var m=Vo(e,s,u.observable,c,f,h.expireObservable);a.push((function(){return m.stop()})),function(t,e,n,r,i,o,a){e.enabled&&tt(t.customerDataTelemetrySampleRate)&&(Qo(),ta(),n.subscribe(11,(function(t){Wo=!0,Jo(Ko.globalContextBytes,ce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49727	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	899	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.css HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:29 UTC	1296	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 87078 Connection: close Date: Tue, 01 Oct 2024 09:44:35 GMT Set-Cookie: AWSALB=he5bPLyULUUVnS2YrqSBAEMzx356fo4TvHrfpZ1cxXZhgxWfGSU/IMdv9TFDkzudhMcRmCQRZZycJ4xvQ6O5VC5LAJl4233rNGSSIc6gTcUf9PnwSM+ahGZzbfiE; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/ Set-Cookie: AWSALBCORS=he5bPLyULUUVnS2YrqSBAEMzx356fo4TvHrfpZ1cxXZhgxWfGSU/IMdv9TFDkzudhMcRmCQRZZycJ4xvQ6O5VC5LAJl4233rNGSSIc6gTcUf9PnwSM+ahGZzbfiE; Expires=Tue, 08 Oct 2024 09:44:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:35 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "15426-622c22f032900" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fd87ab1d9a433dd02274380a706bf7d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: jnc1hBpmzSxQY_RJBooXO_G3R_ManWejn343IGFPCsRJOz1C5ywmCg== Age: 414
2024-10-01 09:51:29 UTC	15088	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 6e 6f 77 6c 65 64 67 65 32 30 31 37 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 32 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 61 70 70 2d 64 61 74 61 2e 67 63 73 2e 74 72 73 74 61 74 69 63 2e 6e 65 74 2f 77 65 6c 2d 74 72 64 6f 74 63 6f 6d 2f 66 6f 6e 74 73 2f 61 6c 6c 2d 63 68 61 72 61 63 74 65 72 73 2f 6b 6e 6f 77 6c 65 64 67 65 32 30 31 37 2d 75 6c 74 72 61 6c 69 67 68 74 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 61 70 70 2d 64 Data Ascii: @charset "utf-8";@font-face{font-display:swap;font-family:Knowledge2017;font-style:normal;font-weight:200;src:url(https://app-data.gcs.trstatic.net/wel-trdotcom/fonts/all-characters/knowledge2017-ultralight-webfont.woff2) format("woff2"),url(https://app-d
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 3a 34 30 70 78 7d 2e 61 6e 69 6d 61 74 69 6f 6e 20 76 69 64 65 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 61 6e 69 6d 61 74 69 6f 6e 2d 2d 53 68 69 66 74 52 69 67 68 74 20 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 2c 2e 61 6e 69 6d 61 74 69 6f 6e 2d 2d 53 68 69 66 74 52 69 67 68 74 20 76 69 64 65 6f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 76 69 64 65 6f 2d 72 65 73 69 7a 65 2d 2d 53 Data Ascii: :40px}.animation video{max-width:100%;-o-object-fit:cover;object-fit:cover}lottie-player{margin:0 auto}.animation--ShiftRight lottie-player,.animation--ShiftRight video{-webkit-box-pack:start;-ms-flex-pack:start;justify-content:flex-start}.video-resize--S
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 67 65 3a 75 72 6c 28 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 6d 61 67 65 73 2f 74 72 5f 73 70 69 72 61 6c 5f 70 61 74 74 65 72 6e 5f 64 65 73 6b 74 6f 70 5f 70 75 72 70 6c 65 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 31 31 35 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 37 30 30 70 78 20 61 75 74 6f 7d 2e 63 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 73 70 69 72 61 6c 2d 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 3e 64 69 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 69 6d 61 67 65 Data Ascii: ge:url(clientlib-site/resources/images/tr_spiral_pattern_desktop_purple.svg);background-repeat:no-repeat;background-position:center 115%;background-size:700px auto}.cmp-container--spiral--bottom-left>div{background-image:url(clientlib-site/resources/image
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 63 6f 6c 75 6d 6e 73 2d 61 6d 6f 75 6e 74 3d 74 68 72 65 65 2d 63 6f 6c 73 5d 20 74 72 2d 66 6f 72 6d 7b 77 69 64 74 68 3a 33 33 2e 33 25 7d 2e 64 69 67 2d 63 68 65 63 6b 62 6f 78 2d 67 72 6f 75 70 5b 64 61 74 61 2d 63 6f 6c 75 6d 6e 73 2d 61 6d 6f 75 6e 74 3d 66 6f 75 72 2d 63 6f 6c 73 5d 20 64 69 67 2d 66 6f 72 6d 2c 2e 64 69 67 2d 63 68 65 63 6b 62 6f 78 2d 67 72 6f 75 70 5b 64 61 74 61 2d 63 6f 6c 75 6d 6e 73 2d 61 6d 6f 75 6e 74 3d 66 6f 75 72 2d 63 6f 6c 73 5d 20 74 72 2d 66 6f 72 6d 7b 77 69 64 74 68 3a 32 35 25 7d 2e 63 6d 70 2d 66 6f 72 6d 20 2e 66 69 65 6c 64 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2d 31 32 70 78 20 32 34 70 78 7d 2e 63 6d 70 2d 66 6f 72 6d 20 2e 73 75 62 6d 69 74 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a Data Ascii: columns-amount=three-cols] tr-form{width:33.3%}.dig-checkbox-group[data-columns-amount=four-cols] dig-form,.dig-checkbox-group[data-columns-amount=four-cols] tr-form{width:25%}.cmp-form .field-wrapper{margin:0 -12px 24px}.cmp-form .submit-wrapper{display:
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 72 69 63 68 74 65 78 74 20 2e 62 75 6c 6c 65 74 69 6e 2d 62 6f 61 72 64 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 72 69 63 68 74 65 78 74 20 2e 62 75 6c 6c 65 74 69 6e 2d 62 6f 61 72 64 2c 2e 72 69 63 68 74 65 78 74 20 2e 62 75 6c 6c 65 74 69 6e 2d 62 6f 61 72 64 20 73 70 61 6e 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 72 69 63 68 74 65 78 74 20 2e 62 75 6c 6c 65 74 69 6e 2d 62 6f 61 72 64 20 73 70 Data Ascii: nd (min-width:576px){.richtext .bulletin-board{display:-webkit-box;display:-ms-flexbox;display:flex}.richtext .bulletin-board,.richtext .bulletin-board span{-webkit-box-pack:start;-ms-flex-pack:start;justify-content:flex-start}.richtext .bulletin-board sp
2024-10-01 09:51:30 UTC	6454	IN	Data Raw: 6f 70 20 64 69 67 2d 74 79 70 6f 67 72 61 70 68 79 2e 64 69 67 2d 74 79 70 6f 67 72 61 70 68 79 2d 2d 61 6c 69 67 6e 6d 65 6e 74 2d 63 65 6e 74 65 72 20 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 32 70 78 7d 2e 63 6d 70 2d 74 79 70 6f 67 72 61 70 68 79 2d 2d 62 72 61 6e 64 2d 6c 69 6e 65 2d 6c 65 66 74 2d 76 65 72 74 69 63 61 6c 20 64 69 67 2d 74 79 70 6f 67 72 61 70 68 79 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 34 70 78 20 73 6f 6c 69 64 20 23 66 61 36 34 30 30 7d 2e 63 6d 70 2d 74 79 70 6f 67 72 61 70 68 79 2d 2d 62 72 61 6e 64 2d 6c 69 6e 65 2d 6c 65 66 74 2d 76 65 72 74 69 63 61 6c 20 64 69 67 2d 74 79 70 6f 67 72 61 Data Ascii: op dig-typography.dig-typography--alignment-center :first-child:before{left:50%;margin-left:-82px}.cmp-typography--brand-line-left-vertical dig-typography{padding-left:1em;border-left:4px solid #fa6400}.cmp-typography--brand-line-left-vertical dig-typogra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49731	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	579	OUT	GET /emcm-ui/bundle/v24.69.0/main.css HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:29 UTC	758	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 318603 Connection: close Date: Mon, 23 Sep 2024 12:37:25 GMT Last-Modified: Wed, 28 Aug 2024 15:48:04 GMT ETag: "ff91f6448b88c4ae3876b9c8c9ea9fae" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: JC7dObVdIObzgE6a06tFc5JP9Kj66UrGnmDiQBis8YXd4kkIewv0Rw== Age: 681245 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="JC7dObVdIObzgE6a06tFc5JP9Kj66UrGnmDiQBis8YXd4kkIewv0Rw==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=0
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;heigh
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 31 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 31 32 35 72 65 6d 7d 2e 74 72 2d 42 6c 6f 63 6b 2d 2d 62 6c 75 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 39 39 63 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 31 35 33 2c 31 39 Data Ascii: lign-items:center;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;padding-left:1.125rem;padding-right:1.125rem}.tr-Block--blue{background-color:#0099c4;background-color:rgba(0,153,19
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 74 65 72 6c 65 73 73 2e 74 72 2d 47 72 69 64 2d 2d 63 6f 6c 6c 61 67 65 31 3e 2e 74 72 2d 47 72 69 64 2d 69 74 65 6d 73 3e 2e 74 72 2d 47 72 69 64 2d 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 36 36 2e 36 36 36 36 37 25 3b 66 6c 65 78 2d 62 61 73 69 73 3a 36 36 2e 36 36 36 36 37 25 7d 7d 40 73 75 70 70 6f 72 74 73 20 28 64 69 73 70 6c 61 79 3a 67 72 69 64 29 7b 2e 74 72 2d 47 72 69 64 2d 2d 63 6f 6c 6c 61 67 65 31 3e 2e 74 72 2d 47 72 69 64 2d 69 74 65 6d 73 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 31 2c 31 66 72 29 7d 2e 74 72 2d 47 72 69 64 2d 2d 63 6f 6c 6c 61 67 65 31 3e 2e 74 72 2d 47 72 69 64 2d 69 74 65 6d 73 3e 2e 74 Data Ascii: terless.tr-Grid--collage1>.tr-Grid-items>.tr-Grid-item:nth-child(4){-ms-flex-preferred-size:66.66667%;flex-basis:66.66667%}}@supports (display:grid){.tr-Grid--collage1>.tr-Grid-items{grid-template-columns:repeat(1,1fr)}.tr-Grid--collage1>.tr-Grid-items>.t
2024-10-01 09:51:30 UTC	14808	IN	Data Raw: 38 65 6d 29 7b 2e 74 72 2d 53 61 6e 64 77 69 63 68 2d 2d 6d 65 64 69 61 32 35 63 6f 6e 74 65 6e 74 33 35 20 2e 74 72 2d 53 61 6e 64 77 69 63 68 2d 6d 65 64 69 61 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 2e 32 35 72 65 6d 3b 77 69 64 74 68 3a 34 30 25 7d 2e 74 72 2d 53 61 6e 64 77 69 63 68 2d 2d 6d 65 64 69 61 32 35 63 6f 6e 74 65 6e 74 33 35 20 2e 74 72 2d 53 61 6e 64 77 69 63 68 2d 63 6f 6e 74 65 6e 74 7b 63 6c 65 61 72 3a 72 69 67 68 74 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 77 69 64 74 68 3a 36 30 25 7d 2e 74 72 2d 53 61 6e 64 77 69 63 68 2d 2d 6d 65 64 69 61 32 35 63 6f 6e 74 65 6e 74 33 35 20 2e 74 72 2d 53 61 6e 64 77 69 63 68 2d 6c 65 61 64 7b 66 6c 6f 61 74 3a 72 Data Ascii: 8em){.tr-Sandwich--media25content35 .tr-Sandwich-media{float:left;padding-left:0;padding-right:2.25rem;width:40%}.tr-Sandwich--media25content35 .tr-Sandwich-content{clear:right;float:right;width:60%}.tr-Sandwich--media25content35 .tr-Sandwich-lead{float:r
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 66 69 6c 74 65 72 20 69 64 3d 22 66 69 6c 74 65 72 22 3e 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 74 79 70 65 3d 22 6d 61 74 72 69 78 22 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 76 61 6c 75 65 73 3d 22 31 20 30 20 30 20 30 20 30 20 30 20 31 2e 30 31 20 30 20 30 20 30 20 30 20 30 20 31 20 30 20 30 20 30 20 30 20 30 20 31 20 30 22 20 2f 3e 3c 2f 66 69 6c 74 65 72 3e 3c 2f 73 76 67 3e 23 66 69 6c 74 65 72 27 29 3b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 73 61 74 75 72 61 Data Ascii: ta:image/svg+xml;charset=utf-8,<svg xmlns="http://www.w3.org/2000/svg"><filter id="filter"><feColorMatrix type="matrix" color-interpolation-filters="sRGB" values="1 0 0 0 0 0 1.01 0 0 0 0 0 1 0 0 0 0 0 1 0" /></filter></svg>#filter');-webkit-filter:satura
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 74 72 2d 43 61 6c 6c 6f 75 74 2d 61 73 73 65 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 30 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 31 32 35 72 65 6d 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 74 72 2d 43 61 6c 6c 6f 75 74 2d 61 73 73 65 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 74 72 2d 43 61 6c 6c 6f 75 74 2d 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 Data Ascii: ion:normal;-ms-flex-direction:row;flex-direction:row}.tr-Callout-asset{-ms-flex-negative:0;flex-shrink:0;margin-right:4.5rem;margin-top:1.125rem}[dir=rtl] .tr-Callout-asset{margin-left:4.5rem;margin-right:0}.tr-Callout-body{-webkit-box-flex:1;-ms-flex-pos
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 70 75 74 3a 61 63 74 69 76 65 2b 2e 74 72 2d 46 6f 72 6d 52 61 64 69 6f 43 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 54 65 78 74 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 61 36 34 30 30 7d 2e 74 72 2d 46 6f 72 6d 52 61 64 69 6f 43 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 64 69 73 61 62 6c 65 64 2b 2e 74 72 2d 46 6f 72 6d 52 61 64 69 6f 43 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 54 65 78 74 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 34 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 30 64 30 64 30 7d 2e 74 72 2d 46 6f 72 6d 52 61 64 69 6f 43 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 2b 2e 74 72 2d 46 6f 72 6d 52 61 64 69 6f 43 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 54 65 78 74 Data Ascii: put:active+.tr-FormRadioControl-labelText:before{border-color:#fa6400}.tr-FormRadioControl-input:disabled+.tr-FormRadioControl-labelText:before{background-color:#f4f4f4;border-color:#d0d0d0}.tr-FormRadioControl-input:checked+.tr-FormRadioControl-labelText
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 2e 37 39 39 63 30 20 2e 34 34 2e 33 35 36 2e 37 39 38 2e 37 39 33 2e 37 39 38 61 2e 37 39 36 2e 37 39 36 20 30 20 30 20 30 20 2e 37 39 34 2d 2e 37 39 38 2e 37 39 35 2e 37 39 35 20 30 20 30 20 30 2d 2e 37 39 34 2d 2e 37 39 38 7a 6d 2d 32 2e 30 36 35 20 33 2e 35 30 36 63 2d 2e 32 36 31 20 30 2d 2e 34 37 34 2e 32 31 33 2d 2e 34 37 34 2e 34 37 37 73 2e 32 31 33 2e 34 37 37 2e 34 37 34 2e 34 37 37 61 2e 34 37 36 2e 34 37 36 20 30 20 31 20 30 20 30 2d 2e 39 35 34 7a 6d 2d 2e 39 32 20 31 2e 34 37 34 61 2e 37 30 37 2e 37 30 37 20 30 20 30 20 30 2d 2e 37 30 36 2e 37 31 63 30 20 2e 33 39 32 2e 33 31 36 2e 37 31 2e 37 30 36 2e 37 31 73 2e 37 30 35 2d 2e 33 31 38 2e 37 30 35 2d 2e 37 31 61 2e 37 30 37 2e 37 30 37 20 30 20 30 20 30 2d 2e 37 30 35 2d 2e 37 31 7a 6d 2d Data Ascii: .799c0 .44.356.798.793.798a.796.796 0 0 0 .794-.798.795.795 0 0 0-.794-.798zm-2.065 3.506c-.261 0-.474.213-.474.477s.213.477.474.477a.476.476 0 1 0 0-.954zm-.92 1.474a.707.707 0 0 0-.706.71c0 .392.316.71.706.71s.705-.318.705-.71a.707.707 0 0 0-.705-.71zm-
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 70 61 64 64 69 6e 67 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 2e 74 72 2d 47 6c 6f 62 61 6c 46 6f 6f 74 65 72 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 74 72 2d 47 6c 6f 62 61 6c 46 6f 6f 74 65 72 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 70 61 63 69 74 79 3a 2e 38 34 35 7d 2e 74 72 2d 47 6c 6f 62 61 6c 46 6f 6f 74 65 72 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 74 72 2d 47 6c 6f 62 61 6c 46 6f 6f 74 65 72 2d 63 61 Data Ascii: kit-box-pack:end;-ms-flex-pack:end;justify-content:flex-end;padding:1.5rem}@media (min-width:48em){.tr-GlobalFooter-button{display:none}}.tr-GlobalFooter-button:hover{cursor:pointer;opacity:.845}.tr-GlobalFooter-button:active{opacity:1}.tr-GlobalFooter-ca
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 33 33 33 33 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 35 65 6d 29 7b 2e 74 72 2d 50 61 67 65 4e 61 76 49 74 65 6d 2d 74 69 74 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 7d 2e 74 72 2d 50 61 67 65 4e 61 76 49 74 65 6d 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 7d 2e 74 72 2d 50 61 67 65 4e 61 76 49 74 65 6d 2d 69 6e 6e 65 72 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 33 31 32 35 72 65 6d 20 73 6f 6c 69 64 20 23 61 66 61 66 61 66 7d 2e 74 72 2d 50 61 67 65 4e 61 76 49 74 65 6d 2d 69 6e 6e 65 72 3a 66 6f 63 75 73 20 2e 74 72 2d 50 61 67 65 4e 61 76 49 74 65 6d 2d 74 69 74 6c 65 2c 2e 74 72 2d 50 Data Ascii: 00;line-height:1.33333}@media (min-width:75em){.tr-PageNavItem-title{white-space:nowrap}}.tr-PageNavItem:last-of-type{border-bottom:none}.tr-PageNavItem-inner:focus{border-left:.3125rem solid #afafaf}.tr-PageNavItem-inner:focus .tr-PageNavItem-title,.tr-P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49730	3.160.150.127	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	553	OUT	GET /adrum/adrum-21.4.0.3405.js HTTP/1.1 Host: cdn.appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:29 UTC	630	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 104941 Connection: close Date: Mon, 30 Sep 2024 12:35:29 GMT Last-Modified: Thu, 15 Apr 2021 17:00:56 GMT ETag: "4aef8c9caf79317edb0667812ba89f53" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d8006f736d3dc32a20a91813f2f50fa2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: L2QH0m0WqS7N2XmsQCJLB8Om3J5ONzbYs-YQH4n7G7ygB62PSbQd2g== Age: 76561 Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin cache-control: public, max-age=86400 Vary: Origin
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 32 38 31 65 63 63 64 62 30 61 32 38 66 65 33 62 34 64 62 66 62 66 39 34 32 66 38 62 38 38 65 64 20 76 3a 32 31 2e 34 2e 30 2e 33 34 30 35 2c 20 63 3a 33 30 64 65 30 39 35 63 37 64 38 66 33 35 66 33 66 39 32 36 32 31 35 66 33 37 62 33 39 61 63 63 61 64 30 33 31 37 62 38 2c 20 62 3a 32 31 2e 34 2e 30 2e 33 34 30 35 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 41 44 52 55 4d 26 26 21 30 21 3d 3d 77 69 6e 64 6f 77 5b 22 61 64 72 75 6d 2d 64 69 73 61 62 6c 65 22 5d 29 7b 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 41 44 52 55 4d 3d 7b 7d 2c 78 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2c 42 3d 78 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 Data Ascii: ;/* Version 281eccdb0a28fe3b4dbfbf942f8b88ed v:21.4.0.3405, c:30de095c7d8f35f3f926215f37b39accad0317b8, b:21.4.0.3405 */(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={},x=window.console,B=x&&"function"==type
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 4d 5f 58 48 52 3d 31 30 31 5d 3d 22 41 44 52 55 4d 5f 58 48 52 22 3b 61 5b 61 2e 4e 47 5f 56 49 52 54 55 41 4c 5f 50 41 47 45 3d 31 30 32 5d 3d 22 4e 47 5f 56 49 52 54 55 41 4c 5f 50 41 47 45 22 7d 29 28 67 7c 7c 28 67 3d 7b 7d 29 29 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 65 76 65 6e 74 73 7c 7c 28 61 2e 65 76 65 6e 74 73 3d 0a 7b 7d 29 3b 62 2e 55 3d 7b 7d 3b 62 2e 55 5b 61 2e 45 76 65 6e 74 54 79 70 65 2e 41 42 53 54 52 41 43 54 5d 3d 7b 67 75 69 64 3a 22 73 74 72 69 6e 67 22 2c 75 72 6c 3a 22 73 74 72 69 6e 67 22 2c 70 61 72 65 6e 74 47 55 49 44 3a 22 73 74 72 69 6e 67 22 2c 70 61 72 65 6e 74 55 72 6c 3a 22 73 74 72 69 6e 67 22 2c 70 61 72 65 6e 74 54 79 70 65 3a 22 6e 75 6d 62 65 72 22 2c 74 69 6d 65 73 74 61 6d 70 3a 22 6e Data Ascii: M_XHR=101]="ADRUM_XHR";a[a.NG_VIRTUAL_PAGE=102]="NG_VIRTUAL_PAGE"})(g\|\|(g={}));(function(a){var b=a.events\|\|(a.events={});b.U={};b.U[a.EventType.ABSTRACT]={guid:"string",url:"string",parentGUID:"string",parentUrl:"string",parentType:"number",timestamp:"n
2024-10-01 09:51:29 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2e 57 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 5b 5d 2c 6e 3d 5b 5d 2c 66 3d 5b 5d 2c 6d 3d 5b 5d 2c 72 3d 30 3b 72 3c 62 3b 72 2b 2b 29 7b 76 61 72 20 77 3d 61 5b 72 5d 2c 70 3d 77 2e 63 63 2c 68 3d 70 5b 30 5d 2c 70 3d 70 5b 70 2e 6c 65 6e 67 74 68 2d 0a 31 5d 3b 68 26 26 70 26 26 28 35 30 3c 4d 61 74 68 2e 61 62 73 28 68 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 29 3f 35 30 3c 4d 61 74 68 2e 61 62 73 28 68 2e 72 69 67 68 74 2d 70 2e 72 69 67 68 74 29 3f 6e 2e 70 75 73 68 28 77 29 3a 6d 2e 70 75 73 68 28 77 29 3a 35 30 3c 4d 61 74 68 2e 61 62 73 28 68 2e 74 6f 70 2d 70 2e 74 6f 70 29 3f 35 30 3c 4d 61 74 68 2e 61 62 73 28 68 2e 62 6f 74 74 6f 6d 2d 70 2e 62 6f 74 74 6f 6d 29 3f Data Ascii: totype.Wj=function(a){for(var b=a.length,k=[],n=[],f=[],m=[],r=0;r<b;r++){var w=a[r],p=w.cc,h=p[0],p=p[p.length-1];h&&p&&(50<Math.abs(h.left-p.left)?50<Math.abs(h.right-p.right)?n.push(w):m.push(w):50<Math.abs(h.top-p.top)?50<Math.abs(h.bottom-p.bottom)?
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 29 26 26 6e 75 6c 6c 21 3d 66 26 26 66 5b 22 6f 6e 22 2b 62 5d 26 26 28 66 5b 22 6f 6e 22 2b 62 5d 3d 61 2e 67 2e 4f 63 28 62 2c 66 5b 22 6f 6e 22 2b 62 5d 2c 61 2e 43 61 75 73 65 54 79 70 65 2e 55 53 45 52 2c 21 30 29 2c 66 5b 22 6f 6e 22 2b 62 5d 2e 4b 3d 21 30 29 7d 2c 21 30 29 7d 29 7d 3b 66 2e 76 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 74 69 6c 73 2e 66 6f 72 45 61 63 68 28 66 2e 68 64 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 3d 0a 61 2e 67 2e 58 61 28 62 2c 66 2c 6e 75 6c 6c 2c 61 2e 43 61 75 73 65 54 79 70 65 2e 55 53 45 52 29 3b 61 2e 67 2e 78 61 28 66 29 7d 2c 21 30 29 3b 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 67 2e 58 28 29 7d 2c 21 31 29 7d 29 7d 3b 66 2e 47 68 3d 66 75 6e 63 Data Ascii: )&&null!=f&&f["on"+b]&&(f["on"+b]=a.g.Oc(b,f["on"+b],a.CauseType.USER,!0),f["on"+b].K=!0)},!0)})};f.vj=function(){a.utils.forEach(f.hd,function(b){h(b,function(f){f=a.g.Xa(b,f,null,a.CauseType.USER);a.g.xa(f)},!0);h(b,function(){a.g.X()},!1)})};f.Gh=func
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 62 2c 6d 29 7b 32 3c 3d 6d 2e 6c 65 6e 67 74 68 26 26 61 2e 75 74 69 6c 73 2e 69 73 4f 62 6a 65 63 74 28 6d 5b 31 5d 29 26 26 66 28 6d 5b 31 5d 2e 62 6f 64 79 29 26 26 68 2e 74 68 28 62 2c 6d 5b 31 5d 2e 62 6f 64 79 29 7d 3b 71 2e 57 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 6d 3d 7b 75 72 6c 3a 22 22 2c 6d 65 74 68 6f 64 3a 22 22 7d 3b 61 2e 75 74 69 6c 73 2e 69 73 4f 62 6a 65 63 74 28 62 5b 30 5d 29 3f 28 6d 2e 75 72 6c 3d 62 5b 30 5d 2e 75 72 6c 7c 7c 28 61 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 62 5b 30 5d 2e 74 6f 53 74 72 69 6e 67 29 3f 0a 62 5b 30 5d 2e 74 6f 53 74 72 69 6e 67 28 29 3a 76 6f 69 64 20 30 29 2c 6d 2e 6d 65 74 68 6f 64 3d 62 5b 30 5d 2e 6d 65 74 68 6f 64 7c 7c 22 47 45 54 22 29 3a 6e 28 62 5b Data Ascii: ction(b,m){2<=m.length&&a.utils.isObject(m[1])&&f(m[1].body)&&h.th(b,m[1].body)};q.Wk=function(b){var m={url:"",method:""};a.utils.isObject(b[0])?(m.url=b[0].url\|\|(a.utils.isDefined(b[0].toString)?b[0].toString():void 0),m.method=b[0].method\|\|"GET"):n(b[
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 69 6e 67 22 3d 3d 3d 62 29 61 2e 6c 6f 67 28 22 4d 31 39 37 22 29 2c 63 2e 63 6e 28 29 2c 63 2e 72 68 28 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 7b 74 69 6d 65 53 74 61 6d 70 3a 68 28 29 7d 3b 63 2e 6c 62 28 66 29 3b 22 69 6e 74 65 72 61 63 74 69 76 65 22 3d 3d 3d 62 3f 28 61 2e 6c 6f 67 28 22 4d 31 39 38 22 29 2c 63 2e 72 68 28 29 29 3a 28 61 2e 6c 6f 67 28 22 4d 31 39 39 22 29 2c 63 2e 45 62 28 66 29 2c 63 2e 49 67 28 66 29 29 7d 7d 3b 63 2e 72 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 77 69 6e 64 6f 77 2c 22 6c 6f 61 64 22 2c 63 2e 45 62 29 3b 61 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 77 69 6e 64 6f 77 2c 22 6c 6f 61 64 22 2c 63 2e 49 67 29 7d 3b 63 Data Ascii: ing"===b)a.log("M197"),c.cn(),c.rh();else{var f={timeStamp:h()};c.lb(f);"interactive"===b?(a.log("M198"),c.rh()):(a.log("M199"),c.Eb(f),c.Ig(f))}};c.rh=function(){a.utils.addEventListener(window,"load",c.Eb);a.utils.addEventListener(window,"load",c.Ig)};c
2024-10-01 09:51:30 UTC	6637	IN	Data Raw: 70 65 2e 79 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 62 2e 63 6f 6e 66 2e 78 68 72 29 7b 76 61 72 20 63 3d 66 2e 72 6b 28 61 2e 63 68 61 6e 6e 65 6c 2e 67 65 74 45 76 65 6e 74 73 57 69 74 68 50 61 72 65 6e 74 47 55 49 44 28 74 68 69 73 2e 67 75 69 64 28 29 29 29 2c 63 3d 66 2e 4d 6b 28 63 29 3b 69 66 28 30 3c 63 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 70 65 72 66 2e 67 65 74 45 6e 74 72 79 42 79 4e 61 6d 65 28 61 2e 65 76 65 6e 74 73 2e 63 2e 52 68 29 3b 74 68 69 73 2e 6d 61 72 6b 58 68 72 52 65 71 75 65 73 74 73 43 6f 6d 70 6c 65 74 65 64 28 4d 61 74 68 2e 6d 69 6e 28 6b 26 26 6b 2e 73 74 61 72 74 54 69 6d 65 7c 7c 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 63 29 29 7d 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 6a 75 73 74 54 69 6d Data Ascii: pe.yj=function(){if(b.conf.xhr){var c=f.rk(a.channel.getEventsWithParentGUID(this.guid())),c=f.Mk(c);if(0<c){var k=this.perf.getEntryByName(a.events.c.Rh);this.markXhrRequestsCompleted(Math.min(k&&k.startTime\|\|Number.MAX_VALUE,c))}}};f.prototype.adjustTim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49732	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	564	OUT	GET /emcm-ui/bundle/v24.69.0/head.js HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:29 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1283 Connection: close Date: Mon, 23 Sep 2024 05:05:40 GMT Last-Modified: Wed, 28 Aug 2024 15:48:04 GMT ETag: "d4fb89083795a6c5233aecb433094be8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 172c1df55a41f1a1b144f3711399cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: r80hWqrxHamjyKc8Uwhd9xs3PJtezGMt2TV8N1-IUiwtCeuSVVxZ2g== Age: 708350 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="r80hWqrxHamjyKc8Uwhd9xs3PJtezGMt2TV8N1-IUiwtCeuSVVxZ2g==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=0
2024-10-01 09:51:29 UTC	1283	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 44 43 4c 3d 74 28 29 3a 65 2e 44 43 4c 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.DCL=t():e.DCL=t()}(this,function(){return function(e){var t={};function n(r){if(t[r])re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49733	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:29 UTC	888	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:30 UTC	1749	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 18683 Connection: close Date: Tue, 01 Oct 2024 09:51:30 GMT Set-Cookie: AWSALB=f+5x00+pUvCuU/FKXbPxHoVD1xz21gUdyJgC57PpQjTSi8QFSEqVmJ5lY79uH3RuKz9JVGsv1C2xhHT9g0zAkJiv7sMXWJzx+T4ArUrWTM2JBUYGRUDXWgE89cjk; Expires=Tue, 08 Oct 2024 09:51:30 GMT; Path=/ Set-Cookie: AWSALBCORS=f+5x00+pUvCuU/FKXbPxHoVD1xz21gUdyJgC57PpQjTSi8QFSEqVmJ5lY79uH3RuKz9JVGsv1C2xhHT9g0zAkJiv7sMXWJzx+T4ArUrWTM2JBUYGRUDXWgE89cjk; Expires=Tue, 08 Oct 2024 09:51:30 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:30 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "48fb-622c22f032900" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ad3a844607df41a7152eab5ebe6e4056.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: XW7NcFxm1-NsCvCLA-m_8MKWxas0BGGTg46EPyKfr6f3jJuC2DOzfQ== Age: 708329
2024-10-01 09:51:30 UTC	14635	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=fun
2024-10-01 09:51:30 UTC	4048	IN	Data Raw: 73 73 4c 69 73 74 2e 61 64 64 28 22 64 69 73 61 62 6c 65 53 63 72 6f 6c 6c 22 29 29 3a 28 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 64 69 73 61 62 6c 65 53 63 72 6f 6c 6c 22 29 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 64 69 73 61 62 6c 65 53 63 72 6f 6c 6c 22 29 29 7d 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 69 6e 74 65 72 61 63 74 69 76 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 62 62 2d 48 65 61 64 65 72 2d 69 6e 6e 65 72 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 Data Ascii: ssList.add("disableScroll")):(t.classList.remove("disableScroll"),o.classList.remove("disableScroll"))}document.addEventListener("readystatechange",(function(){"interactive"==document.readyState&&document.querySelectorAll(".bb-Header-inner").forEach((func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49734	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:30 UTC	369	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:30 UTC	859	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: jDFunkBoRQZ82jkCSA3wow== Last-Modified: Mon, 30 Sep 2024 02:09:16 GMT x-ms-request-id: caf749af-101e-00d4-6b39-13daaa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 65717 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8df56cc84356-EWR
2024-10-01 09:51:30 UTC	510	IN	Data Raw: 35 37 65 37 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 57e7var OneTrustStub=function(t){"use strict";var a,o,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 64 6f 6d 50 75 72 69 66 79 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 44 6f 6d 50 75 72 69 66 79 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 Data Ascii: T","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigra
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 69 64 20 30 3b 6e 3c 69 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 Data Ascii: id 0;n<i.length;++n)if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototyp
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 Data Ascii: addEventListener("message",s.messageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=functi
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 5b 74 5d 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 69 2e 62 6f 64 79 3f 28 28 65 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 Data Ascii: [t]);return n\|\|(i.body?((e=i.createElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;r
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 6f 74 2d 74 72 75 73 74 65 64 2d 74 79 70 65 2d 70 6f 6c 69 63 79 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 5b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 6e 2e 68 6f 73 74 6e 61 6d 65 5d 3b 74 72 79 Data Ascii: w.trustedTypes.createPolicy("ot-trusted-type-policy",{createHTML:function(t){return window.DOMPurify.sanitize(t)},createScript:function(t){return window.DOMPurify.sanitize(t)},createScriptURL:function(t){var e,i=[document.location.hostname,n.hostname];try
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 3d 22 74 72 75 65 22 3d 3d 3d 6c 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 6c 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e 49 66 42 75 6c 6b 44 6f 6d 61 69 6e 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 54 Data Ascii: iptElement.getAttribute("crossorigin")\|\|null,this.previewMode="true"===l.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(l.bannerDataParentURL,this.getLocation.bind(this))},f.prototype.setDomainIfBulkDomainEnabled=function(t){var e=t&&t.T
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 6d 65 2c 6c 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 Data Ascii: me,l.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},f.prototype.handleBulkDomainMgmt=function(t,e){window.sessionStorage&&window.sessionStorage
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f Data Ascii: ion(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o
2024-10-01 09:51:30 UTC	1369	IN	Data Raw: 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 70 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 70 5b 72 5d 26 26 30 3c 3d 70 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b Data Ascii: if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var p=t.RuleSet[u].States;if(p[r]&&0<=p[r].indexOf(s)){i=t.RuleSet[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49735	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:30 UTC	875	OUT	GET /etc.clientlibs/clientlibs/granite/jquery.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:30 UTC	1311	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 101012 Connection: close Date: Tue, 01 Oct 2024 09:44:36 GMT Set-Cookie: AWSALB=YXRm4ekdg/GEkmSiXdTOFY2oloFkRYhM/+VpUAp/CbhaQl/uen156ItZCudq2SJYHNJ/ybDngrL1tV3NeAK6shVvUzx+fjQPld00wPyodWbiliH+KNyObLTZeEpJ; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/ Set-Cookie: AWSALBCORS=YXRm4ekdg/GEkmSiXdTOFY2oloFkRYhM/+VpUAp/CbhaQl/uen156ItZCudq2SJYHNJ/ybDngrL1tV3NeAK6shVvUzx+fjQPld00wPyodWbiliH+KNyObLTZeEpJ; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 13 Jun 2022 19:06:47 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:36 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "18a94-5e158fd52ffc0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ad3a844607df41a7152eab5ebe6e4056.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: fFdET82DvJxgj0Hv5CoUwrL8zq1hGWj3LQLFx0C4ZRylZ7dr8svYuQ== Age: 414
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 2f 2a 0a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 2d 61 65 6d 0a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 0a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 0a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 31 37 3a 31 37 5a 0a 20 53 69 7a 7a 6c 65 20 43 53 53 20 Data Ascii: /* jQuery JavaScript Library v1.12.4-aem http://jquery.com/ Includes Sizzle.js http://sizzlejs.com/ Copyright jQuery Foundation and other contributors Released under the MIT license http://jquery.org/license Date: 2016-05-20T17:17Z Sizzle CSS
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 6e 3a 4f 29 21 3d 3d 47 26 26 4a 61 28 6e 29 2c 6e 3d 6e 7c 7c 47 2c 52 29 29 7b 69 66 28 31 31 21 3d 3d 46 26 26 28 44 3d 68 64 2e 65 78 65 63 28 68 29 29 29 69 66 28 75 3d 44 5b 31 5d 29 69 66 28 39 3d 3d 3d 46 29 69 66 28 78 3d 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 75 29 29 7b 69 66 28 78 2e 69 64 3d 3d 3d 75 29 72 65 74 75 72 6e 20 6c 2e 70 75 73 68 28 78 29 2c 6c 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 6c 3b 65 6c 73 65 7b 69 66 28 7a 26 26 28 78 3d 7a 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 75 29 29 26 26 6c 61 28 6e 2c 78 29 26 26 78 2e 69 64 3d 3d 3d 75 29 72 65 74 75 72 6e 20 6c 2e 70 75 73 68 28 78 29 2c 6c 7d 65 6c 73 65 7b 69 66 28 44 5b 32 5d 29 72 65 74 75 72 6e 20 44 61 2e 61 70 70 6c 79 28 6c 2c 6e 2e 67 65 74 45 6c 65 Data Ascii: n:O)!==G&&Ja(n),n=n\|\|G,R)){if(11!==F&&(D=hd.exec(h)))if(u=D[1])if(9===F)if(x=n.getElementById(u)){if(x.id===u)return l.push(x),l}else return l;else{if(z&&(x=z.getElementById(u))&&la(n,x)&&x.id===u)return l.push(x),l}else{if(D[2])return Da.apply(l,n.getEle
2024-10-01 09:51:30 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 6e 26 26 21 21 68 2e 63 68 65 63 6b 65 64 7c 7c 22 6f 70 74 69 6f 6e 22 3d 3d 3d 6e 26 26 21 21 68 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3b 72 65 74 75 72 6e 21 30 3d 3d 3d 68 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 6f 72 28 68 3d 68 2e 66 69 72 73 74 43 68 69 6c 64 3b 68 3b 68 3d 68 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 36 3e 68 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: ;return"input"===n&&!!h.checked\|\|"option"===n&&!!h.selected},selected:function(h){h.parentNode&&h.parentNode.selectedIndex;return!0===h.selected},empty:function(h){for(h=h.firstChild;h;h=h.nextSibling)if(6>h.nodeType)return!1;return!0},parent:function(h){
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 33 65 5c 78 33 63 74 72 5c 78 33 65 22 2c 22 5c 78 33 63 2f 74 72 5c 78 33 65 5c 78 33 63 2f 74 62 6f 64 79 5c 78 33 65 5c 78 33 63 2f 74 61 62 6c 65 5c 78 33 65 22 5d 2c 5f 64 65 66 61 75 6c 74 3a 79 2e 68 74 6d 6c 53 65 72 69 61 6c 69 7a 65 3f 5b 30 2c 22 22 2c 22 22 5d 3a 5b 31 2c 22 58 5c 78 33 63 64 69 76 5c 78 33 65 22 2c 22 5c 78 33 63 2f 64 69 76 5c 78 33 65 22 5d 7d 3b 6b 61 2e 74 62 6f 64 79 3d 6b 61 2e 74 66 6f 6f 74 3d 6b 61 2e 63 6f 6c 67 72 6f 75 70 3d 6b 61 2e 63 61 70 74 69 6f 6e 3d 6b 61 2e 74 68 65 61 64 3b 6b 61 2e 74 68 3d 6b 61 2e 74 64 3b 79 2e 6f 70 74 69 6f 6e 7c 7c 28 6b 61 2e 6f 70 74 67 72 6f 75 70 3d 6b 61 2e 6f 70 74 69 6f 6e 3d 5b 31 2c 22 5c 78 33 63 73 65 6c 65 63 74 20 6d 75 6c 74 69 70 6c 65 5c 78 33 64 27 6d 75 6c 74 69 Data Ascii: 3e\x3ctr\x3e","\x3c/tr\x3e\x3c/tbody\x3e\x3c/table\x3e"],_default:y.htmlSerialize?[0,"",""]:[1,"X\x3cdiv\x3e","\x3c/div\x3e"]};ka.tbody=ka.tfoot=ka.colgroup=ka.caption=ka.thead;ka.th=ka.td;y.option\|\|(ka.optgroup=ka.option=[1,"\x3cselect multiple\x3d'multi
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 65 6d 6f 76 65 43 68 69 6c 64 28 6d 29 7d 76 61 72 20 62 2c 64 2c 65 2c 66 2c 67 2c 6b 2c 6d 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 0a 70 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 26 26 28 70 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 66 6c 6f 61 74 3a 6c 65 66 74 3b 6f 70 61 63 69 74 79 3a 2e 35 22 2c 79 2e 6f 70 61 63 69 74 79 3d 22 30 2e 35 22 3d 3d 3d 70 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 2c 79 2e 63 73 73 46 6c 6f 61 74 3d 21 21 70 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 70 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6c 69 70 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 2c 70 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 73 74 79 6c 65 2e 62 Data Ascii: emoveChild(m)}var b,d,e,f,g,k,m=C.createElement("div"),p=C.createElement("div");p.style&&(p.style.cssText="float:left;opacity:.5",y.opacity="0.5"===p.style.opacity,y.cssFloat=!!p.style.cssFloat,p.style.backgroundClip="content-box",p.cloneNode(!0).style.b
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 65 29 26 26 0a 61 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 3b 79 2e 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 7c 7c 63 2e 65 61 63 68 28 5b 22 68 72 65 66 22 2c 22 73 72 63 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 70 72 6f 70 48 6f 6f 6b 73 5b 62 5d 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 34 29 7d 7d 7d 29 3b 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 63 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: e)&&a.href?0:-1}}},propFix:{"for":"htmlFor","class":"className"}});y.hrefNormalized\|\|c.each(["href","src"],function(a,b){c.propHooks[b]={get:function(d){return d.getAttribute(b,4)}}});y.optSelected\|\|(c.propHooks.selected={get:function(a){if(a=a.parentNod
2024-10-01 09:51:31 UTC	2708	IN	Data Raw: 74 50 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3b 61 26 26 21 63 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 22 68 74 6d 6c 22 29 26 26 22 73 74 61 74 69 63 22 3d 3d 3d 63 2e 63 73 73 28 61 2c 22 70 6f 73 69 74 69 6f 6e 22 29 3b 29 61 3d 61 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3b 0a 72 65 74 75 72 6e 20 61 7c 7c 49 63 7d 29 7d 7d 29 3b 63 2e 65 61 63 68 28 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 22 70 61 67 65 58 4f 66 66 73 65 74 22 2c 73 63 72 6f 6c 6c 54 6f 70 3a 22 70 61 67 65 59 4f 66 66 73 65 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3d 2f 59 2f 2e 74 65 73 74 28 Data Ascii: tParent:function(){return this.map(function(){for(var a=this.offsetParent;a&&!c.nodeName(a,"html")&&"static"===c.css(a,"position");)a=a.offsetParent;return a\|\|Ic})}});c.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(a,b){var d=/Y/.test(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49736	13.35.58.41	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:30 UTC	380	OUT	GET /emcm-ui/bundle/v24.69.0/head.js HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:31 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1283 Connection: close Date: Mon, 23 Sep 2024 05:05:40 GMT Last-Modified: Wed, 28 Aug 2024 15:48:04 GMT ETag: "d4fb89083795a6c5233aecb433094be8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: BzMY2SjntAThMAwN-H_Tli67F7dJx-g2xIFjSkHk6KHm-P4WDewtPw== Age: 708351 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="BzMY2SjntAThMAwN-H_Tli67F7dJx-g2xIFjSkHk6KHm-P4WDewtPw==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1
2024-10-01 09:51:31 UTC	1283	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 44 43 4c 3d 74 28 29 3a 65 2e 44 43 4c 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.DCL=t():e.DCL=t()}(this,function(){return function(e){var t={};function n(r){if(t[r])re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49737	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:30 UTC	874	OUT	GET /etc.clientlibs/clientlibs/granite/utils.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:31 UTC	1308	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 8130 Connection: close Date: Tue, 01 Oct 2024 09:44:36 GMT Set-Cookie: AWSALB=da/acpKOm105IIXHT74ekqAXMPd0ctqjkRhI3+TahoarY2EumsmR6oAwW8GauFimxFETkCLzWrfFULFTTitaTNi2Yczov2dXCAZGRi3BXTKDTor6AjWau/l5jYpA; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/ Set-Cookie: AWSALBCORS=da/acpKOm105IIXHT74ekqAXMPd0ctqjkRhI3+TahoarY2EumsmR6oAwW8GauFimxFETkCLzWrfFULFTTitaTNi2Yczov2dXCAZGRi3BXTKDTor6AjWau/l5jYpA; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Fri, 11 Jun 2021 18:25:11 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:36 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "1fc2-5c481a0ca6fc0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 77e414816706879c16a3707f261f0b5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: To6m6-hCu9OfmDdv6deKBNnhTg8BD8Njyr2OJRaFUlmXww6mgrDcxw== Age: 415
2024-10-01 09:51:31 UTC	8130	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 64 28 29 3a 28 77 69 6e 64 6f 77 2e 47 72 61 6e 69 74 65 3d 77 69 6e 64 6f 77 2e 47 72 61 6e 69 74 65 7c 7c 7b 7d 29 2e 53 6c 69 6e 67 3d 64 28 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 53 45 4c 45 43 54 4f 52 5f 49 4e 46 49 4e 49 54 59 3a 22 2e 69 6e 66 69 6e 69 74 79 22 2c 43 48 41 52 53 45 54 3a 22 5f 63 68 61 72 73 65 74 5f 22 2c 53 54 41 54 55 53 3a 22 3a 73 74 61 74 75 73 22 2c 53 54 41 54 55 53 5f 42 52 4f 57 53 45 52 3a 22 62 72 6f 77 73 65 72 22 2c 4f 50 45 52 41 54 49 4f 4e 3a 22 3a 6f 70 65 72 61 74 69 6f 6e 22 2c 4f Data Ascii: (function(d){"object"===typeof module&&module.exports?module.exports=d():(window.Granite=window.Granite\|\|{}).Sling=d()})(function(){return{SELECTOR_INFINITY:".infinity",CHARSET:"_charset_",STATUS:":status",STATUS_BROWSER:"browser",OPERATION:":operation",O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49738	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:30 UTC	883	OUT	GET /etc.clientlibs/clientlibs/granite/jquery/granite.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:31 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 3681 Connection: close Date: Tue, 01 Oct 2024 09:44:36 GMT Set-Cookie: AWSALB=Ro76A5KMRVuSLHUwauwwucany4xBDViXO4zP55hf8wO2BbA6JMlSvI8fr1XWQ/TVRVjEJ3tgckDnyVNRs75X6TJY4iZoy0A1TFGE1uAta6OuPtPrjwuU9rvrRTFA; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/ Set-Cookie: AWSALBCORS=Ro76A5KMRVuSLHUwauwwucany4xBDViXO4zP55hf8wO2BbA6JMlSvI8fr1XWQ/TVRVjEJ3tgckDnyVNRs75X6TJY4iZoy0A1TFGE1uAta6OuPtPrjwuU9rvrRTFA; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Tue, 05 Mar 2019 11:12:25 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:36 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "e61-58356f2a6d840" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f9b794511293751fa3df3ec945ab397e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 5lrmYTfHXu8l1ogYYMRGxpaK4Qphn0afj609-AlZmsP8yE4xSweFgA== Age: 415
2024-10-01 09:51:31 UTC	3681	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 2c 65 29 7b 65 2e 47 72 61 6e 69 74 65 3d 65 2e 47 72 61 6e 69 74 65 7c 7c 7b 7d 3b 65 2e 47 72 61 6e 69 74 65 2e 24 3d 65 2e 47 72 61 6e 69 74 65 2e 24 7c 7c 67 3b 65 2e 5f 67 3d 65 2e 5f 67 7c 7c 7b 7d 3b 65 2e 5f 67 2e 24 3d 65 2e 5f 67 2e 24 7c 7c 67 3b 76 61 72 20 6b 3d 47 72 61 6e 69 74 65 2e 48 54 54 50 3b 67 2e 61 6a 61 78 53 65 74 75 70 28 7b 65 78 74 65 72 6e 61 6c 69 7a 65 3a 21 30 2c 65 6e 63 6f 64 65 50 61 74 68 3a 21 30 2c 68 6f 6f 6b 3a 21 30 2c 62 65 66 6f 72 65 53 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 63 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 47 5f 49 53 5f 48 4f 4f 4b 45 44 26 26 47 5f 49 53 5f 48 4f 4f 4b 45 44 28 63 2e 75 72 6c 29 7c 7c 28 63 2e 65 78 74 65 72 6e 61 Data Ascii: (function(g,e){e.Granite=e.Granite\|\|{};e.Granite.$=e.Granite.$\|\|g;e._g=e._g\|\|{};e._g.$=e._g.$\|\|g;var k=Granite.HTTP;g.ajaxSetup({externalize:!0,encodePath:!0,hook:!0,beforeSend:function(h,c){"undefined"!==typeof G_IS_HOOKED&&G_IS_HOOKED(c.url)\|\|(c.externa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49739	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:30 UTC	905	OUT	GET /etc.clientlibs/emcm/components/structure/page/clientlibs-gated-content.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq; AWSALBCORS=6Rztp8HrEFKEbYsbq0sbMfErSqsiZJO5gntvoR2JMm/Y+8mTvC81EkIz98QmHJL+ljIRhdW0hyJlZ8cV0pQy939sobgWa0Ke5kS+z7SzxPVosGPjYK5R1mkYYdXq
2024-10-01 09:51:31 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 1282 Connection: close Date: Tue, 01 Oct 2024 09:44:37 GMT Set-Cookie: AWSALB=461ZspMsIIWmZYBtIK4AkqpJgUAgQwSng2G4jWanLWcRXdr7uJLhvPzAD6dYbYCj3ay35IJiBo5kF4forS2FGUUrD/zzAJBrSh3WELX2s+EVK+eC4Dz+4rauT+rt; Expires=Tue, 08 Oct 2024 09:44:37 GMT; Path=/ Set-Cookie: AWSALBCORS=461ZspMsIIWmZYBtIK4AkqpJgUAgQwSng2G4jWanLWcRXdr7uJLhvPzAD6dYbYCj3ay35IJiBo5kF4forS2FGUUrD/zzAJBrSh3WELX2s+EVK+eC4Dz+4rauT+rt; Expires=Tue, 08 Oct 2024 09:44:37 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 12 Feb 2024 05:09:49 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:37 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "502-6112849748140" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f5af2731a86629973e69564f824d95be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: aUaHSvr_RGHaKZ0s83D6VCqscfKTWqFFrCuV-gXtmLzCYK3sVUYtoA== Age: 414
2024-10-01 09:51:31 UTC	1282	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 64 6f 63 75 6d 65 6e 74 2c 20 24 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 63 6f 6e 73 74 20 69 73 47 61 74 65 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 73 2d 67 61 74 65 64 22 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 67 61 74 65 64 46 6f 72 6d 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 74 65 64 2d 66 6f 72 6d 22 29 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 47 61 74 65 64 20 26 26 20 21 69 73 46 6f 72 6d 53 75 62 6d 69 74 74 65 64 28 67 61 74 65 64 46 6f 72 6d 4e 61 6d 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 75 72 6c Data Ascii: (function (document, $) { "use strict"; const isGated = document.body.getAttribute("data-is-gated"); const gatedFormName = document.body.getAttribute("data-gated-form"); if (isGated && !isFormSubmitted(gatedFormName)) { const url

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49742	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:31 UTC	1097	OUT	GET /en/products/highq/_jcr_content/root/container_614525998/container/image_copy.coreimg.png/1669639036912/234507.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=f+5x00+pUvCuU/FKXbPxHoVD1xz21gUdyJgC57PpQjTSi8QFSEqVmJ5lY79uH3RuKz9JVGsv1C2xhHT9g0zAkJiv7sMXWJzx+T4ArUrWTM2JBUYGRUDXWgE89cjk; AWSALBCORS=f+5x00+pUvCuU/FKXbPxHoVD1xz21gUdyJgC57PpQjTSi8QFSEqVmJ5lY79uH3RuKz9JVGsv1C2xhHT9g0zAkJiv7sMXWJzx+T4ArUrWTM2JBUYGRUDXWgE89cjk
2024-10-01 09:51:31 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 152462 Connection: close Date: Tue, 01 Oct 2024 09:51:31 GMT Set-Cookie: AWSALB=RfyIEiMo1XCpovyZSowEFTlFnXKZR439ZWj+8COAkYdXTlU7fJegHCDuOcy7mnkeloQrX4rQxiY+662xPoppyInIAATKiLpbWBWghqvZk5qB45zBpuRbpvKFEaxP; Expires=Tue, 08 Oct 2024 09:51:31 GMT; Path=/ Set-Cookie: AWSALBCORS=RfyIEiMo1XCpovyZSowEFTlFnXKZR439ZWj+8COAkYdXTlU7fJegHCDuOcy7mnkeloQrX4rQxiY+662xPoppyInIAATKiLpbWBWghqvZk5qB45zBpuRbpvKFEaxP; Expires=Tue, 08 Oct 2024 09:51:31 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Content-Disposition: inline; filename=234507.png X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Nov 2022 12:37:16 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:31 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "2538e-5ee8721a4d700" X-Cache: Miss from cloudfront Via: 1.1 9938d2bc2f9fab06207e42238c10bb32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: t07wntQYszhWNndGP3hnvgGECDM9KErPg4Nh0WD6BxRWAbqZyo_mWg== Age: 2254403
2024-10-01 09:51:31 UTC	14632	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 05 00 00 01 f9 08 06 00 00 00 d0 aa 92 32 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 02 53 23 49 44 41 54 78 01 ec bd 07 9c 1c c5 95 3f fe 7a 73 d2 2a e7 1c 01 05 90 00 91 04 88 9c 4c c6 04 63 fb 70 ce e1 7c e7 3b ff 3f 3f ff 7e 36 be 6c 9f b3 cf f9 b0 71 c0 c6 60 8c 09 26 0b 11 05 92 50 46 39 e7 ac 5d 6d ce fd 7f df 9a 79 b3 6f 6a ba 67 7a 66 67 17 01 f5 85 d5 cc 74 77 55 bd ae 7a 55 f5 52 55 79 e4 d0 63 f8 be ef 35 35 35 8d 38 76 ec d8 69 8d 8d 8d a7 75 75 75 4d 68 6f 6f af ec ec ec ac e0 cf f2 82 82 82 52 fe 5e 80 67 f9 bb 8f cf 8e 8e 8e a4 2c e4 8b e7 79 e6 37 3f 4f 85 85 85 3e ff f6 f8 Data Ascii: PNGIHDR2pHYssRGBgAMAaS#IDATx?zs*Lcp\|;??~6lq`&PF9]myojgzfgtwUzURUyc5558viuuuMhooR^g,y7?O>
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 8a 3e 5f d1 80 fc e4 d9 44 e2 dc eb 28 96 9f 10 19 bf 1e fb da 4d 1f 59 75 44 b1 36 0c af a3 58 e2 d4 36 54 8a 66 fc 9e 27 34 04 d6 51 fc 79 55 47 c9 34 28 fa e2 75 24 6d 28 cf a6 d2 17 7f 43 df 4f 6d 43 5f b6 df 4b bc 85 95 8f df dd 4e 8a 9c d8 2d 45 54 f2 d7 24 1a e4 5e a2 8e a8 1b b9 d6 11 c5 f9 86 52 f8 b2 9b 3e cf f7 ba d3 27 68 20 95 af 67 d5 91 4f f6 4b 76 67 dd 4d 9f a7 ea 31 d7 3a 4a dc 4b 5b 47 e1 f4 25 68 a0 30 fa 28 31 b6 e8 3a 0b ac 23 8b be 44 35 f9 dd 34 48 9f f2 bb 2b 2f 9e 57 3a 1a 52 eb 28 a9 6f e8 76 50 03 80 97 68 d7 60 1a 62 e5 75 f7 eb 58 1d 59 fd 3a a9 8e d4 d8 97 ae 8e ac b1 a5 bb 8e a8 bb 5f 67 5d 47 5e d2 70 4b a1 f4 a9 3a 8a 3f 9c 3c 3f 50 77 3b 11 65 3d f6 91 1a fb 32 ce 0f aa 8e 7c 79 7f 3b 0f 3d 36 4b 09 e9 e6 af ee e2 b2 98 Data Ascii: >_D(MYuD6X6Tf'4QyUG4(u$m(COmC_KN-ET$^R>'h gOKvgM1:JK[G%h0(1:#D54H+/W:R(ovPh`buXY:_g]G^pK:?<?Pw;e=2\|y;=6K
2024-10-01 09:51:31 UTC	15359	IN	Data Raw: 36 a4 ca 4a d3 86 49 1c 44 aa e0 b0 36 0c a6 8f 32 d6 51 6a 9d 53 da 3a 22 d2 7c 14 a9 8e e2 3c 26 b4 27 d5 51 40 3b 25 f3 04 59 4f 7b 69 68 20 8b 93 82 e8 4b ae 73 4a 53 17 91 c6 96 ac ea 28 75 dc 49 6d c3 20 fa 48 d1 99 a9 df 74 e7 19 dc df 29 cd d8 dc c3 f9 c1 a2 26 ac fe ba 8b 88 56 47 61 e3 4e fa 3a 0a a0 2f 70 fe a2 80 77 a2 de 9b bf b2 9a 1f ba eb 48 b7 6b 36 63 73 7a be 0c a8 bf c4 7b 6b 3e 0f ea 1b 27 48 1d 51 2f cd 0f 81 f4 25 8f 13 6d 6d ed 49 ca 80 3e b0 cc de 82 14 1e 04 7d ae 94 33 d6 66 07 a7 14 58 60 25 a0 55 6b a0 a2 1c 44 89 49 c3 33 25 a5 25 e4 e0 e0 e0 e0 e0 e0 e0 e0 d0 73 14 17 17 a5 6c 0d 2f bf 65 23 18 bd 21 8c f6 14 b8 4d 62 b2 83 53 0a 52 d1 ae 7f e8 d5 ed 51 e0 18 d0 c1 c1 c1 c1 c1 c1 c1 21 3f d0 8b 85 65 5b 52 fb bc 02 d9 82 54 Data Ascii: 6JID62QjS:"\|<&'Q@;%YO{ih KsJS(uIm Ht)&VGaN:/pwHk6csz{k>'HQ/%mmI>}3fX`%UkDI3%%sl/e#!MbSRQ!?e[RT
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: ea ff f3 5f c9 0e 23 f5 06 30 7f 7e e1 1f a8 78 c6 ac 58 9a 83 07 99 ff c6 52 f9 7b ae a7 02 4e 53 f7 cd 7f 63 e9 99 f3 86 e2 70 c5 55 54 7c ee 3c 2a 1a 31 d2 f0 5a f3 e3 7f 25 bd 45 31 fe 45 79 45 13 78 7c 6a 69 46 cc 4e a2 1c bf 83 3d 0f a5 25 94 09 81 35 e0 1b 53 56 68 1a f1 d8 eb cd 5f b4 72 80 dd 86 e4 19 00 8a 00 a2 3a e2 bb 15 f9 db b6 6d eb e9 0c f5 ae 81 53 0a 2c 78 71 8e 93 78 34 08 12 82 46 58 a9 d3 a7 a5 5e 43 d0 a4 af 4d 56 61 f7 c2 4c 2c 94 63 7e 61 4a 46 ba 34 94 05 0d 0c 08 f2 1f bc f3 bd 54 c5 c2 d8 c1 43 87 69 54 d9 88 14 11 e5 8f 7f fa 2b 5b fb 1f 49 ba 86 f0 9d 7f fe f2 67 e8 34 b6 0a 3f ff c2 2b c6 5a 70 f5 55 97 d2 08 16 d2 df 58 be 8a be f9 ed 1f 19 c1 fe 8b 9f fd 98 b1 da de 7c c3 b5 f4 d3 5f de 9b aa cc 71 3b de 7a f3 f5 46 21 38 Data Ascii: _#0~xXR{NScpUT\|<*1Z%E1EyEx\|jiFN=%5SVh_r:mS,xqx4FX^CMVaL,c~aJF4TCiT+[Ig4?+ZpUX\|_q;zF!8
2024-10-01 09:51:31 UTC	731	IN	Data Raw: 04 b4 50 20 21 99 4c 12 8c 3e c4 21 4e 60 a2 7b 90 3c 21 8a 26 ab 4a c0 32 7e 5a d7 33 53 18 98 76 95 0a 02 a4 c0 34 8a 5c b3 66 bf 07 86 30 79 02 80 73 73 71 d1 34 28 2a 0f 00 dc 51 7c f8 f5 6d 3a 1c 0a 07 f3 87 a8 c1 53 29 23 c4 f6 1c 77 c6 5d 71 0c 31 15 24 6d a1 07 7d 86 b3 7f 2c 45 a3 27 0d 32 7d e2 05 89 92 06 af 3e 52 d1 67 52 01 1e 7d e4 70 31 11 f3 84 45 b6 38 b9 16 17 68 95 46 97 40 f0 45 58 ac 23 8e 21 26 48 12 52 7c aa c4 70 0a 90 5c 8b 4b bc 5d 3e 6c 91 26 70 1f 15 fb 15 3c fb c8 72 cd 10 ea 38 ee 43 31 8e bc 9e 3b 40 e9 67 08 ca 7a de cf 10 14 75 5c f4 b9 14 bf e1 fb 48 4d 9f fd 66 d8 82 00 7f 3f ad 75 16 44 46 ce a4 87 48 f9 13 80 40 28 11 d3 2c 9a d0 3f 9c 5b 6f 6c a5 04 bf a8 3c 17 d9 0c 5e f1 9e ed be 98 50 1f 09 ef 2e 18 ce 70 b7 ea 5b Data Ascii: P !L>!N`{<!&J2~Z3Sv4\f0yssq4(*Q\|m:S)#w]q1$m},E'2}>RgR}p1E8hF@EX#!&HR\|p\K]>l&p<r8C1;@gzu\HMf?uDFH@(,?[ol<^P.p[
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 0d 00 43 9e ea 78 51 c3 3d 01 4a d6 42 05 2d c5 49 5d 76 0b 21 3e 15 1c ee 18 3c 8b a8 69 e0 f4 79 f1 15 ce bb 51 ff b2 4d b3 06 b8 e8 33 e4 6b f9 d0 e0 49 9f 51 aa 8f 1c 46 62 29 5f 7a 56 56 7b 45 15 0c 94 1d aa f1 e2 1c 47 96 d0 60 d9 c1 03 f5 11 a8 9e a1 73 4c 80 9c 1e f0 97 fb 42 0e 32 4b d0 e0 a4 1b 20 1a 7d 3c 2d c8 3b 52 b4 dc 29 9e 77 89 3e 2a d6 f0 e9 15 c7 4a 0c 00 06 71 f3 6f 36 0d 50 31 66 8a 10 81 10 7b 4a 12 d9 46 7e 27 44 f8 e5 a6 cf d5 ae a3 36 4f 31 bc 1f 97 a3 88 df 73 52 cf 3b 86 d7 38 02 f1 19 fa 3d 0f ab 11 bf 67 28 bc d7 2e ea 4a cc 3b a1 fa 48 f9 cb 99 a8 ea 23 d9 35 48 bc 7e b1 72 f9 61 0e 5f 61 05 e1 dd e5 10 0e ac df 15 ea 23 9b 06 e9 19 aa 1a f4 7a 86 a5 e6 1d 03 d4 f0 5b 1f 54 73 8b df 1a 5a 6a 1c 29 e7 1d 80 e0 6b a8 07 7d 8e Data Ascii: CxQ=JB-I]v!><iyQM3kIQFb)_zVV{EG`sLB2K }<-;R)w>*Jqo6P1f{JF~'D6O1sR;8=g(.J;H#5H~ra_a#z[TsZj)k}
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 6f 28 ba fa 71 4b de ca 95 2b 1d f5 e6 cc 99 03 55 87 f4 1e c8 79 9a 3f 98 3e d0 02 60 34 18 e9 11 18 7a e4 eb 90 bf 78 9a 76 22 32 7a 5e 2f 95 34 01 1b 00 be 9a 2a 57 9e f4 69 a8 f2 40 a8 03 a0 7e aa 72 1d fa 47 d7 e3 a1 c7 fe 0e ea d7 5e 07 89 ee 65 a0 11 1e a2 10 c0 19 7e d9 82 c0 ad 04 b8 9e e1 ba 85 bf ff e0 0f fe c0 4f 22 d4 10 a0 85 02 09 94 69 2c f0 83 c8 b8 2f 9a 7c 8a 31 7e 17 85 03 2e 18 54 43 2a bd 78 f1 02 fc f3 3f fd 33 5c 79 f5 55 b0 7b f7 6e f8 f5 5f fb 75 3b ef ed b7 df 86 a3 47 8f 32 3f 6a 14 08 d0 7d 62 cb 96 2d cc 7d 68 eb b6 ad d0 73 be 07 d6 ac 59 c3 5c 2a 70 e3 e5 82 85 0b ed ba 68 41 10 a7 bc de e1 0c 34 34 52 e6 af 7f b8 28 18 88 9f 0e 10 87 3f 84 3d 15 2a ea d8 5f 9d 4a 14 1b 75 54 08 40 46 bc ad 6e 16 54 1a ed 6d ed 81 d2 da da Data Ascii: o(qK+Uy?>`4zxv"2z^/4Wi@~rG^e~O"i,/\|1~.TCx?3\yU{n_u;G2?j}b-}hsY\phA44R(?=_JuT@FnTm
2024-10-01 09:51:31 UTC	667	IN	Data Raw: 2e 78 a5 a0 5a 00 6a 09 e8 96 73 e2 c4 09 b8 fe fa eb 61 aa 02 dd 9e 50 03 8f 4c 7c 25 9f 05 6e ca c7 b9 15 37 84 5f 4a 3c ff fc f3 30 36 3a 06 1f fa f0 87 02 df 2f 5a 69 1e 7a f8 61 66 35 44 21 a4 14 f8 1a a2 a1 a1 11 0c db b7 6f a7 d6 fb 3b 1c 61 48 c5 13 8d 45 6b 3f 2a 19 50 b9 f0 f1 8f 7f 9c e5 d3 77 f2 e9 df fe ed df be 1d 34 02 41 bb 0f 49 a0 66 63 2b 72 b8 19 56 8e 83 9b ae 50 40 10 05 03 1e ef 1c a1 c3 8b 69 68 4c 1f a0 3b 4a 10 97 94 c9 0c d4 86 a3 4b 5c a5 b1 66 cd 1a a8 05 a0 75 24 2c 66 76 74 c0 17 be f0 85 40 65 0d ad b4 d4 d0 08 0d 31 b8 8b 2c 10 88 f9 08 e4 d5 b8 25 df b2 e6 eb 73 0a 42 40 0b 05 12 e8 00 c2 43 cb 08 0e 2c f4 55 45 c1 40 b5 c9 18 c1 4f 3a e6 69 15 d5 6a 96 3b ae 9e 57 9d a8 d7 a9 56 dc bf a8 6d 95 b3 8f a2 d6 99 cc cf 30 2c Data Ascii: .xZjsaPL\|%n7_J<06:/Zizaf5D!o;aHEk?*Pw4AIfc+rVP@ihL;JK\fu$,fvt@e1,%sB@C,UE@O:ij;WVm0,
2024-10-01 09:51:31 UTC	15990	IN	Data Raw: e8 41 68 6c 68 64 11 4d b0 af 5b 5b 5b d8 a1 51 78 46 04 46 74 c1 83 9d b0 dc cc 19 33 a1 7f a0 0f 86 86 86 e1 fc b9 f3 70 c5 15 57 30 53 fd b7 bf fd 6d 58 b0 60 21 ad bf 95 85 74 c4 e7 84 da 57 0c 19 99 a1 8c 36 1e 58 84 f1 c5 31 14 23 c6 17 c7 3c 0c 1b b8 6e fd 7a 68 69 6e 86 89 60 3c 9f 81 0b a3 7d 70 f0 e2 11 78 eb dc 7b 70 c3 82 2b 81 3b 80 60 24 9a 97 5e 7a 89 85 84 c4 83 9d 58 68 c4 b6 36 b8 d8 7b 11 da 5a da 58 d8 4b 04 9e 92 8a 07 2a 61 28 4c a4 f1 ea ab af 66 b1 f1 51 6b 8c fe e6 28 18 61 5f a0 e0 83 07 64 61 9c 78 0c 8f 89 7d 83 79 8b f0 74 64 0a cc c3 50 94 38 06 37 6e dc 38 f5 04 55 52 c1 0d 0b 97 18 9b 37 6f 06 0d 0d 0d 0d 8d 60 c0 75 9e 2b 0d c5 bd 05 62 94 3a 33 94 70 dc b1 df 53 f3 68 e1 a0 85 02 09 68 29 e0 f1 e7 11 5c 28 e0 83 ad 5a 9a Data Ascii: AhlhdM[[[QxFFt3pW0SmX`!tW6X1#<nzhin`<}px{p+;`$^zXh6{ZXK*a(LfQk(a_dax}ytdP87n8UR7o`u+b:3pShh)\(Z
2024-10-01 09:51:31 UTC	394	IN	Data Raw: d3 93 b0 2f f2 e9 d4 26 f0 42 3f 92 51 90 fd 92 71 06 f2 52 d2 fc e5 34 a4 4f 7e f2 93 3b 65 a3 c3 06 5d bd 77 3c b3 fb b9 b5 1b 38 04 36 4e c1 04 86 a1 fd 07 c3 f8 ff 7f e7 4d 7c 71 0c b2 0c 15 a2 e3 cd a5 39 8f 37 46 4a 1c 05 2b 8e 8e 38 b4 f2 68 25 68 c6 0f d8 fb 76 14 14 c1 6e 23 c1 46 5f be 93 eb 87 e3 81 51 c6 ca 41 9f 87 0e 03 73 8f 14 0d 1b c7 8e ac 62 6c 3a da e9 28 33 fd 0c 70 cf 46 27 06 39 c2 9d 4d a2 18 9d 08 90 3e a1 07 dc 10 39 76 8e 3e e5 dc 0f 47 2b 03 31 e2 e3 10 f5 46 30 a7 04 b9 bc e7 85 8d d2 38 03 4e 7b f2 7b 24 1c 25 6a e3 9e 3a 51 1c e0 80 d3 92 bc e1 d6 ab 22 36 2e dd 46 9c 52 04 a7 73 32 a1 37 56 0e 4c 03 16 c2 7c 5a 49 10 a5 b6 42 0c 8d bb 6d fa e9 25 6b ea 05 ff fe 74 34 93 39 46 39 84 de 6c 60 9b 77 da 98 a3 ad d0 8b 8f b9 b5 Data Ascii: /&B?QqR4O~;e]w<86NM\|q97FJ+8h%hvn#F_QAsbl:(3pF'9M>9v>G+1F08N{{$%j:Q"6.FRs27VL\|ZIBm%kt49F9l`w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49741	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:31 UTC	1102	OUT	GET /en/products/highq/_jcr_content/root/container/container/tabs/container/image_copy.coreimg.png/1698258525660/234568.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=f+5x00+pUvCuU/FKXbPxHoVD1xz21gUdyJgC57PpQjTSi8QFSEqVmJ5lY79uH3RuKz9JVGsv1C2xhHT9g0zAkJiv7sMXWJzx+T4ArUrWTM2JBUYGRUDXWgE89cjk; AWSALBCORS=f+5x00+pUvCuU/FKXbPxHoVD1xz21gUdyJgC57PpQjTSi8QFSEqVmJ5lY79uH3RuKz9JVGsv1C2xhHT9g0zAkJiv7sMXWJzx+T4ArUrWTM2JBUYGRUDXWgE89cjk
2024-10-01 09:51:31 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 294264 Connection: close Date: Tue, 01 Oct 2024 09:51:31 GMT Set-Cookie: AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; Expires=Tue, 08 Oct 2024 09:51:31 GMT; Path=/ Set-Cookie: AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; Expires=Tue, 08 Oct 2024 09:51:31 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Content-Disposition: inline; filename=234568.png X-Content-Type-Options: nosniff Last-Modified: Wed, 25 Oct 2023 18:28:45 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:31 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "47d78-6088ea01e9140" X-Cache: Miss from cloudfront Via: 1.1 b83db9a9904a8f97beb31f810804b6e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 2tUXEIv6hlfzM-1Wjh2RlbPgcMzPbMEIjfI6rpvDemNnEOs20OUwOQ== Age: 2254402
2024-10-01 09:51:31 UTC	14632	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 18 00 00 01 be 08 06 00 00 00 10 a7 a2 be 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 04 7d 0d 49 44 41 54 78 01 ec fd e7 96 64 39 92 30 06 9a 5d f7 d0 11 a9 75 96 ae ea aa d6 3d 3d 9c c3 d9 d9 fd c5 6f df 64 f7 9c 7d 93 dd a5 38 7c 21 f2 07 f9 63 3e 72 54 cf 7c dd d3 a2 54 97 ae ca ac cc ac 54 91 19 da af 11 06 c0 00 33 00 f7 ba 7b 64 64 75 cd 21 d1 9d 15 7e 2f 00 83 29 18 cc a0 2e fe bf fe df ff 1f 42 98 41 9d c8 fd 43 18 4e 65 fe 70 79 8c b9 8b a6 97 5d 7e 28 59 0a 48 41 0f ff ed 61 9c 23 2f 82 d3 e9 68 18 e2 39 29 88 f3 30 fe 21 cb cd ca 60 b8 0c 0e 3c d5 6d cc e3 c8 c2 34 44 40 2f ae 7b Data Ascii: PNGIHDRpHYssRGBgAMAa}IDATxd90]u==od}8\|!c>rT\|TT3{ddu!~/).BACNepy]~(YHAa#/h9)0!`<m4D@/{
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 20 e9 3a 15 24 f4 09 ae bf ea 34 0d 10 45 a0 80 da a0 6a 7c e2 20 97 66 f0 4a b3 a3 06 ad 0e cc d6 2f 39 0b 42 7a ab 03 5a 87 4d 1c fd d8 4f a2 60 83 18 b8 3e af 08 f0 8a c9 c3 87 bb 3e 38 e1 ab 70 df f9 d1 8f fc cd 04 01 af d0 b0 97 89 e2 f9 ac a0 21 f1 06 ad 71 ef 4c 84 1a da 9e 20 1a 6b 86 98 6f 0f d2 49 3a 0b c6 af 89 a7 f2 7a 50 8e fc cb 03 74 60 fa 2c 7d 99 32 f3 42 56 9d 72 c7 28 c6 a1 81 df e6 65 d2 2d cc bf 63 1e 82 a5 c9 e6 a3 95 7d 03 b8 c5 a9 b9 7f c5 e2 8f 43 b0 54 2d ac 21 e4 df 65 07 81 cc 46 3b 3e a4 8c a4 9f 14 e4 53 6b ab ad 26 6e 6e 16 0f 55 25 ab a6 40 9c 7f 6b 78 a3 b4 1b ad c4 27 1a c3 24 d3 d5 43 5f 97 21 8d 8f b4 d1 9b 41 76 98 d8 5e d5 89 26 3a f6 d3 80 73 36 73 89 2a d2 6f 04 7e 41 33 40 e1 a8 d7 68 e7 81 80 74 a5 dc 8e c1 6c 00 Data Ascii: :$4Ej\| fJ/9BzZMO`>>8p!qL koI:zPt`,}2BVr(e-c}CT-!eF;>Sk&nnU%@kx'$C_!Av^&:s6s*o~A3@htl
2024-10-01 09:51:31 UTC	9562	IN	Data Raw: 47 3b ee 88 9c a4 73 68 0e e5 e7 96 95 97 7e de c4 12 47 84 25 10 b4 0a 41 51 16 a0 a2 51 e7 05 fd 2c f7 94 96 ae a3 ca 41 30 43 4b 42 47 76 6e f0 73 d3 27 21 6b ac c6 bc c4 46 23 64 e8 cb 3a 95 fa 2c b6 39 6c df 64 86 b4 e2 cd b2 2f 1a c6 f9 5b 0c 75 eb 4d 77 58 c1 d2 ed ab 96 d2 2d 58 34 58 2f 99 46 e9 25 94 5e 18 31 69 f1 52 6e 6c 40 db c4 2e 17 87 ac 9b 18 00 0c fb 95 39 bf f4 59 a8 0d 69 f0 65 a2 d5 64 95 12 b3 93 7f f3 76 f0 65 3a 6d a1 29 65 88 b1 65 52 02 c5 06 98 e1 5e 67 a3 f1 06 36 a8 f2 aa 19 0c a5 45 10 f1 88 c6 de 6e 2f 2c 08 af 11 4c dc 6b f2 03 0b 6e 15 24 92 69 27 2b 7e 9a b5 4e af 1a d0 5b f4 a0 42 cc 28 e2 18 7f 06 52 81 36 cd b1 17 05 72 90 bd 56 00 33 ad 09 0b 03 d1 d0 e6 bc b0 59 d6 5e c7 a1 19 0b 55 a9 47 8f f2 d1 ca a0 d5 e8 22 f9 Data Ascii: G;sh~G%AQQ,A0CKBGvns'!kF#d:,9ld/[uMwX-X4X/F%^1iRnl@.9Yiedve:m)eeR^g6En/,Lkn$i'+~N[B(R6rV3Y^UG"
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 7b 4b 2f b1 35 43 33 35 df 8f bc aa d3 99 c9 6d b9 54 eb d6 62 fd 0d 8b 3c 2c a0 8a fd b3 c1 24 9a 76 b2 23 93 0b 99 d5 02 ca ce 0e 55 ad da f6 5a e3 90 c6 26 d5 6f d2 50 33 1f 97 d1 ff 02 5a 5b 98 e5 78 0f 90 b7 ab ea 93 69 2d 10 0d 78 c6 f8 0f 8c ed cd f1 ae ae 8f 66 d0 2b 24 6b 86 b9 fc 5f 52 67 f4 2a e6 2b 70 fc a6 f3 bb 48 d4 98 de 1a 7e 8b ed b9 15 ca e3 ce 0b 98 1b bb 52 3b 5d 01 0b ed 1f c3 1b 45 7f 61 88 31 e5 33 bc 49 fc 07 03 86 b9 90 21 36 1f 6c 99 06 35 66 1c a6 ba bc dd 2d d3 a0 a1 d9 86 92 41 51 3e bf a9 7b b3 3a 8c 6c f3 a8 dd 1f a9 7c 52 c5 d2 2d 52 06 57 6a e0 04 45 7e e5 c5 69 e4 e5 c6 84 19 4c e8 04 d6 dc fa d5 c9 de 3e ec 3f 7b 0a 93 f5 0d 38 71 81 c5 de d1 09 6c 5e bc 04 ab ab d3 8a 1f f2 cc b3 a1 fc 8f af c9 64 e7 a6 27 6a 20 1a cb Data Ascii: {K/5C35mTb<,$v#UZ&oP3Z[xi-xf+$k_Rg*+pH~R;]Ea13I!6l5f-AQ>{:l\|R-RWjE~iL>?{8ql^d'j
2024-10-01 09:51:31 UTC	8949	IN	Data Raw: fb 7e 73 6b d3 3b 2d af 9c 42 de 76 8e 18 bf fb 59 75 5a 8c 92 18 87 bb 70 66 78 17 06 56 07 9e b5 b7 ac 49 c6 48 fb 32 6d 1e 48 98 ca a2 37 f4 d9 a9 65 87 90 57 e1 ee 39 87 93 9d 44 e6 e3 5b 6e d2 84 6f 9f 7a ea 1c 5f 0e ec 34 f3 0a db f3 67 6e a5 6a f7 99 33 c8 3f f4 2b 0e 6c b8 70 9e f3 b3 13 ef a0 32 df b2 bc 63 47 ef c1 fd f7 3c 5d de bc 79 e5 ca 3b 78 ab 2d d8 71 06 0e 1b 46 6c dc 78 07 dd 19 e9 cc 37 bc 0a f5 dc f1 3d fb 1f ec 50 f2 78 62 79 ca f1 9b 71 7b 2a e3 f6 da f1 e4 33 87 c3 9e 33 88 ee b9 95 38 e6 05 36 c6 76 dd ec fc e1 e1 31 7c f9 e5 97 f0 b3 9f fd 04 18 d0 d9 e9 b9 97 c1 cc db 7c 98 9d 79 f0 85 9b d5 3d 72 86 d6 3d 07 9f 0d 36 c6 81 7f 39 b0 73 f1 ec e9 33 67 d4 3f f5 72 9a 57 70 de bc 7e e9 26 90 6e 7a e3 0d 97 e8 74 c0 81 1f 93 dc 6f Data Ascii: ~sk;-BvYuZpfxVIH2mH7eW9D[noz_4gnj3?+lp2cG<]y;x-qFlx7=Pxbyq{*3386v1\|\|y=r=69s3g?rWp~&nzto
2024-10-01 09:51:31 UTC	7435	IN	Data Raw: 00 57 c3 4e b7 05 bb ff 8a 41 0d d5 73 fd bb 06 52 ff c9 fc 34 00 c7 fe 37 16 6a 6e 08 e3 3e 96 17 7d 57 d3 ed 7a ea d4 7c 66 05 ad 1f ea ff c6 4a 57 f5 12 0c 1a 9c 63 fa 8e 26 d8 29 64 bd 50 9b 18 78 b0 cd 9b b3 24 e3 a8 5e 46 1e 09 b6 3e b2 e4 7d 93 c9 0e 95 4e af 8f 14 a4 b8 3c d0 ba 88 85 7f 93 28 d5 e9 af 7e fe b1 ce 11 e9 a8 f3 67 3a 50 65 7f 88 80 5d ba a1 59 0d 5a 0d 50 d9 06 ec d6 6e 51 12 75 0e 33 5e 20 47 25 91 49 89 e1 f1 a0 f0 a0 8e 93 58 c5 18 ac 4a 03 a0 47 43 3d 40 44 17 d0 94 3e 50 ef 12 39 6c d2 d3 cb aa 59 ed 86 21 a4 0c 1c 7a 3d 65 79 64 b1 02 ab 9e 14 57 be af 17 32 a6 db 25 6a f0 5a 84 0b 06 a7 d8 5c 79 92 87 95 b6 18 04 49 df e5 03 74 08 20 cf 75 28 84 a7 1e b2 94 55 e6 f2 ba b1 b6 f7 a8 e1 b7 d7 20 6b 2e cb 4b 94 f5 da 63 7c c5 ea Data Ascii: WNAsR47jn>}Wz\|fJWc&)dPx$^F>}N<(~g:Pe]YZPnQu3^ G%IXJGC=@D>P9lY!z=eydW2%jZ\yIt u(U k.Kc\|
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: a1 eb 85 35 48 a7 a2 58 1f 92 3e a5 ff 7d df 86 65 3c 2f ef 29 72 39 11 19 1c 51 eb 00 cc fd 14 b6 04 15 b8 74 11 bf ad b4 58 e4 73 4a 69 c5 2b eb 7a 25 2a 11 2a b5 97 77 6a a0 d8 fe 26 fb 53 21 a7 48 24 fb 1d 7b 02 5e f4 f9 65 05 33 b6 00 5b 85 10 fa 46 5f 58 df 29 55 73 69 3f a7 c6 41 ae e7 e3 70 25 58 46 54 97 ef 07 6a 6b f1 13 98 37 cd 47 b3 e4 fc 60 59 4e fa a9 17 54 0e 54 83 6c b4 00 3f ae 06 01 66 f4 50 c8 aa 1a d9 62 78 41 dc 12 12 64 4f 1c be 71 20 3b 35 07 67 ab 4d d8 76 0a 68 c5 1f ca 73 b3 5e 17 6e 56 95 97 c8 03 a7 ae fd 76 a0 34 20 c2 a5 4a 58 04 58 1c b0 6c 28 f9 a5 c7 e8 bc f0 f2 3a ef 95 e7 01 c9 03 74 19 47 16 09 5c c3 b8 5c 40 59 fa 14 0c eb 07 d0 1a 5e be 7a 0b 07 87 07 4e f1 af fc 4c e0 d6 e6 96 50 5c 18 3e fe 96 8c b3 38 2b 90 b6 23 Data Ascii: 5HX>}e</)r9QtXsJi+z%**wj&S!H${^e3[F_X)Usi?Ap%XFTjk7G`YNTTl?fPbxAdOq ;5gMvhs^nVv4 JXXl(:tG\\@Y^zNLP\>8+#
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: cc 60 68 21 63 c2 46 89 60 ea fb d0 07 61 4c 2c 82 df 97 1a d0 95 48 d4 82 9e 4c 37 dd 08 24 99 5f e2 34 1c 48 31 78 cd c6 ae 25 44 c2 c1 20 d9 2a 59 a1 2e 6a d0 6d 04 8b c1 d7 10 37 8d 11 b0 ef 15 40 1a 6d c1 79 28 74 2e 6d 2f 2b 53 ca e9 68 6e 20 92 2f 82 ef f9 e6 16 37 db bf bd b3 ed 1c 88 6d 78 f5 fa 95 33 d2 f7 fd 96 22 fe c8 1b af 24 f0 56 a6 0f 3f f8 00 f6 9d 71 bf 7f 73 df 3b 0e cf 9e 3d 77 46 bf 73 20 ee dc f6 0e c7 b3 a7 cf dc ea c0 b1 cf 8b 0e de 96 83 c5 2b 0f af 5e bf 86 37 6f df 38 e7 e1 dc a5 ed f8 f4 07 ef bd e7 1c 89 bb be 7e ff f5 de d5 32 3f 9f 3b 47 81 cf 5a ac dc 8a 03 3f 1f 1d 1f fa d5 89 8d cd 2d cf 9f bc 1a b1 74 ab 12 ab 8d a5 77 34 8e 8e 0e 43 59 0c 2b 28 dc 1e 5e a5 60 67 66 df ad 9e e0 62 99 db c8 0e c7 92 cf 6d 88 d5 35 20 04 Data Ascii: `h!cF`aL,HL7$_4H1x%D *Y.jm7@my(t.m/+Shn /7mx3"$V?qs;=wFs +^7o8~2?;GZ?-tw4CY+(^`gfbm5
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 7c f5 d5 57 82 07 b7 41 3c 0e d4 fe 77 ef de 4b 5d 5f bd 7a 05 3b 7c a3 b1 c4 95 8f a2 24 b1 52 c5 28 b0 d2 c6 c2 96 84 ba 70 5c 38 29 52 7c 1a cf 4f 3f fd 04 7b bb 7f 26 30 df 92 65 9a 37 d3 b2 20 c6 78 82 08 4a bb 52 ee c3 fb f7 34 0e 6f e1 d7 bf fe b5 94 e7 7d 03 0c 83 db f5 e6 cd 6b 79 cf 37 0b 5f 5f 5f c1 f3 e7 cf a3 b7 5b f6 e5 cd b2 47 93 ad cf 72 cc e8 62 21 96 e7 65 ba 54 2c b6 25 ee d5 c3 14 5e c2 f0 a3 b1 20 1e f1 39 4f 31 f0 0b e9 bf 85 d4 cb 65 19 06 0b 96 e3 58 fa 83 eb 5e 4a df c7 31 e6 ea c5 33 33 c4 63 db f9 7b bc 50 76 01 1a db cf 56 ea c5 fd 42 ea 8d 97 90 e9 de c0 72 90 45 a4 b9 39 9c 7f 3c 97 7e e3 b6 c8 b1 dc 2c 4c 2e 17 d2 e7 b2 bf 2f b5 37 08 2d ec c8 a9 45 9f ca 63 72 48 5f 9e 8f fc 60 c8 f5 14 33 73 bb 32 f4 78 8e 13 0b 71 35 0e Data Ascii: \|WA<wK]_z;\|$R(p\8)R\|O?{&0e7 xJR4o}ky7___[Grb!eT,%^ 9O1eX^J133c{PvVBrE9<~,L./7-EcrH_`3s2xq5
2024-10-01 09:51:31 UTC	16384	IN	Data Raw: 8d 83 5a d2 d0 18 ec 93 f2 c9 b0 06 74 13 b1 10 19 26 cb 29 16 0c 83 3d a6 2e e4 0e c1 1c d2 84 79 61 48 f6 06 6f d9 cc b4 2a d8 97 f1 91 96 33 5b e1 67 4b 71 9b ce e1 0e f6 c6 0b 58 de be 86 e5 f9 ef 61 31 ee c3 f2 70 0f f6 4f 5e 50 3e 52 32 38 7a 13 cb 74 88 d5 a5 50 17 88 fd ec 37 08 22 f8 10 b2 c4 34 82 be c6 6c b5 0c 19 27 c8 93 8f 37 a2 2d 93 97 4b 95 5e dd e8 08 65 1d ed 30 55 df 65 7d ee bd 41 32 c5 56 42 78 24 f8 cf 9f fc 82 b2 5d 7a 64 b9 75 21 03 89 b5 89 11 84 16 0e 9e 53 b3 59 3a 17 5d 85 19 48 d4 9f c8 25 7b 3f a1 b6 1a e2 c4 e7 8a 36 84 15 d9 eb e4 2c 6b 91 b0 2a 3b 4b 9a 4a 1b f6 13 3e a6 47 37 28 e4 de 4f 8c 1b 6e 06 04 d7 96 c3 75 20 56 cf 3f f7 c4 b4 0d cb a0 f4 44 a3 cd 3a 0e 37 ca 82 5b 16 f1 e5 7b fd b4 ae c5 41 f8 d2 1e ad a3 17 e7 Data Ascii: Zt&)=.yaHo3[gKqXa1pO^P>R28ztP7"4l'7-K^e0Ue}A2VBx$]zdu!SY:]H%{?6,k;KJ>G7(Onu V?D:7[{A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 09:51:32 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=197658 Date: Tue, 01 Oct 2024 09:51:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49745	13.33.219.205	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:32 UTC	376	OUT	GET /us1/v4/datadog-rum.js HTTP/1.1 Host: www.datadoghq-browser-agent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:32 UTC	597	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 153156 Connection: close Last-Modified: Mon, 09 Oct 2023 09:24:57 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 01 Oct 2024 09:51:33 GMT Cache-Control: max-age=14400, s-maxage=60 ETag: "2630b3d7ad4a41fac67742216e506d83" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 d6f0ad3267f72bf9b59a5eb61f811fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: SVMb3JBd4e862PApKMDqDEqDRvpmdUTgGY69FQOeornPGMi5gg-e6Q== Timing-Allow-Origin: *
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 6c 6f 67 3a 22 6c 6f 67 22 2c 64 65 62 75 67 3a 22 64 65 62 75 67 22 2c 69 6e 66 6f 3a 22 69 6e 66 6f 22 2c 77 61 72 6e 3a 22 77 61 72 6e 22 2c 65 72 72 6f 72 3a 22 65 72 72 6f 72 22 7d 2c 65 3d 63 6f 6e 73 6f 6c 65 2c 6e 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 5b 74 5d 3d 65 5b 74 5d 7d 29 29 3b 76 61 72 20 72 3d 22 44 61 74 61 64 6f 67 20 42 72 6f 77 73 65 72 20 53 44 4b 3a 22 2c 69 3d 7b 64 65 62 75 67 3a 6e 2e 64 65 62 75 67 2e 62 69 6e 64 28 65 2c 72 29 2c 6c 6f 67 3a 6e 2e 6c 6f 67 2e 62 69 6e 64 28 65 2c 72 29 2c 69 6e 66 6f 3a 6e 2e 69 6e 66 6f 2e 62 69 6e 64 28 65 2c 72 Data Ascii: !function(){"use strict";var t={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},e=console,n={};Object.keys(t).forEach((function(t){n[t]=e[t]}));var r="Datadog Browser SDK:",i={debug:n.debug.bind(e,r),log:n.log.bind(e,r),info:n.info.bind(e,r
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 6c 65 64 3a 6e 75 6c 6c 21 3d 64 65 3f 64 65 3a 64 65 3d 21 21 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 7c 7c 2f 48 65 61 64 6c 65 73 73 43 68 72 6f 6d 65 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 70 65 72 73 69 73 74 53 65 73 73 69 6f 6e 3a 28 65 3d 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6b 74 28 68 65 2c 62 65 28 74 29 2c 76 65 2c 65 29 7d 29 2c 72 65 74 72 69 65 76 65 53 65 73 73 69 6f 6e 3a 52 65 2c 63 6c 65 61 72 53 65 73 73 69 6f 6e 3a 49 65 28 74 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 78 74 28 68 65 29 29 7b 76 61 72 20 65 3d 78 74 28 53 65 29 2c 6e 3d 78 74 28 54 65 29 2c 72 3d 78 74 28 45 65 29 2c 69 3d 7b 7d 3b 65 26 26 28 69 2e 69 64 3d 65 29 Data Ascii: led:null!=de?de:de=!!window.chrome\|\|/HeadlessChrome/.test(window.navigator.userAgent),persistSession:(e=t,function(t){kt(he,be(t),ve,e)}),retrieveSession:Re,clearSession:Ie(t)};return function(t){if(!xt(he)){var e=xt(Se),n=xt(Te),r=xt(Ee),i={};e&&(i.id=e)
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 69 66 28 74 5b 6e 2d 31 5d 3e 74 5b 6e 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 74 29 7b 76 61 72 20 65 3d 42 6e 28 74 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 72 74 54 69 6d 65 2c 72 3d 65 2e 66 65 74 63 68 53 74 61 72 74 2c 69 3d 65 2e 72 65 64 69 72 65 63 74 53 74 61 72 74 2c 6f 3d 65 2e 72 65 64 69 72 65 63 74 45 6e 64 2c 61 3d 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 2c 73 3d 65 2e 64 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 2c 75 3d 65 2e 63 6f 6e 6e 65 63 74 Data Ascii: e<arguments.length;e++)t[e]=arguments[e];for(var n=1;n<t.length;n+=1)if(t[n-1]>t[n])return!1;return!0}function Fn(t){var e=Bn(t);if(e){var n=e.startTime,r=e.fetchStart,i=e.redirectStart,o=e.redirectEnd,a=e.domainLookupStart,s=e.domainLookupEnd,u=e.connect
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 72 65 61 6b 7d 72 3d 72 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 69 66 28 6e 29 72 65 74 75 72 6e 20 74 69 28 51 72 28 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 2e 74 72 69 6d 28 29 29 29 7d 76 61 72 20 4b 72 2c 57 72 2c 58 72 3d 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f 69 64 20 30 3d 3d 3d 4b 72 26 26 28 4b 72 3d 22 6c 61 62 65 6c 73 22 69 6e 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 4b 72 7d 28 29 29 7b 69 66 28 22 6c 61 62 65 6c 73 22 69 6e 20 74 26 26 74 2e 6c 61 62 65 6c 73 26 26 74 2e 6c 61 62 65 6c 73 2e 6c 65 6e 67 74 68 3e 30 29 72 65 74 75 72 6e 20 65 69 28 74 2e 6c 61 62 65 6c 73 5b 30 5d 2c 65 29 7d 65 6c 73 65 20 Data Ascii: reak}r=r.parentElement}if(n)return ti(Qr(n.getAttribute(e).trim()))}var Kr,Wr,Xr=[function(t,e){if(function(){void 0===Kr&&(Kr="labels"in HTMLInputElement.prototype);return Kr}()){if("labels"in t&&t.labels&&t.labels.length>0)return ei(t.labels[0],e)}else
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 72 28 29 7d 29 29 2e 73 74 6f 70 2c 63 3d 28 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 77 69 6e 64 6f 77 29 2c 22 68 69 64 64 65 6e 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 6f 3d 30 3a 28 6f 3d 31 2f 30 2c 61 3d 55 74 28 30 2c 69 2c 5b 22 70 61 67 65 68 69 64 65 22 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 70 61 67 65 68 69 64 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 28 6f 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 61 28 29 29 7d 29 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 2e 73 74 6f 70 29 2c 7b 67 65 74 20 74 69 6d 65 53 74 61 6d 70 28 29 Data Ascii: r()})).stop,c=(void 0===i&&(i=window),"hidden"===document.visibilityState?o=0:(o=1/0,a=Ut(0,i,["pagehide","visibilitychange"],(function(t){"pagehide"!==t.type&&"hidden"!==document.visibilityState\|\|(o=t.timeStamp,a())}),{capture:!0}).stop),{get timeStamp()
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 75 63 63 65 73 73 2c 6f 3d 72 2e 6f 6e 46 61 69 6c 75 72 65 3b 65 2e 62 61 6e 64 77 69 64 74 68 4d 6f 6e 69 74 6f 72 2e 61 64 64 28 74 29 2c 6e 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 2e 62 61 6e 64 77 69 64 74 68 4d 6f 6e 69 74 6f 72 2e 72 65 6d 6f 76 65 28 74 29 2c 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 70 61 71 75 65 22 21 3d 3d 74 2e 74 79 70 65 26 26 28 30 3d 3d 3d 74 2e 73 74 61 74 75 73 26 26 21 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 7c 7c 34 30 38 3d 3d 3d 74 2e 73 74 61 74 75 73 7c 7c 34 32 39 3d 3d 3d 74 2e 73 74 61 74 75 73 7c 7c 28 65 3d 74 2e 73 74 61 74 75 73 2c 65 3e 3d 35 30 30 29 29 3b 76 61 72 20 65 7d 28 6e 29 3f 28 65 2e 74 72 61 6e 73 70 6f 72 74 53 74 61 74 75 73 3d 30 2c 69 28 29 29 3a 28 Data Ascii: uccess,o=r.onFailure;e.bandwidthMonitor.add(t),n(t,(function(n){e.bandwidthMonitor.remove(t),!function(t){return"opaque"!==t.type&&(0===t.status&&!navigator.onLine\|\|408===t.status\|\|429===t.status\|\|(e=t.status,e>=500));var e}(n)?(e.transportStatus=0,i()):(
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 72 3d 4e 3b 65 6c 73 65 7b 76 61 72 20 75 3d 5b 78 72 28 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 22 2c 63 29 2c 78 72 28 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 68 65 63 6b 65 64 22 2c 63 29 2c 78 72 28 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 22 2c 63 29 2c 78 72 28 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 22 2c 63 29 2c 78 72 28 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 49 6e 64 65 78 22 2c 63 29 5d 3b 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 66 6f 72 Data Ascii: r=N;else{var u=[xr(HTMLInputElement.prototype,"value",c),xr(HTMLInputElement.prototype,"checked",c),xr(HTMLSelectElement.prototype,"value",c),xr(HTMLTextAreaElement.prototype,"value",c),xr(HTMLSelectElement.prototype,"selectedIndex",c)];r=function(){u.for
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 2c 6e 29 7b 76 61 72 20 72 3d 32 2a 65 2c 69 3d 32 2a 61 3b 72 65 74 75 72 6e 20 74 5b 72 5d 3c 74 5b 69 5d 7c 7c 74 5b 72 5d 3d 3d 3d 74 5b 69 5d 26 26 6e 5b 65 5d 3c 3d 6e 5b 61 5d 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 68 65 61 70 5b 61 5d 2c 72 3d 61 3c 3c 31 3b 72 3c 3d 74 2e 68 65 61 70 5f 6c 65 6e 26 26 28 72 3c 74 2e 68 65 61 70 5f 6c 65 6e 26 26 53 28 65 2c 74 2e 68 65 61 70 5b 72 2b 31 5d 2c 74 2e 68 65 61 70 5b 72 5d 2c 74 2e 64 65 70 74 68 29 26 26 72 2b 2b 2c 21 53 28 65 2c 6e 2c 74 2e 68 65 61 70 5b 72 5d 2c 74 2e 64 65 70 74 68 29 29 3b 29 74 2e 68 65 61 70 5b 61 5d 3d 74 2e 68 65 61 70 5b 72 5d 2c 61 3d 72 2c 72 3c 3c 3d 31 3b 74 2e 68 65 61 70 5b 61 5d 3d 6e 7d 2c 4c 3d 66 75 6e 63 Data Ascii: ,n){var r=2e,i=2a;return t[r]<t[i]\|\|t[r]===t[i]&&n[e]<=n[a]},R=function(t,e,a){for(var n=t.heap[a],r=a<<1;r<=t.heap_len&&(r<t.heap_len&&S(e,t.heap[r+1],t.heap[r],t.depth)&&r++,!S(e,n,t.heap[r],t.depth));)t.heap[a]=t.heap[r],a=r,r<<=1;t.heap[a]=n},L=func
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 6e 61 6d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 72 2e 67 7a 69 6e 64 65 78 2b 2b 29 3a 30 2c 78 74 28 72 2c 6e 29 7d 77 68 69 6c 65 28 30 21 3d 3d 6e 29 3b 72 2e 67 7a 68 65 61 64 2e 68 63 72 63 26 26 72 2e 70 65 6e 64 69 6e 67 3e 61 26 26 28 74 2e 61 64 6c 65 72 3d 4d 28 74 2e 61 64 6c 65 72 2c 72 2e 70 65 6e 64 69 6e 67 5f 62 75 66 2c 72 2e 70 65 6e 64 69 6e 67 2d 61 2c 61 29 29 2c 30 3d 3d 3d 6e 26 26 28 72 2e 67 7a 69 6e 64 65 78 3d 30 2c 72 2e 73 74 61 74 75 73 3d 39 31 29 7d 65 6c 73 65 20 72 2e 73 74 61 74 75 73 3d 39 31 3b 69 66 28 39 31 3d 3d 3d 72 2e 73 74 61 74 75 73 29 69 66 28 72 2e 67 7a 68 65 61 64 2e 63 6f 6d 6d 65 6e 74 29 7b 61 3d 72 2e 70 65 6e 64 69 6e 67 3b 64 6f 7b 69 66 28 72 2e 70 65 6e 64 69 6e 67 3d 3d 3d 72 2e 70 65 6e 64 69 6e Data Ascii: name.charCodeAt(r.gzindex++):0,xt(r,n)}while(0!==n);r.gzhead.hcrc&&r.pending>a&&(t.adler=M(t.adler,r.pending_buf,r.pending-a,a)),0===n&&(r.gzindex=0,r.status=91)}else r.status=91;if(91===r.status)if(r.gzhead.comment){a=r.pending;do{if(r.pending===r.pendin
2024-10-01 09:51:33 UTC	5700	IN	Data Raw: 22 72 75 6d 22 2c 74 29 7d 29 29 7d 28 73 29 3b 65 6c 73 65 7b 76 61 72 20 6d 3d 56 6f 28 65 2c 73 2c 75 2e 6f 62 73 65 72 76 61 62 6c 65 2c 63 2c 66 2c 68 2e 65 78 70 69 72 65 4f 62 73 65 72 76 61 62 6c 65 29 3b 61 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 2e 73 74 6f 70 28 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 65 2e 65 6e 61 62 6c 65 64 26 26 74 74 28 74 2e 63 75 73 74 6f 6d 65 72 44 61 74 61 54 65 6c 65 6d 65 74 72 79 53 61 6d 70 6c 65 52 61 74 65 29 26 26 28 51 6f 28 29 2c 74 61 28 29 2c 6e 2e 73 75 62 73 63 72 69 62 65 28 31 31 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 57 6f 3d 21 30 2c 4a 6f 28 4b 6f 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 42 79 74 65 73 2c 63 65 Data Ascii: "rum",t)}))}(s);else{var m=Vo(e,s,u.observable,c,f,h.expireObservable);a.push((function(){return m.stop()})),function(t,e,n,r,i,o,a){e.enabled&&tt(t.customerDataTelemetrySampleRate)&&(Qo(),ta(),n.subscribe(11,(function(t){Wo=!0,Jo(Ko.globalContextBytes,ce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49750	3.233.158.33	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:32 UTC	935	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=098a80e6-f42b-4be9-aaa3-f8f8d5f3dcfc&batch_time=1727776290947 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15803 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:32 UTC	15803	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 2d 31 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 31 7d 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 32 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 65 35 33 34 33 36 34 2d 37 30 31 63 2d 34 64 35 36 2d 62 34 62 65 2d 30 32 30 61 37 65 30 33 65 66 61 32 22 7d 2c 22 64 61 74 65 22 3a 31 37 32 37 37 37 36 32 38 38 30 37 38 2c 22 73 65 72 76 69 63 65 22 3a 22 6c 65 67 61 6c 2e 74 68 6f Data Ascii: {"_dd":{"format_version":2,"drift":-1,"session":{"plan":1},"configuration":{"session_sample_rate":100,"session_replay_sample_rate":20},"discarded":false},"application":{"id":"fe534364-701c-4d56-b4be-020a7e03efa2"},"date":1727776288078,"service":"legal.tho
2024-10-01 09:51:32 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 098a80e6-f42b-4be9-aaa3-f8f8d5f3dcfc cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Tue, 01 Oct 2024 09:51:31 GMT connection: close
2024-10-01 09:51:32 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 30 39 38 61 38 30 65 36 2d 66 34 32 62 2d 34 62 65 39 2d 61 61 61 33 2d 66 38 66 38 64 35 66 33 64 63 66 63 22 7d Data Ascii: {"request_id":"098a80e6-f42b-4be9-aaa3-f8f8d5f3dcfc"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49746	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:32 UTC	782	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=461ZspMsIIWmZYBtIK4AkqpJgUAgQwSng2G4jWanLWcRXdr7uJLhvPzAD6dYbYCj3ay35IJiBo5kF4forS2FGUUrD/zzAJBrSh3WELX2s+EVK+eC4Dz+4rauT+rt; AWSALBCORS=461ZspMsIIWmZYBtIK4AkqpJgUAgQwSng2G4jWanLWcRXdr7uJLhvPzAD6dYbYCj3ay35IJiBo5kF4forS2FGUUrD/zzAJBrSh3WELX2s+EVK+eC4Dz+4rauT+rt; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:32 UTC	1749	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 18683 Connection: close Date: Tue, 01 Oct 2024 09:51:32 GMT Set-Cookie: AWSALB=JzDkj35gpT5ch9MBd4G7mHjnD7B/4TA4Iaapa8kKlHL/MmAQ8BnaZs+WbKpOJIlW87H8ZiPrKuC9f/KMNsjoI9eGoR7r9vd89ucrOxtTWYXpxN0zx711Wa8OXbCK; Expires=Tue, 08 Oct 2024 09:51:32 GMT; Path=/ Set-Cookie: AWSALBCORS=JzDkj35gpT5ch9MBd4G7mHjnD7B/4TA4Iaapa8kKlHL/MmAQ8BnaZs+WbKpOJIlW87H8ZiPrKuC9f/KMNsjoI9eGoR7r9vd89ucrOxtTWYXpxN0zx711Wa8OXbCK; Expires=Tue, 08 Oct 2024 09:51:32 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:32 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "48fb-622c22f032900" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5335ce80c0b9264bc591cce2c73bef5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: KJmW_zQOCJ7AyWxTpdplp9AxbIODgcChC1mk2RIh8oR5qIYPQW1nNA== Age: 708331
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=fun
2024-10-01 09:51:32 UTC	2299	IN	Data Raw: 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 6f 67 67 6c 65 6e 61 76 22 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6c 6f 73 65 6c 65 76 65 6c 6f 6e 65 22 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 62 62 2d 48 65 61 64 65 72 2d 70 72 69 6d 61 72 79 4e 61 76 69 67 61 74 69 6f 6e 22 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 62 62 2d 48 65 61 64 65 72 22 29 2c 61 3d 74 3b 61 26 26 28 61 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 63 74 69 76 65 2d 63 6c 6f 73 65 22 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 Data Ascii: r t=document.getElementById("togglenav"),o=document.getElementById("closelevelone"),n=document.querySelector(".bb-Header-primaryNavigation"),r=document.querySelector(".bb-Header"),a=t;a&&(a.onclick=function(){o.classList.add("active-close"),n.classList.ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49744	3.160.150.128	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:32 UTC	369	OUT	GET /adrum/adrum-21.4.0.3405.js HTTP/1.1 Host: cdn.appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:32 UTC	630	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 104941 Connection: close Date: Mon, 30 Sep 2024 12:35:29 GMT Last-Modified: Thu, 15 Apr 2021 17:00:56 GMT ETag: "4aef8c9caf79317edb0667812ba89f53" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e7901684d85170d527aec3a64956def6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: czh352rEsgw_YNkijCRW7aynqgXtMpfHKErqvkvC9QIseOgAAqbVOw== Age: 76564 Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin cache-control: public, max-age=86400 Vary: Origin
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 32 38 31 65 63 63 64 62 30 61 32 38 66 65 33 62 34 64 62 66 62 66 39 34 32 66 38 62 38 38 65 64 20 76 3a 32 31 2e 34 2e 30 2e 33 34 30 35 2c 20 63 3a 33 30 64 65 30 39 35 63 37 64 38 66 33 35 66 33 66 39 32 36 32 31 35 66 33 37 62 33 39 61 63 63 61 64 30 33 31 37 62 38 2c 20 62 3a 32 31 2e 34 2e 30 2e 33 34 30 35 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 41 44 52 55 4d 26 26 21 30 21 3d 3d 77 69 6e 64 6f 77 5b 22 61 64 72 75 6d 2d 64 69 73 61 62 6c 65 22 5d 29 7b 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 41 44 52 55 4d 3d 7b 7d 2c 78 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2c 42 3d 78 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 Data Ascii: ;/* Version 281eccdb0a28fe3b4dbfbf942f8b88ed v:21.4.0.3405, c:30de095c7d8f35f3f926215f37b39accad0317b8, b:21.4.0.3405 */(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={},x=window.console,B=x&&"function"==type
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 4d 5f 58 48 52 3d 31 30 31 5d 3d 22 41 44 52 55 4d 5f 58 48 52 22 3b 61 5b 61 2e 4e 47 5f 56 49 52 54 55 41 4c 5f 50 41 47 45 3d 31 30 32 5d 3d 22 4e 47 5f 56 49 52 54 55 41 4c 5f 50 41 47 45 22 7d 29 28 67 7c 7c 28 67 3d 7b 7d 29 29 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 65 76 65 6e 74 73 7c 7c 28 61 2e 65 76 65 6e 74 73 3d 0a 7b 7d 29 3b 62 2e 55 3d 7b 7d 3b 62 2e 55 5b 61 2e 45 76 65 6e 74 54 79 70 65 2e 41 42 53 54 52 41 43 54 5d 3d 7b 67 75 69 64 3a 22 73 74 72 69 6e 67 22 2c 75 72 6c 3a 22 73 74 72 69 6e 67 22 2c 70 61 72 65 6e 74 47 55 49 44 3a 22 73 74 72 69 6e 67 22 2c 70 61 72 65 6e 74 55 72 6c 3a 22 73 74 72 69 6e 67 22 2c 70 61 72 65 6e 74 54 79 70 65 3a 22 6e 75 6d 62 65 72 22 2c 74 69 6d 65 73 74 61 6d 70 3a 22 6e Data Ascii: M_XHR=101]="ADRUM_XHR";a[a.NG_VIRTUAL_PAGE=102]="NG_VIRTUAL_PAGE"})(g\|\|(g={}));(function(a){var b=a.events\|\|(a.events={});b.U={};b.U[a.EventType.ABSTRACT]={guid:"string",url:"string",parentGUID:"string",parentUrl:"string",parentType:"number",timestamp:"n
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2e 57 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 5b 5d 2c 6e 3d 5b 5d 2c 66 3d 5b 5d 2c 6d 3d 5b 5d 2c 72 3d 30 3b 72 3c 62 3b 72 2b 2b 29 7b 76 61 72 20 77 3d 61 5b 72 5d 2c 70 3d 77 2e 63 63 2c 68 3d 70 5b 30 5d 2c 70 3d 70 5b 70 2e 6c 65 6e 67 74 68 2d 0a 31 5d 3b 68 26 26 70 26 26 28 35 30 3c 4d 61 74 68 2e 61 62 73 28 68 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 29 3f 35 30 3c 4d 61 74 68 2e 61 62 73 28 68 2e 72 69 67 68 74 2d 70 2e 72 69 67 68 74 29 3f 6e 2e 70 75 73 68 28 77 29 3a 6d 2e 70 75 73 68 28 77 29 3a 35 30 3c 4d 61 74 68 2e 61 62 73 28 68 2e 74 6f 70 2d 70 2e 74 6f 70 29 3f 35 30 3c 4d 61 74 68 2e 61 62 73 28 68 2e 62 6f 74 74 6f 6d 2d 70 2e 62 6f 74 74 6f 6d 29 3f Data Ascii: totype.Wj=function(a){for(var b=a.length,k=[],n=[],f=[],m=[],r=0;r<b;r++){var w=a[r],p=w.cc,h=p[0],p=p[p.length-1];h&&p&&(50<Math.abs(h.left-p.left)?50<Math.abs(h.right-p.right)?n.push(w):m.push(w):50<Math.abs(h.top-p.top)?50<Math.abs(h.bottom-p.bottom)?
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 29 26 26 6e 75 6c 6c 21 3d 66 26 26 66 5b 22 6f 6e 22 2b 62 5d 26 26 28 66 5b 22 6f 6e 22 2b 62 5d 3d 61 2e 67 2e 4f 63 28 62 2c 66 5b 22 6f 6e 22 2b 62 5d 2c 61 2e 43 61 75 73 65 54 79 70 65 2e 55 53 45 52 2c 21 30 29 2c 66 5b 22 6f 6e 22 2b 62 5d 2e 4b 3d 21 30 29 7d 2c 21 30 29 7d 29 7d 3b 66 2e 76 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 74 69 6c 73 2e 66 6f 72 45 61 63 68 28 66 2e 68 64 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 3d 0a 61 2e 67 2e 58 61 28 62 2c 66 2c 6e 75 6c 6c 2c 61 2e 43 61 75 73 65 54 79 70 65 2e 55 53 45 52 29 3b 61 2e 67 2e 78 61 28 66 29 7d 2c 21 30 29 3b 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 67 2e 58 28 29 7d 2c 21 31 29 7d 29 7d 3b 66 2e 47 68 3d 66 75 6e 63 Data Ascii: )&&null!=f&&f["on"+b]&&(f["on"+b]=a.g.Oc(b,f["on"+b],a.CauseType.USER,!0),f["on"+b].K=!0)},!0)})};f.vj=function(){a.utils.forEach(f.hd,function(b){h(b,function(f){f=a.g.Xa(b,f,null,a.CauseType.USER);a.g.xa(f)},!0);h(b,function(){a.g.X()},!1)})};f.Gh=func
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 62 2c 6d 29 7b 32 3c 3d 6d 2e 6c 65 6e 67 74 68 26 26 61 2e 75 74 69 6c 73 2e 69 73 4f 62 6a 65 63 74 28 6d 5b 31 5d 29 26 26 66 28 6d 5b 31 5d 2e 62 6f 64 79 29 26 26 68 2e 74 68 28 62 2c 6d 5b 31 5d 2e 62 6f 64 79 29 7d 3b 71 2e 57 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 6d 3d 7b 75 72 6c 3a 22 22 2c 6d 65 74 68 6f 64 3a 22 22 7d 3b 61 2e 75 74 69 6c 73 2e 69 73 4f 62 6a 65 63 74 28 62 5b 30 5d 29 3f 28 6d 2e 75 72 6c 3d 62 5b 30 5d 2e 75 72 6c 7c 7c 28 61 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 62 5b 30 5d 2e 74 6f 53 74 72 69 6e 67 29 3f 0a 62 5b 30 5d 2e 74 6f 53 74 72 69 6e 67 28 29 3a 76 6f 69 64 20 30 29 2c 6d 2e 6d 65 74 68 6f 64 3d 62 5b 30 5d 2e 6d 65 74 68 6f 64 7c 7c 22 47 45 54 22 29 3a 6e 28 62 5b Data Ascii: ction(b,m){2<=m.length&&a.utils.isObject(m[1])&&f(m[1].body)&&h.th(b,m[1].body)};q.Wk=function(b){var m={url:"",method:""};a.utils.isObject(b[0])?(m.url=b[0].url\|\|(a.utils.isDefined(b[0].toString)?b[0].toString():void 0),m.method=b[0].method\|\|"GET"):n(b[
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 69 6e 67 22 3d 3d 3d 62 29 61 2e 6c 6f 67 28 22 4d 31 39 37 22 29 2c 63 2e 63 6e 28 29 2c 63 2e 72 68 28 29 3b 65 6c 73 65 7b 76 61 72 20 66 3d 7b 74 69 6d 65 53 74 61 6d 70 3a 68 28 29 7d 3b 63 2e 6c 62 28 66 29 3b 22 69 6e 74 65 72 61 63 74 69 76 65 22 3d 3d 3d 62 3f 28 61 2e 6c 6f 67 28 22 4d 31 39 38 22 29 2c 63 2e 72 68 28 29 29 3a 28 61 2e 6c 6f 67 28 22 4d 31 39 39 22 29 2c 63 2e 45 62 28 66 29 2c 63 2e 49 67 28 66 29 29 7d 7d 3b 63 2e 72 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 77 69 6e 64 6f 77 2c 22 6c 6f 61 64 22 2c 63 2e 45 62 29 3b 61 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 77 69 6e 64 6f 77 2c 22 6c 6f 61 64 22 2c 63 2e 49 67 29 7d 3b 63 Data Ascii: ing"===b)a.log("M197"),c.cn(),c.rh();else{var f={timeStamp:h()};c.lb(f);"interactive"===b?(a.log("M198"),c.rh()):(a.log("M199"),c.Eb(f),c.Ig(f))}};c.rh=function(){a.utils.addEventListener(window,"load",c.Eb);a.utils.addEventListener(window,"load",c.Ig)};c
2024-10-01 09:51:32 UTC	6637	IN	Data Raw: 70 65 2e 79 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 62 2e 63 6f 6e 66 2e 78 68 72 29 7b 76 61 72 20 63 3d 66 2e 72 6b 28 61 2e 63 68 61 6e 6e 65 6c 2e 67 65 74 45 76 65 6e 74 73 57 69 74 68 50 61 72 65 6e 74 47 55 49 44 28 74 68 69 73 2e 67 75 69 64 28 29 29 29 2c 63 3d 66 2e 4d 6b 28 63 29 3b 69 66 28 30 3c 63 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 70 65 72 66 2e 67 65 74 45 6e 74 72 79 42 79 4e 61 6d 65 28 61 2e 65 76 65 6e 74 73 2e 63 2e 52 68 29 3b 74 68 69 73 2e 6d 61 72 6b 58 68 72 52 65 71 75 65 73 74 73 43 6f 6d 70 6c 65 74 65 64 28 4d 61 74 68 2e 6d 69 6e 28 6b 26 26 6b 2e 73 74 61 72 74 54 69 6d 65 7c 7c 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 63 29 29 7d 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 6a 75 73 74 54 69 6d Data Ascii: pe.yj=function(){if(b.conf.xhr){var c=f.rk(a.channel.getEventsWithParentGUID(this.guid())),c=f.Mk(c);if(0<c){var k=this.perf.getEntryByName(a.events.c.Rh);this.markXhrRequestsCompleted(Math.min(k&&k.startTime\|\|Number.MAX_VALUE,c))}}};f.prototype.adjustTim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49749	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:32 UTC	1116	OUT	GET /en/products/highq/_jcr_content/root/container/container/tabs/item_1665177412591/image_copy_copy.coreimg.png/1669639663326/234582.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M
2024-10-01 09:51:32 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 139761 Connection: close Date: Tue, 01 Oct 2024 09:51:32 GMT Set-Cookie: AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; Expires=Tue, 08 Oct 2024 09:51:32 GMT; Path=/ Set-Cookie: AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; Expires=Tue, 08 Oct 2024 09:51:32 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Content-Disposition: inline; filename=234582.png X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Nov 2022 12:47:43 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:32 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "221f1-5ee87470419c0" X-Cache: Miss from cloudfront Via: 1.1 4f3281e2362f23bf5efc65311d3defb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 2K1I8uKPk7uq43hOYLtgtvYRpsJjVcWSGcm-lV86EPSdSlrmcGNvqg== Age: 2254403
2024-10-01 09:51:32 UTC	14632	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 19 00 00 01 be 08 06 00 00 00 ff 65 c9 80 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 02 21 86 49 44 41 54 78 01 ec fd e9 b3 64 b7 91 27 0a 3a 22 e2 ee b9 ef c9 cc e4 be 93 e2 4e 4a 94 44 6a 19 75 6d f3 ea 59 f7 d4 b3 ea b6 b1 b1 7e f3 fe 83 f9 38 1f db 66 fa 6f 68 7b 5f da ec d9 8c d9 74 8f d9 d4 74 57 a9 aa 24 55 49 2a 95 a4 d2 46 71 15 45 71 4b 66 26 73 df b7 bb df 88 c0 c3 0f 3b 70 80 73 4e c4 bd 99 c9 cc 84 93 37 23 02 07 0e 77 00 0e 1c 77 b8 03 60 ff e1 3f fc 87 fb 89 f3 23 9c 42 60 8c c9 3f 00 e7 5c fe 05 cf 91 1e e5 ef b0 8e 48 53 79 87 c3 21 75 3a 1d f1 c7 88 0f c5 6f 8d 8f 67 0b 0b Data Ascii: PNGIHDRepHYssRGBgAMAa!IDATxd':"NJDjumY~8foh{_ttW$UI*FqEqKf&s;psN7#ww`?#B`?\HSy!u:og
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 54 e9 05 16 e3 3d c3 e9 5f f0 b0 61 3f 10 ea 02 f9 5b 10 72 88 4d fb 68 a3 ed d2 7b 20 f8 3d 73 5a 18 c6 ab d2 a8 45 a8 9c f1 7a 00 50 fe 53 4f 3f 25 c7 21 36 be cf cd 6d 92 e3 1d 7d 66 e6 01 f4 c5 83 82 67 cc 0d 66 df d4 d9 73 67 a4 2c 61 bc 60 3f 0b da 0c 7c e1 84 31 84 20 62 fa 42 78 22 e4 1d bc a1 bf 8d 57 ef 95 2f bf 22 f7 83 61 ef 08 e8 a3 0d d4 02 03 05 9b 39 e3 39 3e 31 89 46 b3 67 9d 22 11 e1 78 d3 32 ab cb 17 25 8d 86 a3 97 77 58 bc 32 5c 9d a4 bd ec 95 f2 ed 9b 21 a5 c1 44 38 2c c6 f1 cb f1 57 86 23 ea 7a 5d b6 da 7e dc 2b 38 5a 41 b4 f1 e7 75 38 d1 03 53 8f f8 b5 68 11 13 2b dc 37 4f 16 62 85 ed ee 94 05 2a b2 40 1b 2d 0b ea 6e a4 21 7d f2 f1 27 72 01 57 2e 72 89 47 58 dc c1 bb 11 e1 d9 08 ed c6 62 14 e6 66 19 64 23 e6 5e bc f3 f0 fe c5 7b dd Data Ascii: T=_a?[rMh{ =sZEzPSO?%!6m}fgfsg,a`?\|1 bBx"W/"a99>1Fg"x2%wX2\!D8,W#z]~+8ZAu8Sh+7Ob*@-n!}'rW.rGXbfd#^{
2024-10-01 09:51:32 UTC	9562	IN	Data Raw: 5e b9 9e c0 74 38 09 fe 02 01 51 bc 38 7e 59 94 97 51 1b 80 81 b1 b6 b6 26 ff cc 06 7a 2b f3 6e de b0 63 d8 b4 81 6b 42 dd 52 cc cd 55 dc 67 d5 0e 34 33 36 dd 04 e4 e3 58 7e 50 13 66 ee 35 b1 a3 2e 3a 3b 59 9f eb 6c 9b 81 f9 04 54 9e e0 42 15 33 90 b9 1d c8 dc 6f 27 6f 22 63 76 92 f2 86 74 06 c7 dc 34 1f e0 68 9e c3 3a 39 3e 25 8e 99 d8 bc 97 05 e5 da c1 e2 68 19 b6 bc 69 7e cd 33 bf 8f 4c dd bd 09 dd 54 c2 ce 95 5e 85 5c bf 70 af 8f 5d 1f 7d 11 64 41 d2 29 b2 50 64 a1 c8 42 91 85 51 65 41 e3 dc d5 b2 10 b7 77 91 05 49 c0 e8 18 b7 9d 2c 68 1a 9d 6e 97 a6 a6 a6 e4 86 ed d6 c0 a2 df 52 70 18 29 e9 09 1e 24 51 bd ea db be c9 63 44 c8 14 e3 34 9c be ea cb 53 2d 67 14 31 c9 9a 72 51 70 f2 ab 8f 13 59 19 3d 9f a4 e9 3c 8b 13 30 15 f5 62 4d 03 ba a7 e3 e0 04 44 Data Ascii: ^t8Q8~YQ&z+nckBRUg436X~Pf5.:;YlTB3o'o"cvt4h:9>%hi~3LT^\p]}dA)PdBQeAwI,hnRp)$QcD4S-g1rQpY=<0bMD
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 6f 62 f6 89 d4 36 73 8c d3 b2 0e c9 d9 b7 a1 14 1e 7e 71 5d 50 6d bf 60 3a d6 63 89 13 c5 6f 95 74 f1 ad 70 98 f7 3c 6c a7 56 38 96 0e cf d0 4e e1 d3 06 cf 0b 54 03 37 58 16 7c 28 b2 a0 33 17 59 88 1a cc a6 15 59 a0 22 0b 89 9f 69 1c f7 65 a3 65 61 54 60 19 1e 2d 1d 96 c2 e0 59 09 e4 59 2a 3c 43 c4 7b 5e 2b 0b 55 9c 66 59 30 68 a3 c8 02 55 fa 75 58 bf 27 83 c8 1c 65 8a 13 82 58 27 d9 a4 b5 f4 62 25 ae 35 e2 18 d0 b6 08 93 cf 1c f1 3a d0 27 3a a9 a3 b6 98 ba 7a 5e fc d7 9b 98 90 c7 ae f6 70 13 75 43 c9 ea a8 d5 c0 e6 89 04 ac 45 cf 58 f9 70 83 21 cc 95 10 34 0d 38 32 76 f3 a6 cd f2 16 6f dc c2 dd 11 06 07 f3 c9 b0 08 8d e9 8f c4 40 e0 29 34 e5 66 b0 56 ba 79 e0 c4 8f 7b ff 46 05 11 55 94 64 3f 6c 28 a0 17 14 a0 27 2f 9d e8 3c 1d 8c d2 1c 87 a5 c9 9c 9c ec Data Ascii: ob6s~q]Pm`:cotp<lV8NT7X\|(3YY"ieeaT`-YY*<C{^+UfY0hUuX'eX'b%5:':z^puCEXp!482vo@)4fVy{FUd?l('/<
2024-10-01 09:51:32 UTC	8555	IN	Data Raw: 46 aa ba 7e 70 20 3b 2f b2 c9 8e 8e a5 87 49 0e af af 02 be 10 e6 cb 5e 72 5e 91 b2 4c a4 51 57 82 a7 02 c9 e2 5a 93 24 9c 50 b0 6d 89 80 c5 2d 44 17 c9 93 4f 11 57 e3 e2 94 91 27 c5 5c 2a a3 09 6e 9f ba c6 a9 c6 98 5e a4 f4 55 b9 08 12 d2 30 30 fc 90 5c 93 71 c6 c1 01 79 b5 2a 8d d5 c7 3c c6 07 66 11 3a c0 08 ed df df ef 95 d1 75 6d c4 c1 de 43 b2 06 67 3b 01 1d e4 4e 23 ad 45 f2 04 7f 01 a7 df 5a 6c bd a1 7a 86 ef 87 76 43 4c c2 31 72 48 0f b9 b6 ba 6d b1 6d 85 d4 74 a4 dd a1 bb 8b 2d 2a a4 ca 50 2a 3c 50 01 55 59 70 22 c5 c7 e3 d1 02 1a 96 be 7d 14 7c bf 2c 85 c9 32 91 96 92 c8 ce 8b 62 64 97 15 4b 0f 93 1c 9f 3b 32 68 c3 5c f4 18 7e 31 6d da 95 37 b6 4f b1 90 29 da 2f 3f 18 57 2d d3 68 29 c5 76 6b 17 5e 10 e9 79 d2 10 8e a2 d8 a1 d0 1e 0f 9d 91 a7 80 Data Ascii: F~p ;/I^r^LQWZ$Pm-DOW'\n^U00\qy<f:umCg;N#EZlzvCL1rHmmt-P<PUYp"}\|,2bdK;2h\~1m7O)/?W-h)vk^y
2024-10-01 09:51:32 UTC	394	IN	Data Raw: 67 81 bf c9 b5 bb ac 15 1a d8 11 3f 14 68 75 96 18 35 cd 8b 23 7d 57 00 d4 1d 7e 5e 37 b9 0d c7 19 b0 9d e7 e7 f6 9b 4b eb 12 25 6c 6d bd 45 fd ac 3d 2a 3f 7e 68 c1 d2 23 48 ce 7e a8 7a 66 92 2c 59 da 0b 52 11 86 59 e9 02 87 07 a8 7b 99 aa 2a 52 bf 0a b5 25 01 eb b8 39 94 2f d8 49 d2 a4 04 34 1e fe b7 60 ba 70 1e e5 17 1c ac 84 92 5b e0 5c 17 17 f8 60 3a 15 2f db 4d 45 49 fd 8b 96 e7 a7 4b 35 97 0a 34 46 c5 94 31 bb a4 9c c7 ab f2 93 c4 d2 93 6f 71 14 0d 83 ac 0a d4 23 83 a4 c3 0f cf 4b a6 1c fb 71 e7 af 2a d4 16 a5 75 f8 37 25 74 29 7a b1 60 9f a1 21 d8 b7 7f 9f f8 51 c0 df 01 0c fd 4f 7e f2 1d 71 c6 86 43 f8 3a 6b 0d e6 ef cc d3 02 83 81 81 81 23 e2 37 d1 65 2d c2 c2 c2 5d d6 6a 4c d1 f1 e3 27 e8 a9 93 27 69 65 75 45 fc 2f ae 5c b9 2a 9a 0c 68 1c a6 26 Data Ascii: g?hu5#}W~^7K%lmE=?~h#H~zf,YRY{R%9/I4`p[\`:/MEIK54F1oq#Kqu7%t)z`!QO~qC:k#7e-]jL''ieuE/\h&
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: f4 44 8d 34 33 e3 9f 30 23 7b 97 19 fe a3 53 5d 61 e2 fb f8 f9 bf ba af 41 3f 38 36 28 51 95 66 c7 ea d4 54 eb b4 c5 e5 3e 35 c4 cc 36 17 54 e3 79 36 05 47 6c 4e 3b 33 5c a3 c5 cd 26 dd 5d 6b 49 fe 59 6e c7 74 43 d1 b3 dd 0a 6b 05 98 41 e7 7a a7 18 ac 4c 4c d6 68 72 ac 46 c3 7c a1 5a 69 d3 1d 66 9c e1 5f 70 62 aa 2a 1a 8e 61 e6 c2 bb 6d c7 69 7b 7b ad 43 37 19 4c 20 4a d3 4b 47 58 fb c1 9a 86 32 d7 85 3e 9f 62 a6 fe c6 5a 93 d6 59 55 d3 61 86 1c 51 b2 a6 58 db f0 fc 10 d1 51 66 de 61 6a 35 c3 6d 18 e5 bf 4f 4d d6 69 8e cb ba c8 00 09 e1 74 0f f2 38 21 7d a5 e4 48 af a0 45 78 96 35 2b f0 4b 01 a0 12 a0 c1 da 9e 43 3c 7e 13 fb fa c4 f1 fa e2 9d 6d da 3f 52 a3 63 f0 87 e0 f4 30 07 fb 92 81 18 31 c0 7b 81 db fd bd c3 83 54 6f 6c d3 db 0c 3c be 98 6b c9 98 bd Data Ascii: D430#{S]aA?86(QfT>56Ty6GlN;3\&]kIYntCkAzLLhrF\|Zif_pb*ami{{C7L JKGX2>bZYUaQXQfaj5mOMit8!}HEx5+KC<~m?Rc01{Tol<k
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 2e 9f 56 7e d1 3b ba 50 1e 2f b5 6b 08 e6 9b 20 29 aa 30 88 d8 61 a0 31 b7 b2 43 8b 3b 65 6a 32 32 80 43 f7 ec 50 55 b4 18 1b 9b 6d 5a 60 0d 47 8d 07 71 66 a0 42 8a af 5f 59 6e d2 67 b7 b6 24 32 15 cc ab 46 39 dd f2 06 d1 c5 95 96 5c 23 06 1e fd 8c 32 da 25 a8 b8 9c ba 11 1b b8 56 2b b9 31 8e 73 da 69 26 b2 0a 4e e8 ec de ea 5d 21 56 4b 96 2c 3d a9 e4 44 42 f1 bd ff 8c 90 45 56 95 80 ee 5f 44 3e 9e 09 ab 0e 08 46 dc 72 dc c0 13 fe 6a 14 2e c7 cf e3 0a 42 1c 49 4a ef fb 6b 52 0f a2 75 7b ed 74 54 b7 12 c1 44 07 f7 f2 78 1e 27 e4 63 d0 0e 38 38 06 66 a4 fc 3d 29 b8 47 18 2d b2 8e 8c 89 27 2a 33 8b 33 f5 60 33 6d c9 92 a5 c7 90 b4 03 2a 88 fc f5 23 87 e5 52 f7 64 5e 12 5a 71 53 44 f3 3a 21 57 36 f8 49 6a b6 af 2b d1 59 90 20 3d 8f bf b8 66 e6 09 b4 90 12 b2 Data Ascii: .V~;P/k )0a1C;ej22CPUmZ`GqfB_Yng$2F9\#2%V+1si&N]!VK,=DBEV_D>Frj.BIJkRu{tTDx'c88f=)G-'33`3m#Rd^ZqSD:!W6Ij+Y =f
2024-10-01 09:51:32 UTC	16384	IN	Data Raw: 63 2c 3c d8 b0 05 21 fa 4e be a7 13 12 1c 7a 93 51 c3 d4 21 b8 6c d2 43 a7 bf 7e db 75 2b c5 af 7f 2f cd 66 cb 29 4b d7 93 fe 88 47 d9 47 3c 22 22 22 22 62 74 88 34 3b 92 30 ff 84 b8 ef 47 85 5b 1f 67 1a f5 0c 19 45 4d 0a 4d 63 62 39 46 6f 52 16 5c ab 70 3e dc 23 8b 66 34 fe de a1 09 ef f8 2d 33 cd 41 e2 64 94 d7 17 19 3e 1d 82 b9 e8 d9 64 aa dc 06 ad df 07 50 18 38 38 d1 e0 ef fd a1 a2 98 6d d5 60 86 18 96 64 20 a9 7f 2f 2d b4 dd be e3 d7 c3 53 0d 65 26 c2 7f 3a a4 9d 9c a8 b1 5b 14 ed fa 4d 2e 1f 35 14 50 ce cc b5 61 41 74 60 15 b5 a3 53 93 0d a8 b2 4f 88 eb 2e 25 79 a7 c7 8c 79 c9 b5 73 ed fd 58 8f 88 18 03 8f aa 61 27 7a 72 1b fa f1 4f 7e cc ef 90 c9 0a 55 ba f1 5c 05 e6 fb 51 76 c9 16 20 c2 d3 56 c5 3a 47 69 3b 2f c5 6f 44 44 44 44 c4 d3 82 f4 3e 15 Data Ascii: c,<!NzQ!lC~u+/f)KGG<""""bt4;0G[gEMMcb9FoR\p>#f4-3Ad>dP88m`d /-Se&:[M.5PaAt`SO.%yysXa'zrO~U\Qv V:Gi;/oDDDD>
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 62 1b 99 bb 6b d7 6f 90 0f 0b 9c 3f 7f 9e 85 83 8f 3e fe 88 af 91 a0 b1 b1 b9 01 83 fe 00 5a ad 16 5b 37 e8 93 f6 3f b8 ff e0 3e dc bf 77 9f 8f 8f d0 5e 08 f8 49 cc 20 69 a4 09 43 14 4c a6 a7 a7 d9 ed e5 f7 bf ff 3d 7c f3 ed b7 f0 83 ef 7f 9f 05 98 c9 c9 09 14 36 e6 60 67 67 07 d6 90 66 0e 05 8f 29 2c 1b 99 c4 fd 01 61 fd 9b b1 df 71 c0 86 e0 d4 a6 f4 fb 93 b5 6b e5 e1 0a ac e3 38 d8 d9 dd 85 a9 a9 29 d8 42 c1 97 26 98 dd dd 2e 7c fb ed 55 78 e7 77 ef 24 23 ff 8d 37 be c3 e9 51 d7 d7 37 e1 1f 7f f9 2b 4e 8f 7b e1 c2 05 78 fb a7 6f c3 dc fc 1c 64 67 95 1c 06 b7 2a df 9b bc 57 65 c5 cb 4a 84 ae a7 ae 8d a2 88 de f6 6b 95 30 52 1c 75 b5 db d4 3d 90 e9 1c c8 b3 08 9e 58 5d 5d 81 fb f7 1f f0 7b 4c ef 27 09 7b 33 f8 ae 1e 3c 74 08 3a 9d 4e 50 88 4c bf c6 f7 39 Data Ascii: bko?>Z[7?>w^I iCL=\|6`ggf),aqk8)B&.\|Uxw$#7Q7+N{xodg*WeJk0Ru=X]]{L'{3<t:NPL9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49751	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:32 UTC	1116	OUT	GET /en/products/highq/_jcr_content/root/container/container/tabs/item_1665177418815/image_copy_copy.coreimg.png/1669639696841/234565.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M
2024-10-01 09:51:33 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 130505 Connection: close Date: Tue, 01 Oct 2024 09:51:33 GMT Set-Cookie: AWSALB=HzYEYRHnZzJui5lS81hoDbDo8k/8MXrobk+aBlc3ZZWX7NXw9UeU2rFtTpRvQgJ/KhRNvNju8JJvcioNg3/+cayztJZ3ebwlNKJ8pzMqguC1HV4f1bD3hIwV/RPO; Expires=Tue, 08 Oct 2024 09:51:33 GMT; Path=/ Set-Cookie: AWSALBCORS=HzYEYRHnZzJui5lS81hoDbDo8k/8MXrobk+aBlc3ZZWX7NXw9UeU2rFtTpRvQgJ/KhRNvNju8JJvcioNg3/+cayztJZ3ebwlNKJ8pzMqguC1HV4f1bD3hIwV/RPO; Expires=Tue, 08 Oct 2024 09:51:33 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Content-Disposition: inline; filename=234565.png X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Nov 2022 12:48:16 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:33 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "1fdc9-5ee8748fba400" X-Cache: Miss from cloudfront Via: 1.1 aa6c36522a23788dfef1fae9af9fd5e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: bmzmG4-oXauqaSWHqan-ZqbLqDVDC40dwsvHBdAWz2-l72pOuJs6sw== Age: 2254404
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 18 00 00 01 be 08 06 00 00 00 10 a7 a2 be 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 fd 5e 49 44 41 54 78 01 ec 9d 05 a0 1d c5 f5 ff bf 73 9f 6b dc dd 20 09 04 48 42 80 60 41 92 e0 ee 56 9c 16 28 b5 5f 15 da ff af 5e fa 6b 8b 16 87 52 dc dd 3d 09 41 02 44 09 71 77 7d c9 4b f2 5c e6 3f 67 f6 ee bd 2b b3 76 ef de f7 ee 7b d9 d3 86 77 77 67 f6 b3 e3 73 ce 99 d9 5d c6 85 20 92 48 22 89 24 92 48 22 89 24 92 48 22 89 24 04 c9 45 24 91 44 12 49 24 91 44 12 49 24 91 b4 a2 34 56 55 61 fd db af a3 62 ce 2c 34 d7 d7 a1 d3 a8 83 d0 e7 e4 d3 50 d0 b5 1b 22 69 7b c2 a2 15 8c 48 22 89 24 92 48 22 89 24 Data Ascii: PNGIHDRpHYssRGBgAMAa^IDATxsk HB`AV(_^kR=ADqw}K\?g+v{wwgs] H"$H"$H"$E$DI$DI$4VUab,4P"i{H"$H"$
2024-10-01 09:51:33 UTC	9324	IN	Data Raw: 23 d3 48 7d 88 da 3f 19 57 b4 7d 94 94 63 72 6a 90 31 4f c6 c2 39 62 cc a3 2d 4f 54 df d4 c6 28 9d f2 2f 10 df 7b df 2c 57 5a 2f 17 c6 0f 09 3d 33 47 e7 9b b9 b6 36 da d0 d4 98 28 a4 c4 8a 83 f8 3f 6d ab a3 b4 d0 f8 78 d9 a5 97 c9 d5 26 a7 32 35 9a f9 46 86 b1 1f 52 fa 69 55 b2 aa 4a d4 33 d7 9e c9 33 96 bf 74 50 88 b1 92 da e1 15 42 79 fe ec f3 cf 84 63 a1 d2 a4 37 d1 1c 11 8b 69 fd 8c 56 0d 69 db d9 04 b1 5a a1 1b 72 3d 7b f4 c2 ec 39 b3 a5 f2 4f ce 1e 62 1a c7 d3 98 b8 67 be 38 a6 55 1f 5a 8d a2 15 53 96 a7 dd 9b ca 90 ca 99 5e 94 32 67 ee 1c b9 12 9f ec 5b c0 70 31 f6 d3 ca 05 6d a3 3b 55 28 f1 64 8c 9b c7 12 4d c6 8d 3b 58 8e 83 9f 7f f1 b9 2c b7 3c 51 6e f1 b5 63 a5 a8 18 c6 df 73 e7 ce 93 ab ed d4 f7 68 15 88 0c 22 99 a7 78 7f a4 78 b1 78 9d 53 ff Data Ascii: #H}?W}crj1O9b-OT(/{,WZ/=3G6(?mx&25FRiUJ33tPByc7iViZr={9Obg8UZS^2g[p1m;U(dM;X,<Qncsh"xxxS
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 65 70 0f 06 0f c4 b0 ce e9 2e 0c ee 94 17 05 83 19 94 91 c0 0c e6 ce 48 c4 f1 cf 40 c6 18 f0 60 c0 ce b0 08 3d af 30 66 cc 18 fc f1 0f 7f c4 f4 e9 d3 51 55 5d 2d d4 86 26 a9 6c 9e 78 e2 89 72 bb 11 ad 30 74 e9 da 45 be e6 96 56 39 e8 b9 85 9a da 5a 14 17 17 cb 73 44 a7 df 24 79 f9 f9 e2 7a 4d ef a0 ad 4d 64 58 f4 ef df 1f 75 75 75 c8 17 61 f4 fd 84 fc fc 02 19 87 fe e6 0a 7d 20 27 87 59 52 a5 1d f3 f8 03 7b b2 1e 84 43 b0 b1 b1 51 1a 2f f4 1c 06 7d 49 7a d2 a4 c9 e8 de b5 1b ba 74 ee 8c 98 e1 a9 77 16 ff fd d0 43 0f 4b 56 97 2e 5a da 7f f1 8b 5f e2 b5 d7 5e 13 ab 20 ef c9 95 19 2e 14 97 c5 8b 17 a3 5f bf 7e 38 eb cc b3 70 f7 dd 77 63 dd ba b5 68 af c2 7d c4 d1 cb 0e 81 5e 67 cc 0d ff f5 8a 65 38 30 76 2e 07 06 f3 60 c4 f4 48 f1 26 93 bc c0 f1 6d 0d 5c f9 Data Ascii: ep.H@`=0fQU]-&lxr0tEV9ZsD$yzMMdXuuua} 'YR{CQ/}IztwCKV.Z_^ ._~8pwch}^ge80v.`H&m\
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: e4 28 a1 ad 84 34 3e bd 22 94 11 72 22 5c 7d f5 d5 e8 2a 56 4f b9 21 2f 34 66 91 02 76 e5 95 57 ca ed 64 e3 c7 8f c7 61 e3 0f c3 29 c2 29 43 c6 ea 95 57 5e 21 8d 1a 6a bb 24 a4 48 90 21 71 c3 8d 37 e0 98 63 8f 93 63 37 b5 4f 7d 0f 3e d5 c3 86 8d eb c5 b9 ab 64 df 26 c7 12 cd 6d 54 17 34 d7 4c 9a 3c 49 1a 24 e4 54 b8 f8 a2 8b 84 62 ff 8e 54 ea 68 ce 18 20 8c be 9b 7e 78 93 9c bb 28 cd 34 2e fd 48 e4 7b 95 70 8e 91 a2 f1 c2 0b cf cb 2d 40 d7 5c 73 2d de 13 5c da c6 4b 63 d8 45 82 43 69 d4 2b 6c ad 50 8e a8 ff 91 12 b9 4a 28 c7 d4 3f 86 09 47 05 29 47 eb c5 1c 49 79 b8 52 9c eb 20 fa 16 95 cb 02 e1 a4 20 a5 99 e6 87 91 23 f7 b3 db b6 0e 7f 4d 71 98 fa 9a 4c 30 b6 6e de 82 de bd 7a 4b c3 91 da fa e6 4d 9b a5 9e 40 65 46 ba c1 c3 0f 3f 2c 1d 77 34 66 52 fe 55 Data Ascii: (4>"r"\}*VO!/4fvWda))CW^!j$H!q7cc7O}>d&mT4L<I$TbTh ~x(4.H{p-@\s-\KcECi+lPJ(?G)GIyR #MqL0nzKM@eF?,w4fRU
2024-10-01 09:51:33 UTC	11977	IN	Data Raw: 09 e1 47 27 44 44 e1 2a 2b 1c 28 16 7c e7 7d 7b c5 f7 0e 81 d3 70 07 1b 03 70 8a ac 8e 07 be af 0b 9c 41 a9 e7 48 0a 7e 9f 19 63 fb c9 68 0e 0c ae c9 dc 39 91 8d 29 e4 01 3e 97 7f 07 f0 03 c8 b8 e0 f9 e1 78 20 da b0 8c 8d c9 b7 37 9e 94 bf 09 94 18 32 2f 30 00 0f b2 a1 78 81 8d d1 13 e7 ab f8 b7 2d a2 9b 05 cd 59 ab ab 85 f4 01 2d 9e 59 8f 3a 18 01 e7 39 b2 95 c7 bf 11 64 e6 e8 b9 4a 7e 5f 43 fd d8 99 7a 93 9d 64 64 95 ea f8 3b 75 96 95 dc cb 4a ea 97 9c c5 78 7a f1 28 19 61 47 d4 a9 57 0f fd 7b 85 32 ce e1 ef b9 b4 48 df 14 70 3e 3b 99 f8 bd f4 fe 42 a6 6c c3 90 ae a9 6f 91 83 1a 1c 64 fc ce ab 59 ee 10 81 9f c2 4e f6 3a 76 1e 5e 5d 75 44 46 fb f1 7b 58 3f eb 56 76 6e 5e 5c 8e 6c 4b 9b fc 6d 71 62 d1 e4 c1 f2 b7 44 36 02 8e 12 8c 2d 0c 8a d6 be 84 df 74 Data Ascii: G'DD*+(\|}{ppAH~ch9)>x 72/0x-Y-Y:9dJ~_Czdd;uJxz(aGW{2Hp>;BlodYN:v^]uDF{X?Vvn^\lKmqbD6-t
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: d9 37 94 83 84 c1 98 af 53 56 56 66 ea 61 64 34 0c 59 04 1f f4 26 de 0d e1 36 5e f0 9b 83 a1 79 d8 14 70 c8 ed b6 86 90 7d 04 ba dd 1b 9a e4 c2 33 60 1e 86 13 7b 76 ef a1 71 e3 c7 c9 36 fe 48 15 fb 44 71 74 84 e3 e8 b1 a3 54 98 5f 20 e5 07 15 13 d0 cb 6d ed fa ca 4f 7d fa f4 09 bd 1e 0b 1c a1 14 6a e0 c0 81 a6 6e 35 64 3d cd 74 2e 62 4f 15 60 8b 7b 1f 11 b6 93 c9 70 04 5b e0 81 5e 78 c4 2f 52 b8 5e b8 39 42 a2 b8 4e e0 8b 3f 79 ea a4 e7 39 28 06 ac b4 a2 56 d7 e9 fe 40 27 ca e7 48 14 8c 7a a4 14 31 09 b0 3f 1b 21 81 25 1e 16 a0 53 62 d5 1a 74 44 c3 a8 81 d3 6a 18 31 fd 39 4b 06 59 3a c9 4e 4b d0 12 9e 9a d1 19 ad c1 5d 07 84 c7 11 19 23 08 91 fd 61 c3 46 d0 b6 ed db 3c cf a1 2c 26 27 81 49 be 0a 5d 17 30 e6 0b 0a 0a 64 30 06 ab 9b 61 50 81 1e c4 4a 7a 51 Data Ascii: 7SVVfad4Y&6^yp}3`{vq6HDqtT_ mO}jn5d=t.bO`{p[^x/R^9BN?y9(V@'Hz1?!%SbtDj19KY:NK]#aF<,&'I]0d0aPJzQ
2024-10-01 09:51:33 UTC	3383	IN	Data Raw: a3 dd 27 ae d3 b3 77 8d a2 b5 7b 2f d2 93 0b 86 d2 c2 09 7d e9 d2 f5 06 3a 79 b1 9a 16 4f ea 47 33 46 96 b0 c1 95 46 23 07 f4 a0 41 bd f3 e9 37 eb 4e 71 bb 61 f2 7c ba 06 33 34 fa e3 28 74 01 c4 1c 00 61 38 1a a2 9d da 6b af 50 5a 66 21 b5 71 c7 48 cf eb 4b 59 7d a6 50 7a 6e 09 19 55 84 41 b0 47 74 05 59 9d 76 eb 2d 6d 57 c0 11 11 e1 11 a5 c1 83 06 cb b2 a3 19 33 66 d0 5b 6f be c5 19 88 bb 68 eb b6 ad d2 b8 82 c1 b4 70 e1 42 ce 54 b4 b3 01 7f 9f 4c cd 23 f2 db bb 77 6f 99 75 18 31 62 04 ff bd 46 fd 07 0c a0 a1 65 43 e5 b1 cc cc 4c 19 c1 45 db dc 98 63 31 63 c6 74 3a c9 06 d7 27 3e f1 09 fa f1 8f 51 36 35 5f b6 45 c4 eb dc d9 b3 34 6b d6 2c e9 60 4c 9e 3c 89 76 ed da c9 83 dc 54 76 62 ce c8 76 00 0c c1 fb ee bb 4f 66 44 70 0d 4a 4e e0 fc cc 9e 33 9b 1d 9c Data Ascii: 'w{/}:yOG3FF#A7Nqa\|34(ta8kPZf!qHKY}PznUAGtYv-mW3f[ohpBTL#wou1bFeCLEc1ct:'>Q65_E4k,`L<vTvbvOfDpJN3
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 36 7e 1c 19 a6 8b 1e af 74 a2 d0 09 1f ce 06 9d c5 61 7f a1 a0 d0 65 60 c8 7c 7c 9e b7 45 c0 6d b2 ae b9 cf 07 e0 fe 99 8f d1 e5 ca 8b 54 d7 58 e7 d3 5e e7 89 25 ec 7d db c4 5b b8 cf 0f e8 5d 46 65 7d 87 93 82 42 28 cc a8 ae b7 1b 61 4a 58 90 ae 57 50 e8 32 30 34 bb f7 51 99 b5 73 7a d7 9a 12 76 85 d4 80 53 17 c7 77 8d f0 b3 4f 8c eb e2 07 3b c2 91 11 67 b0 3f 94 ab bd b0 1c f3 e2 ec 00 87 09 e7 bc 0e 05 85 2e 00 cd 51 16 28 23 5a 56 f7 de 55 b7 48 64 dd f0 2e 08 79 9c c1 f8 c3 87 ff 9c 14 14 52 02 e6 2c 3f 7f c3 2b fe 57 b3 1f 54 50 48 10 27 4f 9e a4 a1 43 87 9a 75 e4 89 00 41 95 b3 67 ce d2 f1 e3 27 a8 be be 8e d2 d3 d3 25 d7 98 b1 63 13 c8 b2 69 01 fc 46 50 c9 39 4f 43 53 32 af 90 10 50 c6 04 59 1f 3e 3c b9 40 1f 64 fd 04 cb f9 89 13 27 a8 b9 b9 99 32 Data Ascii: 6~tae`\|\|EmTX^%}[]Fe}B(aJXWP204QszvSwO;g?.Q(#ZVUHd.yR,?+WTPH'OCuAg'%ciFP9OCS2PY><@d'2
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 05 f3 cc a5 a9 38 61 af 00 05 85 04 40 98 bf b9 87 75 be 14 8f 7c 57 4b c6 c6 0b 1e 1d 47 10 4e 3b 1b da 72 18 12 8d f5 88 0d 47 f8 0e 28 09 cb c1 23 e0 30 a6 7b 70 18 e1 97 23 20 95 3c 22 8e b0 8b 8b 80 c3 b6 98 51 f8 6d 39 0c c9 71 e3 60 3e 38 98 9f ed d2 e5 0e 1f 0f 3c bc 16 0f ff eb 6a 14 0f cc 91 fb cd d3 fe df 0f bf b6 4f ee 87 7e cf f5 d3 f0 e8 5b 07 c0 84 2f 72 cf f1 f3 f8 f7 cf 2f 96 c1 ba 48 39 5e 32 7d 38 26 8d 2c 90 db 68 d2 be e4 df 7b 72 b3 0c 00 46 81 90 68 2b ca 87 5f dd 83 b2 ca 7a 7c fd ce 05 32 f2 69 9d e0 1e 31 28 07 d7 2f 1c 23 77 e7 a0 e3 5e 5e 7f 4c f0 14 cb 00 5b 74 2d ad c2 23 42 fb b4 d3 65 d1 ee 26 f4 72 a5 ed 23 29 08 18 ed 5c 43 5b 77 fe ef 73 3b 71 a6 ba 41 d6 2f 4f ee f8 91 8c d2 ca 3a b9 c5 e2 84 e2 02 b9 ad e5 eb 1b 4b 91 Data Ascii: 8a@u\|WKGN;rG(#0{p# <"Qm9q`>8<jO~[/r/H9^2}8&,h{rFh+_z\|2i1(/#w^^L[t-#Be&r#)\C[ws;qA/O:K
2024-10-01 09:51:33 UTC	7517	IN	Data Raw: 29 12 86 d4 7e 7c b8 b3 1c ed 42 51 1b 5d 94 8f 94 e4 c0 dd 21 85 e8 9f 7e fd 21 3e bf 6a aa 30 5c f2 f1 cf bf fe 08 b7 5e 39 5e 28 5b 67 e5 1f 29 99 2d 42 f9 d9 26 94 b4 b2 73 75 58 27 78 2f 34 b6 a2 20 37 5d 2a 7e 74 3f c8 98 19 37 a2 00 7f 7c 73 9f b8 96 76 64 a4 a5 e0 65 61 b0 f8 7b 0a 0a 66 70 cf 54 ce cd af 00 3f 7d 3b 19 84 57 ce 2a 46 56 7a 0a 06 0a a3 b8 a6 be 05 bf 78 7e 87 34 32 ff 4f 18 c3 a4 78 ff e6 95 3d 58 26 e4 ef a3 dd e5 72 7a db af 85 d7 e0 d6 65 13 30 6c 50 b6 30 86 4b a5 07 e1 eb bf 5d 23 95 f3 41 79 99 52 15 7c e0 b7 6b 31 57 c8 e6 16 21 1f 74 8e 5f 3e bf 13 f3 26 0b 23 5a c8 12 e1 b5 8d 27 90 23 64 9c 0c e9 6d 42 c6 69 74 7f 82 50 c8 77 08 cf df 1a 71 9e fb 7e f4 0e ae 13 c6 fa ff 3c be 09 6f 6d 15 32 bd fd 94 30 68 26 a0 33 38 37 Data Ascii: )~\|BQ]!~!>j0\^9^([g)-B&suX'x/4 7]~t?7\|svdea{fpT?};WFVzx~42Ox=X&rze0lP0K]#AyR\|k1W!t_>&#Z'#dmBitPwq~<om20h&387

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 09:51:33 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=197601 Date: Tue, 01 Oct 2024 09:51:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 09:51:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49753	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:33 UTC	769	OUT	GET /etc.clientlibs/clientlibs/granite/jquery.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:33 UTC	1311	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 101012 Connection: close Date: Tue, 01 Oct 2024 09:44:36 GMT Set-Cookie: AWSALB=YXRm4ekdg/GEkmSiXdTOFY2oloFkRYhM/+VpUAp/CbhaQl/uen156ItZCudq2SJYHNJ/ybDngrL1tV3NeAK6shVvUzx+fjQPld00wPyodWbiliH+KNyObLTZeEpJ; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/ Set-Cookie: AWSALBCORS=YXRm4ekdg/GEkmSiXdTOFY2oloFkRYhM/+VpUAp/CbhaQl/uen156ItZCudq2SJYHNJ/ybDngrL1tV3NeAK6shVvUzx+fjQPld00wPyodWbiliH+KNyObLTZeEpJ; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 13 Jun 2022 19:06:47 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:36 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "18a94-5e158fd52ffc0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e5482755d4e937d4018ce72cd23b55c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: v4T-F393rMz1i09UdmdCatZxFjZ3rKZMhQ7A7qyoC1GZZoqgV12ViA== Age: 417
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 2f 2a 0a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 2d 61 65 6d 0a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 0a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 0a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 31 37 3a 31 37 5a 0a 20 53 69 7a 7a 6c 65 20 43 53 53 20 Data Ascii: /* jQuery JavaScript Library v1.12.4-aem http://jquery.com/ Includes Sizzle.js http://sizzlejs.com/ Copyright jQuery Foundation and other contributors Released under the MIT license http://jquery.org/license Date: 2016-05-20T17:17Z Sizzle CSS
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 6e 3a 4f 29 21 3d 3d 47 26 26 4a 61 28 6e 29 2c 6e 3d 6e 7c 7c 47 2c 52 29 29 7b 69 66 28 31 31 21 3d 3d 46 26 26 28 44 3d 68 64 2e 65 78 65 63 28 68 29 29 29 69 66 28 75 3d 44 5b 31 5d 29 69 66 28 39 3d 3d 3d 46 29 69 66 28 78 3d 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 75 29 29 7b 69 66 28 78 2e 69 64 3d 3d 3d 75 29 72 65 74 75 72 6e 20 6c 2e 70 75 73 68 28 78 29 2c 6c 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 6c 3b 65 6c 73 65 7b 69 66 28 7a 26 26 28 78 3d 7a 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 75 29 29 26 26 6c 61 28 6e 2c 78 29 26 26 78 2e 69 64 3d 3d 3d 75 29 72 65 74 75 72 6e 20 6c 2e 70 75 73 68 28 78 29 2c 6c 7d 65 6c 73 65 7b 69 66 28 44 5b 32 5d 29 72 65 74 75 72 6e 20 44 61 2e 61 70 70 6c 79 28 6c 2c 6e 2e 67 65 74 45 6c 65 Data Ascii: n:O)!==G&&Ja(n),n=n\|\|G,R)){if(11!==F&&(D=hd.exec(h)))if(u=D[1])if(9===F)if(x=n.getElementById(u)){if(x.id===u)return l.push(x),l}else return l;else{if(z&&(x=z.getElementById(u))&&la(n,x)&&x.id===u)return l.push(x),l}else{if(D[2])return Da.apply(l,n.getEle
2024-10-01 09:51:33 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 6e 26 26 21 21 68 2e 63 68 65 63 6b 65 64 7c 7c 22 6f 70 74 69 6f 6e 22 3d 3d 3d 6e 26 26 21 21 68 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3b 72 65 74 75 72 6e 21 30 3d 3d 3d 68 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 6f 72 28 68 3d 68 2e 66 69 72 73 74 43 68 69 6c 64 3b 68 3b 68 3d 68 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 36 3e 68 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: ;return"input"===n&&!!h.checked\|\|"option"===n&&!!h.selected},selected:function(h){h.parentNode&&h.parentNode.selectedIndex;return!0===h.selected},empty:function(h){for(h=h.firstChild;h;h=h.nextSibling)if(6>h.nodeType)return!1;return!0},parent:function(h){
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 33 65 5c 78 33 63 74 72 5c 78 33 65 22 2c 22 5c 78 33 63 2f 74 72 5c 78 33 65 5c 78 33 63 2f 74 62 6f 64 79 5c 78 33 65 5c 78 33 63 2f 74 61 62 6c 65 5c 78 33 65 22 5d 2c 5f 64 65 66 61 75 6c 74 3a 79 2e 68 74 6d 6c 53 65 72 69 61 6c 69 7a 65 3f 5b 30 2c 22 22 2c 22 22 5d 3a 5b 31 2c 22 58 5c 78 33 63 64 69 76 5c 78 33 65 22 2c 22 5c 78 33 63 2f 64 69 76 5c 78 33 65 22 5d 7d 3b 6b 61 2e 74 62 6f 64 79 3d 6b 61 2e 74 66 6f 6f 74 3d 6b 61 2e 63 6f 6c 67 72 6f 75 70 3d 6b 61 2e 63 61 70 74 69 6f 6e 3d 6b 61 2e 74 68 65 61 64 3b 6b 61 2e 74 68 3d 6b 61 2e 74 64 3b 79 2e 6f 70 74 69 6f 6e 7c 7c 28 6b 61 2e 6f 70 74 67 72 6f 75 70 3d 6b 61 2e 6f 70 74 69 6f 6e 3d 5b 31 2c 22 5c 78 33 63 73 65 6c 65 63 74 20 6d 75 6c 74 69 70 6c 65 5c 78 33 64 27 6d 75 6c 74 69 Data Ascii: 3e\x3ctr\x3e","\x3c/tr\x3e\x3c/tbody\x3e\x3c/table\x3e"],_default:y.htmlSerialize?[0,"",""]:[1,"X\x3cdiv\x3e","\x3c/div\x3e"]};ka.tbody=ka.tfoot=ka.colgroup=ka.caption=ka.thead;ka.th=ka.td;y.option\|\|(ka.optgroup=ka.option=[1,"\x3cselect multiple\x3d'multi
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 65 6d 6f 76 65 43 68 69 6c 64 28 6d 29 7d 76 61 72 20 62 2c 64 2c 65 2c 66 2c 67 2c 6b 2c 6d 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 0a 70 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 26 26 28 70 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 66 6c 6f 61 74 3a 6c 65 66 74 3b 6f 70 61 63 69 74 79 3a 2e 35 22 2c 79 2e 6f 70 61 63 69 74 79 3d 22 30 2e 35 22 3d 3d 3d 70 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 2c 79 2e 63 73 73 46 6c 6f 61 74 3d 21 21 70 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 70 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6c 69 70 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 2c 70 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 73 74 79 6c 65 2e 62 Data Ascii: emoveChild(m)}var b,d,e,f,g,k,m=C.createElement("div"),p=C.createElement("div");p.style&&(p.style.cssText="float:left;opacity:.5",y.opacity="0.5"===p.style.opacity,y.cssFloat=!!p.style.cssFloat,p.style.backgroundClip="content-box",p.cloneNode(!0).style.b
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 65 29 26 26 0a 61 2e 68 72 65 66 3f 30 3a 2d 31 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 3b 79 2e 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 7c 7c 63 2e 65 61 63 68 28 5b 22 68 72 65 66 22 2c 22 73 72 63 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 63 2e 70 72 6f 70 48 6f 6f 6b 73 5b 62 5d 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 34 29 7d 7d 7d 29 3b 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 63 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: e)&&a.href?0:-1}}},propFix:{"for":"htmlFor","class":"className"}});y.hrefNormalized\|\|c.each(["href","src"],function(a,b){c.propHooks[b]={get:function(d){return d.getAttribute(b,4)}}});y.optSelected\|\|(c.propHooks.selected={get:function(a){if(a=a.parentNod
2024-10-01 09:51:34 UTC	2708	IN	Data Raw: 74 50 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3b 61 26 26 21 63 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 22 68 74 6d 6c 22 29 26 26 22 73 74 61 74 69 63 22 3d 3d 3d 63 2e 63 73 73 28 61 2c 22 70 6f 73 69 74 69 6f 6e 22 29 3b 29 61 3d 61 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3b 0a 72 65 74 75 72 6e 20 61 7c 7c 49 63 7d 29 7d 7d 29 3b 63 2e 65 61 63 68 28 7b 73 63 72 6f 6c 6c 4c 65 66 74 3a 22 70 61 67 65 58 4f 66 66 73 65 74 22 2c 73 63 72 6f 6c 6c 54 6f 70 3a 22 70 61 67 65 59 4f 66 66 73 65 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 64 3d 2f 59 2f 2e 74 65 73 74 28 Data Ascii: tParent:function(){return this.map(function(){for(var a=this.offsetParent;a&&!c.nodeName(a,"html")&&"static"===c.css(a,"position");)a=a.offsetParent;return a\|\|Ic})}});c.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(a,b){var d=/Y/.test(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49756	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:33 UTC	777	OUT	GET /etc.clientlibs/clientlibs/granite/jquery/granite.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:33 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 3681 Connection: close Date: Tue, 01 Oct 2024 09:44:36 GMT Set-Cookie: AWSALB=Ro76A5KMRVuSLHUwauwwucany4xBDViXO4zP55hf8wO2BbA6JMlSvI8fr1XWQ/TVRVjEJ3tgckDnyVNRs75X6TJY4iZoy0A1TFGE1uAta6OuPtPrjwuU9rvrRTFA; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/ Set-Cookie: AWSALBCORS=Ro76A5KMRVuSLHUwauwwucany4xBDViXO4zP55hf8wO2BbA6JMlSvI8fr1XWQ/TVRVjEJ3tgckDnyVNRs75X6TJY4iZoy0A1TFGE1uAta6OuPtPrjwuU9rvrRTFA; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Tue, 05 Mar 2019 11:12:25 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:36 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "e61-58356f2a6d840" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 827d4b9f3280fc9410e1e1ce54fbedda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: k-02UhB180EPsfeSEeODutBgZ5kMyO3z1-r63DA5FgCbI0eU4MEr9A== Age: 417
2024-10-01 09:51:33 UTC	3681	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 2c 65 29 7b 65 2e 47 72 61 6e 69 74 65 3d 65 2e 47 72 61 6e 69 74 65 7c 7c 7b 7d 3b 65 2e 47 72 61 6e 69 74 65 2e 24 3d 65 2e 47 72 61 6e 69 74 65 2e 24 7c 7c 67 3b 65 2e 5f 67 3d 65 2e 5f 67 7c 7c 7b 7d 3b 65 2e 5f 67 2e 24 3d 65 2e 5f 67 2e 24 7c 7c 67 3b 76 61 72 20 6b 3d 47 72 61 6e 69 74 65 2e 48 54 54 50 3b 67 2e 61 6a 61 78 53 65 74 75 70 28 7b 65 78 74 65 72 6e 61 6c 69 7a 65 3a 21 30 2c 65 6e 63 6f 64 65 50 61 74 68 3a 21 30 2c 68 6f 6f 6b 3a 21 30 2c 62 65 66 6f 72 65 53 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 63 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 47 5f 49 53 5f 48 4f 4f 4b 45 44 26 26 47 5f 49 53 5f 48 4f 4f 4b 45 44 28 63 2e 75 72 6c 29 7c 7c 28 63 2e 65 78 74 65 72 6e 61 Data Ascii: (function(g,e){e.Granite=e.Granite\|\|{};e.Granite.$=e.Granite.$\|\|g;e._g=e._g\|\|{};e._g.$=e._g.$\|\|g;var k=Granite.HTTP;g.ajaxSetup({externalize:!0,encodePath:!0,hook:!0,beforeSend:function(h,c){"undefined"!==typeof G_IS_HOOKED&&G_IS_HOOKED(c.url)\|\|(c.externa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49752	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:33 UTC	768	OUT	GET /etc.clientlibs/clientlibs/granite/utils.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:33 UTC	1308	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 8130 Connection: close Date: Tue, 01 Oct 2024 09:44:36 GMT Set-Cookie: AWSALB=da/acpKOm105IIXHT74ekqAXMPd0ctqjkRhI3+TahoarY2EumsmR6oAwW8GauFimxFETkCLzWrfFULFTTitaTNi2Yczov2dXCAZGRi3BXTKDTor6AjWau/l5jYpA; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/ Set-Cookie: AWSALBCORS=da/acpKOm105IIXHT74ekqAXMPd0ctqjkRhI3+TahoarY2EumsmR6oAwW8GauFimxFETkCLzWrfFULFTTitaTNi2Yczov2dXCAZGRi3BXTKDTor6AjWau/l5jYpA; Expires=Tue, 08 Oct 2024 09:44:36 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Fri, 11 Jun 2021 18:25:11 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:36 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "1fc2-5c481a0ca6fc0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e47c87f8fd9c4c08ac7559d0bcc2b4c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 9ZaczyDj7SWNUcKrjPLIdR4mMRStIwCW4qxWhJjakawtDDm7xYViTA== Age: 417
2024-10-01 09:51:33 UTC	8130	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 64 28 29 3a 28 77 69 6e 64 6f 77 2e 47 72 61 6e 69 74 65 3d 77 69 6e 64 6f 77 2e 47 72 61 6e 69 74 65 7c 7c 7b 7d 29 2e 53 6c 69 6e 67 3d 64 28 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 53 45 4c 45 43 54 4f 52 5f 49 4e 46 49 4e 49 54 59 3a 22 2e 69 6e 66 69 6e 69 74 79 22 2c 43 48 41 52 53 45 54 3a 22 5f 63 68 61 72 73 65 74 5f 22 2c 53 54 41 54 55 53 3a 22 3a 73 74 61 74 75 73 22 2c 53 54 41 54 55 53 5f 42 52 4f 57 53 45 52 3a 22 62 72 6f 77 73 65 72 22 2c 4f 50 45 52 41 54 49 4f 4e 3a 22 3a 6f 70 65 72 61 74 69 6f 6e 22 2c 4f Data Ascii: (function(d){"object"===typeof module&&module.exports?module.exports=d():(window.Granite=window.Granite\|\|{}).Sling=d()})(function(){return{SELECTOR_INFINITY:".infinity",CHARSET:"_charset_",STATUS:":status",STATUS_BROWSER:"browser",OPERATION:":operation",O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49755	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:33 UTC	799	OUT	GET /etc.clientlibs/emcm/components/structure/page/clientlibs-gated-content.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:33 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 1282 Connection: close Date: Tue, 01 Oct 2024 09:44:37 GMT Set-Cookie: AWSALB=461ZspMsIIWmZYBtIK4AkqpJgUAgQwSng2G4jWanLWcRXdr7uJLhvPzAD6dYbYCj3ay35IJiBo5kF4forS2FGUUrD/zzAJBrSh3WELX2s+EVK+eC4Dz+4rauT+rt; Expires=Tue, 08 Oct 2024 09:44:37 GMT; Path=/ Set-Cookie: AWSALBCORS=461ZspMsIIWmZYBtIK4AkqpJgUAgQwSng2G4jWanLWcRXdr7uJLhvPzAD6dYbYCj3ay35IJiBo5kF4forS2FGUUrD/zzAJBrSh3WELX2s+EVK+eC4Dz+4rauT+rt; Expires=Tue, 08 Oct 2024 09:44:37 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 12 Feb 2024 05:09:49 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:37 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "502-6112849748140" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 90b31bff657d66dd87e437e4a49bf7a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: nzKcvuSN55Ih1-P9Uy2as-HBY5E7OIXfp2mSVGItauVYN4AgzbGpmw== Age: 416
2024-10-01 09:51:33 UTC	1282	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 64 6f 63 75 6d 65 6e 74 2c 20 24 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 20 20 63 6f 6e 73 74 20 69 73 47 61 74 65 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 73 2d 67 61 74 65 64 22 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 67 61 74 65 64 46 6f 72 6d 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 74 65 64 2d 66 6f 72 6d 22 29 3b 0a 0a 20 20 20 20 69 66 20 28 69 73 47 61 74 65 64 20 26 26 20 21 69 73 46 6f 72 6d 53 75 62 6d 69 74 74 65 64 28 67 61 74 65 64 46 6f 72 6d 4e 61 6d 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 75 72 6c Data Ascii: (function (document, $) { "use strict"; const isGated = document.body.getAttribute("data-is-gated"); const gatedFormName = document.body.getAttribute("data-gated-form"); if (isGated && !isFormSubmitted(gatedFormName)) { const url

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49757	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:33 UTC	835	OUT	GET /en/products/highq/_jcr_content/root/container_614525998/container/image_copy.coreimg.png/1669639036912/234507.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:33 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 152462 Connection: close Date: Tue, 01 Oct 2024 09:51:33 GMT Set-Cookie: AWSALB=fgUIly2QVwNeBYkOAz+xWnAPUbaX02Gn0z19VMPSCQy2euz6DauR+7uLpRyvisWlWNsPQQzhXSYQZa04Zhh8spCI8ui7IS0mnGmSuifyTHv9SV8PABaRrixepnsC; Expires=Tue, 08 Oct 2024 09:51:33 GMT; Path=/ Set-Cookie: AWSALBCORS=fgUIly2QVwNeBYkOAz+xWnAPUbaX02Gn0z19VMPSCQy2euz6DauR+7uLpRyvisWlWNsPQQzhXSYQZa04Zhh8spCI8ui7IS0mnGmSuifyTHv9SV8PABaRrixepnsC; Expires=Tue, 08 Oct 2024 09:51:33 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Content-Disposition: inline; filename=234507.png X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Nov 2022 12:37:16 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:33 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "2538e-5ee8721a4d700" X-Cache: Miss from cloudfront Via: 1.1 0b328de7c6916513ee4489477445f2e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 3cuitEBw0akOFVgyux3N_BztTFvSG2TERwM0hVyERlmy5N0d0ysNOw== Age: 2254405
2024-10-01 09:51:33 UTC	14632	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 05 00 00 01 f9 08 06 00 00 00 d0 aa 92 32 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 02 53 23 49 44 41 54 78 01 ec bd 07 9c 1c c5 95 3f fe 7a 73 d2 2a e7 1c 01 05 90 00 91 04 88 9c 4c c6 04 63 fb 70 ce e1 7c e7 3b ff 3f 3f ff 7e 36 be 6c 9f b3 cf f9 b0 71 c0 c6 60 8c 09 26 0b 11 05 92 50 46 39 e7 ac 5d 6d ce fd 7f df 9a 79 b3 6f 6a ba 67 7a 66 67 17 01 f5 85 d5 cc 74 77 55 bd ae 7a 55 f5 52 55 79 e4 d0 63 f8 be ef 35 35 35 8d 38 76 ec d8 69 8d 8d 8d a7 75 75 75 4d 68 6f 6f af ec ec ec ac e0 cf f2 82 82 82 52 fe 5e 80 67 f9 bb 8f cf 8e 8e 8e a4 2c e4 8b e7 79 e6 37 3f 4f 85 85 85 3e ff f6 f8 Data Ascii: PNGIHDR2pHYssRGBgAMAaS#IDATx?zs*Lcp\|;??~6lq`&PF9]myojgzfgtwUzURUyc5558viuuuMhooR^g,y7?O>
2024-10-01 09:51:34 UTC	7754	IN	Data Raw: 8a 3e 5f d1 80 fc e4 d9 44 e2 dc eb 28 96 9f 10 19 bf 1e fb da 4d 1f 59 75 44 b1 36 0c af a3 58 e2 d4 36 54 8a 66 fc 9e 27 34 04 d6 51 fc 79 55 47 c9 34 28 fa e2 75 24 6d 28 cf a6 d2 17 7f 43 df 4f 6d 43 5f b6 df 4b bc 85 95 8f df dd 4e 8a 9c d8 2d 45 54 f2 d7 24 1a e4 5e a2 8e a8 1b b9 d6 11 c5 f9 86 52 f8 b2 9b 3e cf f7 ba d3 27 68 20 95 af 67 d5 91 4f f6 4b 76 67 dd 4d 9f a7 ea 31 d7 3a 4a dc 4b 5b 47 e1 f4 25 68 a0 30 fa 28 31 b6 e8 3a 0b ac 23 8b be 44 35 f9 dd 34 48 9f f2 bb 2b 2f 9e 57 3a 1a 52 eb 28 a9 6f e8 76 50 03 80 97 68 d7 60 1a 62 e5 75 f7 eb 58 1d 59 fd 3a a9 8e d4 d8 97 ae 8e ac b1 a5 bb 8e a8 bb 5f 67 5d 47 5e d2 70 4b a1 f4 a9 3a 8a 3f 9c 3c 3f 50 77 3b 11 65 3d f6 91 1a fb 32 ce 0f aa 8e 7c 79 7f 3b 0f 3d 36 4b 09 e9 e6 af ee e2 b2 98 Data Ascii: >_D(MYuD6X6Tf'4QyUG4(u$m(COmC_KN-ET$^R>'h gOKvgM1:JK[G%h0(1:#D54H+/W:R(ovPh`buXY:_g]G^pK:?<?Pw;e=2\|y;=6K
2024-10-01 09:51:34 UTC	1373	IN	Data Raw: 67 71 11 14 ad b1 26 3e 12 02 17 84 90 8e 8e f6 c4 80 82 4f 08 77 4d ac 1c c1 d2 37 98 05 c8 30 40 98 82 60 63 87 61 84 01 b4 7d f6 c6 53 e9 df 3f 7c 0e 0d ed 5f c1 2e dc 76 9a 3c b2 9a 46 0e 2a e7 01 bb 9d 86 f3 e7 9c 29 43 59 c0 af a4 f1 c3 fb d1 e1 e3 cd 74 88 ff e0 21 98 38 a2 1f 2b 5d 7e 3c 1f 8f ce 99 ce 96 c4 a3 4d 26 7d 98 42 00 40 68 82 35 f2 f6 db 6e 63 21 69 88 51 f2 c0 03 e2 61 01 0f 9c c4 d6 4c 3d a8 66 03 b4 03 84 17 58 fc 91 27 da 0f 82 cf b1 9a 63 46 c1 9b ce 56 43 d4 67 27 f3 00 84 0a 94 50 c4 cf 4d 98 38 c1 28 98 b0 70 c2 1b 55 57 77 dc 08 57 13 d8 82 8f 7c 60 15 1e 3a 74 88 11 00 2b 58 78 87 45 12 de 9c 75 6c 51 6f 63 ba b3 85 6c 8f 87 32 c7 c4 c3 77 2a 2a aa cc 6f f0 da a4 c9 13 63 eb 0b 18 10 06 d1 a6 e0 ab 11 23 63 1e 14 3c b3 75 db Data Ascii: gq&>OwM70@`ca}S?\|_.v<F)CYt!8+]~<M&}B@h5nc!iQaL=fX'cFVCg'PM8(pUWwW\|`:t+XxEulQocl2w*oc#c<u
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 82 95 1c f7 d0 af a0 50 c2 7a 8d 3e 39 94 d3 21 0f e9 f3 e8 3b 53 27 4f 35 0a 0a da 2f 36 41 57 1a a5 7c 20 f7 2d 28 d4 f8 33 1e 49 56 ce d1 bf 91 27 78 65 1f f7 69 84 6c a1 3e d0 f7 10 26 89 b1 00 ed 0a fa 50 77 e8 5b a0 13 5e 1c f0 00 ea 0c de 11 f4 5d d3 57 d8 d0 00 ba f0 29 8a 39 2c dd 83 99 7f c0 f3 b9 ac c7 a8 ac ac 32 46 99 b5 6b d7 1a de ec 1f 37 0c c0 4b b2 63 fb 8e 84 20 0c 23 04 0c 1d 10 f8 c1 33 68 0b f0 82 f1 a8 70 5b a2 1d db 99 77 b0 16 4a bc 98 6b 56 af 31 ef 0b af 98 31 7c 90 67 bc 96 5d f0 4e 73 d9 c8 1b 0a 19 bc 6e a8 a7 21 cc fb d3 4f 9e 4e 87 0e 1f 34 79 a0 fd ab aa 2a cc 38 57 c5 fd 18 bc 85 75 1e 10 fc a0 4c ca fc 84 67 a1 18 80 07 b3 05 94 73 d4 ed 55 57 5e c5 7c 3f d4 18 53 00 f4 cd e1 c3 46 18 85 15 5e 03 84 3f 8d 19 3d c6 28 c3 Data Ascii: Pz>9!;S'O5/6AW\| -(3IV'xeil>&Pw[^]W)9,2Fk7Kc #3hp[wJkV11\|g]Nsn!ON4y*8WuLgsUW^\|?SF^?=(
2024-10-01 09:51:34 UTC	10463	IN	Data Raw: 4d 49 b2 28 1c 60 d7 f1 12 b6 38 96 95 96 50 45 45 b9 11 4a 11 07 6f f7 23 28 14 67 9f 7d 26 5b cb 5f a3 b6 f6 b6 cc 34 44 10 8e 92 7e db a3 70 54 64 63 72 a1 08 f7 e2 79 24 0d aa 8a 3e 2f 71 21 38 3f 11 d6 a5 fe bc 44 ba d4 34 05 21 83 95 67 d1 90 72 3f ca 0c 62 95 25 4a 81 19 48 a1 10 20 96 b7 a0 7b 40 f4 82 12 85 65 16 02 f0 3b b6 5a bd e2 b2 8b cc 16 9a df f9 fe 4f cd 76 aa 98 8a b0 e8 f8 b4 59 33 68 fc f8 31 b4 60 e1 cb 3c fe 1f ca dc ee 3d 69 c3 a0 67 73 c9 2f df f4 c5 af a7 5a 87 29 89 6f ec b6 35 6b 7a ec fc 74 fd 91 e2 31 ab 0f 78 2a 1f fb 91 a4 67 55 1a 0a 21 bd 33 7e ea 67 61 61 91 51 0c b4 85 4e 14 16 f3 ac 35 19 a7 08 34 88 29 3f 72 28 a5 0c ec 5a 52 79 d7 47 a8 98 85 3d 58 be 8b 4f 99 91 4a 47 5d 1d 75 35 d6 07 d2 17 24 6c eb 7b 41 c8 65 c6 Data Ascii: MI(`8PEEJo#(g}&[_4D~pTdcry$>/q!8?D4!gr?b%JH {@e;ZOvY3h1`<=igs/Z)o5kzt1x*gU!3~gaaQN54)?r(ZRyG=XOJG]u5$l{Ae
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 8f 1e a7 e5 c6 e0 95 d7 76 32 06 0d a3 51 a1 b5 a0 a8 75 05 b6 21 f9 63 f7 7c 98 b9 2c 7d f3 1f be 43 85 92 0b 7c 65 30 c3 a5 81 19 0d 47 be 39 16 2e 8d 31 83 3e 37 27 73 3d d6 7d a9 a7 ed 62 a5 aa cd 80 55 b8 10 be 83 63 94 51 db 76 f5 16 f8 c8 87 6e 85 a3 54 20 bb 62 e3 3a 16 0e f6 8d 37 df 61 7b 32 7e fa f4 f3 4c 50 5b b5 6a 59 e0 77 b6 ad b5 05 7e fe 53 9f 60 ee 3d fb a9 85 60 d9 b2 25 b0 9a 6a df 13 94 c9 af af 4f 51 4d fc 2a e8 9a d5 69 df 62 6f 6f 1f fc cf af fd 19 8b 5a f5 57 5f ff 7b b6 e0 7c f4 9e 3b d9 be 11 df 6b 96 e8 a3 02 d5 02 3f f7 c2 2b f0 bb ff fd 7f c1 7f fb 1f ff 0b 5e d8 fe 0a 2c 5f be 14 3e f1 d1 bb 4c 81 c0 72 67 44 8b c4 a3 8f 3f 0d 43 c3 a3 4c f8 c1 f1 89 ee 44 6b 29 cd 81 ee 59 c1 1d d9 ec 08 21 81 8d 94 5e 4c ac f8 ba 1a 01 c8 Data Ascii: v2Qu!c\|,}C\|e0G9.1>7's=}bUcQvnT b:7a{2~LP[jYw~S`=`%jOQM*ibooZW_{\|;k?+^,_>LrgD?CLDk)Y!^L
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: af 28 bc 3e f0 c0 0f d9 da f5 a1 0f 7d 08 16 d3 31 8d 6b 09 ce eb 6f 50 66 1f d7 06 cc 43 41 1a d3 51 88 98 39 b3 9d b6 7b 18 4e d1 36 d1 35 0f df c9 d3 67 ce b0 b5 68 f6 ec d9 70 be e7 3c 1c 3c 74 10 34 34 ca 0d 31 c0 8b b5 79 d8 91 ce 0f 33 e3 67 4c e1 9f 58 8e ae 23 7a 26 0e 08 2d 14 48 a0 03 cc e0 9b 8d b9 a9 4a 90 36 59 3a 17 1a 70 62 c4 3f 5e ae 5c 16 03 1c bd d8 de 0e aa b1 44 26 a3 ad ad 8d 31 e9 85 82 c1 34 40 38 71 a3 b0 70 fd 0d d7 c3 d6 ab b7 42 2e 9b 61 0b 01 02 99 16 64 64 b8 a6 ff f4 a9 d3 70 86 4e dc 37 dd 7c 33 5c 7d f5 d5 f0 73 3f fb 29 a6 5d 9d 49 35 98 d8 0e a7 79 ed da 35 f0 0b 3f ff 0b 6c f2 ff ce 77 be c3 18 f9 4e 2a 44 74 76 74 32 ad 29 32 3e 2f bd b4 9d 0a 25 07 99 9f 37 32 65 48 17 fe b1 7e b3 a5 75 02 ad 6d ad 6c 21 d9 4e ad 09 Data Ascii: (>}1koPfCAQ9{N65ghp<<t441y3gLX#z&-HJ6Y:pb?^\D&14@8qpB.addpN7\|3\}s?)]I5y5?lwN*Dtvt2)2>/%72eH~uml!N
2024-10-01 09:51:34 UTC	4977	IN	Data Raw: d4 71 22 56 df 08 da 8f d6 1f e2 21 65 e2 01 65 3c 4f fe 14 2d 09 fa 34 e3 70 d0 42 81 84 b1 b1 b1 8c ec 2e a4 8a 85 8b b0 62 e0 3a 7e d7 1c ca bd e8 2a da 63 26 71 5b f9 a1 70 0f b2 94 23 4e 46 c8 4c 63 a5 27 f9 3b eb 22 df a3 cf 0d 3f 96 a0 16 98 a3 5a 67 d0 04 fa de 79 e7 5d b8 ee fa eb 61 eb d6 6d 70 e5 95 57 d6 f6 c4 5f c2 e3 21 12 e5 2a 77 6a c7 f7 5a 65 3f 25 ba 22 dc bc a8 67 b5 13 bc 84 f1 1a 1b 16 9a 3d 09 02 ca 00 36 b6 99 ae 43 86 e2 30 5a a3 94 14 ac c8 77 f8 b8 1a ce 32 d6 47 a1 40 e0 50 ba 0e 56 ac 6e 06 e3 cc 08 80 1d 9d dc 70 37 ed 6a 4f 05 c3 e3 a7 93 be 58 f3 0c d0 9b 8c fd 21 ef 29 10 03 bf 88 07 cb ca bc 1a 0a 0f d5 d8 eb 39 95 a0 85 02 09 74 20 65 45 06 83 ef 6e c7 41 28 4a 9f b2 35 41 94 64 6b 01 86 75 88 1f 89 a1 06 24 6f ed c2 87 Data Ascii: q"V!ee<O-4pB.b:~c&q[p#NFLc';"?Zgy]ampW_!wjZe?%"g=6C0Zw2G@PVnp7jOX!)9t eEnA(J5Adku$o
2024-10-01 09:51:34 UTC	8949	IN	Data Raw: 48 72 86 5c 5e a4 2f fa bb a1 aa 39 f1 ce 36 42 a6 6b 4c 3d 24 66 2f a1 cc f6 d7 a0 ee b2 ab c1 f9 e4 39 e3 af b2 0a b8 47 08 71 a5 13 2b fa 90 e9 21 70 2a 97 82 74 21 06 b2 c8 8c 87 e4 c6 d7 d6 01 a9 97 f5 aa c5 6b 91 86 66 98 f9 e5 3f 83 fa 8d b7 80 c6 c4 21 9e 60 ec 15 2e 1e a1 38 64 56 4f 0d 21 a0 2d 05 12 e2 f1 b8 31 36 36 66 33 0f e2 41 18 b8 df 40 75 68 19 62 4a 87 24 15 21 2b 5f 0c ae 73 2f 51 0e dc 2e 40 6a 18 ce f2 54 43 93 98 b7 92 f9 93 8e 1f 7c dd 4c 35 ac 06 82 f4 b9 a7 1f 07 29 5d 2c 2a 94 7d a4 51 0d e0 3b b9 e3 b5 d7 a0 ae be 1e 3a 3a 3a e0 f5 d7 5f 67 a6 e4 d9 b3 67 41 63 63 13 f4 f5 f5 c1 f5 d7 5f 5f 7c 5f 19 ff 60 31 12 be e3 32 0a 31 d2 77 42 fc cb 94 e3 3a 10 5a ce 10 6b b9 d3 0c 55 4e d0 c6 55 e5 0c f7 4f a2 ce f2 85 61 b8 fa 73 32 Data Ascii: Hr\^/96BkL=$f/9Gq+!pt!kf?!`.8dVO!-166f3A@uhbJ$!+_s/Q.@jTC\|L5)],}Q;:::_ggAcc__\|_`121wB:ZkUNUOas2
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 4c 38 0a 32 18 c2 11 0f 93 7a e0 81 07 18 83 8f 4c 7f 0f 15 4c 5a e9 3d 0c 0c f4 c3 95 57 5d cd a2 95 0c d1 72 68 29 c0 43 a6 9e a5 fd 80 31 ea f1 f4 54 ec 0f 14 2a de 7f ff 7d 68 a7 fd 91 b3 ac 54 d8 0f 78 ea 2b 9e 7c fb ea ab af b2 71 88 61 d7 f0 1a 18 93 7e 6a 42 5b e3 34 a6 16 f4 2a a1 a1 11 0d 5e 4a 2f be c1 18 c1 cf 96 42 08 a1 4a f5 6b 17 02 da 76 ed 06 0b 49 8a 4c 18 32 5e fc 20 0c 0e 79 63 a0 b8 bf 60 6a 8e bd f0 f7 54 a0 55 06 46 33 f4 65 35 58 08 be 07 5f 3f 03 df 7a e6 08 a4 73 a6 3b 16 6a bd af bd ee 3a 3b dc 21 c6 05 47 ad 37 46 e6 40 21 62 64 74 84 9d 70 8a 1b bd 51 20 c0 bf 19 94 f9 e7 21 62 51 10 c0 83 a0 4e 9f 3e cd 0e 56 3a 7e fc 38 f4 f6 f5 32 86 1a 4f 2f 45 46 1b 2d 05 fd 7d 7d 30 6b f6 2c 58 be 7c 39 8b 1f ee 77 42 6c 50 e4 0a 39 18 Data Ascii: L82zLLZ=W]rh)C1T}hTx+\|qa~jB[4^J/BJkvIL2^ yc`jTUF3e5X_?zs;j:;!G7F@!bdtpQ !bQN>V:~82O/EF-}}0k,X\|9wBlP9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49758	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:33 UTC	840	OUT	GET /en/products/highq/_jcr_content/root/container/container/tabs/container/image_copy.coreimg.png/1698258525660/234568.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; AWSALBCORS=t0tt0dSTDhkNsegppvc8TSWvcglMz7zQqPGcDEVBnRZfHzsoR5NWJ306T3XDbHU46ajZ8uTlphJy7rDpB1pqkrW2vSaJw0VtIAl/GzPl7Wvp39tt2WjUDCcogW1M; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:34 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 294264 Connection: close Date: Tue, 01 Oct 2024 09:51:34 GMT Set-Cookie: AWSALB=gUVS1LRMzW1L6bTO0EhDtz1X8K55qiR3wlyCfc7AMQWM4zXfxiSLgBtW1+h5h5Gxh7DDpph5zB+kALCJMzDQY2dx20jlT4dNosL71t/X7cWYlGsXoJlvGpMB45gj; Expires=Tue, 08 Oct 2024 09:51:34 GMT; Path=/ Set-Cookie: AWSALBCORS=gUVS1LRMzW1L6bTO0EhDtz1X8K55qiR3wlyCfc7AMQWM4zXfxiSLgBtW1+h5h5Gxh7DDpph5zB+kALCJMzDQY2dx20jlT4dNosL71t/X7cWYlGsXoJlvGpMB45gj; Expires=Tue, 08 Oct 2024 09:51:34 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Content-Disposition: inline; filename=234568.png X-Content-Type-Options: nosniff Last-Modified: Wed, 25 Oct 2023 18:28:45 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:34 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "47d78-6088ea01e9140" X-Cache: Miss from cloudfront Via: 1.1 3aedbf31650352660fd3a878f7b791c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: HdynwYnIEGqov5ECw_1kUDouIFFtsbyd_hIOPQnz8CHVgKTBgjoDJA== Age: 2254405
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 18 00 00 01 be 08 06 00 00 00 10 a7 a2 be 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 04 7d 0d 49 44 41 54 78 01 ec fd e7 96 64 39 92 30 06 9a 5d f7 d0 11 a9 75 96 ae ea aa d6 3d 3d 9c c3 d9 d9 fd c5 6f df 64 f7 9c 7d 93 dd a5 38 7c 21 f2 07 f9 63 3e 72 54 cf 7c dd d3 a2 54 97 ae ca ac cc ac 54 91 19 da af 11 06 c0 00 33 00 f7 ba 7b 64 64 75 cd 21 d1 9d 15 7e 2f 00 83 29 18 cc a0 2e fe bf fe df ff 1f 42 98 41 9d c8 fd 43 18 4e 65 fe 70 79 8c b9 8b a6 97 5d 7e 28 59 0a 48 41 0f ff ed 61 9c 23 2f 82 d3 e9 68 18 e2 39 29 88 f3 30 fe 21 cb cd ca 60 b8 0c 0e 3c d5 6d cc e3 c8 c2 34 44 40 2f ae 7b Data Ascii: PNGIHDRpHYssRGBgAMAa}IDATxd90]u==od}8\|!c>rT\|TT3{ddu!~/).BACNepy]~(YHAa#/h9)0!`<m4D@/{
2024-10-01 09:51:34 UTC	1514	IN	Data Raw: b8 4a c6 21 15 8c 34 63 4b f7 12 b3 20 af 95 e8 72 ba dd 56 bf 52 b2 20 99 24 d2 da 0e 55 50 01 5a 82 be 48 af 1c 0c 50 fc 00 d0 db 99 33 39 e1 5c 5e 2f 2b 70 1a 1f 55 2e 1d b2 0d ec 4b 38 a4 63 dc d2 3f d5 5e 7f 33 16 1a 1a e5 52 0e c6 3b df 52 29 ce 73 9e fd c6 cc 6b 52 b4 c8 f7 2b b4 ef 10 1d a9 dc 21 10 40 fb 11 c2 93 2e 8f 5b d9 cc 29 d7 1a 15 be 09 4e c4 89 ac ee 68 9a 50 f9 1f 9c db 15 b2 41 e5 6b e5 66 85 df d1 36 eb 7c 2c da 53 fe 8a 87 d8 65 7e 05 a6 c6 8f 54 62 a4 2f 7e 14 37 5d 7b ad 6e 25 23 a5 17 42 67 1e bb b2 af 92 70 8b 32 8b ec 03 19 4b 53 e0 93 a4 2c 30 35 8d b6 9f e4 29 57 c5 5b d5 89 d2 24 36 e3 94 be 19 94 71 f3 1a 17 71 cb df db 89 f9 4c ac 5b b9 38 3e 3a f6 1f 25 f6 e5 27 2b 30 59 25 98 ae cf e0 e9 c3 87 f0 f8 e9 1d d8 7c f8 c4 5f Data Ascii: J!4cK rVR $UPZHP39\^/+pU.K8c?^3R;R)skR+!@.[)NhPAkf6\|,Se~Tb/~7]{n%#Bgp2KS,05)W[$6qqL[8>:%'+0Y%\|_
2024-10-01 09:51:34 UTC	13731	IN	Data Raw: 88 ba c2 48 47 97 4e 21 8b 7e 94 96 b5 4b 64 b1 09 68 b4 d5 61 3c 1a b6 ac d2 8e 31 fd 6b 64 eb 41 28 97 a1 39 18 b6 82 c3 ba 8c fd 3b 3f bf e8 6b 21 e5 33 9d 29 75 da 7e 0f 0c c6 38 87 8a 94 3b da 57 e3 8e dd 5e 82 8a 5e 6f 8f 85 1b d7 6f c0 ed db b7 60 6d 6d 35 de 58 86 50 99 79 cc 66 22 99 90 fc 90 f4 49 e4 50 6d 2f 4a 8f a2 73 0a 5e 09 87 74 cb 4a 17 63 e1 bc 04 8d f9 59 ca 91 36 e8 42 83 60 0c 91 7e 48 03 49 be 0d 29 38 2f f9 da 58 4c 35 4d 5f d0 08 c7 df 99 ff 6a 20 48 18 90 37 f8 8a 45 86 e0 3c d8 28 e3 af 36 ee 86 e3 ae 94 f9 0d 7a 8b 15 aa 80 95 6a f3 42 58 6d 65 ca 81 9b 60 07 a0 2d 80 0c 88 66 85 13 0a 6b 90 4c 9b b6 71 00 f9 0e f7 58 a3 b0 23 79 51 54 d9 98 52 37 94 6c 44 8e 02 16 15 9f 49 d1 6e 9d d5 2c 8f b4 a7 18 c8 ae a0 50 2e 47 4a 27 b1 Data Ascii: HGN!~Kdha<1kdA(9;?k!3)u~8;W^^oo`mm5XPyf"IPm/Js^tJcY6B`~HI)8/XL5M_j H7E<(6zjBXme`-fkLqX#yQTR7lDIn,P.GJ'
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 26 9b 67 fc fc f7 24 5a 9c 6e a5 be 50 4d 6a f6 a1 da 1a e8 f2 e1 5f fa 9d fe 0e 53 51 43 5a 22 cd 25 ed ac 34 6a 3e fc c5 5a 3a 3d 3e 8b 4a b1 61 09 16 ab 32 d0 e0 4b 91 db dc f4 a2 90 17 e8 8c 7a a0 5e 18 de 92 7c 2d d2 f2 c1 c5 58 2d 1a 45 1e ab aa 99 86 ff 68 72 43 fd 9f e8 40 e9 9b a0 10 65 34 ae 6d 37 29 4f cd fa 4d cb ca 52 eb 40 1d 58 34 71 4e 55 47 64 58 e2 a1 e9 d4 b0 71 a8 95 96 8f 01 73 c9 a3 a1 0e 5e 35 b9 08 9f 86 e4 de 76 d3 75 95 20 8a 86 dc a8 51 81 ca fa 43 46 0a eb 86 96 4e 38 22 37 0d 9a aa 62 66 88 44 6a e5 e4 36 46 70 2d dd 4e 03 b7 e9 57 51 05 07 47 74 bd e9 57 c7 57 34 90 55 54 ce 10 e6 a9 c9 a0 0a 0c 0e 34 e3 95 1b 90 a6 55 7f 4a 54 cc 31 bd ad 22 38 64 8c 97 50 a8 04 17 ab ea ed f8 de 2a 0b d5 af d4 3b aa 6a 8c a2 20 69 59 bb a7 Data Ascii: &g$ZnPMj_SQCZ"%4j>Z:=>Ja2Kz^\|-X-EhrC@e4m7)OMR@X4qNUGdXqs^5vu QCFN8"7bfDj6Fp-NWQGtWW4UT4UJT1"8dP*;j iY
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 4c 9a e2 4f fa aa 34 be 49 92 31 64 a3 97 83 ec 3e 12 b1 5a 13 77 4e eb 29 25 57 c7 53 05 13 cc be 27 13 14 89 f6 55 b0 51 d8 3f 60 4c fb a0 d6 e5 da 5e 10 55 a4 36 d7 ba 39 3f 68 d7 63 28 c8 36 74 8d 75 c5 a2 d8 94 33 4a 28 98 8d ad 2a 68 66 ca 1a d1 86 f4 68 d1 50 96 57 fe e9 50 93 6b 92 f4 32 f7 68 68 59 ed 16 c4 9a 2f 3b f9 33 7d b1 a6 61 03 56 27 62 55 be 80 81 6c 58 52 1f 47 0b a1 45 f8 63 92 45 10 bc 3c 95 7b 78 8d bc bd 95 8d 0e 5c 8c ff 2d 3a e8 16 13 ae 77 fc 36 a5 8f b1 bc c8 ae e0 d7 e9 a9 53 49 b8 04 a1 20 85 e8 b6 b4 10 1e de e8 92 fd a3 84 5e dd 1b 63 c3 b0 ce d7 06 b4 f2 d2 60 11 e8 7d f7 24 43 94 ed a9 d3 ea 47 41 6e 1c 69 03 a6 3c d4 ad 39 e7 b5 f2 e4 2a 93 85 5a 72 6b ba 0a a9 a0 bf e5 22 0b d4 75 ca 04 aa 75 52 8c 4e 5c 56 f1 77 be 05 Data Ascii: LO4I1d>ZwN)%WS'UQ?`L^U69?hc(6tu3J(hfhPWPk2hhY/;3}aV'bUlXRGEcE<{x\-:w6SI ^c`}$CGAni<9Zrk"uuRN\Vw
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 3c 5d e0 95 19 4e d2 5d 9a ab 8d 92 79 5a a3 c6 03 ce c9 3c 12 62 a3 67 b2 78 41 e3 da 03 8e a6 e1 84 9c 57 0f c1 e0 0a 7b b4 3b fd 93 b6 73 e2 f5 e1 42 c9 79 bc 0c d0 68 74 a6 80 59 09 17 c7 0c e0 b2 ab 68 bd 3a c3 9f 76 6f f1 bb 0b 79 f3 89 74 f8 b2 3e 8a 2d 24 69 d4 14 77 40 4d f6 47 43 1d f2 aa 44 02 52 0c e9 2c 1b 84 11 52 44 7a a5 60 91 4a dd 71 c8 27 ac 08 f5 b4 57 d8 d6 46 b9 0d d4 88 44 cc 5b 80 28 e2 94 57 a0 b0 48 9f 74 9f 7f a8 af 4c ae e5 03 f9 a2 cf 8a ce 9e 40 24 83 98 38 57 48 e7 ba ed 79 4e bd 7a 55 25 96 c2 83 f5 34 5b d5 22 2d d3 56 d6 a6 19 c2 09 9b 1c 30 d2 0b 48 e1 53 a8 59 6d e7 b1 40 88 87 cc 4a d7 3c 49 34 cb 16 9b 98 4b e1 4d 91 8f c6 20 62 dd b4 e9 12 47 6d 29 b2 e8 56 32 36 25 ad b7 da a7 c8 89 65 39 11 7a cc 80 dd f7 b9 32 b4 Data Ascii: <]N]yZ<bgxAW{;sByhtYh:voyt>-$iw@MGCDR,RDz`Jq'WFD[(WHtL@$8WHyNzU%4["-V0HSYm@J<I4KM bGm)V26%e9z2
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: b9 ee 1c 98 ea de 81 3a 38 82 b4 15 c3 cf 28 c7 6b 93 c3 f5 c8 20 7b a2 83 c9 78 f4 78 28 9d 9a b6 7c f4 2f b9 9f 51 01 c1 f8 cd 14 23 e5 47 0b 5f ba cd d7 88 83 ca 9e b8 37 9c 7f e0 15 cc f5 22 7e 29 1d b4 62 ce cf 54 66 87 33 25 84 31 d1 90 1e e4 18 11 11 00 f9 fc 95 bc db 5f b9 bd 7e 02 22 96 5f 53 a6 91 00 ad da 9c 27 28 2a c6 a7 6a 20 a6 ef 05 04 7e 5f 67 9c 82 b3 22 de 0b 1a fe 7d 9d a5 2c 55 48 a0 32 d6 85 98 6a 65 1b 95 fc 49 66 a0 c8 bf 4e 91 10 9d 09 58 4a cc 45 a5 08 fd 6f 2c 21 68 bd 90 98 5b 18 05 8d 70 aa c2 20 2f 19 e5 7b 02 67 14 56 2f 4f 6a 43 d5 77 0d 81 75 f9 16 0d 14 0e 5f a4 5f bc f0 84 67 d1 17 8b 31 c4 b0 f3 0b ba 2b 47 ec 86 46 0a 77 fa 48 19 6a 99 77 4b 66 7f 5f 24 af a8 f1 96 dd d4 fe 33 04 7f fa 47 0c bf 55 d4 88 5c 76 81 eb 3c Data Ascii: :8(k {xx(\|/Q#G_7"~)bTf3%1_~"_S'(*j ~_g"},UH2jeIfNXJEo,!h[p /{gV/OjCwu__g1+GFwHjwKf_$3GU\v<
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 27 d8 f6 4b 0d c6 f6 a1 be 0d ab 90 ae e0 a0 5f bd 61 aa 25 21 fd c3 d0 25 b6 96 ac 3e dd f9 1c 14 1f 6c 2b b6 bf 52 b8 93 1e 4b c8 8b 87 ff 43 b1 c2 a8 05 87 e3 90 35 16 39 5a c1 62 ad f1 dd 10 ff 42 87 99 4d cd ab ca cb d1 67 83 60 b4 08 93 d1 7e dd 82 37 6c cb 46 70 e3 87 9c 56 31 10 59 52 a1 a6 94 fe a2 d0 81 87 7d da db 24 e1 26 6f 03 36 02 d4 24 56 1d ef d4 da 71 6b 56 98 49 e8 f0 39 12 7e 72 86 47 d6 d1 a1 d5 c7 2f 5f 8f 7f db 4d 9b 8e 9b bc e8 cd b7 69 5a c5 2f 31 6e eb 9a f8 c8 31 ac 8b 65 be da 69 73 59 5f fc dc 08 75 f9 ac 5a 18 41 c7 bc 0f 3d a1 27 b8 0a ca 07 96 fa 64 35 65 0f 46 3e fe 35 48 78 d3 80 23 ec 92 80 7b f0 70 0b bb b7 a4 14 dc c5 30 2a e6 30 4b a9 6f 10 18 3b 54 76 27 c4 70 a9 08 83 e5 96 65 fc a3 f2 e3 18 f7 08 b0 f0 fd f4 e9 13 Data Ascii: 'K_a%!%>l+RKC59ZbBMg`~7lFpV1YR}$&o6$VqkVI9~rG/_MiZ/1n1eisY_uZA='d5eF>5Hx#{p0*0Ko;Tv'pe
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 34 a2 ec a2 e4 40 99 d7 ef de 4a 59 3e 46 91 cf 80 ff 78 73 05 3b 07 fb 22 20 84 7b b2 b0 b0 75 90 14 0a 9c 3f d0 f7 3d 38 3a 3d 83 5b 52 3e c2 2c 5d 00 65 4c 95 c5 98 5d 98 21 56 44 3b c9 46 1c bd da 61 31 f1 6c f2 ae 1d dc 96 a0 b0 05 69 1f e4 f1 ef 10 4b fe d9 6e 88 8b 3c a5 e4 2f a1 00 50 e1 03 15 43 d4 3e e8 13 04 56 b1 96 88 f5 e4 6c 71 d3 f7 99 51 98 d6 b8 1d 50 15 21 f2 b7 c3 fd 1d 1a 70 52 36 2f c6 b2 b0 88 42 bb 20 05 94 bc 52 c7 e4 dd 3a 39 95 cd ac a5 cb d0 b4 ba 72 f4 61 6c 43 9a a3 f1 53 5d a4 c1 23 9f bd c3 e0 e3 14 59 98 64 65 77 34 27 c9 14 8c db 1e c6 c9 be e9 27 5c 93 6f 45 d1 95 e5 26 4b 16 1e b3 06 a1 cd eb 43 f7 dd 2e ba 6b b1 7f 5c 5a d3 a7 bd fc 71 5b d9 08 ef df bd 03 3d c2 55 2e 86 83 78 ec 28 87 bf f1 d1 a4 6c b8 88 97 a8 dd cb Data Ascii: 4@JY>Fxs;" {u?=8:=[R>,]eL]!VD;Fa1liKn</PC>VlqQP!pR6/B R:9ralCS]#Ydew4''\oE&KC.k\Zq[=U.x(l
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: ed dc f2 18 9b 9f 43 95 92 e7 64 08 55 29 d3 7f 99 68 13 a1 0e b9 de f2 2c 96 d5 d3 37 ec 88 8c e9 94 02 cf ee f3 38 64 da aa a3 0d 2d 36 96 be 62 3b 4b 8c 6e e8 bc 07 68 ce 6a 56 aa 09 e4 59 99 3d 87 3d f2 f6 80 9c ea 10 63 2f f7 0e 48 30 e2 58 da d9 6e bc 92 43 67 7f 07 a3 ae db d7 a0 91 fb 36 5b 1f 0d 7a 80 79 31 0d a9 7f 94 19 e4 f1 55 c1 03 a0 9d 23 29 71 6c 27 2b 13 ec a1 63 cf 15 9f 94 c6 56 6d 2e cc 16 71 b6 92 f1 77 f6 56 30 3c 5e 2c f9 d0 00 b6 a8 f1 49 66 07 a4 2c b0 15 9b 0f 14 b8 20 21 36 2e 9a 71 83 e3 b3 67 f7 71 af 13 84 e4 19 3b 96 30 3e 16 8a 4f a8 2e 86 c5 a1 2e bc 97 88 85 5e c6 83 3d 17 bc ef 68 97 98 2f e3 61 f7 7a 4c a6 15 af d6 67 da a8 f0 56 f0 37 ab 09 27 df 07 33 d6 21 09 0f 6c 29 63 af c2 af 7f fd e7 b2 b9 94 85 9b 37 34 3e 3a Data Ascii: CdU)h,78d-6b;KnhjVY==c/H0XnCg6[zy1U#)ql'+cVm.qwV0<^,If, !6.qgq;0>O..^=h/azLgV7'3!l)c74>:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49759	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	649	OUT	GET /consent/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:34 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8cbb8e0e8d5a41ac-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 44603 Cache-Control: public, max-age=86400 Expires: Wed, 02 Oct 2024 09:51:34 GMT Last-Modified: Tue, 05 Sep 2023 21:16:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: K/T1ymWYJPDwk2wohaRhSQ== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e1ce30bd-801e-0088-7790-13dc8a000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-01 09:51:34 UTC	387	IN	Data Raw: 31 37 65 32 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 38 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 38 38 66 39 Data Ascii: 17e2{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202308.1.0","OptanonDataJSON":"88f9
2024-10-01 09:51:34 UTC	1369	IN	Data Raw: 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 66 36 30 63 30 36 35 2d 35 65 61 34 2d 34 39 61 37 2d 38 65 34 30 2d 30 35 30 31 34 32 36 64 30 33 35 66 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 4f 70 74 20 49 6e 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 74 77 22 2c 22 6d 61 22 2c 22 69 6e 22 2c 22 6a 70 22 2c 22 6b 72 22 2c 22 7a 61 22 2c 22 63 6c 22 2c 22 6d 79 22 2c 22 63 6f 22 2c 22 63 61 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 Data Ascii: eckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"0f60c065-5ea4-49a7-8e40-0501426d035f","Name":"Global Opt In","Countries":["tw","ma","in","jp","kr","za","cl","my","co","ca"],"States":{},"LanguageSwitcherPlaceholde
2024-10-01 09:51:34 UTC	1369	IN	Data Raw: 69 6c 22 2c 22 69 6d 22 2c 22 69 6f 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d 22 2c 22 6d 6e 22 2c 22 6d 6f 22 2c 22 6d 70 22 2c 22 6d 72 22 2c 22 6d 73 22 2c 22 6d 75 22 2c 22 6d 76 22 2c 22 6d 77 22 2c 22 6d 78 22 2c 22 6d 7a 22 2c 22 6e 61 22 2c 22 6e 63 22 2c 22 6e 65 22 2c 22 6e 66 22 2c 22 6e 67 22 2c 22 6e 69 22 2c 22 6e 70 22 2c 22 Data Ascii: il","im","io","iq","ir","zm","je","zw","jm","jo","ke","kg","kh","ki","km","kn","kp","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","md","me","mg","mh","mk","ml","mm","mn","mo","mp","mr","ms","mu","mv","mw","mx","mz","na","nc","ne","nf","ng","ni","np","
2024-10-01 09:51:34 UTC	1369	IN	Data Raw: 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 32 63 37 34 31 33 37 62 2d 62 38 66 33 2d 34 33 36 66 2d 38 32 34 65 2d 61 66 35 35 39 62 31 36 37 63 36 30 22 2c 22 4e 61 6d 65 22 3a 22 55 53 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 63 74 22 2c 22 63 61 22 2c 22 74 6e 22 2c 22 63 6f 22 2c 22 76 61 22 2c 22 69 61 22 2c 22 69 6e 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 Data Ascii: se,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template","Conditions":[],"GCEnable":false,"IsGPPEnabled":false},{"Id":"2c74137b-b8f3-436f-824e-af559b167c60","Name":"US","Countries":[],"States":{"us":["ct","ca","tn","co","va","ia","in"]},"Languag
2024-10-01 09:51:34 UTC	1369	IN	Data Raw: 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 33 2d 30 39 2d 30 35 54 32 31 3a 31 36 3a 32 30 2e 38 37 36 33 32 32 37 34 32 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 33 2d 30 39 2d 30 35 54 32 31 3a 31 36 3a 32 30 2e 38 37 36 33 32 37 32 34 32 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 Data Ascii: VendorListUrl":"https://cdn.cookielaw.org/vendorlist/iabData.json"},"IabV2Data":{"cookieVersion":"1","createdTime":"2023-09-05T21:16:20.876322742","updatedTime":"2023-09-05T21:16:20.876327242","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLang
2024-10-01 09:51:34 UTC	259	IN	Data Raw: 2d 34 66 34 62 2d 62 35 32 37 2d 37 66 39 34 64 30 64 65 36 62 62 63 22 2c 22 45 6e 76 49 64 22 3a 22 61 70 70 2d 70 72 6f 64 22 2c 22 52 65 6d 6f 74 65 41 63 74 69 6f 6e 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 47 65 6f 52 75 6c 65 47 72 6f 75 70 4e 61 6d 65 22 3a 22 55 6e 69 76 65 72 73 61 6c 20 22 2c 22 47 41 54 72 61 63 6b 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 47 41 54 72 61 63 6b 41 73 73 69 67 6e 65 64 43 61 74 65 67 6f 72 79 22 3a 22 41 53 22 2c 22 57 65 62 46 6f 72 6d 49 6e 74 65 67 72 61 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 57 65 62 46 6f 72 6d 53 72 63 55 72 6c 22 3a 22 22 2c 22 57 65 62 46 6f 72 6d 57 6f 72 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 Data Ascii: -4f4b-b527-7f94d0de6bbc","EnvId":"app-prod","RemoteActionsEnabled":false,"GeoRuleGroupName":"Universal ","GATrackToggle":true,"GATrackAssignedCategory":"AS","WebFormIntegrationEnabled":false,"WebFormSrcUrl":"","WebFormWorkerUrl":"","GppData":{"cmpId":"28"
2024-10-01 09:51:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49764	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	1010	OUT	GET /libs/granite/csrf/token.json HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" ADRUM: isAjax:true sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461&lock=2d829185-ce2a-468b-ac27-b106adf0c3b5
2024-10-01 09:51:34 UTC	1643	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=iso-8859-1 Content-Length: 2 Connection: close Date: Tue, 01 Oct 2024 09:51:34 GMT Set-Cookie: AWSALB=f7C/a98VBCBNX+/LpMjxMnKtHcSQVDLXEyyKFadEND2E6yZ2kuwAYmDgDUIoJL3uUt6luE7V3yG5m4/V0eGBCWvHf3owcFoYRvlz0wEVqx6QKdhkcU1VNV6eqYdv; Expires=Tue, 08 Oct 2024 09:51:34 GMT; Path=/ Set-Cookie: AWSALBCORS=f7C/a98VBCBNX+/LpMjxMnKtHcSQVDLXEyyKFadEND2E6yZ2kuwAYmDgDUIoJL3uUt6luE7V3yG5m4/V0eGBCWvHf3owcFoYRvlz0wEVqx6QKdhkcU1VNV6eqYdv; Expires=Tue, 08 Oct 2024 09:51:34 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com X-Content-Type-Options: nosniff Cache-Control: no-cache Expires: -1 X-Dxml-Correlation-ID: ae4fa619-b741-4bc3-ad75-8633b466348c X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com X-Cache: Miss from cloudfront Via: 1.1 5335ce80c0b9264bc591cce2c73bef5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: HPHrhnENsvbniLfTA6joJYnrJo7f0RFAl96cPvbCzysHlY451TAMww==
2024-10-01 09:51:34 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49760	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	1120	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/tr_spiral_pattern_desktop.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:34 UTC	1283	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 44882 Connection: close Date: Tue, 01 Oct 2024 09:07:30 GMT Set-Cookie: AWSALB=TEYXG1UIqBc5ULZFjwo6JR6HMzIozA24RjY2B0xRLVcMLkvOJK4rjNz0XdOxyeSHbEMO2KxQcOkdvPMJjnb9yy7TOGHkENSBYJVlcC6rVRqgERQHPZgFuCNnjTm/; Expires=Tue, 08 Oct 2024 09:07:30 GMT; Path=/ Set-Cookie: AWSALBCORS=TEYXG1UIqBc5ULZFjwo6JR6HMzIozA24RjY2B0xRLVcMLkvOJK4rjNz0XdOxyeSHbEMO2KxQcOkdvPMJjnb9yy7TOGHkENSBYJVlcC6rVRqgERQHPZgFuCNnjTm/; Expires=Tue, 08 Oct 2024 09:07:30 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Thu, 01 Jul 2021 11:22:35 GMT ETag: "af52-5c60e0e4814c0" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:30 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com X-Cache: Hit from cloudfront Via: 1.1 08144b62d8ba59c510ae7682981f36c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: feI8bpj6hScCuL_gaDednG0S86fl3df3_3per2IElFPoGWZt4tevmQ== Age: 2644
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7a 00 00 02 a6 08 06 00 00 00 da 56 33 58 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 ae e7 49 44 41 54 78 01 ec 9d 8b 55 db d8 d7 c5 4f c0 13 18 48 d6 3f a9 60 44 05 93 54 30 a6 82 49 2a 88 a9 20 a1 82 98 0a 42 2a 80 54 40 a6 02 9c 0a c8 54 60 4d 05 64 d6 7c 09 81 04 e6 3b 1b 8e 32 42 e8 71 f5 7e ed df 5a c2 c6 96 65 d9 96 ee 3d 3a 8f 7d ee 09 21 84 8c 8c 7f fe f9 67 fa d3 4f 3f fd fe ef bf ff 3e ba 77 ef de 27 bd fd f3 e7 9f 7f 3e 94 06 c0 7b 9e 9d 9d cd f4 7d 7f b5 ff ff d4 fb ef f5 fd 7d 21 84 10 42 08 21 c5 30 23 eb 40 97 7f 63 96 a5 2e 9e d4 c8 ff fd df ff 3d f9 f2 e5 cb 69 f4 bd bf Data Ascii: PNGIHDRzV3XpHYssRGBgAMAaIDATxUOH?`DT0I* B*T@T`Md\|;2Bq~Ze=:}!gO?>w'>{}}!B!0#@c.=i
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: c3 7a 78 55 18 5b 31 52 5c 4c 7d 20 c5 48 d0 75 bb 3e 58 a9 56 df 0f a2 d5 5d cc 8f 20 69 04 ba 5d 42 c8 00 b0 bc 30 4f 5a 22 e8 d3 5b b5 84 4a 9c 68 7f d3 15 c4 f4 0e f6 93 5b 39 7a 70 25 6b 2c 7d 9e b0 ae 87 fe 95 65 27 04 6b 78 fe 04 07 28 0f 9a 7a d0 2b ca 8f e1 1e 8e 6c cd 46 d2 40 25 b9 6b db 28 57 70 6e 5b 64 c0 13 42 1a 44 c7 3b 08 ce e7 f2 76 99 71 38 93 0a d0 63 ff 4f 69 88 b8 fe b8 75 61 d1 bd 53 7a 12 7b 4e dc 95 48 55 15 42 a6 3f 77 1c b7 3d 4e 06 d5 73 f6 9f a0 27 73 a1 48 e3 04 d5 85 36 31 78 42 48 43 60 bc cb 33 e6 9d dd 16 ae 9f 49 49 6c 7b 3f aa 6b d5 88 3c cc fb fa b8 fd 8f b4 47 0b 16 4f 1a 20 5a 81 cc e8 5e 8f 71 30 f2 ae 97 22 bd 2f cf 92 65 44 ae 97 8b 8b 8b 17 52 02 4b 80 f5 38 a9 10 d2 2e 81 a0 6d 68 52 98 0b 21 1d c5 8e d7 65 55 Data Ascii: zxU[1R\L} Hu>XV] i]B0OZ"[Jh[9zp%k,}e'kx(z+lF@%k(Wpn[dBD;vq8cOiuaSz{NHUB?w=Ns'sH61xBHC`3IIl{?k<GO Z^q0"/eDRK8.mhR!eU
2024-10-01 09:51:34 UTC	12114	IN	Data Raw: ac ec 7c db 32 a8 a1 8b 83 b1 a7 03 50 e5 ee 79 1d 98 5e 66 ad d3 54 f8 1b 5e 83 b8 c1 10 45 35 52 11 f8 1c 5d ed 3a 12 87 e5 e3 78 42 48 0b 84 14 01 bc 96 74 f1 10 4d f0 c3 0f 94 19 07 75 bc f3 a5 46 ee df bf 8f b1 6a 11 f7 5c 95 e3 18 69 0f 1a 7a 2d 60 6d 7b 12 4f fc 3a 8c a3 3a 40 ee 9b 7d 0e 3f fa 1c 8c 1f fd 1c cf d7 d6 d6 2a f5 e6 19 5e d6 0a 41 85 9a 34 80 4e 2c db 11 63 cf 97 ec d6 74 ce 20 f7 70 32 99 1c eb 77 7d d2 07 e9 07 78 35 da 08 9b 11 02 82 96 62 38 27 cb b4 11 2b 8a b5 05 db 42 ca 8a 7a e3 76 d0 92 ab cc 38 a8 e7 ff c7 2c cf 5a 05 32 52 77 8c 53 fb bf f6 16 9a a4 7e 98 a3 d7 22 56 38 f0 42 fe cb 75 5b e8 b2 67 de b2 de 00 a3 4a 43 a5 53 bd fb c4 fe bf 0e d7 d6 25 11 e3 92 e3 08 30 c8 aa 67 f4 50 1a c0 12 9a 9f e0 bb a8 f2 b3 9b 67 ec 87 Data Ascii: \|2Py^fT^E5R]:xBHtMuFj\iz-`m{O::@}?*^A4N,ct p2w}x5b8'+Bzv8,Z2RwS~"V8Bu[gJCS%0gPg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49761	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	564	OUT	GET /emcm-ui/bundle/v24.69.0/main.js HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	772	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 378599 Connection: close Date: Mon, 23 Sep 2024 05:05:40 GMT Last-Modified: Wed, 28 Aug 2024 15:48:04 GMT ETag: "e29709257e04218cfe7211940c5b835d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3de687dde9ccf524586562826ee53358.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: LoJi0Us_SjuLV1zQCic1bWFCyqM_OZc0eN0zPbunLZ17V27tBJ9mTw== Age: 708355 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="LoJi0Us_SjuLV1zQCic1bWFCyqM_OZc0eN0zPbunLZ17V27tBJ9mTw==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 44 43 4c 3d 74 28 29 3a 65 2e 44 43 4c 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 69 3d 74 5b 30 5d 2c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.DCL=t():e.DCL=t()}(this,function(){return function(e){function t(t){for(var n,o,i=t[0],
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 67 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 Data Ascii: g);function w(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),n.push.apply(n,r)}return n}function x(e){for(var t=1;t<argu
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 28 37 33 29 2c 67 3d 6e 28 35 38 29 2c 62 3d 6e 28 33 31 29 2c 77 3d 6e 28 38 35 29 2c 78 3d 6e 28 31 39 29 2c 6b 3d 6e 28 32 34 29 2c 45 3d 6e 28 31 34 30 29 2c 4f 3d 6e 28 37 34 29 2c 53 3d 6e 28 33 34 29 2c 54 3d 6e 28 37 35 29 2e 66 2c 5f 3d 6e 28 31 34 32 29 2c 6a 3d 6e 28 37 31 29 2c 43 3d 6e 28 32 30 29 2c 50 3d 6e 28 36 31 29 2c 52 3d 6e 28 31 30 31 29 2c 4e 3d 6e 28 39 33 29 2c 49 3d 6e 28 31 34 35 29 2c 41 3d 6e 28 38 37 29 2c 4c 3d 6e 28 31 30 36 29 2c 46 3d 6e 28 37 36 29 2c 4d 3d 6e 28 31 34 34 29 2c 44 3d 6e 28 31 37 38 29 2c 55 3d 6e 28 32 33 29 2c 7a 3d 6e 28 33 33 29 2c 42 3d 55 2e 66 2c 57 3d 7a 2e 66 2c 56 3d 6f 2e 52 61 6e 67 65 45 72 72 6f 72 2c 48 3d 6f 2e 54 79 70 65 45 72 72 6f 72 2c 71 3d 6f 2e 55 69 6e 74 38 41 72 72 61 79 2c 47 Data Ascii: (73),g=n(58),b=n(31),w=n(85),x=n(19),k=n(24),E=n(140),O=n(74),S=n(34),T=n(75).f,_=n(142),j=n(71),C=n(20),P=n(61),R=n(101),N=n(93),I=n(145),A=n(87),L=n(106),F=n(76),M=n(144),D=n(178),U=n(23),z=n(33),B=U.f,W=z.f,V=o.RangeError,H=o.TypeError,q=o.Uint8Array,G
2024-10-01 09:51:34 UTC	11610	IN	Data Raw: 76 61 72 20 72 3d 6e 28 38 35 29 2c 6f 3d 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 2e 65 78 65 63 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 65 78 65 63 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 76 61 72 20 69 3d 6e 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 69 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 52 65 67 45 78 70 20 65 78 65 63 20 6d 65 74 68 6f 64 20 72 65 74 75 72 6e 65 64 20 73 6f 6d 65 74 68 69 6e 67 20 6f 74 68 65 72 20 74 68 61 6e 20 61 6e 20 4f 62 6a 65 63 74 20 6f 72 20 6e 75 6c 6c 22 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 22 52 65 67 45 78 70 22 21 3d 3d 72 28 65 29 Data Ascii: var r=n(85),o=RegExp.prototype.exec;e.exports=function(e,t){var n=e.exec;if("function"==typeof n){var i=n.call(e,t);if("object"!=typeof i)throw new TypeError("RegExp exec method returned something other than an Object or null");return i}if("RegExp"!==r(e)
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 20 74 6f 20 22 2b 65 2b 22 20 66 61 69 6c 65 64 22 29 29 2c 72 28 73 29 2c 6f 28 66 29 2c 63 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 63 29 7d 7d 29 7d 7d 29 3f 72 2e 61 70 70 6c 79 28 74 2c 6f 29 3a 72 29 7c 7c 28 65 2e 65 78 70 6f 72 74 73 3d 69 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 61 3d 7b 4c 4f 47 47 45 44 5f 4f 55 54 3a 31 2c 4c 4f 47 47 45 44 5f 49 4e 3a 32 2c 55 4e 4b 4e 4f 57 4e 3a 33 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 35 29 3b 65 2e 65 78 70 6f 72 74 73 2e 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 74 Data Ascii: to "+e+" failed")),r(s),o(f),c&&clearTimeout(c)}})}})?r.apply(t,o):r)\|\|(e.exports=i)},function(e,t,n){"use strict";t.a={LOGGED_OUT:1,LOGGED_IN:2,UNKNOWN:3}},function(e,t,n){"use strict";var r=n(25);e.exports.f=function(e){return new function(e){var t,n;t
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 70 6f 77 2c 69 3d 6f 28 32 2c 2d 35 32 29 2c 61 3d 6f 28 32 2c 2d 32 33 29 2c 75 3d 6f 28 32 2c 31 32 37 29 2a 28 32 2d 61 29 2c 63 3d 6f 28 32 2c 2d 31 32 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 4d 61 74 68 2e 66 72 6f 75 6e 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 6f 3d 4d 61 74 68 2e 61 62 73 28 65 29 2c 6c 3d 72 28 65 29 3b 72 65 74 75 72 6e 20 6f 3c 63 3f 6c 2a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2b 31 2f 69 2d 31 2f 69 7d 28 6f 2f 63 2f 61 29 2a 63 2a 61 3a 28 6e 3d 28 74 3d 28 31 2b 61 2f 69 29 2a 6f 29 2d 28 74 2d 6f 29 29 3e 75 7c 7c 6e 21 3d 6e 3f 6c 2a 28 31 2f 30 29 3a 6c 2a 6e 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 36 29 3b 65 2e 65 78 70 6f 72 74 Data Ascii: pow,i=o(2,-52),a=o(2,-23),u=o(2,127)(2-a),c=o(2,-126);e.exports=Math.fround\|\|function(e){var t,n,o=Math.abs(e),l=r(e);return o<c?lfunction(e){return e+1/i-1/i}(o/c/a)ca:(n=(t=(1+a/i)o)-(t-o))>u\|\|n!=n?l(1/0):l*n}},function(e,t,n){var r=n(16);e.export
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 56 41 4c 55 45 2c 4e 61 4e 2c 4e 45 47 41 54 49 56 45 5f 49 4e 46 49 4e 49 54 59 2c 50 4f 53 49 54 49 56 45 5f 49 4e 46 49 4e 49 54 59 2c 45 50 53 49 4c 4f 4e 2c 69 73 46 69 6e 69 74 65 2c 69 73 49 6e 74 65 67 65 72 2c 69 73 4e 61 4e 2c 69 73 53 61 66 65 49 6e 74 65 67 65 72 2c 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 2c 4d 49 4e 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 2c 70 61 72 73 65 46 6c 6f 61 74 2c 70 61 72 73 65 49 6e 74 2c 69 73 49 6e 74 65 67 65 72 22 2e 73 70 6c 69 74 28 22 2c 22 29 2c 78 3d 30 3b 77 2e 6c 65 6e 67 74 68 3e 78 3b 78 2b 2b 29 6f 28 68 2c 62 3d 77 5b 78 5d 29 26 26 21 6f 28 64 2c 62 29 26 26 66 28 64 2c 62 2c 73 28 68 2c 62 29 29 3b 64 2e 70 72 6f 74 6f 74 79 70 65 3d 76 2c 76 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 64 2c 6e Data Ascii: VALUE,NaN,NEGATIVE_INFINITY,POSITIVE_INFINITY,EPSILON,isFinite,isInteger,isNaN,isSafeInteger,MAX_SAFE_INTEGER,MIN_SAFE_INTEGER,parseFloat,parseInt,isInteger".split(","),x=0;w.length>x;x++)o(h,b=w[x])&&!o(d,b)&&f(d,b,s(h,b));d.prototype=v,v.constructor=d,n
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 76 61 72 20 75 3b 73 77 69 74 63 68 28 6f 2e 63 68 61 72 41 74 28 30 29 29 7b 63 61 73 65 22 24 22 3a 72 65 74 75 72 6e 22 24 22 3b 63 61 73 65 22 26 22 3a 72 65 74 75 72 6e 20 65 3b 63 61 73 65 22 60 22 3a 72 65 74 75 72 6e 20 74 2e 73 6c 69 63 65 28 30 2c 72 29 3b 63 61 73 65 22 27 22 3a 72 65 74 75 72 6e 20 74 2e 73 6c 69 63 65 28 63 29 3b 63 61 73 65 22 3c 22 3a 75 3d 61 5b 6f 2e 73 6c 69 63 65 28 31 2c 2d 31 29 5d 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 76 61 72 20 73 3d 2b 6f 3b 69 66 28 30 3d 3d 3d 73 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 73 3e 6c 29 7b 76 61 72 20 70 3d 66 28 73 2f 31 30 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 70 3f 6e 3a 70 3c 3d 6c 3f 76 6f 69 64 20 30 3d 3d 3d 69 5b 70 2d 31 5d Data Ascii: ,function(n,o){var u;switch(o.charAt(0)){case"$":return"$";case"&":return e;case"`":return t.slice(0,r);case"'":return t.slice(c);case"<":u=a[o.slice(1,-1)];break;default:var s=+o;if(0===s)return n;if(s>l){var p=f(s/10);return 0===p?n:p<=l?void 0===i[p-1]
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 2c 74 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 33 3f 76 6f 69 64 20 30 3a 69 28 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 2c 72 3d 61 28 6f 28 74 29 2c 6e 2c 21 31 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 21 72 2e 64 65 6c 65 74 65 28 65 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 72 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 63 3d 75 2e 67 65 74 28 74 29 3b 72 65 74 75 72 6e 20 63 2e 64 65 6c 65 74 65 28 6e 29 2c 21 21 63 2e 73 69 7a 65 7c 7c 75 2e 64 65 6c 65 74 65 28 74 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 36 35 29 2c 6f 3d 6e 28 31 36 29 2c 69 3d 6e 28 33 34 29 2c 61 3d 72 2e 68 61 73 2c 75 3d 72 2e 67 65 74 2c 63 3d 72 2e 6b 65 79 2c 6c 3d 66 75 Data Ascii: ,t){var n=arguments.length<3?void 0:i(arguments[2]),r=a(o(t),n,!1);if(void 0===r\|\|!r.delete(e))return!1;if(r.size)return!0;var c=u.get(t);return c.delete(n),!!c.size\|\|u.delete(t)}})},function(e,t,n){var r=n(65),o=n(16),i=n(34),a=r.has,u=r.get,c=r.key,l=fu
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 2c 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 74 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 66 6f 72 28 3b 74 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 72 3d 74 2e 70 6f 70 28 29 3b 69 66 28 72 20 69 6e 20 65 29 72 65 74 75 72 6e 20 6e 2e 76 61 6c 75 65 3d 72 2c 6e 2e 64 6f 6e 65 3d 21 31 2c 6e 7d 72 65 74 75 72 6e 20 6e 2e 64 6f 6e 65 3d 21 30 2c 6e 7d 7d 2c 65 2e 76 61 6c 75 65 73 3d 6a 2c 5f 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 5f 2c 72 Data Ascii: g=function(){return"[object Generator]"},e.keys=function(e){var t=[];for(var n in e)t.push(n);return t.reverse(),function n(){for(;t.length;){var r=t.pop();if(r in e)return n.value=r,n.done=!1,n}return n.done=!0,n}},e.values=j,_.prototype={constructor:_,r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49762	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	1120	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/tr-rebranded-logo.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:34 UTC	1310	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 18118 Connection: close Date: Tue, 01 Oct 2024 09:06:52 GMT Set-Cookie: AWSALB=5xkL/cSKKw+0O5NTzY8uujW2Behfw1n7D4beWrcCilTY77IMDW3f13GsXygIw0o+2YGh/WYhjTQduDsFVVe9lcPNPpGe+jhusiCtIuAO8amqn5pOk7XK/0xwSC3K; Expires=Tue, 08 Oct 2024 09:06:52 GMT; Path=/ Set-Cookie: AWSALBCORS=5xkL/cSKKw+0O5NTzY8uujW2Behfw1n7D4beWrcCilTY77IMDW3f13GsXygIw0o+2YGh/WYhjTQduDsFVVe9lcPNPpGe+jhusiCtIuAO8amqn5pOk7XK/0xwSC3K; Expires=Tue, 08 Oct 2024 09:06:52 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 11 Mar 2024 05:14:41 GMT ETag: "46c6-6135b9e6a9240" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:21:52 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b6a955345e4fcc7881bd0a9815e8286e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: GIJQOKN0nH-2s373Yoy8VgJuOtNICfJHPlqYEX0i6grPfOkkSzEgjw== Age: 2682
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-10-01 09:51:34 UTC	1734	IN	Data Raw: 2e 35 2d 30 2e 35 2c 30 2e 37 43 32 33 2c 31 38 2e 34 2c 32 32 2e 37 2c 31 38 2e 34 2c 32 32 2e 34 2c 31 38 2e 33 0a 09 4c 32 32 2e 34 2c 31 38 2e 33 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 37 2e 32 2c 31 37 2e 35 63 2d 30 2e 31 2d 30 2e 35 2c 30 2e 31 2d 31 2c 30 2e 36 2d 31 2e 31 6c 30 2e 31 2c 30 63 30 2e 35 2d 30 2e 31 2c 31 2c 30 2e 32 2c 31 2e 31 2c 30 2e 36 63 30 2e 31 2c 30 2e 32 2c 30 2c 30 2e 35 2d 30 2e 31 2c 30 2e 37 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 33 2c 30 2e 34 2d 30 2e 36 2c 30 2e 34 0a 09 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 35 2c 30 2d 30 2e 37 2d 30 2e 31 43 37 2e 34 2c 31 37 2e 39 2c 37 2e 32 2c 31 37 2e 37 2c 37 2e 32 2c 31 37 2e 35 4c 37 2e 32 2c 31 37 2e 35 7a 22 2f 3e 0a 20 20 Data Ascii: .5-0.5,0.7C23,18.4,22.7,18.4,22.4,18.3L22.4,18.3z"/> <path class="st2" d="M7.2,17.5c-0.1-0.5,0.1-1,0.6-1.1l0.1,0c0.5-0.1,1,0.2,1.1,0.6c0.1,0.2,0,0.5-0.1,0.7c-0.1,0.2-0.3,0.4-0.6,0.4c-0.2,0.1-0.5,0-0.7-0.1C7.4,17.9,7.2,17.7,7.2,17.5L7.2,17.5z"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49763	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	1119	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/search-icon-v1.5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:34 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 640 Connection: close Date: Tue, 01 Oct 2024 09:06:51 GMT Set-Cookie: AWSALB=9FD0YHtplVbW96sX5apejRVihaWadUT7bkoRvxta+MjrgpCNn9+6uBwnKruScVVhaC5ESax7S+76rOUX4rYAOLAkYEquqg/wfWJM1Hf6itFtgHIphVvk+oTYXc4z; Expires=Tue, 08 Oct 2024 09:06:51 GMT; Path=/ Set-Cookie: AWSALBCORS=9FD0YHtplVbW96sX5apejRVihaWadUT7bkoRvxta+MjrgpCNn9+6uBwnKruScVVhaC5ESax7S+76rOUX4rYAOLAkYEquqg/wfWJM1Hf6itFtgHIphVvk+oTYXc4z; Expires=Tue, 08 Oct 2024 09:06:51 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "280-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:21:51 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aa6c36522a23788dfef1fae9af9fd5e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: RKJIqKafpIqJXUtzAVV_-2Q5kYAYZDv_UKHAxEz5h5acAz_m33grfw== Age: 2683
2024-10-01 09:51:34 UTC	640	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 20 31 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 33 20 36 2e 35 43 31 33 20 37 2e 39 33 37 35 20 31 32 2e 35 33 31 32 20 39 2e 32 38 31 32 35 20 31 31 2e 37 35 20 31 30 2e 33 34 33 38 4c 31 35 2e 36 38 37 35 20 31 34 2e 33 31 32 35 43 31 36 2e 30 39 33 38 20 31 34 2e 36 38 37 35 20 31 36 2e 30 39 33 38 20 31 35 2e 33 34 33 38 20 31 35 2e 36 38 37 35 20 31 35 2e 37 31 38 38 43 31 35 2e 33 31 32 35 20 31 36 2e 31 32 35 20 31 34 2e 36 35 36 32 20 31 36 2e 31 32 35 20 31 34 2e 32 38 31 32 20 Data Ascii: <svg width="17" height="17" viewBox="0 0 17 17" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M13 6.5C13 7.9375 12.5312 9.28125 11.75 10.3438L15.6875 14.3125C16.0938 14.6875 16.0938 15.3438 15.6875 15.7188C15.3125 16.125 14.6562 16.125 14.2812

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49773	142.250.185.132	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	670	OUT	GET /recaptcha/enterprise.js?render=6Lcg8t8aAAAAAEg-ugVYe6QCmneyyVZm6ExG-4vv HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 01 Oct 2024 09:51:34 GMT Date: Tue, 01 Oct 2024 09:51:34 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 09:51:34 UTC	641	IN	Data Raw: 36 35 31 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 651/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-10-01 09:51:34 UTC	983	IN	Data Raw: 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 2f 6b 61 72 67 54 46 79 6b 38 4d 52 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 Data Ascii: rset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2Fi
2024-10-01 09:51:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49770	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	1120	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/support-icon-v1.5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:34 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 935 Connection: close Date: Tue, 01 Oct 2024 09:07:00 GMT Set-Cookie: AWSALB=OjLH40WPoVraaBYEPcluPn8Pafc2jnGG0JO9tbMG90if7m+v4XwgsC4EQnE3f5JyFZaouhgCVWs6dBQQJtqdW1BQcPG9Yjylfph9sauz6wkQI+2IKsJmNEQ6PrBo; Expires=Tue, 08 Oct 2024 09:07:00 GMT; Path=/ Set-Cookie: AWSALBCORS=OjLH40WPoVraaBYEPcluPn8Pafc2jnGG0JO9tbMG90if7m+v4XwgsC4EQnE3f5JyFZaouhgCVWs6dBQQJtqdW1BQcPG9Yjylfph9sauz6wkQI+2IKsJmNEQ6PrBo; Expires=Tue, 08 Oct 2024 09:07:00 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "3a7-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:00 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ae80ccab7109b5d2f1c1ee784af203a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: RjFYIvWVsRRbEgqiJoVbyZBC_O7krABUjPKs0LSlXkLfdb8lefLATA== Age: 2674
2024-10-01 09:51:34 UTC	935	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 39 20 31 36 43 36 2e 31 32 35 20 31 36 20 33 2e 35 20 31 34 2e 35 20 32 2e 30 36 32 35 20 31 32 43 30 2e 36 32 35 20 39 2e 35 33 31 32 35 20 30 2e 36 32 35 20 36 2e 35 20 32 2e 30 36 32 35 20 34 43 33 2e 35 20 31 2e 35 33 31 32 35 20 36 2e 31 32 35 20 30 20 39 20 30 43 31 31 2e 38 34 33 38 20 30 20 31 34 2e 34 36 38 38 20 31 2e 35 33 31 32 35 20 31 35 2e 39 30 36 32 20 34 43 31 37 2e 33 34 33 38 20 36 2e 35 20 31 37 2e 33 34 33 38 20 39 2e 35 Data Ascii: <svg width="18" height="16" viewBox="0 0 18 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M9 16C6.125 16 3.5 14.5 2.0625 12C0.625 9.53125 0.625 6.5 2.0625 4C3.5 1.53125 6.125 0 9 0C11.8438 0 14.4688 1.53125 15.9062 4C17.3438 6.5 17.3438 9.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49772	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	637	OUT	GET /wel-trdotcom/fonts/all-characters/knowledge2017-black-webfont.woff2 HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://legal.thomsonreuters.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	694	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 39444 Connection: close Date: Mon, 16 Sep 2024 23:46:15 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 08 Dec 2020 19:37:11 GMT ETag: "3327c2a7977db98e49b5369fcafc658c" Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 192147d605f496db0417cf30a0012092.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 5C3QHXR3666Rkgt1fLGiBYQ93P_JuHKAaUbKpfq6hhdjYWhaGeYv6Q== Age: 1245920
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9a 14 00 13 00 00 00 01 84 60 00 00 99 a2 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b 81 f8 0e 1c 85 38 06 60 00 87 5e 08 82 56 09 9e 75 11 08 0a 83 8a 3c 82 cc 24 01 36 02 24 03 93 5a 0b 89 70 00 04 20 05 88 1a 07 a5 54 0c 86 7e 3f 77 65 62 66 06 5b 06 5f 91 05 85 c7 ee 7e 86 81 56 ad 9c 1b 02 10 34 37 ab a6 ef 3c 25 6c 3a 34 96 d7 9b 55 ce 4c bb 2b 2f ac 60 bb da d0 9b 45 34 ee e6 e5 51 d9 ff ff ff ff ff af 4a 16 22 9b 7f 17 7a ff 49 9b a4 45 10 00 51 44 14 75 6c 33 31 77 b7 40 cf c5 2d e7 31 20 40 56 8a 95 a9 36 1b 8b 95 c9 a2 2b cf cb 1a f2 3c 4e d9 aa f4 f4 b4 59 48 6d 95 e4 be 7d 8e 5e 2c 70 47 d6 e6 85 b8 b9 13 37 ef e8 dd f6 30 1f 36 56 e7 63 2c 87 93 bd 8c 64 b2 Data Ascii: wOF2`?FFTM*8`^Vu<$6$Zp T~?webf[_~V47<%l:4UL+/`E4QJ"zIEQDul31w@-1 @V6+<NYHm}^,pG706Vc,d
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 59 f6 e4 77 88 70 3f fe 0e 85 78 bf a5 f9 4e a0 53 ce 2c 49 38 a9 a5 41 38 37 a8 b7 8d b9 63 26 14 6d b0 04 0a f5 7b 87 07 30 23 dd 3c fb 87 c2 29 08 75 da 3a 45 14 57 62 68 85 40 29 73 af 77 26 b7 30 b6 34 9a 25 05 36 12 0c 8a a4 2e 9d 49 c0 79 94 c1 8f c5 19 da 2d 16 02 b5 03 ca f8 52 92 fb c3 57 8a fc 55 e1 9a a3 69 cc 82 53 2b 4d 99 73 4d 60 84 09 ae a2 12 de ff b0 e0 4d 0a 0a ed fa 80 49 dd 2d c0 6e fb 26 e6 72 9e 1d a3 6b 1d 88 19 1d d1 ec 45 9c 2d b8 ab 1e 57 c9 e8 58 cc d6 4f c4 c9 92 c3 95 2f 1c ac 5d f3 87 61 0b 1c d9 02 dd b5 62 e3 6b 8b e0 39 6a 79 67 21 23 fa 74 9e 5d d8 c9 cd 6f 7f 33 3e 44 a3 f3 70 07 05 9b 4a 5e bf fa fe a9 49 8f 21 08 cc c4 43 cf 3b 3f ec 52 56 00 73 7f 84 77 d8 23 a1 10 e9 87 17 ba da b9 2f 59 ab 09 82 91 a3 fd db ec fd Data Ascii: Ywp?xNS,I8A87c&m{0#<)u:EWbh@)sw&04%6.Iy-RWUiS+MsM`MI-n&rkE-WXO/]abk9jyg!#t]o3>DpJ^I!C;?RVsw#/Y
2024-10-01 09:51:34 UTC	6676	IN	Data Raw: 95 61 b6 98 f2 10 ca b5 01 e0 3a a2 d0 9b 97 1c af be a1 44 fc b2 59 0c 22 a1 0e 08 62 f1 ec 3f 95 20 16 4f 6d 48 fc eb 85 4a 18 65 fe 6c 1e e8 d5 b0 8e 65 f3 b2 73 b3 49 00 15 0b ca 5e 03 26 82 fe f9 f9 40 1a 1c e3 6a 12 39 4e 24 07 e0 2e 61 d9 0f a1 ce 2b 3c 9e 28 f2 c6 a4 db 9d df cd dc 99 d9 9c 04 1d 24 92 59 cf 87 6e 86 53 5f 78 e3 90 c7 d1 21 b5 be e2 4b 9b 0f 29 6c ad 20 19 e5 d6 c2 20 88 98 63 26 48 a5 e0 57 97 82 68 85 3c db 9c 72 4d 37 2b 7b d8 30 39 9f 2c 06 69 ae 7a 3d ae 46 3f 2a 23 5a a7 69 7d 85 7f dd 8f f4 3b ba 41 bf 1c 04 cb 7b 61 30 21 17 d1 49 89 86 1d 5f e8 71 61 41 4b c5 c2 a7 ba cb e8 14 07 dd 1d 00 b1 30 ad bb 0a df 03 8d 07 be cf 58 2c 96 1c bb 60 0a 17 2a e1 7b 1f 2c 2e ec 81 6f 4e f3 34 ef f9 b1 c6 1d bc 85 0f df 5d ec 93 89 f1 Data Ascii: a:DY"b? OmHJelesI^&@j9N$.a+<($YnS_x!K)l c&HWh<rM7+{09,iz=F?#Zi};A{a0!I_qaAK0X,`{,.oN4]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49774	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	637	OUT	GET /wel-trdotcom/fonts/all-characters/knowledge2017-light-webfont.woff2 HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://legal.thomsonreuters.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	695	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 39336 Connection: close Date: Sat, 27 Jan 2024 08:19:36 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 08 Dec 2020 19:37:11 GMT ETag: "9423006fb52301a35a4ce76f99e114af" Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 a097fc75e5eca387ecd3618341d82f1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: SV7NFAC0XvPyd-0nW-J9_oWmmw6AzUUr6VOmrPnAsi0Lp0cUAz1pJA== Age: 21432718
2024-10-01 09:51:34 UTC	15689	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 99 a8 00 13 00 00 00 01 86 34 00 00 99 38 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b 81 f6 1e 1c 85 38 06 60 00 87 5e 08 81 4c 09 9e 75 11 08 0a 83 93 70 82 d4 03 01 36 02 24 03 93 5a 0b 89 70 00 04 20 05 88 1c 07 a5 54 0c 84 1b 3f 77 65 62 66 06 5b 0a 60 91 03 ca c6 be a3 97 67 58 94 6e 32 80 ea fb d4 34 d5 93 fe 12 c6 36 b5 a6 dd 36 a8 66 3d 83 e6 f3 6a f0 e6 69 51 6e 07 e7 7f a8 de aa ec ff ff ff ff 7f 4f b2 90 31 fd bb c8 7d 42 48 02 20 52 54 b5 b6 75 6b bb 99 98 4c 4c e0 0e 31 25 8b d6 f7 96 93 0d d9 8b 09 6a 69 11 c7 e8 cd 54 65 4e 52 48 ed 2d 6a 80 c9 a1 46 88 33 95 a8 44 a5 d0 65 b0 24 ac 47 ba da 1c c7 11 4e 5b 23 4b 2c 13 89 36 4f c4 43 2a 5b 2d da 82 75 7d a3 Data Ascii: wOF248?FFTM8`^Lup6$Zp T?webf[`gXn2466f=jiQnO1}BH RTukLL1%jiTeNRH-jF3De$GN[#K,6OC[-u}
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 28 49 63 4f 92 15 74 4a ab bf 6b 6c 36 73 48 75 df ea 28 9d d0 52 53 b0 3a 71 86 32 c0 d3 75 b1 81 62 6c 90 ec 69 bd a2 03 65 a4 f6 1b d6 61 5c 79 70 48 05 f0 01 00 7b c9 65 75 ce 58 77 48 a8 66 15 8c 04 33 61 07 84 19 e1 3d 39 5b 0e 2a 8f d2 46 13 1f 19 39 21 f0 c8 47 6d f9 73 39 b0 c9 2c 14 5f 83 b4 6c af 1b 42 10 62 11 c5 09 6e df 43 2c 38 4f b7 b0 99 40 a1 91 42 09 2e f4 9a 39 40 c0 9e f5 58 70 af 10 a1 6b 10 2d 6d e1 f7 c1 51 a3 79 0e a6 b7 97 16 a5 ef 73 3a b3 c7 72 b7 53 4c b0 c9 b7 b4 aa 33 9f f6 65 9e c6 41 2d d6 53 28 43 43 03 e4 73 db dc a3 f1 41 f3 98 92 60 ef f6 46 db cc 20 66 4f 0c b3 16 a4 20 7e 60 3a 01 8b c7 e6 02 37 6c 14 43 39 40 8c 3f a4 91 5d 12 d2 65 2e 2e 32 5e 47 25 03 eb 3a 81 ee b3 21 ad d4 36 f4 0c a2 5b a0 3d 7c 15 28 42 6a 50 Data Ascii: (IcOtJkl6sHu(RS:q2ubliea\ypH{euXwHf3a=9[*F9!Gms9,_lBbnC,8O@B.9@Xpk-mQys:rSL3eA-S(CCsA`F fO ~`:7lC9@?]e..2^G%:!6[=\|(BjP
2024-10-01 09:51:34 UTC	7263	IN	Data Raw: 2b 85 f9 54 44 dc 20 95 6c 7c ab 28 e0 0a 61 b7 1c 2c ed 19 07 8f 24 d7 f2 e8 37 d4 bb 86 75 d0 e0 fa ba c7 ed ae fe 8e a2 36 24 fa c8 f3 0c aa 0d d2 36 90 03 80 27 d7 3e 1c 09 6f d4 3c 00 3e 13 2c 59 46 1a 09 d9 40 4e 1a db bf 90 12 38 5d c9 99 3c da fe 1e 61 2b 07 7d db a7 20 f0 f0 72 8f 20 cf d5 1f c4 37 36 77 18 66 1d 6a f0 d6 83 4e 44 d1 82 f0 77 5a e8 82 a8 18 0d 20 1f 11 5e 47 f3 18 89 4d 67 b3 42 30 4a f9 78 1a cc 08 14 6b a1 1e f7 47 f6 a4 cf b8 d3 2c ad 56 f2 e1 69 38 81 8e 1d ba 0f 3c ed d8 25 59 ad 62 e3 61 f2 14 6c 7b 08 60 22 5e 9a 04 54 c9 e6 10 38 32 8e 87 f1 9e 27 78 5a b5 f8 97 37 fb c0 c3 85 5d f3 5c 2e 4c 7d 7c 5b c8 7a b2 7b 33 93 89 ef 1c 96 e7 9c ff e3 37 8c a4 8c c1 4d ae 83 7f 6c ea 37 e0 4e 1a 9a 83 87 31 cb ac 36 8f 08 ef e8 11 Data Ascii: +TD l\|(a,$7u6$6'>o<>,YF@N8]<a+} r 76wfjNDwZ ^GMgB0JxkG,Vi8<%Ybal{`"^T82'xZ7]\.L}\|[z{37Ml7N16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49776	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	1117	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/user-icon-v1.5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:34 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 716 Connection: close Date: Tue, 01 Oct 2024 09:07:04 GMT Set-Cookie: AWSALB=+OZB25eM3+0GFqVnOgQx4vQstKH6e1HLjzcXhUdIOH7UlmsgXRiOnkCm0WCllS5amK8uhjb+3ANJy2s+GwB1hGN8T/HS+cb0JttaBJRAO+JCn5tWZhnRAPDMzWGY; Expires=Tue, 08 Oct 2024 09:07:04 GMT; Path=/ Set-Cookie: AWSALBCORS=+OZB25eM3+0GFqVnOgQx4vQstKH6e1HLjzcXhUdIOH7UlmsgXRiOnkCm0WCllS5amK8uhjb+3ANJy2s+GwB1hGN8T/HS+cb0JttaBJRAO+JCn5tWZhnRAPDMzWGY; Expires=Tue, 08 Oct 2024 09:07:04 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "2cc-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:04 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e3824a4cc698f190d3fa6fe687f1a600.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: fDt9zagLjU3ATakNGqjPzI-fQl3XWhd2AgmL-fSr2co9UlE1fJ-Q6g== Age: 2670
2024-10-01 09:51:34 UTC	716	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 34 36 38 38 20 31 33 2e 30 33 31 32 43 31 31 2e 37 35 20 31 31 2e 38 31 32 35 20 31 30 2e 34 36 38 38 20 31 31 20 39 20 31 31 48 37 43 35 2e 35 20 31 31 20 34 2e 32 31 38 37 35 20 31 31 2e 38 31 32 35 20 33 2e 35 33 31 32 35 20 31 33 2e 30 33 31 32 43 34 2e 36 32 35 20 31 34 2e 32 35 20 36 2e 32 31 38 37 35 20 31 35 20 38 20 31 35 43 39 2e 37 35 20 31 35 20 31 31 2e 33 34 33 38 20 31 34 2e 32 35 20 31 32 2e 34 36 38 38 20 31 33 2e 30 Data Ascii: <svg width="16" height="18" viewBox="0 0 16 18" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.4688 13.0312C11.75 11.8125 10.4688 11 9 11H7C5.5 11 4.21875 11.8125 3.53125 13.0312C4.625 14.25 6.21875 15 8 15C9.75 15 11.3438 14.25 12.4688 13.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49771	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	638	OUT	GET /wel-trdotcom/fonts/all-characters/knowledge2017-medium-webfont.woff2 HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://legal.thomsonreuters.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	695	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 39304 Connection: close Date: Sun, 03 Dec 2023 19:41:19 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 08 Dec 2020 19:37:11 GMT ETag: "20dca63d8ee3254b712c7171ae987713" Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 83f879b9257b55a619d0b5d3165412a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: fkZSB8wXwkni2GD4i1D4EVJXvR9POJuOBM8-vns_XN09718YUWltMg== Age: 26143816
2024-10-01 09:51:34 UTC	15689	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 99 88 00 13 00 00 00 01 84 10 00 00 99 17 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b 81 f7 02 1c 85 38 06 60 00 87 5e 08 82 34 09 9e 75 11 08 0a 83 8b 68 82 ce 27 01 36 02 24 03 93 5a 0b 89 70 00 04 20 05 88 22 07 a5 54 0c 86 2a 3f 77 65 62 66 06 5b 0f 5f 91 03 a6 71 ed 89 bd 1f 04 41 e7 6d 5b a1 0a f3 9c 74 07 98 72 ab 1d 70 db 08 9c d3 b8 fe da 2e 19 e3 6e 63 a8 9d 20 d5 a7 f9 dd 46 33 fb ff ff ff ff 5f 95 34 64 2c 73 69 49 5b 00 a8 22 20 e8 23 aa ca 6f db 6f 10 13 84 20 48 31 21 94 95 ea 1a 89 34 15 da b6 ee d0 95 a8 13 1a a4 d4 36 f9 70 0c a5 d0 93 50 da 93 69 86 78 b0 3d 14 02 82 34 22 22 22 c6 09 e9 9c ca b9 af 50 25 2c 4a 26 56 e7 4b c2 d5 7e 5d d6 64 16 f4 b2 e7 Data Ascii: wOF2?FFTM8`^4uh'6$Zp "T?webf[_qAm[trp.nc F3_4d,siI[" #oo H1!46pPix=4"""P%,J&VK~]d
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 9c 13 4e 4d 6a 94 03 a8 de 74 b2 56 c6 cb 8f 1e 4e 23 84 1f 53 e7 25 1b 6a 77 7c 21 61 d4 da cf 55 93 18 42 dd fa 10 bc d4 4a e0 68 f0 00 0f 3e 9e 6a e3 41 eb ba 81 8a 0a 8c d6 04 28 00 97 51 a2 7b 95 69 ae b1 f3 b1 a4 18 ea d5 93 6f 12 54 a4 18 94 72 32 0c 8c 8c 29 5c db e8 87 9e ce 57 78 ee f0 fb eb c7 b0 42 fb e3 95 14 5a ea f5 09 0e 65 73 59 d1 f6 10 80 0e e0 6c 41 bb 21 c6 9e db f6 26 ec 75 7e 56 92 e2 b4 e7 89 ba d5 4a c1 f8 ad 63 e1 a1 de d9 8f ac 57 98 19 60 7f 7c 1c 3d a9 ba 04 6d a0 83 ec 01 c9 be 71 22 66 1f c7 53 e9 60 ac c5 b7 d7 26 62 61 05 81 bc fd f1 8f 64 96 ca 37 de 91 0e 46 c6 60 85 1a 98 fd 24 be 56 b5 0c 87 30 bb 0e 05 2a f3 2c 1b 5b 45 ca d6 38 8c c1 bf 6a f4 be 4c 9f b0 0f b5 b5 86 32 09 2d c1 48 27 18 02 f2 25 b2 3f 12 a7 5c c6 81 Data Ascii: NMjtVN#S%jw\|!aUBJh>jA(Q{ioTr2)\WxBZesYlA!&u~VJcW`\|=mq"fS`&bad7F`$V0*,[E8jL2-H'%?\
2024-10-01 09:51:34 UTC	7231	IN	Data Raw: 8d 81 3e bf 69 17 73 de 20 0b e6 0e fd e2 98 de 99 c6 05 4d 94 0f 04 24 c3 9a 89 47 90 0f f0 5f d0 be 67 e4 5f 6c 1e e1 1d 1d 60 ad 4a 03 d9 6c e9 69 71 23 7b 1d d2 18 c9 57 0f a1 85 ed 8c 99 22 bb 35 5d 9a 71 9c 18 c5 e6 87 a4 1e 3f 96 00 26 93 4b 53 82 29 c3 1c ea fc d6 25 7d 94 ef 3c d6 23 fe 96 42 e6 83 4c ad f1 e3 c2 cc 27 e1 4e ae 85 2e e7 d5 64 6e 74 8e 3a 11 9e 83 de 45 53 c6 40 e4 eb ff af db 0d 67 88 1b 8a 0f 2f eb 6f 45 0e 3f 67 90 35 d2 5a 92 3c 6e 0b a0 f9 98 fd c9 d9 4e f5 ce 0d 43 aa 24 ee 1a 20 31 fe f8 ba b3 6b 66 be 37 02 68 87 ee b7 1b 39 f1 c3 c2 76 e1 fe ce fc dc 6c 8a f4 6d 22 b1 d7 e0 ca 38 1f 98 7c cf 10 50 1a 22 b4 6a 25 13 63 09 37 bf f5 85 3e 81 bf db a7 f0 39 c7 ea 68 53 d4 1a dc 97 25 63 cd d8 cd 08 d3 6d 2f 76 64 e1 d8 db b4 Data Ascii: >is M$G_g_l`Jliq#{W"5]q?&KS)%}<#BL'N.dnt:ES@g/oE?g5Z<nNC$ 1kf7h9vlm"8\|P"j%c7>9hS%cm/vd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49775	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	639	OUT	GET /wel-trdotcom/fonts/all-characters/knowledge2017-regular-webfont.woff2 HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://legal.thomsonreuters.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	695	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 39408 Connection: close Date: Sat, 25 Nov 2023 15:59:51 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Last-Modified: Tue, 08 Dec 2020 19:37:11 GMT ETag: "de994d71a311e3119703dd67ef632f04" Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 b58f4c458263fcafb0c4b2b684d9bc50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: s2-OR5Afx6ppTK3XEC5omABNMKtKMdifDXRPRDYHVOyy0CXu9eq-5w== Age: 26848304
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 99 f0 00 13 00 00 00 01 88 f4 00 00 99 7e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 2a 1b 81 fc 5a 1c 85 38 06 60 00 87 5e 08 81 7e 09 9e 75 11 08 0a 83 92 18 82 d3 5f 01 36 02 24 03 93 5a 0b 89 70 00 04 20 05 87 44 07 a5 54 0c 85 1c 3f 77 65 62 66 06 5b 7d 63 91 04 d6 c6 b6 43 7d be 92 28 ca 6d 03 38 ee 36 fe b2 76 5a c2 36 06 6a af 37 bb 37 e4 ca c2 ad 15 aa 5b 33 39 ba 5b 55 49 3c 46 fb ec ff ff ff ff ff 65 c9 24 c6 76 1b 72 db ff f3 20 00 8a 6a 2a 5a 45 aa 55 82 8a 19 dc 41 58 40 4c b1 ca 75 42 82 35 58 07 58 8b 0e 2e ba 5e 26 47 c6 80 da ab b6 55 bc c8 20 9c b2 2b dd b8 19 02 b6 13 76 be ea 0d a8 ed c3 c1 95 4a 10 95 ec 8f ea db 09 67 4a c3 84 56 5e 60 8a 9b cd ca 55 0f Data Ascii: wOF2~?FFTMZ8`^~u_6$Zp DT?webf[}cC}(m86vZ6j77[39[UI<Fe$vr jZEUAX@LuB5XX.^&GU +vJgJV^`U
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 01 85 20 d8 9e 8a 86 ab cb 58 4a fd 31 eb c9 15 7b 5d 24 5a 57 d0 ec 2b 40 98 5f 71 4f 04 fc e2 2d 61 dc bd 73 53 47 52 3f e0 cf fa 07 23 a8 42 65 ae 5e 75 47 1f ca ee 49 89 6b 53 af ce e9 b2 ba 2f 95 2d 5a eb 98 1d e9 9a 33 de 35 2c 8b e8 c4 ac b4 6c e8 97 3e f2 16 9d 81 34 00 7c 09 55 5c 78 2f f2 33 14 93 4f fd 30 98 a2 18 9f 02 66 5a cd e8 84 70 6e e6 ca e8 3d 4d a8 ab 9e fe d6 68 2e 68 bf 27 33 1e bf 5d 7b 68 69 4f 5b 77 c5 6d de aa 10 50 c9 12 9c 0e 0c 5d c4 ca 69 f6 fc e9 5d 56 29 66 79 f4 cc 42 f6 19 53 f7 86 27 44 61 55 3d 8c 52 b1 b9 26 88 da f0 5e 3f f4 52 bc 77 73 d4 0b df a1 fb 3e 38 e5 ff ea 6a 58 06 be 10 e5 01 33 66 ea c0 e7 c7 7d 88 92 bc f6 aa 63 f3 00 63 eb 8e 97 32 4c a2 b3 cc e1 d4 b6 ab 5e 4d f1 04 ac 46 4a c9 b6 f6 98 ae df 61 9b 00 Data Ascii: XJ1{]$ZW+@_qO-asSGR?#Be^uGIkS/-Z35,l>4\|U\x/3O0fZpn=Mh.h'3]{hiO[wmP]i]V)fyBS'DaU=R&^?Rws>8jX3f}cc2L^MFJa
2024-10-01 09:51:34 UTC	6640	IN	Data Raw: 85 12 54 0b f1 2f 74 cd 3b 2c 2a 7a 14 05 b4 89 79 d2 3b 46 23 e9 3f 15 9f c1 c4 08 c1 e1 39 4d 92 f0 bf 91 65 9c 97 3d 11 17 68 4b f9 58 c5 14 8a 33 30 c7 e4 0b 74 bf 7f 7a 0b d8 5d 4b 89 f4 b1 33 ba 80 82 e9 29 bc 9b 28 98 1e bb 1a 3a f7 a4 02 26 45 58 cc 8e 4e 2d f1 60 b1 ac 07 b5 a9 12 42 8a 73 df a7 d5 5a cc 04 7d ca 7e 5a 69 72 96 78 0e 02 84 27 c5 8a d9 86 34 3e a1 b3 9c 35 8f 11 0a 2a 2f 16 31 7f f3 fe 72 a6 bf 99 67 8b ae 87 56 03 aa ef d6 73 8d 87 ac 30 6e 6f 96 6b 83 a7 1c 48 99 46 f9 0a 9f 41 10 a9 14 22 19 2e 64 95 45 db 00 04 14 6c 36 86 52 d3 26 02 58 ad 6d cb e3 7a 44 8c 73 d4 50 d1 b2 50 72 25 1d 4b 4a 60 b9 4d 13 7d 11 00 69 7d 8b fd fb 88 cf 4e 44 2d a2 3d 4a 82 5f 68 9c bd 95 1a ce 11 c3 ba ee b5 32 b9 15 4c 8f 7a bb 14 fd 21 b6 cb fd Data Ascii: T/t;,zy;F#?9Me=hKX30tz]K3)(:&EXN-`BsZ}~Zirx'4>5/1rgVs0nokHFA".dEl6R&XmzDsPPr%KJ`M}i}ND-=J_h2Lz!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49769	13.32.121.44	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	558	OUT	GET /javascript/schemaFunctions.min.js HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	875	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2299 Connection: close Date: Tue, 01 Oct 2024 03:17:42 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 09 Mar 2023 18:49:16 GMT ETag: "bd244e1b891b02e1257dc6fb99604eb6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=699840 x-amz-version-id: Uq_qZjonf.c8Pi6.s8cxmD9OQPC.1qpa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 814952d19d560b49ff15ad2f71e400d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: N4JohtCyPCjnXHmX-Sb16DUelgdCGOnsBPKSZrYcoCng5wSY8vl5OQ== Age: 23633 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-01 09:51:34 UTC	2299	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 73 63 68 65 6d 61 4c 6f 61 64 28 68 2c 67 2c 66 2c 62 2c 64 29 7b 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 3d 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 3a 7b 61 63 63 6f 75 6e 74 49 64 3a 68 2c 6b 65 79 3a 67 2c 73 74 72 69 70 55 72 6c 73 3a 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 74 72 75 65 3a 66 2c 74 65 73 74 4d 6f 64 65 3a 62 2c 66 65 74 63 68 46 72 6f 6d 48 69 67 68 6c 69 67 68 74 4a 73 43 61 63 68 65 3a 64 2c 6f 75 74 70 75 74 3a 74 72 75 65 7d 3b 63 6f 6e 73 74 20 6b 3d 6e 65 77 20 53 65 74 28 5b 22 42 72 6f 74 68 65 72 22 2c 22 4b 61 70 6c Data Ascii: function schemaLoad(h,g,f,b,d){window.schema_highlighter=window.schema_highlighter!==undefined?window.schema_highlighter:{accountId:h,key:g,stripUrls:f===undefined?true:f,testMode:b,fetchFromHighlightJsCache:d,output:true};const k=new Set(["Brother","Kapl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49766	13.32.121.44	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	548	OUT	GET /javascript/highlight.js HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:34 UTC	843	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 38008 Connection: close Date: Tue, 01 Oct 2024 09:44:14 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 01 Oct 2024 03:07:39 GMT ETag: "f81875e26f738c79a1513ef30de7d7f6" x-amz-server-side-encryption: AES256 x-amz-version-id: exaJA1tQx7AbQ.cqLrd_lDlk9GVAyh1w Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 36cd2d0f34e25c2dc5099656a60bedac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: dlwXRhZEXYUeHGlcKBanpXSzP97tRopwD2Ht_QvNYjJPb_W1NrWX-A== Age: 441 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 34 31 37 3a 28 74 2c 69 2c 65 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 74 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 65 6e 64 70 6f 69 6e 74 73 3d 69 2e 69 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 73 3d 65 28 37 33 34 29 2c 6e 3d 65 28 39 38 33 29 2c 6f 3d 65 28 31 33 31 29 2c 72 3d 65 28 38 34 36 29 2c 68 3d 65 28 39 38 39 29 2c 75 3d 65 28 38 34 34 29 2c 63 3d 65 28 32 30 29 2c 6c 3d 65 28 31 31 36 29 2c 61 3d 65 28 36 37 35 29 2c 64 3d 7b 6f 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 6d 61 72 6b 75 70 2f 6d 61 72 6b 75 70 3f 75 72 6c 3d 22 2c 68 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 Data Ascii: (()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),l=e(116),a=e(675),d={o:"https://api.schemaapp.com/markup/markup?url=",h:"https://api
2024-10-01 09:51:34 UTC	16384	IN	Data Raw: 38 39 32 29 3b 63 6c 61 73 73 20 68 20 65 78 74 65 6e 64 73 20 6f 2e 50 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 69 2c 65 2c 73 3d 64 6f 63 75 6d 65 6e 74 2c 6e 3d 21 31 29 7b 69 66 28 73 75 70 65 72 28 74 2c 69 2c 65 2c 73 29 2c 74 68 69 73 2e 49 74 3d 6e 2c 30 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 22 78 50 61 74 68 22 29 29 74 68 69 73 2e 7a 74 3d 22 74 65 78 74 28 29 22 2c 74 68 69 73 2e 63 69 3d 21 31 3b 65 6c 73 65 7b 6c 65 74 20 69 3d 74 2e 78 50 61 74 68 3b 69 3d 69 2e 6d 61 74 63 68 28 2f 5e 2e 2a 5c 28 5c 29 5c 73 2a 24 2f 67 29 3f 69 3a 69 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 28 28 5b 5e 7c 5d 2b 29 5c 29 24 2f 67 6d 2c 22 24 31 22 29 2c 74 68 69 73 2e 7a Data Ascii: 892);class h extends o.Pt{constructor(t,i,e,s=document,n=!1){if(super(t,i,e,s),this.It=n,0==Object.prototype.hasOwnProperty.call(t,"xPath"))this.zt="text()",this.ci=!1;else{let i=t.xPath;i=i.match(/^.\s$/g)?i:i.replace(/^$([^\|]+)$$/gm,"$1"),this.z
2024-10-01 09:51:34 UTC	5240	IN	Data Raw: 2e 68 65 7d 79 65 28 74 2c 69 29 7b 6c 65 74 20 65 3d 30 2c 73 3d 21 31 3b 63 6f 6e 73 74 20 6f 3d 69 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 41 72 72 61 79 3f 69 3a 5b 69 5d 3b 6c 65 74 20 72 3d 22 22 3b 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 65 76 61 6c 75 61 74 65 28 6f 5b 69 5d 29 3b 6e 2e 70 72 6f 6d 69 73 65 26 26 28 65 3d 74 68 69 73 2e 62 65 28 74 2c 6e 2e 70 72 6f 6d 69 73 65 29 3f 65 2b 31 3a 65 29 2c 21 6e 2e 72 65 73 75 6c 74 26 26 6e 2e 6a 74 7c 7c 28 72 3d 22 22 3d 3d 3d 72 3f 6e 2e 72 65 73 75 6c 74 3a 72 2b 6e 2e 72 65 73 75 6c 74 2c 65 2b 3d 31 2c 74 68 69 73 2e 4f 65 28 74 2c 6e 29 29 2c 6e 2e 6a 74 26 26 6e 2e 72 65 73 75 6c 74 26 26 28 73 3d 21 30 29 7d 72 Data Ascii: .he}ye(t,i){let e=0,s=!1;const o=i.constructor===Array?i:[i];let r="";for(let i=0;i<o.length;i++){const n=t.evaluate(o[i]);n.promise&&(e=this.be(t,n.promise)?e+1:e),!n.result&&n.jt\|\|(r=""===r?n.result:r+n.result,e+=1,this.Oe(t,n)),n.jt&&n.result&&(s=!0)}r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49780	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	854	OUT	GET /en/products/highq/_jcr_content/root/container/container/tabs/item_1665177412591/image_copy_copy.coreimg.png/1669639663326/234582.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=da/acpKOm105IIXHT74ekqAXMPd0ctqjkRhI3+TahoarY2EumsmR6oAwW8GauFimxFETkCLzWrfFULFTTitaTNi2Yczov2dXCAZGRi3BXTKDTor6AjWau/l5jYpA; AWSALBCORS=da/acpKOm105IIXHT74ekqAXMPd0ctqjkRhI3+TahoarY2EumsmR6oAwW8GauFimxFETkCLzWrfFULFTTitaTNi2Yczov2dXCAZGRi3BXTKDTor6AjWau/l5jYpA
2024-10-01 09:51:35 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 139761 Connection: close Date: Tue, 01 Oct 2024 09:51:34 GMT Set-Cookie: AWSALB=2E3kIg0rvat4NleAAz7Y2T7/1x/xpFteou4UAimQ4YGhr8DEvlPlguBIxjhGzM7muufypZO1WpuISgu3lTGmWND0WJa7jBpeh0OeWEk8gs8BVvfOmhJrCFR2kJkf; Expires=Tue, 08 Oct 2024 09:51:34 GMT; Path=/ Set-Cookie: AWSALBCORS=2E3kIg0rvat4NleAAz7Y2T7/1x/xpFteou4UAimQ4YGhr8DEvlPlguBIxjhGzM7muufypZO1WpuISgu3lTGmWND0WJa7jBpeh0OeWEk8gs8BVvfOmhJrCFR2kJkf; Expires=Tue, 08 Oct 2024 09:51:34 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Content-Disposition: inline; filename=234582.png X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Nov 2022 12:47:43 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:34 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "221f1-5ee87470419c0" X-Cache: Miss from cloudfront Via: 1.1 129f13101f12370407d42127c62b1bd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: v7Z6zoMnePm01cRwkBgspkJh0OUjcLrRVyhhIB6lB2C_50hnI6o1iA== Age: 2254405
2024-10-01 09:51:35 UTC	14632	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 19 00 00 01 be 08 06 00 00 00 ff 65 c9 80 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 02 21 86 49 44 41 54 78 01 ec fd e9 b3 64 b7 91 27 0a 3a 22 e2 ee b9 ef c9 cc e4 be 93 e2 4e 4a 94 44 6a 19 75 6d f3 ea 59 f7 d4 b3 ea b6 b1 b1 7e f3 fe 83 f9 38 1f db 66 fa 6f 68 7b 5f da ec d9 8c d9 74 8f d9 d4 74 57 a9 aa 24 55 49 2a 95 a4 d2 46 71 15 45 71 4b 66 26 73 df b7 bb df 88 c0 c3 0f 3b 70 80 73 4e c4 bd 99 c9 cc 84 93 37 23 02 07 0e 77 00 0e 1c 77 b8 03 60 ff e1 3f fc 87 fb 89 f3 23 9c 42 60 8c c9 3f 00 e7 5c fe 05 cf 91 1e e5 ef b0 8e 48 53 79 87 c3 21 75 3a 1d f1 c7 88 0f c5 6f 8d 8f 67 0b 0b Data Ascii: PNGIHDRepHYssRGBgAMAa!IDATxd':"NJDjumY~8foh{_ttW$UI*FqEqKf&s;psN7#ww`?#B`?\HSy!u:og
2024-10-01 09:51:35 UTC	3266	IN	Data Raw: 54 e9 05 16 e3 3d c3 e9 5f f0 b0 61 3f 10 ea 02 f9 5b 10 72 88 4d fb 68 a3 ed d2 7b 20 f8 3d 73 5a 18 c6 ab d2 a8 45 a8 9c f1 7a 00 50 fe 53 4f 3f 25 c7 21 36 be cf cd 6d 92 e3 1d 7d 66 e6 01 f4 c5 83 82 67 cc 0d 66 df d4 d9 73 67 a4 2c 61 bc 60 3f 0b da 0c 7c e1 84 31 84 20 62 fa 42 78 22 e4 1d bc a1 bf 8d 57 ef 95 2f bf 22 f7 83 61 ef 08 e8 a3 0d d4 02 03 05 9b 39 e3 39 3e 31 89 46 b3 67 9d 22 11 e1 78 d3 32 ab cb 17 25 8d 86 a3 97 77 58 bc 32 5c 9d a4 bd ec 95 f2 ed 9b 21 a5 c1 44 38 2c c6 f1 cb f1 57 86 23 ea 7a 5d b6 da 7e dc 2b 38 5a 41 b4 f1 e7 75 38 d1 03 53 8f f8 b5 68 11 13 2b dc 37 4f 16 62 85 ed ee 94 05 2a b2 40 1b 2d 0b ea 6e a4 21 7d f2 f1 27 72 01 57 2e 72 89 47 58 dc c1 bb 11 e1 d9 08 ed c6 62 14 e6 66 19 64 23 e6 5e bc f3 f0 fe c5 7b dd Data Ascii: T=_a?[rMh{ =sZEzPSO?%!6m}fgfsg,a`?\|1 bBx"W/"a99>1Fg"x2%wX2\!D8,W#z]~+8ZAu8Sh+7Ob*@-n!}'rW.rGXbfd#^{
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: d5 4b cd 64 36 2f 31 57 58 70 ca 94 f8 b5 0c 23 63 cd bd b8 a1 9a 9f 5f 52 39 70 e4 ec 65 61 68 5c 5f 55 61 14 6b 43 55 fe e9 65 15 ea 84 ce b8 b6 32 a4 f9 55 95 77 20 e8 9d 59 e4 fa 45 4d 74 7c be 4f a7 09 65 0e b5 22 11 6d 81 ca b5 99 31 3a 98 df 48 43 3b f5 98 17 b0 5a 64 64 f2 d8 dc 45 61 fc 20 18 63 f1 e2 1a f5 2f 8a 35 d5 be 41 57 4a b7 09 b1 88 c1 36 bb a7 30 d5 81 c9 4b 3e 8e 7d c8 2a b9 83 32 79 38 49 c6 53 90 2a a2 3a ea fd 62 59 30 1b 78 8a 55 ad cc c6 0d 1d b6 3f 23 3f 3c 4b 7d 22 06 d2 6c 71 8b 17 26 58 64 b9 b1 f0 61 40 39 e6 8d 07 5c b0 30 85 11 25 27 7d 96 9e 78 99 37 b0 83 49 37 ea c8 d8 90 ab d6 c1 2f 95 d2 b2 c0 43 3e aa 1c f9 38 dc e5 f2 fb 4e 97 e1 97 47 41 35 13 f2 13 34 58 ee 05 1b b6 63 2e ae b8 d2 0e 3e 8f 15 1c c3 7b 24 9b 3e 84 Data Ascii: Kd6/1WXp#c_R9peah\_UakCUe2Uw YEMt\|Oe"m1:HC;ZddEa c/5AWJ60K>}2y8IS:bY0xU?#?<K}"lq&Xda@9\0%'}x7I7/C>8NGA54Xc.>{$>
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 14 e2 d8 36 a1 b8 ce 1e 8e 57 16 4f 96 ed f3 ef d3 09 6b 5e 9d 61 f2 f5 59 ef bc 90 ee d7 22 0b e6 47 91 85 5b 27 0b bc c8 82 fc cd fd f6 a6 14 34 c9 42 84 59 64 a1 5a c2 48 b2 40 15 9c 36 10 bf b3 d5 c2 2f 59 1d 8c e5 48 f8 82 d7 28 0b 09 de 1a 65 21 ff bd b1 5f d7 25 0b 21 0c 53 97 f1 31 cd b6 01 45 87 05 f4 53 50 a5 cf 12 df 59 1e 87 87 cf 43 1c 5e 83 93 e2 24 c7 65 b5 80 94 88 d6 a2 a4 40 76 b8 27 54 ac 65 61 6a ac e5 ab 61 ca 4a 0c 0c 3b 0f 06 f9 46 18 1d 05 ee 18 50 b2 c0 dc 0f ff 33 21 3f a9 e9 80 c5 38 51 41 2c 59 b8 97 9d d2 38 39 89 0c 70 e2 31 11 94 95 c2 a1 0c 4e 1e 78 02 87 a5 73 65 7e a5 98 a8 12 e7 e1 3f 19 1c ca 30 e8 15 b9 8e 79 61 14 9c 1b 22 0b 19 9c 22 0b 54 64 81 8a 2c d8 84 75 c9 02 4f e7 bb cb 65 21 80 11 65 41 e5 6b d3 29 39 22 fe Data Ascii: 6WOk^aY"G['4BYdZH@6/YH(e!_%!S1ESPYC^$e@v'TeajaJ;FP3!?8QA,Y89p1Nxse~?0ya""Td,uOe!eAk)9"
2024-10-01 09:51:35 UTC	11977	IN	Data Raw: 16 7e 30 0c 90 10 8d 31 53 8d 4d c6 38 ee 79 11 a9 5c a9 94 26 f2 8e 36 97 76 b8 6a e4 a0 9a 56 c5 1c 51 b5 6c 74 f8 0b e9 0e 36 04 30 c5 58 f0 a5 6e 48 07 85 99 1f f6 e3 7c ab 22 eb a3 0e 01 91 54 ff bb 90 86 24 4f ad 15 a6 20 40 0a 3a 20 8a 5d 3b 4b 99 21 c9 9a 98 18 97 4d 6a 7a 7a 86 37 98 7e 57 8d df 11 a6 02 1f 48 62 b1 e1 bd f7 de fb 2c 81 1c 10 86 c6 d8 db 43 b2 8c 7e 63 63 85 9a ff 3b df 79 95 2e 72 d9 d8 30 b7 58 52 06 a0 01 86 06 00 06 4c 1a ea bd 7e ed 3a 33 59 fb 84 29 d8 c7 52 54 00 94 4d 96 b4 82 01 43 1e 48 23 c1 74 62 ac ab 0c 76 50 06 40 0a a4 d9 5b 9c 0e cf 15 4c 86 fb 70 84 19 1a 74 ed f6 37 d6 37 84 a9 02 48 b2 74 7f 08 f3 54 17 70 0c 32 ef 31 a4 e7 6f bf fd 07 31 81 ba 72 f9 8a 98 4b e1 fd 87 59 0e 7c 7e 2e 30 23 03 c6 0b 00 16 12 56 Data Ascii: ~01SM8y\&6vjVQlt60XnH\|"T$O @: ];K!Mjzz7~WHb,C~cc;y.r0XRL~:3Y)RTMCH#tbvP@[Lpt77HtTp21o1rKY\|~.0#V
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: b0 76 e2 c2 dd 1d 39 4c 73 b8 bf 44 e7 16 9a 34 bf d4 a2 a1 be 12 bd 78 68 80 aa dc 1d b4 aa c9 f5 7c 30 b7 45 5f 5c df e2 ef 1d 3a c0 d2 fe d7 8f 0c d0 34 83 22 30 e5 77 18 7c 7c c1 e0 ea 02 33 ed 18 82 57 0e f5 0b 20 f8 9c 35 12 d7 58 23 b1 b6 dd a5 a1 46 99 7e 72 72 90 86 18 1c bc c7 7d 3c 7f 73 93 16 78 2c e6 59 c3 d2 38 80 03 3e 1d c9 03 2c ba 96 79 81 98 99 ae d3 9f 71 1b 3e b9 bd 45 bf 66 60 f5 ec 62 93 81 43 97 3e bb b9 4d b7 56 db f4 ec 4c 9d 5e 3e d8 4f 57 b8 ef 1f de d8 a0 ad 9d ae 68 25 5e 67 2d cd 73 fb 1b 74 83 c7 eb 9d 4b 1b dc b6 0e 1d 61 ad cf 6b 07 fb a8 c5 bb d9 db 57 d7 69 8d 11 c6 20 b7 e7 83 3b 3b 74 8b cb 05 00 7b 93 c7 7b 83 01 c3 22 3f b3 cf 79 4c af 70 5f 36 19 d0 0c b1 d6 e9 e7 4f 0d 0a 18 7c 8f fb ff d9 ad 2d 79 87 c7 07 cb f4 Data Ascii: v9LsD4xh\|0E_\:4"0w\|\|3W 5X#F~rr}<sx,Y8>,yq>Ef`bC>MVL^>OWh%^g-stKakWi ;;t{{"?yLp_6O\|-y
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 16 04 18 e1 2a 54 a1 6b f1 eb ca 6e ac 8f 13 05 18 6d 9f c2 5c 7d d2 d3 8c 32 f7 21 ae 30 c2 20 86 70 08 05 ef 85 b9 6e 15 2d 3f 20 f5 8f 97 e6 b2 f0 b1 b0 b0 2a 5e 58 a4 86 58 3d 3e 4a e8 2d 4f e0 86 8a dc 4d ca 93 c6 a4 7a 5a 95 82 04 50 0f 26 16 fe 54 e6 5d 83 16 b1 c5 52 29 dc c3 66 86 61 59 df 58 13 ed a3 27 04 30 83 9a 16 66 77 8f 5f db f0 fc 08 5c 57 bb cb b7 db 74 79 f5 e6 b6 a7 60 1d 10 00 d9 33 81 2c 59 7a b4 28 bc 0e 27 33 5c 9a 12 d6 eb 02 84 e0 1a 6b eb eb f2 81 19 39 cc d8 2f 5f b9 22 c1 78 66 66 a6 59 a3 39 2e 96 1f 00 19 37 ae df 90 b3 8c e0 1f 1b 32 47 4a 6c 71 af 8c 61 34 4f 3c 3f 78 3d f8 d0 2e 2f 2d 4b 90 10 98 74 d6 c5 cc 5e 79 d9 d1 36 13 10 08 11 f3 70 54 41 a5 52 a3 30 4f d0 63 db 92 7d 32 22 6d ef 81 84 a5 f6 45 6f 85 c8 6c c0 bd Data Ascii: Tknm\}2!0 pn-? ^XX=>J-OMzZP&T]R)faYX'0fw_\Wty`3,Yz('3\k9/_"xffY9.72GJlqa4O<?x=./-Kt^y6pTAR0Oc}2"mEol
2024-10-01 09:51:35 UTC	11977	IN	Data Raw: ae d0 d6 1b d7 6f d0 95 ab 57 44 8b b1 b2 e2 8c 17 b4 43 37 b9 5d 77 ee 2c d0 f8 d8 38 9d 7e fa 34 0d 0d 0d ba a7 a8 5a b2 64 c9 92 a5 fb 4a 2a 68 26 a5 12 99 cb dd eb 31 74 e2 77 f8 69 e8 92 2f 95 17 93 23 bd 1b de b8 57 f2 ed a7 82 c2 6d 01 12 a5 b2 58 22 00 64 ac ad af d1 68 65 d4 39 fb c2 69 60 40 46 ef 0b e7 b0 c7 81 60 f2 05 61 5e 3a 40 8a f3 f0 41 4a 3c f1 3b 29 79 1e 93 9d 62 45 96 43 6e ae 88 9d 97 2e 50 0c 18 a0 56 5b d3 c5 1b db 54 62 80 70 62 b6 2e 40 a3 ab dc 4e 61 b0 60 13 66 06 3d 70 f2 ab 63 2b e6 5c 2f 19 50 e1 9e 9e ee 2a 18 04 32 84 85 8e 39 fd d1 51 60 42 a4 72 f2 e8 c0 24 b7 64 e9 61 11 d4 b8 08 57 d7 d7 07 73 a8 b0 79 0f de 1b 30 f2 4e 28 be 78 5e 80 0e 9c 1c 8a 45 e8 cb af be a4 df fc e6 37 c2 94 c3 4f 63 82 41 c3 0b cf bf 40 ef bd Data Ascii: oWDC7]w,8~4ZdJh&1twi/#WmX"dhe9i`@F`a^:@AJ<;)ybECn.PV[Tbpb.@Na`f=pc+\/P29Q`Br$daWsy0N(x^E7OcA@
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 2f 0d 09 57 77 24 1c c2 ba 76 1b 46 48 01 6e a7 8d df 87 d8 9f ab 9b 7d 14 50 28 1e a3 01 5b 3b 43 98 e9 50 a6 ba 3a dc c2 b6 76 06 9b b0 84 d6 92 eb 1b 7d f8 c1 b1 09 56 6e ac ef 0c e0 f8 5c 0b 4e 4f 91 32 43 52 c4 17 07 b5 cf 5b c9 65 68 ce a1 38 b4 1f ff e8 47 f0 ee bb bf 83 2f be f8 92 cf 91 ab f2 dd 3b 77 59 11 f2 da ab af c2 f7 be f7 bd e8 2a 55 02 95 5a 1c 52 fe 0f a0 80 77 1c 1d 52 ef e7 44 6b 1a f1 57 ab a8 04 23 fe c7 28 c9 88 57 fb f6 db 6f 99 bf 22 2b 01 29 87 49 78 a4 75 26 49 79 6e f5 c9 67 7d 47 ef 59 01 f7 ac 33 29 92 52 70 73 63 83 2d 2d b4 e6 d1 1f 09 13 74 0f d4 4f 12 92 c8 9a 4f eb 26 f5 b3 e6 6f cd 10 e8 a7 db 8e 7b 2d b8 4f 86 61 d3 f3 4d 36 d9 ca 12 66 59 1f 4b 99 53 36 d8 39 cd c4 24 c7 a9 70 90 c4 a5 fa 5c ba b4 3e ec 86 75 da 2e Data Ascii: /Ww$vFHn}P([;CP:v}Vn\NO2CR[eh8G/;wY*UZRwRDkW#(Wo"+)Ixu&Iyng}GY3)Rpsc--tOO&o{-OaM6fYKS69$p\>u.
2024-10-01 09:51:35 UTC	15989	IN	Data Raw: f4 6a d1 02 59 f8 ae 8a 9a c9 21 2a 0d 7a 76 a9 4d 3b f4 5f 73 80 12 99 a4 d8 0a e5 3a 45 7c d1 5a 5f c2 4c 5d c0 b1 c9 3a dc dc e8 03 dc dc 86 fb 3b 68 99 68 37 60 b2 55 87 ab 68 cd 38 24 55 b3 0d 64 f0 1b 43 f5 a3 b2 30 82 9f 33 4d 81 c2 45 0d 9a f8 c0 5b 78 a1 4d d6 91 86 ca 44 55 1e 0c 24 9d fb 11 e1 12 ce bd 09 61 a5 33 8b 78 46 b1 df 39 55 c9 41 5e 64 32 3d 74 f8 30 b4 9b 4d e5 ea e7 95 51 c8 9e 35 f2 77 36 2b 46 09 0d 54 b5 29 28 ad bb 28 a0 08 9d 4f cf a4 d6 4f d7 8a 32 e2 ef ea d1 98 38 be f2 7b b0 be 27 73 68 99 eb 69 e8 7e f2 68 cc c3 2f 7a 06 81 63 7d 40 ee 71 84 ed 9d 6d e8 f3 06 4c 2d 88 92 59 15 ec f7 79 21 a2 3a e2 58 78 76 21 94 f5 c2 60 74 63 c0 88 90 a6 59 15 93 61 4b 02 85 54 b2 b0 61 59 70 6e 14 c6 df 9c 1b 6a 5e 95 2c 1a 94 c3 d6 08 Data Ascii: jY!*zvM;_s:E\|Z_L]:;hh7`Uh8$UdC03ME[xMDU$a3xF9UA^d2=t0MQ5w6+FT)((OO28{'shi~h/zc}@qmL-Yy!:Xxv!`tcYaKTaYpnj^,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49781	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:34 UTC	854	OUT	GET /en/products/highq/_jcr_content/root/container/container/tabs/item_1665177418815/image_copy_copy.coreimg.png/1669639696841/234565.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=da/acpKOm105IIXHT74ekqAXMPd0ctqjkRhI3+TahoarY2EumsmR6oAwW8GauFimxFETkCLzWrfFULFTTitaTNi2Yczov2dXCAZGRi3BXTKDTor6AjWau/l5jYpA; AWSALBCORS=da/acpKOm105IIXHT74ekqAXMPd0ctqjkRhI3+TahoarY2EumsmR6oAwW8GauFimxFETkCLzWrfFULFTTitaTNi2Yczov2dXCAZGRi3BXTKDTor6AjWau/l5jYpA
2024-10-01 09:51:35 UTC	1752	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 130505 Connection: close Date: Tue, 01 Oct 2024 09:51:35 GMT Set-Cookie: AWSALB=C2zfbP+tNgM0zzTPn5n3HaVQLKDxvvFofYrQJuV3yRjJAHV3wHdSQFzpDtYLzVgo6EUSl3vWQx1977jTbL0ndIDUYuWYZXso04N7q3bKyntBm463m6rxziuAfvp6; Expires=Tue, 08 Oct 2024 09:51:35 GMT; Path=/ Set-Cookie: AWSALBCORS=C2zfbP+tNgM0zzTPn5n3HaVQLKDxvvFofYrQJuV3yRjJAHV3wHdSQFzpDtYLzVgo6EUSl3vWQx1977jTbL0ndIDUYuWYZXso04N7q3bKyntBm463m6rxziuAfvp6; Expires=Tue, 08 Oct 2024 09:51:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com Content-Disposition: inline; filename=234565.png X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Nov 2022 12:48:16 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:35 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "1fdc9-5ee8748fba400" X-Cache: Miss from cloudfront Via: 1.1 ca751e0315de05e656597e32136af94e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: OHJqIe7xUPhGxccCzr2EV269pSYXg99GtZdVbu2tfhGRqme6ptZwxg== Age: 2254406
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 18 00 00 01 be 08 06 00 00 00 10 a7 a2 be 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 01 fd 5e 49 44 41 54 78 01 ec 9d 05 a0 1d c5 f5 ff bf 73 9f 6b dc dd 20 09 04 48 42 80 60 41 92 e0 ee 56 9c 16 28 b5 5f 15 da ff af 5e fa 6b 8b 16 87 52 dc dd 3d 09 41 02 44 09 71 77 7d c9 4b f2 5c e6 3f 67 f6 ee bd 2b b3 76 ef de f7 ee 7b d9 d3 86 77 77 67 f6 b3 e3 73 ce 99 d9 5d c6 85 20 92 48 22 89 24 92 48 22 89 24 92 48 22 89 24 04 c9 45 24 91 44 12 49 24 91 44 12 49 24 91 b4 a2 34 56 55 61 fd db af a3 62 ce 2c 34 d7 d7 a1 d3 a8 83 d0 e7 e4 d3 50 d0 b5 1b 22 69 7b c2 a2 15 8c 48 22 89 24 92 48 22 89 24 Data Ascii: PNGIHDRpHYssRGBgAMAa^IDATxsk HB`AV(_^kR=ADqw}K\?g+v{wwgs] H"$H"$H"$E$DI$DI$4VUab,4P"i{H"$H"$
2024-10-01 09:51:35 UTC	15245	IN	Data Raw: 23 d3 48 7d 88 da 3f 19 57 b4 7d 94 94 63 72 6a 90 31 4f c6 c2 39 62 cc a3 2d 4f 54 df d4 c6 28 9d f2 2f 10 df 7b df 2c 57 5a 2f 17 c6 0f 09 3d 33 47 e7 9b b9 b6 36 da d0 d4 98 28 a4 c4 8a 83 f8 3f 6d ab a3 b4 d0 f8 78 d9 a5 97 c9 d5 26 a7 32 35 9a f9 46 86 b1 1f 52 fa 69 55 b2 aa 4a d4 33 d7 9e c9 33 96 bf 74 50 88 b1 92 da e1 15 42 79 fe ec f3 cf 84 63 a1 d2 a4 37 d1 1c 11 8b 69 fd 8c 56 0d 69 db d9 04 b1 5a a1 1b 72 3d 7b f4 c2 ec 39 b3 a5 f2 4f ce 1e 62 1a c7 d3 98 b8 67 be 38 a6 55 1f 5a 8d a2 15 53 96 a7 dd 9b ca 90 ca 99 5e 94 32 67 ee 1c b9 12 9f ec 5b c0 70 31 f6 d3 ca 05 6d a3 3b 55 28 f1 64 8c 9b c7 12 4d c6 8d 3b 58 8e 83 9f 7f f1 b9 2c b7 3c 51 6e f1 b5 63 a5 a8 18 c6 df 73 e7 ce 93 ab ed d4 f7 68 15 88 0c 22 99 a7 78 7f a4 78 b1 78 9d 53 ff Data Ascii: #H}?W}crj1O9b-OT(/{,WZ/=3G6(?mx&25FRiUJ33tPByc7iViZr={9Obg8UZS^2g[p1m;U(dM;X,<Qncsh"xxxS
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: a5 a5 bf ef be fb ca 36 b4 66 cd 1a f9 80 d4 c8 91 23 65 59 9d 74 f2 49 e8 d3 ab 0f 5e 7e f5 65 d4 d7 d5 e3 a2 8b 2f 46 51 61 a1 39 2f cc 29 8f 86 81 81 da 8a e1 b4 5e 66 d4 06 cf 3a eb 4c 74 11 f5 40 db 00 9f 7c f2 49 69 08 9d 72 ca 29 d2 8b 41 69 24 8f 04 bd 9e 79 f3 e6 cd 58 b8 70 21 46 8c 18 21 eb 81 1e e2 3a f5 d4 53 45 bb fe 10 47 89 3a 7a e7 9d 77 b0 75 cb 56 0c 1f 31 5c e6 e9 8b 2f be 10 cb a3 b5 38 45 dc 9c f2 42 79 3b e1 84 13 e4 47 7a 3e f8 e0 03 74 ef d6 0d 67 9e 75 96 63 5e cc 75 0b cf bc b4 36 c3 d6 fe c2 64 d0 a0 cb 3d 18 cc 3f c3 da 64 82 30 f4 70 27 06 77 c9 8b bc bf d3 3d 32 c1 40 78 0c ee 83 c1 8d e1 08 8f 01 27 06 e2 af 88 75 62 c0 d2 c6 7c 31 e0 ca e0 8a 70 3f 0c d5 b5 d6 70 79 79 16 30 d0 ce 19 b6 70 db b5 3c 30 03 3e 18 6e b1 f7 5a Data Ascii: 6f#eYtI^~e/FQa9/)^f:Lt@\|Iir)Ai$yXp!F!:SEG:zwuV1\/8EBy;Gz>tguc^u6d=?d0p'w=2@x'ub\|1p?pyy0p<0>nZ
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 4c fc b1 4f ec 6e e5 61 69 38 8e 0c 17 42 62 6a 70 62 d0 2f 7a 40 9d 1c 0b b4 25 88 56 74 e8 c5 23 34 c1 6c da b8 51 6e 6b a2 2d 4d da f6 34 67 86 3d 1d 96 be c0 2d a9 b4 c4 a7 fe e6 98 01 05 43 ea 31 06 46 a2 9d 59 8b 82 59 74 1e 8f 74 50 9f b2 e9 48 0e 3a 9f f9 9e e6 f2 d0 f5 29 6b 5e 68 8b 6e a2 46 b8 b5 bf 68 f3 56 2c 37 d7 a5 5a cd b3 8d 9e 2c 4a 77 7e 7e cc 94 4e 15 83 0c 7f 6d ce b7 33 f4 8b 68 ab 21 6d cb a2 95 12 b9 ca e1 91 0e eb b8 61 ec af 72 5b 9a b8 5f 49 dc 40 d0 59 72 9b 53 59 29 fc e8 6b 89 fa e0 9a 9e a7 c7 d3 0c 3b 24 18 da 1b f1 54 e9 4c 0a ed 6e 49 3a ee 9d 75 2d 67 06 37 45 4f 85 91 58 c1 08 2e ae c3 85 6f 06 bd 26 52 ae 60 b8 78 7b 22 89 a4 35 85 3c 54 eb 37 ac 97 cb e7 e4 f5 a2 e5 47 a5 e2 c1 34 2f 38 6d 09 22 6f 85 55 ec 2b 18 50 Data Ascii: LOnai8Bbjpb/z@%Vt#4lQnk-M4g=-C1FYYttPH:)k^hnFhV,7Z,Jw~~Nm3h!mar[_I@YrSY)k;$TLnI:u-g7EOX.o&R`x{"5<T7G4/8m"oU+P
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 1f 48 4b 4f a7 89 13 26 50 55 75 15 8d 67 f9 dd b5 6b 17 f5 eb db 97 4e 9f 39 23 1d 0e 04 14 90 85 db bc 79 b3 7c df c4 f6 cc d9 b3 67 69 f4 a8 d1 d2 71 b9 f9 50 36 4e aa 71 c4 f5 72 fc 95 f5 ad e3 28 f9 37 d5 12 e2 f0 d8 07 23 de 59 3c 3f 92 b0 b7 71 3e 4f 52 1c be 3c 11 90 9b 43 54 36 48 bf 68 f8 10 bd 3e 60 c8 00 a2 97 97 ca 28 ad 96 9d 45 da c2 39 64 7e f4 34 1e 20 ef 5a 40 74 ea ac fe 7c 6c 84 d1 ec 69 ba 03 d2 b5 ec 65 85 a4 80 9e 90 41 59 85 45 74 ea c8 01 3a 73 e6 24 1d 3c 7a 88 2e 94 9f a7 61 53 67 50 16 e4 89 7c 63 57 41 ac 16 7e e1 08 6e 69 96 ce 6d bd 48 a3 84 32 25 6c 78 49 27 03 97 f4 67 23 a9 6f 89 2e fb ef ad c4 56 d4 a4 f5 e3 63 33 a6 e8 f7 49 4f 93 8e 08 21 8a 0b 59 9f 30 96 1d ef 81 44 77 cd 73 3d b1 42 f7 82 96 9e 41 19 99 d9 72 91 82 Data Ascii: HKO&PUugkN9#y\|giqP6Nqr(7#Y<?q>OR<CT6Hh>`(E9d~4 Z@t\|lieAYEt:s$<z.aSgP\|cWA~nimH2%lxI'g#o.Vc3IO!Y0Dws=BAr
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 36 42 da 68 2a 2b 56 60 10 0b 22 8c b2 eb dc 41 11 c5 87 27 7d e9 7a ad 1c 34 6a 63 9e 38 8c fb bf 61 c5 fd 34 1b da 2b 77 ea 9d ef d3 0f 4c 90 ef 91 0d c1 b3 ed e3 8e 32 a8 4f 01 fd 7f 6c 84 4c 1d d9 47 3a 1f ff fb d9 d9 b4 90 3b 3f 9c 81 59 e3 fa d1 5e 8e 0c cc 1e db 9f 46 b2 f0 41 11 cc e2 ce 84 08 2b d2 60 59 19 fa d7 0e 01 42 24 03 c6 21 06 20 18 36 7f f1 ec 2c 1a cd d7 20 ca b6 8f b9 30 88 dc c7 8a c3 18 a8 e7 8c eb cf c6 5c 4f d9 f9 5c 4e 26 0b e6 17 1f 99 22 0d 3f 78 ba bf e5 ce f7 57 9f 9c 2d b3 1d 12 96 ac 16 06 b1 8f de 39 4a 46 b6 70 ff 9e f9 59 34 7a 70 31 3d 38 77 18 25 84 8e 1a f5 dd 80 43 8b 70 c6 33 7f 27 b4 b0 cb 28 37 3b 5d ca c5 c4 61 25 d2 18 c2 3f 38 10 ff f7 f7 e7 d1 92 59 65 32 35 0b c5 f5 67 4f 4d 97 ce 21 14 e2 ac 31 7d a5 72 9f Data Ascii: 6Bh*+V`"A'}z4jc8a4+wL2OlLG:;?Y^FA+`YB$! 6, 0\O\N&"?xW-9JFpY4zp1=8w%Cp3'(7;]a%?8Ye25gOM!1}r
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 47 ec 6d 62 cc c1 1c cd 2b 7f 4a 2d 2b 7f 4c 09 e1 06 7f 3d 86 9a 6d dd f0 2a e5 7e f1 87 94 56 32 c8 bb 69 d0 f7 e1 fd b1 83 39 ac cb 2d 46 e5 b0 04 64 6f 09 87 f0 e6 b0 9d b3 5c a4 c1 71 bb 49 93 01 53 b4 17 25 75 61 14 19 4b 69 8e b0 e6 b7 80 23 98 38 6e 50 e9 f5 b6 9a ab 8d b1 7a 94 ab bf 10 29 bf 43 a1 6b c1 29 e3 56 58 65 5d 76 06 87 42 50 50 48 21 44 b2 b5 42 2e 4a 86 c3 dc 47 dc ab 4f 68 46 f4 4d 73 b2 79 df 24 90 83 02 38 34 df 33 11 38 bc a2 0e c1 1c 5a 08 87 96 08 87 88 47 63 3b 8b 43 54 5e b0 5d e3 fe e1 3d bc cb 90 c1 bb a3 1c c6 ea cb a2 ae 82 da ab 2f eb 0e 87 e6 6a 14 f8 7d 38 67 7e fa 0b ab 85 43 24 c1 21 6e 31 87 e6 c3 61 39 e7 c5 e1 0f 2d e0 68 62 1c a2 ab 73 88 10 0e e1 af 17 3a 85 43 eb 44 0e f2 e7 a0 5b c4 41 81 1c b1 b7 f6 ff e8 d7 Data Ascii: Gmb+J-+L=m*~V2i9-Fdo\qIS%uaKi#8nPz)Ck)VXe]vBPPH!DB.JGOhFMsy$8438ZGc;CT^]=/j}8g~C$!n1a9-hbs:CD[A
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 5e e1 e0 f6 1c a6 bc 20 67 5e 5e 2e 46 8c 2c 96 2f 55 bf 23 74 0a 0a bd 01 2d 5e 4a 68 e6 48 48 05 0b b5 59 6e 30 c0 cd ca 99 17 2e 5e ac 73 54 f8 28 7e 46 6a 7a 2a 14 2e 5f 0c 1d 5a 24 0c cc 59 52 ce ae bf fe 7a 7d c1 eb 98 31 63 e4 df 7a e1 dd 3a 76 ec 18 66 cc 9c e1 ca 43 d3 ea 66 09 03 83 a6 9d 90 e7 e3 b3 9f fd 2c 1e 7e f8 61 cc 9d 37 0f 59 99 99 78 fb ed b7 f1 a5 2f 7d 09 f5 c2 d3 e1 06 6e 90 71 3b 68 b2 ce f5 78 19 dc 70 9c fb 5b 98 fa fa ec 1c fb 69 50 03 07 0e c0 e1 23 87 95 81 71 19 63 e2 c4 89 38 74 e8 10 46 8e 1c 29 bc 0f 4b f5 74 f2 ae d1 df 6b af be 8a 8e ae 4e e1 c5 1d e9 ca d3 dc dc 82 82 82 02 69 98 67 67 67 e3 9a ab af c6 c3 bf ff 3d 3e f3 e9 4f a3 fc 54 39 26 4c 9c 80 c2 c2 c2 5e d3 f9 92 8c 65 6c 0f b4 1d cb b7 87 5d 0e f3 c3 c1 ba c3 Data Ascii: ^ g^^.F,/U#t-^JhHHYn0.^sT(~Fjz*._Z$YRz}1cz:vfCf,~a7Yx/}nq;hxp[iP#qc8tF)KtkNiggg=>OT9&L^el]
2024-10-01 09:51:35 UTC	572	IN	Data Raw: e1 cd c1 3d ea 11 15 07 22 e7 80 0f 0e f4 21 0e fb 14 2f 0e 44 cc e1 87 24 3e 1c 88 98 c3 93 5b bf 31 fe 35 16 cf f9 ba a6 7c 86 55 73 47 a0 fc 7c 23 6e 5e 34 4a a6 ac 9a 33 02 7b 4f d6 e2 2b 37 4f c3 c7 e6 8d c0 b9 8b 2d 58 3a 6d 28 9a da da 71 c7 f2 31 98 5a 52 88 29 c2 f3 31 4d 7c 66 67 24 e3 be 1b 26 0b 43 24 1b 77 af 9e 88 6b 66 0f 97 3b 96 2c 9f 51 84 94 e4 a4 f0 d3 29 d8 20 16 da 68 df d5 68 99 57 e3 f7 bc b4 18 5e 7b ff 7e 14 0a 3d 00 ce e0 43 c7 61 a6 7c d5 87 2a 24 12 7a 53 e7 4b 32 77 b0 d6 16 c2 9d 3b 60 6e 28 e8 ca 81 e8 39 cc b3 38 ec c1 a2 e1 60 8a c3 93 03 97 29 87 9f 73 38 95 61 1e 1c c1 7c df e7 81 e7 56 b5 61 e3 c2 5d 1c c7 ce d4 4b c3 40 e3 1a 9c 9f 81 b6 4b 1d 68 68 69 c7 c9 73 0d c2 90 48 c5 c8 c1 39 68 6a ed 14 c6 45 3e 8e 9e ae 43 Data Ascii: ="!/D$>[15\|UsG\|#n^4J3{O+7O-X:m(q1ZR)1M\|fg$&C$wkf;,Q) hhW^{~=Ca\|*$zSK2w;`n(98`)s8a\|Va]K@KhhisH9hjE>C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49783	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	427	OUT	GET /consent/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:35 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:35 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8cbb8e14f98603d5-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 50775 Cache-Control: public, max-age=86400 Expires: Wed, 02 Oct 2024 09:51:35 GMT Last-Modified: Tue, 05 Sep 2023 21:16:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: K/T1ymWYJPDwk2wohaRhSQ== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 41b0fe64-c01e-0042-3c43-148003000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-01 09:51:35 UTC	387	IN	Data Raw: 31 37 65 32 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 30 38 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 38 38 66 39 Data Ascii: 17e2{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202308.1.0","OptanonDataJSON":"88f9
2024-10-01 09:51:35 UTC	1369	IN	Data Raw: 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 66 36 30 63 30 36 35 2d 35 65 61 34 2d 34 39 61 37 2d 38 65 34 30 2d 30 35 30 31 34 32 36 64 30 33 35 66 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 4f 70 74 20 49 6e 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 74 77 22 2c 22 6d 61 22 2c 22 69 6e 22 2c 22 6a 70 22 2c 22 6b 72 22 2c 22 7a 61 22 2c 22 63 6c 22 2c 22 6d 79 22 2c 22 63 6f 22 2c 22 63 61 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 Data Ascii: eckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"0f60c065-5ea4-49a7-8e40-0501426d035f","Name":"Global Opt In","Countries":["tw","ma","in","jp","kr","za","cl","my","co","ca"],"States":{},"LanguageSwitcherPlaceholde
2024-10-01 09:51:35 UTC	1369	IN	Data Raw: 69 6c 22 2c 22 69 6d 22 2c 22 69 6f 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d 22 2c 22 6d 6e 22 2c 22 6d 6f 22 2c 22 6d 70 22 2c 22 6d 72 22 2c 22 6d 73 22 2c 22 6d 75 22 2c 22 6d 76 22 2c 22 6d 77 22 2c 22 6d 78 22 2c 22 6d 7a 22 2c 22 6e 61 22 2c 22 6e 63 22 2c 22 6e 65 22 2c 22 6e 66 22 2c 22 6e 67 22 2c 22 6e 69 22 2c 22 6e 70 22 2c 22 Data Ascii: il","im","io","iq","ir","zm","je","zw","jm","jo","ke","kg","kh","ki","km","kn","kp","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","md","me","mg","mh","mk","ml","mm","mn","mo","mp","mr","ms","mu","mv","mw","mx","mz","na","nc","ne","nf","ng","ni","np","
2024-10-01 09:51:35 UTC	1369	IN	Data Raw: 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 32 63 37 34 31 33 37 62 2d 62 38 66 33 2d 34 33 36 66 2d 38 32 34 65 2d 61 66 35 35 39 62 31 36 37 63 36 30 22 2c 22 4e 61 6d 65 22 3a 22 55 53 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 63 74 22 2c 22 63 61 22 2c 22 74 6e 22 2c 22 63 6f 22 2c 22 76 61 22 2c 22 69 61 22 2c 22 69 6e 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 Data Ascii: se,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template","Conditions":[],"GCEnable":false,"IsGPPEnabled":false},{"Id":"2c74137b-b8f3-436f-824e-af559b167c60","Name":"US","Countries":[],"States":{"us":["ct","ca","tn","co","va","ia","in"]},"Languag
2024-10-01 09:51:35 UTC	1369	IN	Data Raw: 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 33 2d 30 39 2d 30 35 54 32 31 3a 31 36 3a 32 30 2e 38 37 36 33 32 32 37 34 32 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 33 2d 30 39 2d 30 35 54 32 31 3a 31 36 3a 32 30 2e 38 37 36 33 32 37 32 34 32 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 Data Ascii: VendorListUrl":"https://cdn.cookielaw.org/vendorlist/iabData.json"},"IabV2Data":{"cookieVersion":"1","createdTime":"2023-09-05T21:16:20.876322742","updatedTime":"2023-09-05T21:16:20.876327242","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLang
2024-10-01 09:51:35 UTC	259	IN	Data Raw: 2d 34 66 34 62 2d 62 35 32 37 2d 37 66 39 34 64 30 64 65 36 62 62 63 22 2c 22 45 6e 76 49 64 22 3a 22 61 70 70 2d 70 72 6f 64 22 2c 22 52 65 6d 6f 74 65 41 63 74 69 6f 6e 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 47 65 6f 52 75 6c 65 47 72 6f 75 70 4e 61 6d 65 22 3a 22 55 6e 69 76 65 72 73 61 6c 20 22 2c 22 47 41 54 72 61 63 6b 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 47 41 54 72 61 63 6b 41 73 73 69 67 6e 65 64 43 61 74 65 67 6f 72 79 22 3a 22 41 53 22 2c 22 57 65 62 46 6f 72 6d 49 6e 74 65 67 72 61 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 57 65 62 46 6f 72 6d 53 72 63 55 72 6c 22 3a 22 22 2c 22 57 65 62 46 6f 72 6d 57 6f 72 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 Data Ascii: -4f4b-b527-7f94d0de6bbc","EnvId":"app-prod","RemoteActionsEnabled":false,"GeoRuleGroupName":"Universal ","GATrackToggle":true,"GATrackAssignedCategory":"AS","WebFormIntegrationEnabled":false,"WebFormSrcUrl":"","WebFormWorkerUrl":"","GppData":{"cmpId":"28"
2024-10-01 09:51:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49782	104.18.32.137	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	615	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:35 UTC	370	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:35 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cbb8e14f8f941f5-EWR
2024-10-01 09:51:35 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49786	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	1117	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/apps-icon-v1.5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:35 UTC	1308	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1416 Connection: close Date: Tue, 01 Oct 2024 09:06:52 GMT Set-Cookie: AWSALB=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7; Expires=Tue, 08 Oct 2024 09:06:52 GMT; Path=/ Set-Cookie: AWSALBCORS=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7; Expires=Tue, 08 Oct 2024 09:06:52 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "588-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:21:52 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5a2cb96a37aeca3f9626798c4e9dab28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: M2BoeTTwnrz2J2ltG57e-3LtTkVhUHO6RJGsHqQwJpgUimj9-ukzyA== Age: 2682
2024-10-01 09:51:35 UTC	1416	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 32 2e 32 35 43 31 20 31 2e 35 36 32 35 20 31 2e 35 33 31 32 35 20 31 20 32 2e 32 35 20 31 48 33 2e 37 35 43 34 2e 34 33 37 35 20 31 20 35 20 31 2e 35 36 32 35 20 35 20 32 2e 32 35 56 33 2e 37 35 43 35 20 34 2e 34 36 38 37 35 20 34 2e 34 33 37 35 20 35 20 33 2e 37 35 20 35 48 32 2e 32 35 43 31 2e 35 33 31 32 35 20 35 20 31 20 34 2e 34 36 38 37 35 20 31 20 33 2e 37 35 56 32 2e 32 35 5a 4d 31 20 37 2e 32 35 43 31 20 36 2e 35 36 32 35 20 31 Data Ascii: <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 2.25C1 1.5625 1.53125 1 2.25 1H3.75C4.4375 1 5 1.5625 5 2.25V3.75C5 4.46875 4.4375 5 3.75 5H2.25C1.53125 5 1 4.46875 1 3.75V2.25ZM1 7.25C1 6.5625 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49784	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	988	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-dependencies.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC
2024-10-01 09:51:35 UTC	1312	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 1043927 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=gRTRpPoAWYWch0zgyIHqDR8aN7lasxnRXV7cCjm/tb+DbQHKwfowKeLmORRC/H7LHQscCyYx3o58DsGgmiuNIspslR8qUYACjS+rczpbbZsJ/Sbk4BeSpnTJNJN0; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=gRTRpPoAWYWch0zgyIHqDR8aN7lasxnRXV7cCjm/tb+DbQHKwfowKeLmORRC/H7LHQscCyYx3o58DsGgmiuNIspslR8qUYACjS+rczpbbZsJ/Sbk4BeSpnTJNJN0; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT ETag: "fedd7-622c22f032900" Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1e53d5f889e2ac50f0d7b6cad073c03e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: _HsN3zntRdHb15tgRL0wRUwHlS3mMq8PcjuyTpwBwLHC6tl1_0RH5w== Age: 414
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 72 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6f 2c 65 2c 6c 3d 74 5b 30 5d 2c 69 3d 74 5b 31 5d 2c 70 3d 30 2c 6e 3d 5b 5d 3b 70 3c 6c 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 65 3d 6c 5b 70 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 65 29 26 26 61 5b 65 5d 26 26 6e 2e 70 75 73 68 28 61 5b 65 5d 5b 30 5d 29 2c 61 5b 65 5d 3d 30 3b 66 6f 72 28 6f 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6f 29 26 26 28 72 5b 6f 5d 3d 69 5b 6f 5d 29 3b 66 6f 72 28 68 26 26 68 28 74 29 3b 6e 2e 6c 65 6e 67 74 68 3b 29 6e 2e 73 68 69 66 74 28 29 28 29 Data Ascii: !function(r){function t(t){for(var o,e,l=t[0],i=t[1],p=0,n=[];p<l.length;p++)e=l[p],Object.prototype.hasOwnProperty.call(a,e)&&a[e]&&n.push(a[e][0]),a[e]=0;for(o in i)Object.prototype.hasOwnProperty.call(i,o)&&(r[o]=i[o]);for(h&&h(t);n.length;)n.shift()()
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 48 28 6b 72 2c 22 61 70 70 6c 6f 61 64 22 2c 7b 64 65 74 61 69 6c 3a 7b 6e 61 6d 65 73 70 61 63 65 3a 61 2e 61 7d 7d 29 29 7d 2c 72 72 3d 28 72 2c 74 2c 6f 29 3d 3e 7b 69 66 28 72 26 26 72 5b 74 5d 29 74 72 79 7b 72 65 74 75 72 6e 20 72 5b 74 5d 28 6f 29 7d 63 61 74 63 68 28 72 29 7b 62 72 28 72 29 7d 7d 2c 74 72 3d 28 72 2c 74 29 3d 3e 72 26 26 72 2e 74 68 65 6e 3f 72 2e 74 68 65 6e 28 74 29 3a 74 28 29 2c 6f 72 3d 72 3d 3e 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 79 64 72 61 74 65 64 22 29 2c 61 72 3d 28 72 2c 74 2c 6f 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 66 72 28 72 29 2c 6c 3d 65 2e 24 68 6f 73 74 45 6c 65 6d 65 6e 74 24 2c 69 3d 65 2e 24 69 6e 73 74 61 6e 63 65 56 61 6c 75 65 73 24 2e 67 65 74 28 74 29 2c 70 3d 65 2e 24 66 6c 61 67 Data Ascii: H(kr,"appload",{detail:{namespace:a.a}}))},rr=(r,t,o)=>{if(r&&r[t])try{return r[t](o)}catch(r){br(r)}},tr=(r,t)=>r&&r.then?r.then(t):t(),or=r=>r.classList.add("hydrated"),ar=(r,t,o,a)=>{const e=fr(r),l=e.$hostElement$,i=e.$instanceValues$.get(t),p=e.$flag
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 20 32 76 32 30 4d 32 32 20 31 32 48 32 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 72 53 76 67 45 52 65 6d 6f 76 65 3d 76 6f 69 64 20 30 2c 74 2e 54 72 53 76 67 45 52 65 6d 6f 76 65 3d 7b 6e 61 6d 65 3a 22 65 5f 72 65 6d 6f 76 65 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 67 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 Data Ascii: 2v20M22 12H2"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TrSvgERemove=void 0,t.TrSvgERemove={name:"e_remove",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><g stroke-linecap="round" s
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 32 20 30 20 30 30 32 20 32 6c 31 38 2d 31 38 4c 32 20 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 72 53 76 67 46 6c 61 67 42 77 3d 76 6f 69 64 20 30 2c 74 2e 54 72 53 76 67 46 6c 61 67 42 77 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 62 77 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 Data Ascii: 2 0 002 2l18-18L2 6z"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TrSvgFlagBw=void 0,t.TrSvgFlagBw={name:"flag_bw",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><g class="nc-icon-wrapp
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 72 53 76 67 46 6c 61 67 45 72 3d 76 6f 69 64 20 30 2c 74 2e 54 72 53 76 67 46 6c 61 67 45 72 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 65 72 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 37 39 39 42 33 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 31 2d 32 20 32 48 32 61 32 20 32 20 30 20 30 31 2d 32 2d Data Ascii: ict";Object.defineProperty(t,"__esModule",{value:!0}),t.TrSvgFlagEr=void 0,t.TrSvgFlagEr={name:"flag_er",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><g class="nc-icon-wrapper"><path fill="#1799B3" d="M48 40a2 2 0 01-2 2H2a2 2 0 01-2-
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 34 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 64 3d 22 4d 31 37 2e 38 20 31 38 2e 37 6c 2d 31 2e 37 2d 33 2e 39 20 31 2e 34 2d 32 2e 32 20 31 2e 39 2e 37 20 31 2e 33 2d 31 2e 35 20 31 2e 38 20 31 20 31 2e 36 2d 31 2e 33 20 31 2e 36 20 31 2e 33 20 31 2e 38 2d 31 20 31 2e 33 20 31 2e 35 20 31 2e 39 2d 2e 37 20 31 2e 34 20 32 2e 32 2d 31 2e 37 20 33 2e 39 2d 2e 35 2d 2e 32 63 2d 2e 37 2d 2e 33 2d 31 2e 35 2d 2e 36 2d 32 2e 32 2d 2e 38 2d 2e 38 2d 2e 32 2d 31 2e 35 2d 2e 33 2d 32 2e 33 2d 2e 34 2d 2e 38 2d 2e 31 2d 31 2e 36 2d 2e 31 2d 32 2e 34 20 30 2d 2e 38 2e 31 2d 31 2e 36 2e 32 2d 32 2e 33 2e 34 2d 2e 38 2e 32 2d 31 2e 35 2e 35 2d 32 2e 32 2e 38 6c 2d 2e 37 2e 32 7a 6d 2d 2e 36 2d 33 2e 38 6c 31 2e 31 20 32 2e 35 63 2e 36 2d 2e 33 Data Ascii: 4z"/><path fill="#FFF" d="M17.8 18.7l-1.7-3.9 1.4-2.2 1.9.7 1.3-1.5 1.8 1 1.6-1.3 1.6 1.3 1.8-1 1.3 1.5 1.9-.7 1.4 2.2-1.7 3.9-.5-.2c-.7-.3-1.5-.6-2.2-.8-.8-.2-1.5-.3-2.3-.4-.8-.1-1.6-.1-2.4 0-.8.1-1.6.2-2.3.4-.8.2-1.5.5-2.2.8l-.7.2zm-.6-3.8l1.1 2.5c.6-.3
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 68 20 66 69 6c 6c 3d 22 23 65 61 63 35 32 61 22 20 64 3d 22 4d 32 34 20 32 35 4c 31 32 20 33 38 68 32 34 4c 32 34 20 32 35 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 72 53 76 67 46 6c 61 67 4c 69 3d 76 6f 69 64 20 30 2c 74 2e 54 72 53 76 67 46 6c 61 67 4c 69 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 6c 69 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c Data Ascii: h fill="#eac52a" d="M24 25L12 38h24L24 25z"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TrSvgFlagLi=void 0,t.TrSvgFlagLi={name:"flag_li",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><
2024-10-01 09:51:35 UTC	10034	IN	Data Raw: 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 31 34 36 38 43 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 31 2d 32 20 32 48 32 61 32 20 32 20 30 20 30 31 2d 32 2d 32 56 33 30 68 34 38 76 31 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 36 45 36 45 36 22 20 64 3d 22 4d 30 20 31 38 68 34 38 76 31 32 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 41 45 31 43 32 37 22 20 64 3d 22 4d 34 38 20 31 38 48 30 56 38 61 32 20 32 20 30 20 30 31 32 2d 32 68 34 34 61 32 20 32 20 30 20 30 31 32 20 32 76 31 30 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 Data Ascii: x="0 0 48 48"><g class="nc-icon-wrapper"><path fill="#21468C" d="M48 40a2 2 0 01-2 2H2a2 2 0 01-2-2V30h48v10z"/><path fill="#E6E6E6" d="M0 18h48v12H0z"/><path fill="#AE1C27" d="M48 18H0V8a2 2 0 012-2h44a2 2 0 012 2v10z"/></g></svg>'}},function(r,t,o){"use
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 36 46 31 42 33 44 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 31 2d 32 20 32 48 31 36 56 36 68 33 30 61 32 20 32 20 30 20 30 31 32 20 32 76 33 32 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 36 45 36 45 36 22 20 64 3d 22 4d 31 36 20 31 36 6c 36 2d 34 2d 36 2d 34 56 36 48 32 61 32 20 32 20 30 20 30 30 2d 32 20 32 76 33 32 61 32 20 32 20 30 20 30 30 32 20 32 68 31 34 76 2d 32 6c 36 2d 34 2d 36 2d 34 20 36 2d 34 2d 36 2d 34 20 36 2d 34 2d 36 2d 34 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 Data Ascii: ="nc-icon-wrapper"><path fill="#6F1B3D" d="M48 40a2 2 0 01-2 2H16V6h30a2 2 0 012 2v32z"/><path fill="#E6E6E6" d="M16 16l6-4-6-4V6H2a2 2 0 00-2 2v32a2 2 0 002 2h14v-2l6-4-6-4 6-4-6-4 6-4-6-4z"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProper
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 31 2e 36 34 34 20 31 2e 34 33 37 2d 2e 38 31 36 20 31 2e 34 33 38 2e 38 31 36 2d 2e 34 30 34 2d 31 2e 36 34 34 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 72 2d 73 76 67 2d 73 74 6f 72 65 2d 66 6c 61 67 2d 62 62 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 43 33 32 41 22 20 64 3d 22 4d 31 34 20 36 68 32 30 76 33 36 48 31 34 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 38 32 32 37 46 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 31 2d 32 20 32 48 33 34 56 36 68 31 32 61 32 20 32 20 30 20 30 31 32 20 32 76 33 32 7a 4d 31 34 20 34 32 48 32 61 32 20 Data Ascii: 1.644 1.437-.816 1.438.816-.404-1.644z"/></g></symbol><symbol id="tr-svg-store-flag-bb" viewBox="0 0 48 48"><g class="nc-icon-wrapper"><path fill="#FFC32A" d="M14 6h20v36H14z"/><path fill="#08227F" d="M48 40a2 2 0 01-2 2H34V6h12a2 2 0 012 2v32zM14 42H2a2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49788	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	996	OUT	GET /etc.clientlibs/emcm/components/structure/page/tracking-clientlibs.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC
2024-10-01 09:51:35 UTC	1306	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 352 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=67Vu+t6te46udB8PdJVk/C6S54FdmW8HfwD64yI0tBSTfmJx+u+70Rppf2DjKd94/EiAeqwfTfNcA9V9rdQAff/yKcPwfXCtYk7U3XmC/F0oL/3gCHwfX3FoDGkp; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=67Vu+t6te46udB8PdJVk/C6S54FdmW8HfwD64yI0tBSTfmJx+u+70Rppf2DjKd94/EiAeqwfTfNcA9V9rdQAff/yKcPwfXCtYk7U3XmC/F0oL/3gCHwfX3FoDGkp; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Tue, 26 Oct 2021 09:16:42 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "160-5cf3def855280" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab3010c44069f62a66a4882fcd391e60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: sduoFsE66bFGDYrujUFG_O0f36Gz59WVLppUbged5WqM3alJUl-_0w== Age: 414
2024-10-01 09:51:35 UTC	352	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 62 28 65 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 62 28 22 2e 63 68 61 74 42 6f 74 54 72 61 63 6b 69 6e 67 56 61 72 69 61 62 6c 65 73 22 29 2c 63 3d 61 2e 64 61 74 61 28 22 74 72 61 63 6b 69 6e 67 2d 63 61 6d 70 61 69 67 6e 2d 63 6f 64 65 22 29 2c 64 3d 61 2e 64 61 74 61 28 22 74 72 61 63 6b 69 6e 67 2d 63 68 61 6e 6e 65 6c 2d 63 6f 64 65 22 29 3b 61 3d 61 2e 64 61 74 61 28 22 74 72 61 63 6b 69 6e 67 2d 73 66 64 63 2d 63 6f 64 65 22 29 3b 74 72 79 7b 63 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 63 69 64 22 2c 63 29 2c 64 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 63 68 6c 22 2c Data Ascii: (function(e,b){b(e).ready(function(){var a=b(".chatBotTrackingVariables"),c=a.data("tracking-campaign-code"),d=a.data("tracking-channel-code");a=a.data("tracking-sfdc-code");try{c&&window.localStorage.setItem("cid",c),d&&window.localStorage.setItem("chl",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49791	3.233.158.33	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	935	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=5e76064b-fed2-4d09-b0dc-364dc1c2cb04&batch_time=1727776294082 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16164 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:35 UTC	16164	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 31 7d 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 32 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 65 35 33 34 33 36 34 2d 37 30 31 63 2d 34 64 35 36 2d 62 34 62 65 2d 30 32 30 61 37 65 30 33 65 66 61 32 22 7d 2c 22 64 61 74 65 22 3a 31 37 32 37 37 37 36 32 38 38 33 31 37 2c 22 73 65 72 76 69 63 65 22 3a 22 6c 65 67 61 6c 2e 74 68 6f 6d Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":1},"configuration":{"session_sample_rate":100,"session_replay_sample_rate":20},"discarded":false},"application":{"id":"fe534364-701c-4d56-b4be-020a7e03efa2"},"date":1727776288317,"service":"legal.thom
2024-10-01 09:51:35 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 5e76064b-fed2-4d09-b0dc-364dc1c2cb04 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Tue, 01 Oct 2024 09:51:35 GMT connection: close
2024-10-01 09:51:35 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 35 65 37 36 30 36 34 62 2d 66 65 64 32 2d 34 64 30 39 2d 62 30 64 63 2d 33 36 34 64 63 31 63 32 63 62 30 34 22 7d Data Ascii: {"request_id":"5e76064b-fed2-4d09-b0dc-364dc1c2cb04"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49785	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	980	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC
2024-10-01 09:51:35 UTC	1311	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 140139 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=RohfDQQWjIt7lJ/S190ONdtME2IX3V8rt9Qu51Mnmm3yA4UpqTLZP3ReHLB1WJ9jtRq1Qk4uM6Pyldsvzy1XF7Bki2eKSXIebcAAlNb0WO1TinTbyQSNNDruMEIH; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=RohfDQQWjIt7lJ/S190ONdtME2IX3V8rt9Qu51Mnmm3yA4UpqTLZP3ReHLB1WJ9jtRq1Qk4uM6Pyldsvzy1XF7Bki2eKSXIebcAAlNb0WO1TinTbyQSNNDruMEIH; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT ETag: "2236b-622c22f032900" Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c968eb4bd5f1a91dae1c71eba1ef9d56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: Y1OD0L_53geIVOY3UVHNdQNfIbma2yZNWNbzTc50M72VAo4iKE9O2Q== Age: 414
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 3d 30 7c 70 28 65 2c 6e 29 2c 69 3d 28 74 3d 73 28 74 2c 72 29 29 2e 77 72 69 74 65 28 65 2c 6e 29 3b 69 21 3d 3d 72 26 26 28 74 3d 74 2e 73 6c 69 63 65 28 30 2c 69 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 74 2c 65 2c 6e 29 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 63 2e 69 73 42 75 66 66 65 72 28 65 29 29 7b 76 61 72 20 6e 3d 30 7c 68 28 65 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 3d 73 28 74 2c 6e 29 29 2e 6c 65 6e 67 74 68 7c 7c 65 2e 63 6f 70 79 28 74 2c 30 2c 30 2c 6e 29 2c 74 7d 69 66 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 65 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 7c 7c 22 6c 65 6e 67 Data Ascii: =0\|p(e,n),i=(t=s(t,r)).write(e,n);i!==r&&(t=t.slice(0,i));return t}(t,e,n):function(t,e){if(c.isBuffer(e)){var n=0\|h(e.length);return 0===(t=s(t,n)).length\|\|e.copy(t,0,0,n),t}if(e){if("undefined"!=typeof ArrayBuffer&&e.buffer instanceof ArrayBuffer\|\|"leng
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 69 73 2e 6c 65 6e 67 74 68 26 26 28 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 2e 6c 65 6e 67 74 68 2d 65 3c 72 2d 6e 26 26 28 72 3d 74 2e 6c 65 6e 67 74 68 2d 65 2b 6e 29 3b 76 61 72 20 69 2c 6f 3d 72 2d 6e 3b 69 66 28 74 68 69 73 3d 3d 3d 74 26 26 6e 3c 65 26 26 65 3c 72 29 66 6f 72 28 69 3d 6f 2d 31 3b 69 3e 3d 30 3b 2d 2d 69 29 74 5b 69 2b 65 5d 3d 74 68 69 73 5b 69 2b 6e 5d 3b 65 6c 73 65 20 69 66 28 6f 3c 31 65 33 7c 7c 21 63 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 66 6f 72 28 69 3d 30 3b 69 3c 6f 3b 2b 2b 69 29 74 5b 69 2b 65 5d 3d 74 68 69 73 5b 69 2b 6e 5d 3b 65 6c 73 65 20 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 2e 63 61 6c 6c 28 74 2c 74 68 69 73 2e 73 75 62 61 72 72 61 79 28 6e 2c 6e Data Ascii: is.length&&(r=this.length),t.length-e<r-n&&(r=t.length-e+n);var i,o=r-n;if(this===t&&n<e&&e<r)for(i=o-1;i>=0;--i)t[i+e]=this[i+n];else if(o<1e3\|\|!c.TYPED_ARRAY_SUPPORT)for(i=0;i<o;++i)t[i+e]=this[i+n];else Uint8Array.prototype.set.call(t,this.subarray(n,n
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 74 2e 61 64 64 28 22 72 65 73 70 6f 6e 73 69 76 65 2d 6d 6f 64 65 22 29 7d 2c 74 68 69 73 2e 6f 6e 43 6c 69 63 6b 50 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 73 77 69 74 63 68 28 65 2e 76 69 64 65 6f 48 65 72 6f 43 6f 76 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 65 2e 70 61 72 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6c 61 79 2d 76 69 64 65 6f 22 29 2c 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 64 65 6f 2d 68 65 72 6f 2d 70 6c 61 79 22 29 29 7b 63 61 73 65 22 79 6f 75 74 75 62 65 22 3a 65 2e 76 69 64 65 6f 59 6f 75 74 75 62 65 50 6c 61 79 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 76 69 64 79 61 72 64 22 3a 65 Data Ascii: t.add("responsive-mode")},this.onClickPlay=function(t){var n=t.currentTarget;switch(e.videoHeroCover.style.display="none",e.parent.classList.add("play-video"),n.getAttribute("data-video-hero-play")){case"youtube":e.videoYoutubePlay();break;case"vidyard":e
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 2e 70 61 74 68 6e 61 6d 65 7d 7d 72 65 74 75 72 6e 20 6e 3d 72 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 45 2e 61 2e 69 73 53 74 72 69 6e 67 28 74 29 3f 72 28 74 29 3a 74 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 63 6f 6c 3d 3d 3d 6e 2e 70 72 6f 74 6f 63 6f 6c 26 26 65 2e 68 6f 73 74 3d 3d 3d 6e 2e 68 6f 73 74 7d 7d 28 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 2c 75 74 3d 4d 2e 68 61 73 53 74 61 6e 64 61 72 64 42 72 6f 77 73 65 72 45 6e 76 3f 7b 77 72 69 74 65 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 29 7b 63 6f 6e 73 74 20 61 3d 5b 74 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 5d 3b 45 2e 61 2e 69 73 4e 75 6d 62 Data Ascii: .pathname}}return n=r(window.location.href),function(t){const e=E.a.isString(t)?r(t):t;return e.protocol===n.protocol&&e.host===n.host}}():function(){return!0},ut=M.hasStandardBrowserEnv?{write(t,e,n,r,i,o){const a=[t+"="+encodeURIComponent(e)];E.a.isNumb
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 65 2e 74 72 61 63 6b 28 4b 74 2e 73 74 61 72 74 29 7d 2c 74 68 69 73 2e 74 72 61 63 6b 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 64 69 67 69 74 61 6c 44 61 74 61 2e 70 61 67 65 2e 66 6f 72 6d 26 26 28 65 2e 64 69 67 69 74 61 6c 44 61 74 61 2e 70 61 67 65 2e 66 6f 72 6d 2e 66 6f 72 6d 45 72 72 6f 72 73 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2e 6a 6f 69 6e 28 22 2c 22 29 29 2c 65 2e 74 72 61 63 6b 28 4b 74 2e 65 72 72 6f 72 73 29 29 7d 2c 74 68 69 73 2e 74 72 61 63 6b 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 6f 70 75 6c 61 74 65 47 74 61 67 28 29 2c 65 2e 74 72 61 63 6b 28 4b 74 2e 73 75 63 63 65 73 73 29 7d 2c 74 68 69 73 2e 74 72 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 73 61 Data Ascii: nction(){e.track(Kt.start)},this.trackError=function(t){e.digitalData.page.form&&(e.digitalData.page.form.formErrors="".concat(t.join(",")),e.track(Kt.errors))},this.trackSuccess=function(){e.populateGtag(),e.track(Kt.success)},this.track=function(t){e.sa
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 22 5d 27 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 64 61 74 61 73 65 74 2e 64 65 70 65 6e 64 65 6e 63 79 4f 70 74 69 6f 6e 3f 74 2e 63 68 65 63 6b 65 64 26 26 65 2e 64 61 74 61 73 65 74 2e 64 65 70 65 6e 64 65 6e 63 79 4f 70 74 69 6f 6e 2e 69 6e 63 6c 75 64 65 73 28 74 2e 64 61 74 61 73 65 74 2e 72 61 64 69 6f 56 61 6c 75 65 29 3f 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 44 69 73 70 6c 61 79 28 65 29 3a 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 44 69 73 70 6c 61 79 28 65 29 3a 74 2e 64 61 74 61 73 65 74 2e 72 61 64 69 6f 56 61 6c 75 65 3f 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 44 69 73 70 6c 61 79 28 65 29 3a 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 44 69 73 70 6c 61 79 28 65 29 7d 29 29 7d 2c 6e Data Ascii: "]')).forEach((function(e){e.dataset.dependencyOption?t.checked&&e.dataset.dependencyOption.includes(t.dataset.radioValue)?n.removeAttributeDisplay(e):n.setAttributeDisplay(e):t.dataset.radioValue?n.removeAttributeDisplay(e):n.setAttributeDisplay(e)}))},n
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 65 66 74 22 29 7c 7c 28 6e 2e 73 74 79 6c 65 2e 6d 69 6e 48 65 69 67 68 74 3d 22 22 2e 63 6f 6e 63 61 74 28 72 2e 68 65 69 67 68 74 2c 22 70 78 22 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 74 29 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 69 6e 63 6c 75 64 65 73 28 22 4c 65 66 74 22 29 7c 7c 28 65 2e 73 74 79 6c 65 2e 72 69 67 68 74 3d 22 22 2e 63 6f 6e 63 61 74 28 30 2c 22 70 78 22 29 29 3b 76 61 72 20 6e 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 74 2e 69 6e 63 6c 75 64 65 73 28 22 4c 65 66 74 22 29 3f 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 22 2e 63 6f 6e 63 61 74 28 62 65 2c 22 70 78 Data Ascii: eft")\|\|(n.style.minHeight="".concat(r.height,"px"))}))}function Ae(t){document.querySelectorAll(t).forEach((function(e){t.includes("Left")\|\|(e.style.right="".concat(0,"px"));var n=e.getBoundingClientRect();t.includes("Left")?e.style.width="".concat(be,"px
2024-10-01 09:51:36 UTC	9067	IN	Data Raw: 68 74 22 2c 74 2e 73 74 79 6c 65 2e 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 22 6d 61 72 67 69 6e 2d 6c 65 66 74 22 29 29 7d 7d 7d 7d 28 61 29 2c 65 2e 72 6f 6f 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 21 65 2e 72 6f 6f 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 76 65 6e 74 73 2d 61 64 64 65 64 22 29 26 26 65 2e 72 6f 6f 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 22 29 26 26 28 65 2e 72 6f 6f 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 66 6c 65 78 22 2c 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 72 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 69 6d 67 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 72 2e 73 65 74 41 Data Ascii: ht",t.style.removeProperty("margin-left"))}}}}(a),e.root.style.display="block",!e.root.hasAttribute("data-events-added")&&e.root.classList.contains("image-container")&&(e.root.style.display="flex",null===(r=e.root.querySelector("img"))\|\|void 0===r\|\|r.setA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49787	18.245.31.62	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	639	OUT	GET /thumbnails/15002978/PC8gA58NjnILaxk56RJLVRYWpahpm4tE.jpg HTTP/1.1 Host: cdn.vidyard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:35 UTC	585	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 33597 Connection: close Last-Modified: Tue, 02 Mar 2021 18:17:08 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ADhaHiN31lHNcgWoOz8YOG37m_UmWmBo Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 04 Sep 2024 05:58:19 GMT ETag: "f2af8d00e1a4c29a797c7e69cb98edba" X-Cache: Hit from cloudfront Via: 1.1 ebc0709f2918acef5e26208dffcb618c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: UIe-6G-ns5gngUhRzJLWgq_WPyOW3xJ_fY5O8vW2rpsGeMxwSIVjoQ== Age: 2347198 x-cdn: cloudfront Vary: Origin
2024-10-01 09:51:35 UTC	15799	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff fe 00 11 4c 61 76 63 35 37 2e 31 30 37 2e 31 30 30 00 ff db 00 43 00 08 0a 0a 0b 0a 0b 0d 0d 0d 0d 0d 0d 10 0f 10 10 10 10 10 10 10 10 10 10 10 12 12 12 15 15 15 12 12 12 10 10 12 12 14 14 15 15 17 17 17 15 15 15 15 17 17 19 19 19 1e 1e 1c 1c 23 23 24 2b 2b 33 ff c4 00 bd 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 05 04 03 06 07 08 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 06 05 07 10 01 00 02 01 02 03 03 07 09 06 03 05 05 05 04 0b 00 01 02 03 04 11 12 31 21 41 13 05 32 22 71 51 b1 b2 61 34 72 06 73 33 74 d1 81 91 d2 a1 54 23 14 15 16 42 52 a2 35 c1 62 e1 44 82 24 53 f0 36 93 83 e3 43 c3 94 17 84 25 07 65 d3 a3 75 b3 c2 55 92 64 11 01 01 00 02 01 03 02 Data Ascii: JFIFLavc57.107.100C##$++31!A2"qQa4rs3tT#BR5bD$S6C%euUd
2024-10-01 09:51:35 UTC	16384	IN	Data Raw: 4f 93 6f 9b 3e c5 83 f2 36 5f 94 6a be f1 9b de 51 7c bf 28 d5 7d e3 37 bc a3 d2 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 01 00 00 00 00 00 00 0f 6d f4 67 47 c5 7c 9a ab 47 91 e6 63 f9 d3 e5 4f e5 1d 3f 37 89 7d 93 c3 34 ff 00 d2 e8 b0 63 ed e1 8b 5b e7 5b ac fb 5f 8d f9 b7 3d e2 f6 dd 33 bf 25 e9 fa 3e 3f d1 fa ff 00 95 f0 ff 00 93 9f aa f6 e3 9b fa 7e 0c 92 d5 ad af 6a d2 b1 bd ad 31 11 1e b9 95 5e b3 e8 ee 93 bc cf 7d 45 a3 a6 2e 95 f9 f6 ed fc a3 da f9 2f 6d c3 7d c7 36 1c 73 f9 af 9b e9 3e 37 ee 7d 3f 3f 34 e0 e2 cf 92 ff 00 2c f1 3d 6f c2 3d 6f 86 e8 69 a0 c1 14 8d a6 f3 d7 25 bd 76 fc 23 94 32 80 fe 87 86 18 f1 61 8e 18 cd 63 8c d4 8f 84 cf 3c b9 32 b9 e5 77 72 bb b4 01 b6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 cf 9f 16 9b Data Ascii: Oo>6_jQ\|(}7mgG\|GcO?7}4c[[_=3%>?~j1^}E./m}6s>7}??4,=o=oi%v#2ac<2wrp
2024-10-01 09:51:35 UTC	1414	IN	Data Raw: 71 54 82 c2 00 48 80 12 20 04 88 01 22 04 54 88 01 22 01 94 a2 de 4d be 6c fb 04 4f 93 6f 9b 3e c5 83 f2 96 4f 94 6a be f1 97 de 55 6c 9f 28 d5 7d e3 2f bc ab d0 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 29 3e 5e 1f ad c7 ed 5d 49 f2 f0 fd 6d 3d a9 7b 35 8f 77 d5 eb 3d 23 d1 0e 39 2c 98 9f 37 7f 84 35 af 3d 5e 56 db 58 ed 33 cd d7 2d 22 6b bc 73 6b c4 ed c2 da 89 89 81 5a 94 9d ba 17 9b 4d a2 7f cb 08 99 a6 2b ef 3d 77 ec 6d 5a d1 7c 73 11 1c da 55 2d 78 be db 22 21 c3 0c 57 7e 18 e6 d8 b5 66 15 15 f2 a2 5c 77 ee e5 b5 11 b4 35 b2 c6 e8 26 d3 c7 d6 1c e2 66 ab 61 e9 cd d6 d1 bf 9c aa 8b 63 99 8d e0 c5 69 ac ed 3c d7 ad f6 e9 da a5 e3 6e a8 29 92 b1 5c 91 33 1b cc f6 bb 76 ad 11 17 af ae 5a b5 b7 0c f5 e6 0d db 79 Data Ascii: qTH "T"MlOo>OjUl(}/)>^]Im={5w=#9,75=^VX3-"kskZM+=wmZ\|sU-x"!W~f\w5&faci<n)\3vZy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49794	13.32.121.44	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	607	OUT	OPTIONS /highlighter/prod/ThomsonReuters/v2/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20 HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-account-id,x-api-key Origin: https://legal.thomsonreuters.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:36 UTC	801	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Tue, 01 Oct 2024 09:51:37 GMT Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 814952d19d560b49ff15ad2f71e400d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: H1y0iOlDleDJ3fk6ky_cZGfatoEGmv4IdtRD1ego0QM-KsR8qJne1g== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Max-Age: 14400 Access-Control-Allow-Headers: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49793	13.35.58.22	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	599	OUT	OPTIONS /ThomsonReuters/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20vZW4vcHJvZHVjdHMvaGlnaHE HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-api-key Origin: https://legal.thomsonreuters.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:36 UTC	653	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Tue, 01 Oct 2024 09:44:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: x-api-key Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 7ccd3c44ed70cdb4cd40f0ff29b1254c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: YlKm1JKAC5StxW9Hcpdnek3BMFWQyVzvd3wzdRmYqHV45cGF-FQgQg== Age: 442

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49792	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	999	OUT	GET /etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC; AWSALBCORS=9RGBy7EzBcGZavdcWMZFoqNRhAGSUCIpoPDff7fckg8Q5kKenltiXaJQiAbrHTUZd7FpNaM8g5FF2goZu1rhuRHITjEbQT/BgVd7wRddQv86TnRzp0TZBkVAKEgC
2024-10-01 09:51:36 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 1271 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Aug 2024 05:58:33 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "4f7-6208fd0a2b440" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7ab8983df8c6e33475e52fb04de82cbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: YXQntVi6mwKrTanIJHmdn7-6gdsBbzdb3KhVe7aP9TqW2H6TFZr-yQ== Age: 415
2024-10-01 09:51:36 UTC	1271	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 43 51 3d 77 69 6e 64 6f 77 2e 43 51 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 3d 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 75 74 69 6c 73 3d 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 75 74 69 6c 73 3d 7b 72 65 6d 6f 76 Data Ascii: (function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={remov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49790	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	980	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-base.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=+OZB25eM3+0GFqVnOgQx4vQstKH6e1HLjzcXhUdIOH7UlmsgXRiOnkCm0WCllS5amK8uhjb+3ANJy2s+GwB1hGN8T/HS+cb0JttaBJRAO+JCn5tWZhnRAPDMzWGY; AWSALBCORS=+OZB25eM3+0GFqVnOgQx4vQstKH6e1HLjzcXhUdIOH7UlmsgXRiOnkCm0WCllS5amK8uhjb+3ANJy2s+GwB1hGN8T/HS+cb0JttaBJRAO+JCn5tWZhnRAPDMzWGY
2024-10-01 09:51:36 UTC	1309	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 24157 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=CG0oTTKhAXL+ECDZJcFTQ/u5bFCw/uZg4ZvfQ2hd2wRetGi/RDxCyLPzCsEM4+K/OAA/goaese+vXC3IOyyMJqLqOo6U3HxGgzbgLLNuCH5dcoezOQ0rjgvEtJhf; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=CG0oTTKhAXL+ECDZJcFTQ/u5bFCw/uZg4ZvfQ2hd2wRetGi/RDxCyLPzCsEM4+K/OAA/goaese+vXC3IOyyMJqLqOo6U3HxGgzbgLLNuCH5dcoezOQ0rjgvEtJhf; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Aug 2024 05:58:33 GMT ETag: "5e5d-6208fd0a2b440" Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e5482755d4e937d4018ce72cd23b55c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: ALluN37IqnJ4ijWoyIlR3ZpRHwbrk4L-GNihmxH7i9Wk-ttGgTYc9Q== Age: 414
2024-10-01 09:51:36 UTC	16384	IN	Data Raw: 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 3b 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 6d 3d 74 68 69 73 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 6d 29 29 72 65 74 75 72 Data Ascii: Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector);Element.prototype.closest\|\|(Element.prototype.closest=function(v){var m=this;if(!document.documentElement.contains(m))retur
2024-10-01 09:51:36 UTC	7773	IN	Data Raw: 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 26 26 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 3d 28 74 68 Data Ascii: ment.prototype.matches&&(Element.prototype.matches=Element.prototype.matchesSelector\|\|Element.prototype.mozMatchesSelector\|\|Element.prototype.msMatchesSelector\|\|Element.prototype.oMatchesSelector\|\|Element.prototype.webkitMatchesSelector\|\|function(v){v=(th

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49795	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:35 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 78 4e 4d 55 61 62 71 55 48 55 43 54 67 65 6c 6a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 62 64 36 32 34 37 34 66 31 65 37 63 34 33 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: xNMUabqUHUCTgelj.1Context: 8bd62474f1e7c434
2024-10-01 09:51:35 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-01 09:51:35 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 78 4e 4d 55 61 62 71 55 48 55 43 54 67 65 6c 6a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 62 64 36 32 34 37 34 66 31 65 37 63 34 33 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 38 46 46 4f 62 35 53 74 35 2b 2b 4a 71 76 43 71 5a 4b 63 56 46 34 38 58 55 59 49 69 56 6c 36 6b 72 53 76 44 46 31 76 37 69 47 68 6e 6d 42 72 43 54 48 50 52 71 6a 47 43 4c 34 58 31 51 41 68 43 69 4d 32 44 37 56 59 4c 6a 79 63 49 4e 54 62 51 51 6b 31 6c 75 35 57 67 74 4a 67 54 33 43 47 45 4b 48 43 44 35 35 52 44 4a 47 44 68 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: xNMUabqUHUCTgelj.2Context: 8bd62474f1e7c434<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAS8FFOb5St5++JqvCqZKcVF48XUYIiVl6krSvDF1v7iGhnmBrCTHPRqjGCL4X1QAhCiM2D7VYLjycINTbQQk1lu5WgtJgT3CGEKHCD55RDJGDh
2024-10-01 09:51:35 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 78 4e 4d 55 61 62 71 55 48 55 43 54 67 65 6c 6a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 62 64 36 32 34 37 34 66 31 65 37 63 34 33 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: xNMUabqUHUCTgelj.3Context: 8bd62474f1e7c434<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-01 09:51:36 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-01 09:51:36 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 37 2b 49 42 78 37 77 43 46 30 4b 2b 71 53 63 51 72 5a 30 4e 4b 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 7+IBx7wCF0K+qScQrZ0NKw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49796	18.202.150.204	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	735	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=A7D63BC75245AE300A490D4D%40AdobeOrg&d_nsid=0&ts=1727776295181 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:36 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:36 GMT Content-Type: application/json;charset=utf-8 Content-Length: 2579 Connection: close X-TID: FtVGGVMtTLo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://legal.thomsonreuters.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v065-01a12d744.edge-irl1.demdex.com 5 ms set-cookie: demdex=52383547755092570744435798233617763102; Max-Age=15552000; Expires=Sun, 30 Mar 2025 09:51:36 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-01 09:51:36 UTC	2579	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 32 35 30 39 37 30 39 37 33 38 31 33 32 31 30 35 33 32 34 34 35 39 32 35 33 33 37 30 33 35 37 36 32 38 33 36 30 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"52509709738132105324459253370357628360","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49799	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	1100	OUT	GET /etc.clientlibs/emcm/components/structure/page/pagestyle-clientlibs.min.css HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; AWSALB=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7; AWSALBCORS=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7
2024-10-01 09:51:36 UTC	1291	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 117 Connection: close Date: Tue, 01 Oct 2024 09:44:42 GMT Set-Cookie: AWSALB=sNN2l/SxFC2DKxqBJN9ycGCKFLvMaWHb7JnntdfrZLLUidDsAhqk7aWlJzBji0Mg0Z3I9ZpLId9WcyADCGZ4qkTUT5RxoLdL9VI06rErClHydW9d7udfxIpiFRCZ; Expires=Tue, 08 Oct 2024 09:44:42 GMT; Path=/ Set-Cookie: AWSALBCORS=sNN2l/SxFC2DKxqBJN9ycGCKFLvMaWHb7JnntdfrZLLUidDsAhqk7aWlJzBji0Mg0Z3I9ZpLId9WcyADCGZ4qkTUT5RxoLdL9VI06rErClHydW9d7udfxIpiFRCZ; Expires=Tue, 08 Oct 2024 09:44:42 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Aug 2024 05:58:41 GMT ETag: "75-6208fd11cc640" Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:42 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4f3281e2362f23bf5efc65311d3defb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: bidm1jHGA6uKr7kZEvlTUa45Jo8nKTuuQyNsrqTjbKf1FuWOy2Ao1g== Age: 414
2024-10-01 09:51:36 UTC	117	IN	Data Raw: 62 6f 64 79 2e 65 6d 63 6d 2d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 7d 0a 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 23 72 6f 6f 74 7b 6f 76 65 72 66 6c 6f 77 3a 63 6c 69 70 7d 0a 7d 0a 2e 67 72 65 63 61 70 74 63 68 61 2d 62 61 64 67 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d Data Ascii: body.emcm-body{background-color:#ffff}@media(max-width:767px){#root{overflow:clip}}.grecaptcha-badge{display:none}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49817	172.64.155.119	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:36 UTC	249	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:36 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cbb8e1eac031988-EWR
2024-10-01 09:51:36 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49801	18.193.60.9	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	543	OUT	GET /tags/dnb_coretag_v6.min.js HTTP/1.1 Host: v2.d41.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	366	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:36 GMT Content-Type: application/javascript Content-Length: 99032 Connection: close x-amzn-RequestId: e08ae2d8-ea98-447c-86ff-83a3c151848e x-amzn-Remapped-Content-Length: 99032 x-amz-apigw-id: e9vmbFzUFiAEDsQ= Timestamp: Tue, 01 Oct 2024 09:51:37 GMT X-Amzn-Trace-Id: Root=1-66fbc628-7adb391338bd5a623831cc83
2024-10-01 09:51:37 UTC	16018	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 6e 62 5f 63 6f 72 65 74 61 67 5f 65 75 5f 76 36 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2f 20 56 65 72 73 69 6f 6e 20 36 2e 30 2e 30 0a 2f 2f 20 46 6f 72 20 6f 70 74 2d 6f 75 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 70 6c 65 61 73 65 20 76 69 73 69 74 3a 20 68 74 74 70 73 3a 2f 2f 64 34 31 2e 63 6f 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 33 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 28 39 30 37 30 29 2c 65 28 37 39 34 31 29 2c 65 28 32 35 32 36 29 2c 65 28 37 33 32 37 29 2c 65 28 35 30 30 33 29 2c 65 28 34 37 34 37 29 2c 65 Data Ascii: /! For license information please see dnb_coretag_eu_v6.min.js.LICENSE.txt /// Version 6.0.0// For opt-out information, please visit: https://d41.co/!function(){var t={355:function(t,r,e){"use strict";e(9070),e(7941),e(2526),e(7327),e(5003),e(4747),e
2024-10-01 09:51:37 UTC	39	IN	Data Raw: 2e 6b 65 79 3d 3d 72 29 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 69 28 6c 2c 7b 63 6c 65 61 72 3a 66 75 6e Data Ascii: .key==r)return e};return i(l,{clear:fun
2024-10-01 09:51:37 UTC	16367	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 79 28 74 68 69 73 29 2c 72 3d 74 2e 69 6e 64 65 78 2c 65 3d 74 2e 66 69 72 73 74 3b 65 3b 29 65 2e 72 65 6d 6f 76 65 64 3d 21 30 2c 65 2e 70 72 65 76 69 6f 75 73 26 26 28 65 2e 70 72 65 76 69 6f 75 73 3d 65 2e 70 72 65 76 69 6f 75 73 2e 6e 65 78 74 3d 76 6f 69 64 20 30 29 2c 64 65 6c 65 74 65 20 72 5b 65 2e 69 6e 64 65 78 5d 2c 65 3d 65 2e 6e 65 78 74 3b 74 2e 66 69 72 73 74 3d 74 2e 6c 61 73 74 3d 76 6f 69 64 20 30 2c 76 3f 74 2e 73 69 7a 65 3d 30 3a 74 68 69 73 2e 73 69 7a 65 3d 30 7d 2c 64 65 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 65 3d 79 28 72 29 2c 6e 3d 78 28 72 2c 74 29 3b 69 66 28 6e 29 7b 76 61 72 20 6f 3d 6e 2e 6e 65 78 74 2c 69 3d 6e 2e 70 72 65 Data Ascii: ction(){for(var t=y(this),r=t.index,e=t.first;e;)e.removed=!0,e.previous&&(e.previous=e.previous.next=void 0),delete r[e.index],e=e.next;t.first=t.last=void 0,v?t.size=0:this.size=0},delete:function(t){var r=this,e=y(r),n=x(r,t);if(n){var o=n.next,i=n.pre
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 45 52 41 54 4f 52 53 3a 79 7d 7d 2c 37 34 39 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 36 32 34 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 37 34 36 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 2e 6c 65 6e 67 74 68 29 7d 7d 2c 36 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 37 32 39 33 29 2c 6f 3d 65 28 36 31 34 29 2c 69 3d 65 28 32 35 39 37 29 2c 75 3d 65 28 39 37 38 31 29 2c 61 3d 65 28 36 35 33 30 29 2e 43 4f 4e 46 49 47 55 52 41 42 4c 45 2c 63 3d 65 28 32 37 38 38 29 2c 73 3d 65 28 39 39 30 39 29 2c 66 3d 73 2e 65 6e 66 6f 72 63 65 2c 70 3d 73 2e 67 65 74 2c 6c 3d 4f 62 6a 65 63 Data Ascii: ERATORS:y}},7497:function(t){t.exports={}},6244:function(t,r,e){var n=e(7466);t.exports=function(t){return n(t.length)}},6339:function(t,r,e){var n=e(7293),o=e(614),i=e(2597),u=e(9781),a=e(6530).CONFIGURABLE,c=e(2788),s=e(9909),f=s.enforce,p=s.get,l=Objec
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 7b 76 61 72 20 72 2c 65 2c 6e 2c 6f 2c 69 2c 75 3d 61 28 74 68 69 73 29 2c 6c 3d 70 28 75 2c 30 29 2c 76 3d 30 3b 66 6f 72 28 72 3d 2d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 67 28 69 3d 2d 31 3d 3d 3d 72 3f 75 3a 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 29 66 6f 72 28 6f 3d 63 28 69 29 2c 73 28 76 2b 6f 29 2c 65 3d 30 3b 65 3c 6f 3b 65 2b 2b 2c 76 2b 2b 29 65 20 69 6e 20 69 26 26 66 28 6c 2c 76 2c 69 5b 65 5d 29 3b 65 6c 73 65 20 73 28 76 2b 31 29 2c 66 28 6c 2c 76 2b 2b 2c 69 29 3b 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 76 2c 6c 7d 7d 29 7d 2c 37 33 32 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 32 31 30 39 29 2c 6f 3d Data Ascii: {var r,e,n,o,i,u=a(this),l=p(u,0),v=0;for(r=-1,n=arguments.length;r<n;r++)if(g(i=-1===r?u:arguments[r]))for(o=c(i),s(v+o),e=0;e<o;e++,v++)e in i&&f(l,v,i[e]);else s(v+1),f(l,v++,i);return l.length=v,l}})},7327:function(t,r,e){"use strict";var n=e(2109),o=
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 35 36 33 39 29 2e 55 69 6e 74 38 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 35 37 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 38 35 32 29 28 65 28 35 36 33 39 29 2c 22 57 65 61 6b 4d 61 70 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 34 39 36 33 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 2d 31 2c 6e 3d 6e 75 6c 6c 3d 3d 74 3f 30 3a 74 2e 6c 65 6e 67 74 68 2c 6f 3d 30 2c 69 3d 5b 5d 3b 2b 2b 65 3c 6e 3b 29 7b 76 61 72 20 75 3d 74 5b 65 5d 3b 72 28 75 2c 65 2c 74 29 26 26 28 69 5b 6f 2b 2b 5d 3d 75 29 7d 72 65 74 75 72 6e 20 69 7d 7d 2c 34 36 Data Ascii: unction(t,r,e){var n=e(5639).Uint8Array;t.exports=n},577:function(t,r,e){var n=e(852)(e(5639),"WeakMap");t.exports=n},4963:function(t){t.exports=function(t,r){for(var e=-1,n=null==t?0:t.length,o=0,i=[];++e<n;){var u=t[e];r(u,e,t)&&(i[o++]=u)}return i}},46
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 6e 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 2b 22 22 3b 72 65 74 75 72 6e 22 30 22 3d 3d 72 26 26 31 2f 74 3d 3d 2d 49 6e 66 69 6e 69 74 79 3f 22 2d 30 22 3a 72 7d 7d 2c 33 34 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 74 2b 22 22 7d 63 61 74 63 68 28 74 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 7d 2c 37 38 31 33 3a 66 Data Ascii: nction(t){if("string"==typeof t\|\|n(t))return t;var r=t+"";return"0"==r&&1/t==-Infinity?"-0":r}},346:function(t){var r=Function.prototype.toString;t.exports=function(t){if(null!=t){try{return r.call(t)}catch(t){}try{return t+""}catch(t){}}return""}},7813:f
2024-10-01 09:51:37 UTC	1072	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 61 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 74 2c 6c 28 72 2e 68 65 61 64 65 72 73 5b 74 5d 29 29 7d 29 29 2c 69 2e 73 69 67 6e 61 6c 26 26 28 69 2e 73 69 67 6e 61 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 73 29 2c 61 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 61 2e 72 65 61 64 79 53 74 61 74 65 26 26 69 2e 73 69 67 6e 61 6c 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 73 29 7d 29 2c 61 2e 73 65 6e 64 28 76 6f 69 64 20 30 3d 3d 3d 69 2e 5f 62 6f 64 79 49 6e 69 74 3f 6e 75 6c 6c 3a 69 2e 5f 62 6f 64 79 49 6e 69 74 29 7d 29 29 7d 45 2e 70 6f 6c 79 66 69 6c 6c 3d 21 30 2c 6e Data Ascii: nction(t){a.setRequestHeader(t,l(r.headers[t]))})),i.signal&&(i.signal.addEventListener("abort",s),a.onreadystatechange=function(){4===a.readyState&&i.signal.removeEventListener("abort",s)}),a.send(void 0===i._bodyInit?null:i._bodyInit)}))}E.polyfill=!0,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49820	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	566	OUT	GET /scripttemplates/202308.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:36 UTC	859	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: 2+I2Cj649lHjQKiedh8F2Q== Last-Modified: Wed, 25 Oct 2023 03:55:47 GMT x-ms-request-id: 6c1c0484-d01e-0095-66e7-99d136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 38650 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e1f38250ccd-EWR
2024-10-01 09:51:36 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 33 30 38 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202308.1.0 * by OneTrust LLC * Copyright 2023 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 46 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4b 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 58 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 24 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 58 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof K)return t._state=3,t._value=e,void X(t);if("function"==typeof o)return void $((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,X(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 4b 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4b 3f 74 3a 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 4b 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},K.resolve=function(t){return t&&"object"==typeof t&&t.constructor===K?t:new K(function(e){e(t)})},K.reject=function(o){re
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 2e 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 Data Ascii: .BannerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=te=te\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=oe=oe\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConse
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 79 65 3d 79 65 7c 7c 7b Data Ascii: ll"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=Ce=Ce\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ye=ye\|\|{
2024-10-01 09:51:36 UTC	1369	IN	Data Raw: 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 45 65 3d 45 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 49 41 42 3d 22 49 41 42 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e 45 52 49 43 3d 22 47 45 4e 45 52 49 43 22 2c 65 2e 4c 47 50 44 3d 22 4c 47 50 44 22 2c 65 2e 47 45 4e 45 52 49 43 5f 50 52 4f 4d 50 54 3d 22 47 45 4e 45 52 49 43 5f 50 52 4f 4d Data Ascii: oLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=_e=_e\|\|{}).cookies="cookies",e.vendors="vendors",(e=Ee=Ee\|\|{}).GDPR="GDPR",e.IAB="IAB",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GENERIC="GENERIC",e.LGPD="LGPD",e.GENERIC_PROMPT="GENERIC_PROM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49800	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	1078	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-dcl_components.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; AWSALB=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7; AWSALBCORS=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7
2024-10-01 09:51:37 UTC	1311	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 591445 Connection: close Date: Tue, 01 Oct 2024 09:44:43 GMT Set-Cookie: AWSALB=X0b2Lo2mNIYhHFk9Cgstw40iZikQOBnrQDKztaq0E9UXo/C9LMhSIigvbvYoev5IrvM5idy+pnzug6sZDneTf4+tGwhGDzkrmlBRIpGn/4i25EFdnjDXPsPr2iYW; Expires=Tue, 08 Oct 2024 09:44:43 GMT; Path=/ Set-Cookie: AWSALBCORS=X0b2Lo2mNIYhHFk9Cgstw40iZikQOBnrQDKztaq0E9UXo/C9LMhSIigvbvYoev5IrvM5idy+pnzug6sZDneTf4+tGwhGDzkrmlBRIpGn/4i25EFdnjDXPsPr2iYW; Expires=Tue, 08 Oct 2024 09:44:43 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:43 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "90655-622c22f032900" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3d95fd99ed5f07db9d464a35af433056.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 2asO8e0kR9Lgzo85SOiZjGF16sEVJuOMAheSdxRQGl4H6dBMVJ3yEg== Age: 413
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 65 6e 73 65 4c 69 73 74 3a 4a 2c 6c 61 7a 79 3a 58 2c 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 3a 62 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 39 30 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 3b 76 61 72 20 72 3d 6e 28 33 35 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 28 74 3d 4f 62 6a 65 63 74 28 72 2e 61 29 28 74 29 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c Data Ascii: enseList:J,lazy:X,__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED:be}},function(e,t,n){e.exports=n(90)()},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var r=n(35);function o(e,t,n){return(t=Object(r.a)(t))in e?Object.defineProperty(e,
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 65 74 52 65 68 79 64 72 61 74 61 62 6c 65 4e 61 6d 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 65 74 43 6c 61 73 73 4e 61 6d 65 46 61 63 74 6f 72 79 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 Data Ascii: 0,get:function(){return u.default}}),Object.defineProperty(t,"getRehydratableName",{enumerable:!0,get:function(){return c.default}}),Object.defineProperty(t,"getClassNameFactory",{enumerable:!0,get:function(){return l.default}}),Object.defineProperty(t,"g
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 65 4c 6f 63 61 74 69 6f 6e 2c 22 3f 61 63 74 69 6f 6e 3d 6c 6f 67 69 6e 22 29 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6c 6f 63 61 74 69 6f 6e 2c 22 2f 74 6f 6b 65 6e 3f 69 73 73 3d 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6c 69 65 6e 74 49 64 2c 22 26 73 65 72 76 69 63 65 73 3d 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6c 69 65 6e 74 49 64 2c 22 26 70 72 6f 76 69 64 65 72 3d 6f 6e 65 70 61 73 73 26 63 61 6c 6c 62 61 63 6b 5f 75 72 6c 3d 22 29 2e 63 6f 6e 63 61 74 28 65 29 7d 2c 73 65 74 20 6c 6f 67 69 6e 55 72 6c 28 65 29 7b 74 68 69 73 2e 6c 6f 67 69 6e 55 72 6c 49 6e 74 65 72 6e 61 6c 3d 65 7d 7d 2c 74 68 69 73 2e 6f 6e 65 70 61 73 73 3d 7b 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 70 72 6f 64 75 63 74 49 64 3a Data Ascii: eLocation,"?action=login"));return"".concat(this.location,"/token?iss=").concat(this.clientId,"&services=").concat(this.clientId,"&provider=onepass&callback_url=").concat(e)},set loginUrl(e){this.loginUrlInternal=e}},this.onepass={location:null,productId:
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 3e 3d 79 3f 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 79 29 2b 22 73 22 3a 65 2b 22 6d 73 22 7d 28 65 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 76 61 6c 20 69 73 20 6e 6f 74 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 73 74 72 69 6e 67 20 6f 72 20 61 20 76 61 6c 69 64 20 6e 75 6d 62 65 72 2e 20 76 61 6c 3d 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 74 3e 3d 31 2e 35 2a 6e 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 6e 29 2b 22 20 22 2b 72 2b 28 6f 3f 22 73 22 3a 22 22 29 7d 76 61 72 20 45 2c 43 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 2e 66 6f 72 6d 61 74 41 72 67 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 Data Ascii: >=y?Math.round(e/y)+"s":e+"ms"}(e);throw new Error("val is not a non-empty string or a valid number. val="+JSON.stringify(e))};function O(e,t,n,r){var o=t>=1.5*n;return Math.round(e/n)+" "+r+(o?"s":"")}var E,C=m((function(e,t){t.formatArgs=function(t){if(
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 75 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 3f 6e 65 77 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 28 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 61 73 20 61 62 6f 72 74 65 64 2e 22 2c 22 41 62 6f 72 74 45 72 72 6f 72 22 29 3a 6e 65 77 20 6e 65 29 2c 74 28 29 7d 3b 69 2e 61 62 6f 72 74 65 64 26 26 28 5a 28 22 73 69 67 6e 61 6c 20 69 73 20 61 6c 72 65 61 64 79 20 61 62 6f 72 74 65 64 20 2d 20 61 62 6f 72 74 69 6e 67 20 74 68 65 20 66 65 74 63 68 22 29 2c 73 28 29 29 2c 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 73 29 7d 6e 2e 67 65 6e 65 72 61 74 65 52 65 73 70 6f 6e 73 65 28 7b 72 6f 75 74 65 3a 63 2c 75 72 6c 3a 72 2c 6f 70 74 69 6f 6e 73 3a 6f 2c 72 65 71 75 Data Ascii: u("undefined"!=typeof DOMException?new DOMException("The operation was aborted.","AbortError"):new ne),t()};i.aborted&&(Z("signal is already aborted - aborting the fetch"),s()),i.addEventListener("abort",s)}n.generateResponse({route:c,url:r,options:o,requ
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 76 65 28 6e 65 77 20 47 28 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 31 29 29 29 7c 7c 7a 26 26 76 65 28 6e 65 77 20 7a 29 21 3d 72 7c 7c 57 26 26 22 5b 6f 62 6a 65 63 74 20 50 72 6f 6d 69 73 65 5d 22 21 3d 76 65 28 57 2e 72 65 73 6f 6c 76 65 28 29 29 7c 7c 56 26 26 76 65 28 6e 65 77 20 56 29 21 3d 61 7c 7c 71 26 26 22 5b 6f 62 6a 65 63 74 20 57 65 61 6b 4d 61 70 5d 22 21 3d 76 65 28 6e 65 77 20 71 29 29 26 26 28 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 75 65 28 65 29 2c 6e 3d 74 3d 3d 6f 3f 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3a 76 6f 69 64 20 30 2c 69 3d 6e 3f 79 65 28 6e 29 3a 22 22 3b 69 66 28 69 29 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 59 3a 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 44 61 74 61 56 69 65 77 5d Data Ascii: ve(new G(new ArrayBuffer(1)))\|\|z&&ve(new z)!=r\|\|W&&"[object Promise]"!=ve(W.resolve())\|\|V&&ve(new V)!=a\|\|q&&"[object WeakMap]"!=ve(new q))&&(ve=function(e){var t=ue(e),n=t==o?e.constructor:void 0,i=n?ye(n):"";if(i)switch(i){case Y:return"[object DataView]
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 74 65 64 20 52 65 71 75 65 73 74 22 2c 34 32 32 3a 22 55 6e 70 72 6f 63 65 73 73 61 62 6c 65 20 45 6e 74 69 74 79 22 2c 34 32 33 3a 22 4c 6f 63 6b 65 64 22 2c 34 32 34 3a 22 46 61 69 6c 65 64 20 44 65 70 65 6e 64 65 6e 63 79 22 2c 34 32 35 3a 22 55 6e 6f 72 64 65 72 65 64 20 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 34 32 36 3a 22 55 70 67 72 61 64 65 20 52 65 71 75 69 72 65 64 22 2c 34 32 38 3a 22 50 72 65 63 6f 6e 64 69 74 69 6f 6e 20 52 65 71 75 69 72 65 64 22 2c 34 32 39 3a 22 54 6f 6f 20 4d 61 6e 79 20 52 65 71 75 65 73 74 73 22 2c 34 33 31 3a 22 52 65 71 75 65 73 74 20 48 65 61 64 65 72 20 46 69 65 6c 64 73 20 54 6f 6f 20 4c 61 72 67 65 22 2c 34 35 31 3a 22 55 6e 61 76 61 69 6c 61 62 6c 65 20 46 6f 72 20 4c 65 67 61 6c 20 52 65 61 73 6f 6e 73 22 2c 35 30 Data Ascii: ted Request",422:"Unprocessable Entity",423:"Locked",424:"Failed Dependency",425:"Unordered Collection",426:"Upgrade Required",428:"Precondition Required",429:"Too Many Requests",431:"Request Header Fields Too Large",451:"Unavailable For Legal Reasons",50
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 74 2e 67 65 74 43 6c 61 73 73 4e 61 6d 65 46 61 63 74 6f 72 79 3d 74 2e 67 65 74 43 6c 61 73 73 4e 61 6d 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 6e 28 31 35 29 2c 6f 3d 6e 28 36 33 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 Data Ascii: n(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=t.getClassNameFactory=t.getClassName=void 0;var r=n(15),o=n(63);function a(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 74 28 7b 6d 65 73 73 61 67 65 3a 22 46 65 74 63 68 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 77 69 74 68 20 73 74 61 74 75 73 3a 20 22 2e 63 6f 6e 63 61 74 28 74 2e 53 74 61 74 75 73 29 2c 72 65 73 70 6f 6e 73 65 3a 65 2c 6a 73 6f 6e 3a 74 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 6f 28 6e 28 30 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 76 61 72 20 61 3d 28 30 Data Ascii: t({message:"Fetch request failed with status: ".concat(t.Status),response:e,json:t})}},function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var r=o(n(0));function o(e){return e&&e.__esModule?e:{default:e}}var a=(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49803	13.35.58.22	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	682	OUT	GET /ThomsonReuters/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20vZW4vcHJvZHVjdHMvaGlnaHE HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: KL5JC-HLSCB-N415D-I7OO0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	674	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Date: Tue, 01 Oct 2024 09:44:14 GMT Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: max-age=14400 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: xKdp8VqQpblY_rvKWQpMHy_thp4htLUVxF3lY0dU-J0rHTLcL-Auow== Age: 442

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49802	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	1273	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/brand-right-arrow.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; AWSALB=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7; AWSALBCORS=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true
2024-10-01 09:51:37 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 409 Connection: close Date: Tue, 01 Oct 2024 09:07:31 GMT Set-Cookie: AWSALB=449YKlr246heZcG7rRwZYpbgOHGGjhiRiTn0SLLHwKxE8RtBu5Z9194IVMgJefXIMSmOZbHLBD9+xixA91ecDeJkZxnS3hqinVoE8thP2uUXKUdidhkURll48IhE; Expires=Tue, 08 Oct 2024 09:07:31 GMT; Path=/ Set-Cookie: AWSALBCORS=449YKlr246heZcG7rRwZYpbgOHGGjhiRiTn0SLLHwKxE8RtBu5Z9194IVMgJefXIMSmOZbHLBD9+xixA91ecDeJkZxnS3hqinVoE8thP2uUXKUdidhkURll48IhE; Expires=Tue, 08 Oct 2024 09:07:31 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Jul 2021 08:55:26 GMT ETag: "199-5c802ea109b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:31 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e3824a4cc698f190d3fa6fe687f1a600.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: o1TKldM4ynEzLAtiBF35-3h23BdNrAc3sp8CTgXkXpFQRE81juNh7Q== Age: 2646
2024-10-01 09:51:37 UTC	409	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 30 38 33 35 20 37 2e 34 31 36 39 39 48 31 37 2e 37 35 30 32 22 20 73 74 72 6f 6b 65 3d 22 23 46 41 36 34 30 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 31 37 20 Data Ascii: <svg width="19" height="14" viewBox="0 0 19 14" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.0835 7.41699H17.7502" stroke="#FA6400" stroke-width="1.5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/><path d="M11.917

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49812	142.250.184.228	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	486	OUT	GET /recaptcha/enterprise.js?render=6Lcg8t8aAAAAAEg-ugVYe6QCmneyyVZm6ExG-4vv HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 01 Oct 2024 09:51:37 GMT Date: Tue, 01 Oct 2024 09:51:37 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 09:51:37 UTC	641	IN	Data Raw: 36 35 31 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 651/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-10-01 09:51:37 UTC	983	IN	Data Raw: 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 2f 6b 61 72 67 54 46 79 6b 38 4d 52 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 Data Ascii: rset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2Fi
2024-10-01 09:51:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49819	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	1196	OUT	GET /content/dam/ue/en-us/images/video-covers/234635.jpg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:37 UTC	1701	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 45487 Connection: close Date: Tue, 01 Oct 2024 09:51:37 GMT Set-Cookie: AWSALB=IpIm2YE5cGP1px4zInUHt+jf9V/ZuJ4bEyjuaFYisllOmodYdkc4hw8lhk7UxJ3sfjmUw+lhTHfRVZJeDvyJn5NhMK0lYycziqAP6G0b6tgL/9f7ckDxDFCwxLoT; Expires=Tue, 08 Oct 2024 09:51:37 GMT; Path=/ Set-Cookie: AWSALBCORS=IpIm2YE5cGP1px4zInUHt+jf9V/ZuJ4bEyjuaFYisllOmodYdkc4hw8lhk7UxJ3sfjmUw+lhTHfRVZJeDvyJn5NhMK0lYycziqAP6G0b6tgL/9f7ckDxDFCwxLoT; Expires=Tue, 08 Oct 2024 09:51:37 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com X-Content-Type-Options: nosniff Last-Modified: Tue, 22 Nov 2022 15:25:55 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:37 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "b1af-5ee10c9bc46c0" X-Cache: Miss from cloudfront Via: 1.1 77e414816706879c16a3707f261f0b5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: Sp1evuCGm3-7w-aaUHWSTFi_x3h6pWOBmHrzo_Ip5L4wSd3wDcHUvQ== Age: 1913594
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-10-01 09:51:37 UTC	1514	IN	Data Raw: 34 d4 69 98 d2 0b 1a 8c c6 91 54 41 42 b3 69 58 df b3 8a 8d ce 1c 73 ce fb 7c 3a cf 13 ca c3 58 b9 71 f6 7b 27 ae 7c b5 fb 1e fc e6 3e 57 b7 dd ad eb 92 f8 56 6d 74 f7 7e c5 dd e4 70 9d 23 43 34 e8 82 b2 a2 2a 83 51 23 51 07 6f 5d e5 8f a9 fa 77 9c 7c 9c 5f 2f a1 fa ba f3 11 1f 6f 17 f8 c5 73 f5 5e e6 3a 02 c5 48 aa 0a 8a 00 00 2a 28 00 08 2a 28 00 00 a8 a0 00 28 00 00 00 a8 a2 00 00 00 00 00 00 00 00 00 00 00 00 02 80 82 a0 00 20 00 00 02 80 00 00 00 00 00 80 00 00 00 02 80 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 18 0a 00 00 00 00 00 00 00 00 a8 a0 00 00 02 00 01 14 05 00 50 00 00 00 00 00 01 40 40 00 00 00 40 50 00 00 00 00 00 01 44 10 00 04 a8 a9 7e 3a 0f 3f ed 6f eb 8a f8 1e dd 77 7a af a9 ff 00 a1 ee Data Ascii: 4iTABiXs\|:Xq{'\|>WVmt~p#C4Q#Qo]w\|_/os^:H(*(( P@@@PD~:?owz
2024-10-01 09:51:37 UTC	8949	IN	Data Raw: 45 ea f5 95 15 a1 15 05 11 40 00 54 00 00 14 10 00 11 40 00 51 a6 78 b0 56 96 33 1a 80 d4 8e 93 2c 4b c6 e5 41 66 5b cc 66 56 a5 06 80 41 40 00 00 67 51 ce c7 5a c5 88 32 2d 41 16 2f 50 14 3a 9d 10 16 22 c1 57 ab d4 01 7a 75 9e a5 a2 2d af 1f ee 6f c3 d1 ec dc cc af 9b ef f6 7d b5 c6 a3 35 c7 bd a0 35 19 ab 15 25 5f 95 46 f2 ba 32 9a 11 9a 44 58 0d 2a 00 a0 00 a8 a0 d6 5d 73 5c 63 a6 6a 0f 47 aa f2 be c7 e9 6f b1 f1 b1 5f 47 f4 76 2b eb 4a ae 78 bd 8e 90 45 10 41 55 22 80 00 0a 8a a8 00 00 00 2a 28 28 00 00 00 00 00 28 00 00 00 00 00 08 a2 2f 40 0e 9d 00 3a 74 00 e8 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 00 02 20 08 00 28 00 02 a2 80 00 a0 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 3c 40 28 00 80 00 0a 0a 00 00 00 00 00 Data Ascii: E@T@QxV3,KAf[fVA@gQZ2-A/P:"Wzu-o}55%_F2DX]s\cjGo_Gv+JxEAU"(((/@:t (<@(
2024-10-01 09:51:37 UTC	6347	IN	Data Raw: 01 ac df 2e de bf 67 97 0c 45 b7 80 f7 67 52 c2 c7 8b d7 ee bd e3 db 8d 4b 01 33 ab 2b b4 bd 8e 1a b1 ac 6a 83 a8 9d 14 56 7a a8 22 88 a0 00 00 00 00 00 00 2a 28 00 00 00 00 08 00 00 00 00 00 02 80 00 00 04 00 51 01 14 40 14 40 14 40 14 40 14 40 14 40 15 05 04 00 00 00 00 05 45 00 00 00 00 00 00 41 00 00 00 00 00 00 7c e0 14 00 00 00 00 05 40 00 13 a0 9a d7 1c b5 b5 dd 71 b4 1a b5 8a 75 2a 0c db c2 68 b1 9e 70 57 59 3a 6b 13 8c e7 4d f9 a0 f3 d9 66 9d 27 94 f6 72 18 b1 46 b8 17 52 f8 01 7a d6 75 1c e9 9b e4 1b f6 66 58 f3 d9 ca f4 fc c7 1d cf 20 b9 d7 86 be b3 4e 72 f1 bc fb 24 04 d6 38 cf 5d 7e d2 b9 ea 28 bf 27 d4 cb 76 ce 20 e7 f6 e3 a6 7f 94 72 bf 2d 67 7c 06 b5 3e b2 b1 eb d7 5d 6f 37 1c 75 9f a0 35 bd 26 3c d6 73 7e d5 d7 38 e0 35 7c 47 2e 76 b7 ab Data Ascii: .gEgRK3+jVz"(Q@@@@@@EA\|@quhpWY:kMf'rFRzufX Nr$8]~('v r-g\|>]o7u5&<s~85\|G.v
2024-10-01 09:51:37 UTC	12293	IN	Data Raw: d6 67 ca d4 80 e9 9a 68 c9 af 00 c5 e2 fd 7c 33 2f 97 49 f0 0e 1a f9 6b 11 9d fc b5 8a 0e b3 e1 c7 d9 f2 eb f8 73 d8 31 97 7c fc 38 e3 e5 df 9e 01 8d a4 a6 be 52 03 a4 ac de b5 17 c0 39 f1 bf 5c f2 bc 8d e7 80 bb c4 b3 c3 cf 71 a9 5e 9d 4b cf 0e 1b ef 41 73 df cb 4e 79 ae 80 cd 5c 42 ae 2f 90 75 ce 18 f6 4b 1d a6 a4 8e 1e cd 76 81 88 e9 23 8e 77 65 76 c6 e5 04 df c3 8f 7c bd 1a b1 cb 5b c7 79 c1 49 63 52 b3 2f 4e 88 6a b3 33 da 6a b5 80 59 96 b9 38 b3 e1 8d df f0 0c 6b 3e 7c 3d 1e 9c f2 38 e7 cd f2 f4 e2 ce 0a cf b3 cc 79 b5 2b d5 a7 0d 6a 5b c4 18 c3 7a f8 6b 38 fc b3 bf 0a 38 db e5 d3 0e 7c ed 75 c7 88 0d 57 3d 75 bb 58 bf 20 67 b1 be b2 74 0d 69 33 e5 2b 58 80 ba 9e 1c b4 ef af 87 9f 57 c8 12 35 23 39 ad f4 19 b0 fa ca 55 c8 8e 7b c3 86 b3 e5 eb d3 9d Data Ascii: gh\|3/Iks1\|8R9\q^KAsNy\B/uKv#wev\|[yIcR/Nj3jY8k>\|=8y+j[zk88\|uW=uX gti3+XW5#9U{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49809	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	975	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/tr-rebranded-logo.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:37 UTC	1310	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 18118 Connection: close Date: Tue, 01 Oct 2024 09:06:52 GMT Set-Cookie: AWSALB=5xkL/cSKKw+0O5NTzY8uujW2Behfw1n7D4beWrcCilTY77IMDW3f13GsXygIw0o+2YGh/WYhjTQduDsFVVe9lcPNPpGe+jhusiCtIuAO8amqn5pOk7XK/0xwSC3K; Expires=Tue, 08 Oct 2024 09:06:52 GMT; Path=/ Set-Cookie: AWSALBCORS=5xkL/cSKKw+0O5NTzY8uujW2Behfw1n7D4beWrcCilTY77IMDW3f13GsXygIw0o+2YGh/WYhjTQduDsFVVe9lcPNPpGe+jhusiCtIuAO8amqn5pOk7XK/0xwSC3K; Expires=Tue, 08 Oct 2024 09:06:52 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 11 Mar 2024 05:14:41 GMT ETag: "46c6-6135b9e6a9240" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:21:52 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3aedbf31650352660fd3a878f7b791c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 64aexueSht4sb3sGStmATMX6xx0RZDLG_fixpVTSgdhP4To5NntIeA== Age: 2685
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-10-01 09:51:37 UTC	1734	IN	Data Raw: 2e 35 2d 30 2e 35 2c 30 2e 37 43 32 33 2c 31 38 2e 34 2c 32 32 2e 37 2c 31 38 2e 34 2c 32 32 2e 34 2c 31 38 2e 33 0a 09 4c 32 32 2e 34 2c 31 38 2e 33 7a 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 37 2e 32 2c 31 37 2e 35 63 2d 30 2e 31 2d 30 2e 35 2c 30 2e 31 2d 31 2c 30 2e 36 2d 31 2e 31 6c 30 2e 31 2c 30 63 30 2e 35 2d 30 2e 31 2c 31 2c 30 2e 32 2c 31 2e 31 2c 30 2e 36 63 30 2e 31 2c 30 2e 32 2c 30 2c 30 2e 35 2d 30 2e 31 2c 30 2e 37 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 33 2c 30 2e 34 2d 30 2e 36 2c 30 2e 34 0a 09 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 35 2c 30 2d 30 2e 37 2d 30 2e 31 43 37 2e 34 2c 31 37 2e 39 2c 37 2e 32 2c 31 37 2e 37 2c 37 2e 32 2c 31 37 2e 35 4c 37 2e 32 2c 31 37 2e 35 7a 22 2f 3e 0a 20 20 Data Ascii: .5-0.5,0.7C23,18.4,22.7,18.4,22.4,18.3L22.4,18.3z"/> <path class="st2" d="M7.2,17.5c-0.1-0.5,0.1-1,0.6-1.1l0.1,0c0.5-0.1,1,0.2,1.1,0.6c0.1,0.2,0,0.5-0.1,0.7c-0.1,0.2-0.3,0.4-0.6,0.4c-0.2,0.1-0.5,0-0.7-0.1C7.4,17.9,7.2,17.7,7.2,17.5L7.2,17.5z"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49804	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	1265	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/play-icon.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:37 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 452 Connection: close Date: Tue, 01 Oct 2024 09:07:30 GMT Set-Cookie: AWSALB=Q83djYiYtIUmaATmRMflb+X6Uslyb7Mt3rAwFdFnf9b7zXDkxuF7pthY+evLobGpV4wzF4RzezOBpUzam4ngqrgGP9h6F5cE5+DjI30aiJGCQqgJK0C8UbHthrPq; Expires=Tue, 08 Oct 2024 09:07:30 GMT; Path=/ Set-Cookie: AWSALBCORS=Q83djYiYtIUmaATmRMflb+X6Uslyb7Mt3rAwFdFnf9b7zXDkxuF7pthY+evLobGpV4wzF4RzezOBpUzam4ngqrgGP9h6F5cE5+DjI30aiJGCQqgJK0C8UbHthrPq; Expires=Tue, 08 Oct 2024 09:07:30 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "1c4-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:30 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ae80ccab7109b5d2f1c1ee784af203a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: iuYd2JzflSNgNgsmy51l9rtHSjxE3A21Y9TKt-NwgmvtI5iCVSchkA== Age: 2647
2024-10-01 09:51:37 UTC	452	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 6c 61 79 20 69 63 6f 6e 22 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 3e 3c 74 69 74 6c 65 3e 62 75 74 74 6f 6e 20 70 6c 61 79 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 64 3d 27 4d 32 30 2e 35 35 35 2c 31 31 2e 31 36 38 6c 2d 31 35 2d 31 30 63 2d 30 2e 33 30 37 2d 30 2e 32 30 34 2d 30 2e 37 30 32 2d 30 2e 32 32 34 2d 31 2e 30 32 36 2d 30 2e 30 35 43 34 2e 32 30 33 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Play icon" class="nc-icon-wrapper" width="24" height="24" viewBox="0 0 24 24" fill="#404040"><title>button play</title><path d='M20.555,11.168l-15-10c-0.307-0.204-0.702-0.224-1.026-0.05C4.203

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49805	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	974	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/search-icon-v1.5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:37 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 640 Connection: close Date: Tue, 01 Oct 2024 09:06:51 GMT Set-Cookie: AWSALB=9FD0YHtplVbW96sX5apejRVihaWadUT7bkoRvxta+MjrgpCNn9+6uBwnKruScVVhaC5ESax7S+76rOUX4rYAOLAkYEquqg/wfWJM1Hf6itFtgHIphVvk+oTYXc4z; Expires=Tue, 08 Oct 2024 09:06:51 GMT; Path=/ Set-Cookie: AWSALBCORS=9FD0YHtplVbW96sX5apejRVihaWadUT7bkoRvxta+MjrgpCNn9+6uBwnKruScVVhaC5ESax7S+76rOUX4rYAOLAkYEquqg/wfWJM1Hf6itFtgHIphVvk+oTYXc4z; Expires=Tue, 08 Oct 2024 09:06:51 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "280-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:21:51 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f5af2731a86629973e69564f824d95be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: M0C2IVB1MrO-XszmDTOM6mj-MyvuVkIulfI2r80UzIvpg5got49D0Q== Age: 2686
2024-10-01 09:51:37 UTC	640	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 22 20 68 65 69 67 68 74 3d 22 31 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 20 31 37 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 33 20 36 2e 35 43 31 33 20 37 2e 39 33 37 35 20 31 32 2e 35 33 31 32 20 39 2e 32 38 31 32 35 20 31 31 2e 37 35 20 31 30 2e 33 34 33 38 4c 31 35 2e 36 38 37 35 20 31 34 2e 33 31 32 35 43 31 36 2e 30 39 33 38 20 31 34 2e 36 38 37 35 20 31 36 2e 30 39 33 38 20 31 35 2e 33 34 33 38 20 31 35 2e 36 38 37 35 20 31 35 2e 37 31 38 38 43 31 35 2e 33 31 32 35 20 31 36 2e 31 32 35 20 31 34 2e 36 35 36 32 20 31 36 2e 31 32 35 20 31 34 2e 32 38 31 32 20 Data Ascii: <svg width="17" height="17" viewBox="0 0 17 17" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M13 6.5C13 7.9375 12.5312 9.28125 11.75 10.3438L15.6875 14.3125C16.0938 14.6875 16.0938 15.3438 15.6875 15.7188C15.3125 16.125 14.6562 16.125 14.2812

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49811	13.35.58.41	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	380	OUT	GET /emcm-ui/bundle/v24.69.0/main.js HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	772	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 378599 Connection: close Date: Mon, 23 Sep 2024 05:05:40 GMT Last-Modified: Wed, 28 Aug 2024 15:48:04 GMT ETag: "e29709257e04218cfe7211940c5b835d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6af229f397d391cfa25045f944cba714.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: LYngoCLY5bYNByg3R0tgXzvlEDi1bgWPRViQi3fnT0Csv5ljjELUaQ== Age: 708358 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="LYngoCLY5bYNByg3R0tgXzvlEDi1bgWPRViQi3fnT0Csv5ljjELUaQ==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 44 43 4c 3d 74 28 29 3a 65 2e 44 43 4c 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 69 3d 74 5b 30 5d 2c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.DCL=t():e.DCL=t()}(this,function(){return function(e){function t(t){for(var n,o,i=t[0],
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 67 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 74 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 Data Ascii: g);function w(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),n.push.apply(n,r)}return n}function x(e){for(var t=1;t<argu
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 28 37 33 29 2c 67 3d 6e 28 35 38 29 2c 62 3d 6e 28 33 31 29 2c 77 3d 6e 28 38 35 29 2c 78 3d 6e 28 31 39 29 2c 6b 3d 6e 28 32 34 29 2c 45 3d 6e 28 31 34 30 29 2c 4f 3d 6e 28 37 34 29 2c 53 3d 6e 28 33 34 29 2c 54 3d 6e 28 37 35 29 2e 66 2c 5f 3d 6e 28 31 34 32 29 2c 6a 3d 6e 28 37 31 29 2c 43 3d 6e 28 32 30 29 2c 50 3d 6e 28 36 31 29 2c 52 3d 6e 28 31 30 31 29 2c 4e 3d 6e 28 39 33 29 2c 49 3d 6e 28 31 34 35 29 2c 41 3d 6e 28 38 37 29 2c 4c 3d 6e 28 31 30 36 29 2c 46 3d 6e 28 37 36 29 2c 4d 3d 6e 28 31 34 34 29 2c 44 3d 6e 28 31 37 38 29 2c 55 3d 6e 28 32 33 29 2c 7a 3d 6e 28 33 33 29 2c 42 3d 55 2e 66 2c 57 3d 7a 2e 66 2c 56 3d 6f 2e 52 61 6e 67 65 45 72 72 6f 72 2c 48 3d 6f 2e 54 79 70 65 45 72 72 6f 72 2c 71 3d 6f 2e 55 69 6e 74 38 41 72 72 61 79 2c 47 Data Ascii: (73),g=n(58),b=n(31),w=n(85),x=n(19),k=n(24),E=n(140),O=n(74),S=n(34),T=n(75).f,_=n(142),j=n(71),C=n(20),P=n(61),R=n(101),N=n(93),I=n(145),A=n(87),L=n(106),F=n(76),M=n(144),D=n(178),U=n(23),z=n(33),B=U.f,W=z.f,V=o.RangeError,H=o.TypeError,q=o.Uint8Array,G
2024-10-01 09:51:37 UTC	2016	IN	Data Raw: 76 61 72 20 72 3d 6e 28 38 35 29 2c 6f 3d 52 65 67 45 78 70 2e 70 72 6f 74 6f 74 79 70 65 2e 65 78 65 63 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 65 78 65 63 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 76 61 72 20 69 3d 6e 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 69 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 52 65 67 45 78 70 20 65 78 65 63 20 6d 65 74 68 6f 64 20 72 65 74 75 72 6e 65 64 20 73 6f 6d 65 74 68 69 6e 67 20 6f 74 68 65 72 20 74 68 61 6e 20 61 6e 20 4f 62 6a 65 63 74 20 6f 72 20 6e 75 6c 6c 22 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 22 52 65 67 45 78 70 22 21 3d 3d 72 28 65 29 Data Ascii: var r=n(85),o=RegExp.prototype.exec;e.exports=function(e,t){var n=e.exec;if("function"==typeof n){var i=n.call(e,t);if("object"!=typeof i)throw new TypeError("RegExp exec method returned something other than an Object or null");return i}if("RegExp"!==r(e)
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 73 28 29 2e 6e 65 78 74 28 29 7d 29 29 29 7b 76 61 72 20 4f 3d 6e 65 77 20 62 2c 53 3d 4f 5b 77 5d 28 79 3f 7b 7d 3a 2d 30 2c 31 29 21 3d 4f 2c 54 3d 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 2e 68 61 73 28 31 29 7d 29 2c 5f 3d 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 65 77 20 62 28 65 29 7d 29 2c 6a 3d 21 79 26 26 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 62 2c 74 3d 35 3b 74 2d 2d 3b 29 65 5b 77 5d 28 74 2c 74 29 3b 72 65 74 75 72 6e 21 65 2e 68 61 73 28 2d 30 29 7d 29 3b 5f 7c 7c 28 28 62 3d 74 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 6c 28 74 2c 62 2c 65 29 3b 76 61 72 20 72 3d 68 28 6e 65 77 20 67 2c 74 2c 62 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 6e 26 26 63 28 6e 2c 6d 2c 72 5b 77 5d 2c 72 Data Ascii: s().next()}))){var O=new b,S=O[w](y?{}:-0,1)!=O,T=f(function(){O.has(1)}),_=p(function(e){new b(e)}),j=!y&&f(function(){for(var e=new b,t=5;t--;)e[w](t,t);return!e.has(-0)});_\|\|((b=t(function(t,n){l(t,b,e);var r=h(new g,t,b);return void 0!=n&&c(n,m,r[w],r
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 6f 6e 74 46 61 6d 69 6c 79 22 2c 22 66 6f 6e 74 2d 73 69 7a 65 22 3a 22 66 6f 6e 74 53 69 7a 65 22 2c 22 66 6f 6e 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 22 3a 22 66 6f 6e 74 53 69 7a 65 41 64 6a 75 73 74 22 2c 22 66 6f 6e 74 2d 73 74 72 65 74 63 68 22 3a 22 66 6f 6e 74 53 74 72 65 74 63 68 22 2c 22 66 6f 6e 74 2d 73 74 79 6c 65 22 3a 22 66 6f 6e 74 53 74 79 6c 65 22 2c 22 66 6f 6e 74 2d 76 61 72 69 61 6e 74 22 3a 22 66 6f 6e 74 56 61 72 69 61 6e 74 22 2c 22 66 6f 6e 74 2d 77 65 69 67 68 74 22 3a 22 66 6f 6e 74 57 65 69 67 68 74 22 2c 66 6f 72 3a 22 68 74 6d 6c 46 6f 72 22 2c 66 6f 72 6d 6e 6f 76 61 6c 69 64 61 74 65 3a 22 66 6f 72 6d 4e 6f 56 61 6c 69 64 61 74 65 22 2c 66 72 61 6d 65 62 6f 72 64 65 72 3a 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 22 67 6c Data Ascii: ontFamily","font-size":"fontSize","font-size-adjust":"fontSizeAdjust","font-stretch":"fontStretch","font-style":"fontStyle","font-variant":"fontVariant","font-weight":"fontWeight",for:"htmlFor",formnovalidate:"formNoValidate",frameborder:"frameBorder","gl
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 34 35 36 29 2c 61 3d 52 65 67 45 78 70 28 22 5b 27 e2 80 99 5d 22 2c 22 67 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 69 28 6f 28 74 29 2e 72 65 70 6c 61 63 65 28 61 2c 22 22 29 29 2c 65 2c 22 22 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 52 65 67 45 78 70 28 22 5b 5c 5c 75 32 30 30 64 5c 5c 75 64 38 30 30 2d 5c 5c 75 64 66 66 66 5c 5c 75 30 33 30 30 2d 5c 5c 75 30 33 36 66 5c 5c 75 66 65 32 30 2d 5c 5c 75 66 65 32 66 5c 5c 75 32 30 64 30 2d 5c 5c 75 32 30 66 66 5c 5c 75 66 65 30 65 5c 5c 75 66 65 30 66 5d 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 74 Data Ascii: 456),a=RegExp("[']","g");e.exports=function(e){return function(t){return r(i(o(t).replace(a,"")),e,"")}}},function(e,t){var n=RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");e.exports=function(e){return n.t
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 22 61 22 2c 22 6e 61 6d 65 22 2c 74 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 32 39 29 28 22 62 69 67 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 22 62 69 67 22 2c 22 22 2c 22 22 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 32 39 29 28 22 62 6c 69 6e 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 22 62 6c 69 Data Ascii: unction(e){return function(t){return e(this,"a","name",t)}})},function(e,t,n){"use strict";n(29)("big",function(e){return function(){return e(this,"big","","")}})},function(e,t,n){"use strict";n(29)("blink",function(e){return function(){return e(this,"bli
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 74 2c 6e 2c 72 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 36 34 29 28 22 55 69 6e 74 38 22 2c 31 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 74 2c 6e 2c 72 29 7d 7d 2c 21 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 36 34 29 28 22 49 6e 74 31 36 22 2c 32 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 74 2c 6e 2c 72 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 28 36 34 29 28 Data Ascii: turn function(t,n,r){return e(this,t,n,r)}})},function(e,t,n){n(64)("Uint8",1,function(e){return function(t,n,r){return e(this,t,n,r)}},!0)},function(e,t,n){n(64)("Int16",2,function(e){return function(t,n,r){return e(this,t,n,r)}})},function(e,t,n){n(64)(
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 72 41 74 28 30 29 26 26 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 26 26 21 69 73 4e 61 4e 28 2b 74 2e 73 6c 69 63 65 28 31 29 29 26 26 28 74 68 69 73 5b 74 5d 3d 6e 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 6f 6e 65 3d 21 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 30 5d 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 74 79 70 65 29 74 68 72 6f 77 20 65 2e 61 72 67 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 76 61 6c 7d 2c 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 64 6f 6e 65 29 74 68 72 6f 77 20 65 3b 76 61 72 20 74 3d 74 68 69 73 3b 66 75 6e 63 74 69 6f 6e 20 72 28 72 2c 6f 29 7b 72 65 74 75 Data Ascii: rAt(0)&&o.call(this,t)&&!isNaN(+t.slice(1))&&(this[t]=n)},stop:function(){this.done=!0;var e=this.tryEntries[0].completion;if("throw"===e.type)throw e.arg;return this.rval},dispatchException:function(e){if(this.done)throw e;var t=this;function r(r,o){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49808	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	979	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/tr_spiral_pattern_desktop.png HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:37 UTC	1283	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 44882 Connection: close Date: Tue, 01 Oct 2024 09:07:30 GMT Set-Cookie: AWSALB=TEYXG1UIqBc5ULZFjwo6JR6HMzIozA24RjY2B0xRLVcMLkvOJK4rjNz0XdOxyeSHbEMO2KxQcOkdvPMJjnb9yy7TOGHkENSBYJVlcC6rVRqgERQHPZgFuCNnjTm/; Expires=Tue, 08 Oct 2024 09:07:30 GMT; Path=/ Set-Cookie: AWSALBCORS=TEYXG1UIqBc5ULZFjwo6JR6HMzIozA24RjY2B0xRLVcMLkvOJK4rjNz0XdOxyeSHbEMO2KxQcOkdvPMJjnb9yy7TOGHkENSBYJVlcC6rVRqgERQHPZgFuCNnjTm/; Expires=Tue, 08 Oct 2024 09:07:30 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Thu, 01 Jul 2021 11:22:35 GMT ETag: "af52-5c60e0e4814c0" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:30 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com X-Cache: Hit from cloudfront Via: 1.1 3d95fd99ed5f07db9d464a35af433056.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: R4YDZ2d9hIHMOD4KQh49ZvOkfpzOB2dF_bpqU0GIG4R6R7265L8-WA== Age: 2647
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 7a 00 00 02 a6 08 06 00 00 00 da 56 33 58 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 ae e7 49 44 41 54 78 01 ec 9d 8b 55 db d8 d7 c5 4f c0 13 18 48 d6 3f a9 60 44 05 93 54 30 a6 82 49 2a 88 a9 20 a1 82 98 0a 42 2a 80 54 40 a6 02 9c 0a c8 54 60 4d 05 64 d6 7c 09 81 04 e6 3b 1b 8e 32 42 e8 71 f5 7e ed df 5a c2 c6 96 65 d9 96 ee 3d 3a 8f 7d ee 09 21 84 8c 8c 7f fe f9 67 fa d3 4f 3f fd fe ef bf ff 3e ba 77 ef de 27 bd fd f3 e7 9f 7f 3e 94 06 c0 7b 9e 9d 9d cd f4 7d 7f b5 ff ff d4 fb ef f5 fd 7d 21 84 10 42 08 21 c5 30 23 eb 40 97 7f 63 96 a5 2e 9e d4 c8 ff fd df ff 3d f9 f2 e5 cb 69 f4 bd bf Data Ascii: PNGIHDRzV3XpHYssRGBgAMAaIDATxUOH?`DT0I* B*T@T`Md\|;2Bq~Ze=:}!gO?>w'>{}}!B!0#@c.=i
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: c3 7a 78 55 18 5b 31 52 5c 4c 7d 20 c5 48 d0 75 bb 3e 58 a9 56 df 0f a2 d5 5d cc 8f 20 69 04 ba 5d 42 c8 00 b0 bc 30 4f 5a 22 e8 d3 5b b5 84 4a 9c 68 7f d3 15 c4 f4 0e f6 93 5b 39 7a 70 25 6b 2c 7d 9e b0 ae 87 fe 95 65 27 04 6b 78 fe 04 07 28 0f 9a 7a d0 2b ca 8f e1 1e 8e 6c cd 46 d2 40 25 b9 6b db 28 57 70 6e 5b 64 c0 13 42 1a 44 c7 3b 08 ce e7 f2 76 99 71 38 93 0a d0 63 ff 4f 69 88 b8 fe b8 75 61 d1 bd 53 7a 12 7b 4e dc 95 48 55 15 42 a6 3f 77 1c b7 3d 4e 06 d5 73 f6 9f a0 27 73 a1 48 e3 04 d5 85 36 31 78 42 48 43 60 bc cb 33 e6 9d dd 16 ae 9f 49 49 6c 7b 3f aa 6b d5 88 3c cc fb fa b8 fd 8f b4 47 0b 16 4f 1a 20 5a 81 cc e8 5e 8f 71 30 f2 ae 97 22 bd 2f cf 92 65 44 ae 97 8b 8b 8b 17 52 02 4b 80 f5 38 a9 10 d2 2e 81 a0 6d 68 52 98 0b 21 1d c5 8e d7 65 55 Data Ascii: zxU[1R\L} Hu>XV] i]B0OZ"[Jh[9zp%k,}e'kx(z+lF@%k(Wpn[dBD;vq8cOiuaSz{NHUB?w=Ns'sH61xBHC`3IIl{?k<GO Z^q0"/eDRK8.mhR!eU
2024-10-01 09:51:37 UTC	12114	IN	Data Raw: ac ec 7c db 32 a8 a1 8b 83 b1 a7 03 50 e5 ee 79 1d 98 5e 66 ad d3 54 f8 1b 5e 83 b8 c1 10 45 35 52 11 f8 1c 5d ed 3a 12 87 e5 e3 78 42 48 0b 84 14 01 bc 96 74 f1 10 4d f0 c3 0f 94 19 07 75 bc f3 a5 46 ee df bf 8f b1 6a 11 f7 5c 95 e3 18 69 0f 1a 7a 2d 60 6d 7b 12 4f fc 3a 8c a3 3a 40 ee 9b 7d 0e 3f fa 1c 8c 1f fd 1c cf d7 d6 d6 2a f5 e6 19 5e d6 0a 41 85 9a 34 80 4e 2c db 11 63 cf 97 ec d6 74 ce 20 f7 70 32 99 1c eb 77 7d d2 07 e9 07 78 35 da 08 9b 11 02 82 96 62 38 27 cb b4 11 2b 8a b5 05 db 42 ca 8a 7a e3 76 d0 92 ab cc 38 a8 e7 ff c7 2c cf 5a 05 32 52 77 8c 53 fb bf f6 16 9a a4 7e 98 a3 d7 22 56 38 f0 42 fe cb 75 5b e8 b2 67 de b2 de 00 a3 4a 43 a5 53 bd fb c4 fe bf 0e d7 d6 25 11 e3 92 e3 08 30 c8 aa 67 f4 50 1a c0 12 9a 9f e0 bb a8 f2 b3 9b 67 ec 87 Data Ascii: \|2Py^fT^E5R]:xBHtMuFj\iz-`m{O::@}?*^A4N,ct p2w}x5b8'+Bzv8,Z2RwS~"V8Bu[gJCS%0gPg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49807	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	911	OUT	GET /libs/granite/csrf/token.json HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:37 UTC	1643	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=iso-8859-1 Content-Length: 2 Connection: close Date: Tue, 01 Oct 2024 09:51:37 GMT Set-Cookie: AWSALB=hplKCnx3mIRQC4WjF34RF74uedLui3lC/ZqvbDVTOft85qksPKqX44CkwW0e5SwGBAeBnNPLmDDIFmB81/nCWa3pkCEEQ6KWRnTaKS+/1LnlKw2HZeZONynIkzK8; Expires=Tue, 08 Oct 2024 09:51:37 GMT; Path=/ Set-Cookie: AWSALBCORS=hplKCnx3mIRQC4WjF34RF74uedLui3lC/ZqvbDVTOft85qksPKqX44CkwW0e5SwGBAeBnNPLmDDIFmB81/nCWa3pkCEEQ6KWRnTaKS+/1LnlKw2HZeZONynIkzK8; Expires=Tue, 08 Oct 2024 09:51:37 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com X-Content-Type-Options: nosniff Cache-Control: no-cache Expires: -1 X-Dxml-Correlation-ID: aff53ccc-ae1c-4aca-a4d6-16242fb04e71 X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com X-Cache: Miss from cloudfront Via: 1.1 90b31bff657d66dd87e437e4a49bf7a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: v8M7M5-K8T86jFiXBCJovMqF7JsYoIfYl7o7y-IAydANk3nTsoFJKg==
2024-10-01 09:51:37 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49814	13.32.121.46	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	374	OUT	GET /javascript/schemaFunctions.min.js HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	875	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2299 Connection: close Date: Tue, 01 Oct 2024 03:17:42 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 09 Mar 2023 18:49:16 GMT ETag: "bd244e1b891b02e1257dc6fb99604eb6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=699840 x-amz-version-id: Uq_qZjonf.c8Pi6.s8cxmD9OQPC.1qpa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3141f89cca62ae5784a211a8d1176d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: WpZ4FUV3Mm7HNzuFjYFt3FX2jK-oJRr18R8B4JKrE57LUYV8uT1XRw== Age: 23636 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-01 09:51:37 UTC	2299	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 73 63 68 65 6d 61 4c 6f 61 64 28 68 2c 67 2c 66 2c 62 2c 64 29 7b 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 3d 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 3a 7b 61 63 63 6f 75 6e 74 49 64 3a 68 2c 6b 65 79 3a 67 2c 73 74 72 69 70 55 72 6c 73 3a 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 74 72 75 65 3a 66 2c 74 65 73 74 4d 6f 64 65 3a 62 2c 66 65 74 63 68 46 72 6f 6d 48 69 67 68 6c 69 67 68 74 4a 73 43 61 63 68 65 3a 64 2c 6f 75 74 70 75 74 3a 74 72 75 65 7d 3b 63 6f 6e 73 74 20 6b 3d 6e 65 77 20 53 65 74 28 5b 22 42 72 6f 74 68 65 72 22 2c 22 4b 61 70 6c Data Ascii: function schemaLoad(h,g,f,b,d){window.schema_highlighter=window.schema_highlighter!==undefined?window.schema_highlighter:{accountId:h,key:g,stripUrls:f===undefined?true:f,testMode:b,fetchFromHighlightJsCache:d,output:true};const k=new Set(["Brother","Kapl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49810	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	975	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/support-icon-v1.5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:37 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 935 Connection: close Date: Tue, 01 Oct 2024 09:07:00 GMT Set-Cookie: AWSALB=OjLH40WPoVraaBYEPcluPn8Pafc2jnGG0JO9tbMG90if7m+v4XwgsC4EQnE3f5JyFZaouhgCVWs6dBQQJtqdW1BQcPG9Yjylfph9sauz6wkQI+2IKsJmNEQ6PrBo; Expires=Tue, 08 Oct 2024 09:07:00 GMT; Path=/ Set-Cookie: AWSALBCORS=OjLH40WPoVraaBYEPcluPn8Pafc2jnGG0JO9tbMG90if7m+v4XwgsC4EQnE3f5JyFZaouhgCVWs6dBQQJtqdW1BQcPG9Yjylfph9sauz6wkQI+2IKsJmNEQ6PrBo; Expires=Tue, 08 Oct 2024 09:07:00 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "3a7-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:00 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e5482755d4e937d4018ce72cd23b55c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: OQlABkbGzH-jjIeaB3L2t6U5w6nFQq-LhIrWHJRK1C7LCDohul1ucg== Age: 2677
2024-10-01 09:51:37 UTC	935	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 39 20 31 36 43 36 2e 31 32 35 20 31 36 20 33 2e 35 20 31 34 2e 35 20 32 2e 30 36 32 35 20 31 32 43 30 2e 36 32 35 20 39 2e 35 33 31 32 35 20 30 2e 36 32 35 20 36 2e 35 20 32 2e 30 36 32 35 20 34 43 33 2e 35 20 31 2e 35 33 31 32 35 20 36 2e 31 32 35 20 30 20 39 20 30 43 31 31 2e 38 34 33 38 20 30 20 31 34 2e 34 36 38 38 20 31 2e 35 33 31 32 35 20 31 35 2e 39 30 36 32 20 34 43 31 37 2e 33 34 33 38 20 36 2e 35 20 31 37 2e 33 34 33 38 20 39 2e 35 Data Ascii: <svg width="18" height="16" viewBox="0 0 18 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M9 16C6.125 16 3.5 14.5 2.0625 12C0.625 9.53125 0.625 6.5 2.0625 4C3.5 1.53125 6.125 0 9 0C11.8438 0 14.4688 1.53125 15.9062 4C17.3438 6.5 17.3438 9.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49818	18.245.31.111	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:36 UTC	395	OUT	GET /thumbnails/15002978/PC8gA58NjnILaxk56RJLVRYWpahpm4tE.jpg HTTP/1.1 Host: cdn.vidyard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	585	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 33597 Connection: close Last-Modified: Tue, 02 Mar 2021 18:17:08 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ADhaHiN31lHNcgWoOz8YOG37m_UmWmBo Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 04 Sep 2024 05:58:19 GMT ETag: "f2af8d00e1a4c29a797c7e69cb98edba" X-Cache: Hit from cloudfront Via: 1.1 1eee8db55908814c8f0cde754e3bee5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: 631VJi2EkWr7a8NpNVP5o6__t3EN_f-fjDYp84HTQF3e9Ri-9K6rFg== Age: 2347200 x-cdn: cloudfront Vary: Origin
2024-10-01 09:51:37 UTC	15799	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff fe 00 11 4c 61 76 63 35 37 2e 31 30 37 2e 31 30 30 00 ff db 00 43 00 08 0a 0a 0b 0a 0b 0d 0d 0d 0d 0d 0d 10 0f 10 10 10 10 10 10 10 10 10 10 10 12 12 12 15 15 15 12 12 12 10 10 12 12 14 14 15 15 17 17 17 15 15 15 15 17 17 19 19 19 1e 1e 1c 1c 23 23 24 2b 2b 33 ff c4 00 bd 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 05 04 03 06 07 08 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 06 05 07 10 01 00 02 01 02 03 03 07 09 06 03 05 05 05 04 0b 00 01 02 03 04 11 12 31 21 41 13 05 32 22 71 51 b1 b2 61 34 72 06 73 33 74 d1 81 91 d2 a1 54 23 14 15 16 42 52 a2 35 c1 62 e1 44 82 24 53 f0 36 93 83 e3 43 c3 94 17 84 25 07 65 d3 a3 75 b3 c2 55 92 64 11 01 01 00 02 01 03 02 Data Ascii: JFIFLavc57.107.100C##$++31!A2"qQa4rs3tT#BR5bD$S6C%euUd
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 4f 93 6f 9b 3e c5 83 f2 36 5f 94 6a be f1 9b de 51 7c bf 28 d5 7d e3 37 bc a3 d2 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 01 00 00 00 00 00 00 0f 6d f4 67 47 c5 7c 9a ab 47 91 e6 63 f9 d3 e5 4f e5 1d 3f 37 89 7d 93 c3 34 ff 00 d2 e8 b0 63 ed e1 8b 5b e7 5b ac fb 5f 8d f9 b7 3d e2 f6 dd 33 bf 25 e9 fa 3e 3f d1 fa ff 00 95 f0 ff 00 93 9f aa f6 e3 9b fa 7e 0c 92 d5 ad af 6a d2 b1 bd ad 31 11 1e b9 95 5e b3 e8 ee 93 bc cf 7d 45 a3 a6 2e 95 f9 f6 ed fc a3 da f9 2f 6d c3 7d c7 36 1c 73 f9 af 9b e9 3e 37 ee 7d 3f 3f 34 e0 e2 cf 92 ff 00 2c f1 3d 6f c2 3d 6f 86 e8 69 a0 c1 14 8d a6 f3 d7 25 bd 76 fc 23 94 32 80 fe 87 86 18 f1 61 8e 18 cd 63 8c d4 8f 84 cf 3c b9 32 b9 e5 77 72 bb b4 01 b6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 cf 9f 16 9b Data Ascii: Oo>6_jQ\|(}7mgG\|GcO?7}4c[[_=3%>?~j1^}E./m}6s>7}??4,=o=oi%v#2ac<2wrp
2024-10-01 09:51:37 UTC	1414	IN	Data Raw: 71 54 82 c2 00 48 80 12 20 04 88 01 22 04 54 88 01 22 01 94 a2 de 4d be 6c fb 04 4f 93 6f 9b 3e c5 83 f2 96 4f 94 6a be f1 97 de 55 6c 9f 28 d5 7d e3 2f bc ab d0 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 29 3e 5e 1f ad c7 ed 5d 49 f2 f0 fd 6d 3d a9 7b 35 8f 77 d5 eb 3d 23 d1 0e 39 2c 98 9f 37 7f 84 35 af 3d 5e 56 db 58 ed 33 cd d7 2d 22 6b bc 73 6b c4 ed c2 da 89 89 81 5a 94 9d ba 17 9b 4d a2 7f cb 08 99 a6 2b ef 3d 77 ec 6d 5a d1 7c 73 11 1c da 55 2d 78 be db 22 21 c3 0c 57 7e 18 e6 d8 b5 66 15 15 f2 a2 5c 77 ee e5 b5 11 b4 35 b2 c6 e8 26 d3 c7 d6 1c e2 66 ab 61 e9 cd d6 d1 bf 9c aa 8b 63 99 8d e0 c5 69 ac ed 3c d7 ad f6 e9 da a5 e3 6e a8 29 92 b1 5c 91 33 1b cc f6 bb 76 ad 11 17 af ae 5a b5 b7 0c f5 e6 0d db 79 Data Ascii: qTH "T"MlOo>OjUl(}/)>^]Im={5w=#9,75=^VX3-"kskZM+=wmZ\|sU-x"!W~f\w5&faci<n)\3vZy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49815	13.32.121.46	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	364	OUT	GET /javascript/highlight.js HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	845	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 38008 Connection: close Date: Tue, 01 Oct 2024 03:34:05 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 01 Oct 2024 03:07:39 GMT ETag: "f81875e26f738c79a1513ef30de7d7f6" x-amz-server-side-encryption: AES256 x-amz-version-id: exaJA1tQx7AbQ.cqLrd_lDlk9GVAyh1w Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c80fd33b8f8c4dff5488cc52ba797aa6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: 4Y2RsfQ214h0UVAau2Cx1UzgIK6yKhen1GGawE4D7gaGGbhpIcn4jw== Age: 22653 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 34 31 37 3a 28 74 2c 69 2c 65 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 74 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 65 6e 64 70 6f 69 6e 74 73 3d 69 2e 69 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 73 3d 65 28 37 33 34 29 2c 6e 3d 65 28 39 38 33 29 2c 6f 3d 65 28 31 33 31 29 2c 72 3d 65 28 38 34 36 29 2c 68 3d 65 28 39 38 39 29 2c 75 3d 65 28 38 34 34 29 2c 63 3d 65 28 32 30 29 2c 6c 3d 65 28 31 31 36 29 2c 61 3d 65 28 36 37 35 29 2c 64 3d 7b 6f 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 6d 61 72 6b 75 70 2f 6d 61 72 6b 75 70 3f 75 72 6c 3d 22 2c 68 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 Data Ascii: (()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),l=e(116),a=e(675),d={o:"https://api.schemaapp.com/markup/markup?url=",h:"https://api
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 38 39 32 29 3b 63 6c 61 73 73 20 68 20 65 78 74 65 6e 64 73 20 6f 2e 50 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 69 2c 65 2c 73 3d 64 6f 63 75 6d 65 6e 74 2c 6e 3d 21 31 29 7b 69 66 28 73 75 70 65 72 28 74 2c 69 2c 65 2c 73 29 2c 74 68 69 73 2e 49 74 3d 6e 2c 30 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 22 78 50 61 74 68 22 29 29 74 68 69 73 2e 7a 74 3d 22 74 65 78 74 28 29 22 2c 74 68 69 73 2e 63 69 3d 21 31 3b 65 6c 73 65 7b 6c 65 74 20 69 3d 74 2e 78 50 61 74 68 3b 69 3d 69 2e 6d 61 74 63 68 28 2f 5e 2e 2a 5c 28 5c 29 5c 73 2a 24 2f 67 29 3f 69 3a 69 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 28 28 5b 5e 7c 5d 2b 29 5c 29 24 2f 67 6d 2c 22 24 31 22 29 2c 74 68 69 73 2e 7a Data Ascii: 892);class h extends o.Pt{constructor(t,i,e,s=document,n=!1){if(super(t,i,e,s),this.It=n,0==Object.prototype.hasOwnProperty.call(t,"xPath"))this.zt="text()",this.ci=!1;else{let i=t.xPath;i=i.match(/^.\s$/g)?i:i.replace(/^$([^\|]+)$$/gm,"$1"),this.z
2024-10-01 09:51:37 UTC	5240	IN	Data Raw: 2e 68 65 7d 79 65 28 74 2c 69 29 7b 6c 65 74 20 65 3d 30 2c 73 3d 21 31 3b 63 6f 6e 73 74 20 6f 3d 69 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 41 72 72 61 79 3f 69 3a 5b 69 5d 3b 6c 65 74 20 72 3d 22 22 3b 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 65 76 61 6c 75 61 74 65 28 6f 5b 69 5d 29 3b 6e 2e 70 72 6f 6d 69 73 65 26 26 28 65 3d 74 68 69 73 2e 62 65 28 74 2c 6e 2e 70 72 6f 6d 69 73 65 29 3f 65 2b 31 3a 65 29 2c 21 6e 2e 72 65 73 75 6c 74 26 26 6e 2e 6a 74 7c 7c 28 72 3d 22 22 3d 3d 3d 72 3f 6e 2e 72 65 73 75 6c 74 3a 72 2b 6e 2e 72 65 73 75 6c 74 2c 65 2b 3d 31 2c 74 68 69 73 2e 4f 65 28 74 2c 6e 29 29 2c 6e 2e 6a 74 26 26 6e 2e 72 65 73 75 6c 74 26 26 28 73 3d 21 30 29 7d 72 Data Ascii: .he}ye(t,i){let e=0,s=!1;const o=i.constructor===Array?i:[i];let r="";for(let i=0;i<o.length;i++){const n=t.evaluate(o[i]);n.promise&&(e=this.be(t,n.promise)?e+1:e),!n.result&&n.jt\|\|(r=""===r?n.result:r+n.result,e+=1,this.Oe(t,n)),n.jt&&n.result&&(s=!0)}r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49824	3.233.158.33	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	935	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=0fb246de-b171-4803-9fe4-fc245699804a&batch_time=1727776295815 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16281 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	16281	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 31 7d 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 32 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 65 35 33 34 33 36 34 2d 37 30 31 63 2d 34 64 35 36 2d 62 34 62 65 2d 30 32 30 61 37 65 30 33 65 66 61 32 22 7d 2c 22 64 61 74 65 22 3a 31 37 32 37 37 37 36 32 39 32 34 36 33 2c 22 73 65 72 76 69 63 65 22 3a 22 6c 65 67 61 6c 2e 74 68 6f 6d Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":1},"configuration":{"session_sample_rate":100,"session_replay_sample_rate":20},"discarded":false},"application":{"id":"fe534364-701c-4d56-b4be-020a7e03efa2"},"date":1727776292463,"service":"legal.thom
2024-10-01 09:51:37 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 0fb246de-b171-4803-9fe4-fc245699804a cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Tue, 01 Oct 2024 09:51:37 GMT connection: close
2024-10-01 09:51:37 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 30 66 62 32 34 36 64 65 2d 62 31 37 31 2d 34 38 30 33 2d 39 66 65 34 2d 66 63 32 34 35 36 39 39 38 30 34 61 22 7d Data Ascii: {"request_id":"0fb246de-b171-4803-9fe4-fc245699804a"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49821	13.32.121.44	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	720	OUT	GET /highlighter/prod/ThomsonReuters/v2/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20 HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json x-account-id: ThomsonReuters sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: KL5JC-HLSCB-N415D-I7OO0 sec-ch-ua-platform: "Windows" Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	1154	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 48232 Connection: close Date: Tue, 01 Oct 2024 09:44:17 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 09 Sep 2024 18:35:25 GMT ETag: "49f6aac73a3a7ef3e2c0972877ad456b" x-amz-server-side-encryption: AES256 x-amz-meta-url: https://legal.thomsonreuters.com Cache-Control: max-age=699840 x-amz-meta-source: SchemaApp x-amz-meta-templateid: x-amz-meta-companyid: http://schemaapp.com/resources/Company/ThomsonReuters x-amz-version-id: 5gK7Bwv1AaOD7IrQQdfOQwWoQatgXpHm Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8eee0c5143f92bd7600d25e3dc25ce5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: gBceLyDhl6rReLEjOTmQ6FDASZnSM1y0oygE2GHsx8-aWz6NQO7ohQ== Age: 441 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-amz-meta-source,x-amz-meta-accountid,x-amz-meta-url
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 64 62 5c 2f 54 68 6f 6d 73 6f 6e 52 65 75 74 65 72 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 54 68 6f 6d 73 6f 6e 52 65 75 74 65 72 73 5c 2f 54 65 6d 70 6c 61 74 65 32 30 32 34 30 38 31 39 31 36 31 38 32 30 22 2c 22 70 75 62 6c 69 73 68 44 61 74 65 22 3a 22 32 30 32 34 2d 30 39 2d 30 34 54 31 39 3a 31 35 3a 31 39 2e 30 30 30 5a 22 2c 22 6c 61 62 65 6c 22 3a Data Ascii: {"accountId":"http:\/\/schemaapp.com\/db\/ThomsonReuters","url":"https:\/\/legal.thomsonreuters.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Template20240819161820","publishDate":"2024-09-04T19:15:19.000Z","label":
2024-10-01 09:51:37 UTC	16384	IN	Data Raw: 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 70 72 6f 64 75 63 74 73 5c 2f 6c 69 76 65 6e 6f 74 65 2d 73 74 72 65 61 6d 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 70 72 6f 64 75 63 74 73 5c 2f 63 2d 74 72 61 63 6b 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 70 72 6f 64 75 63 74 73 5c 2f 64 65 61 64 6c 69 6e 65 2d 61 73 73 69 73 74 61 6e 74 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 70 72 6f 64 75 63 74 73 5c 2f 66 6f 72 6d 2d 62 75 69 6c 64 65 72 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f Data Ascii: rs.com\/en\/products\/livenote-stream","https:\/\/legal.thomsonreuters.com\/en\/products\/c-track","https:\/\/legal.thomsonreuters.com\/en\/products\/deadline-assistant","https:\/\/legal.thomsonreuters.com\/en\/products\/form-builder","https:\/\/legal.tho
2024-10-01 09:51:37 UTC	15202	IN	Data Raw: 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 6c 65 67 61 6c 5c 2f 64 61 74 61 2d 64 6f 63 75 6d 65 6e 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 5c 2f 64 6f 63 75 6d 65 6e 74 2d 73 74 6f 72 61 67 65 2d 72 65 74 72 69 65 76 61 6c 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 6c 65 67 61 6c 5c 2f 6c 65 67 61 6c 2d 66 6f 72 6d 73 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 6c 65 67 61 6c 5c 2f 6c 65 67 61 6c 2d 66 6f 72 6d 73 5c 2f 6c 65 67 61 6c 2d 66 6f 72 6d 2d 62 75 69 6c 64 69 6e 67 2d 73 6f 66 74 77 61 72 65 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e Data Ascii: nreuters.com\/en\/legal\/data-document-management\/document-storage-retrieval","https:\/\/legal.thomsonreuters.com\/en\/legal\/legal-forms","https:\/\/legal.thomsonreuters.com\/en\/legal\/legal-forms\/legal-form-building-software","https:\/\/legal.thomson
2024-10-01 09:51:37 UTC	262	IN	Data Raw: 74 69 6f 6e 5c 2f 65 6e 74 69 74 69 65 73 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 6d 61 69 6e 45 6e 74 69 74 79 4f 66 50 61 67 65 22 2c 22 57 65 62 50 61 67 65 22 2c 22 61 62 6f 75 74 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 4c 6f 6f 6b 75 70 4f 6d 6e 69 4c 69 6e 6b 65 64 45 6e 74 69 74 79 22 7d 5d 2c 22 70 61 74 74 65 72 6e 73 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 50 61 67 65 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 6d 65 6d 62 65 72 73 22 3a 5b 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 6c 65 67 61 6c 5c 2f 6c 65 67 61 6c 2d 72 65 73 65 61 72 63 68 2d 67 75 69 64 61 6e 63 65 5c 2f 6c 65 67 61 6c 2d 72 65 73 65 61 72 63 68 2d 74 65 63 68 6e 6f 6c 6f 67 79 Data Ascii: tion\/entities","propertyPath":["mainEntityOfPage","WebPage","about"],"@type":"TagLookupOmniLinkedEntity"}],"patterns":[{"@type":"PageCollection","members":["https:\/\/legal.thomsonreuters.com\/en\/legal\/legal-research-guidance\/legal-research-technology

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49806	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	972	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/user-icon-v1.5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:37 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 716 Connection: close Date: Tue, 01 Oct 2024 09:07:04 GMT Set-Cookie: AWSALB=+OZB25eM3+0GFqVnOgQx4vQstKH6e1HLjzcXhUdIOH7UlmsgXRiOnkCm0WCllS5amK8uhjb+3ANJy2s+GwB1hGN8T/HS+cb0JttaBJRAO+JCn5tWZhnRAPDMzWGY; Expires=Tue, 08 Oct 2024 09:07:04 GMT; Path=/ Set-Cookie: AWSALBCORS=+OZB25eM3+0GFqVnOgQx4vQstKH6e1HLjzcXhUdIOH7UlmsgXRiOnkCm0WCllS5amK8uhjb+3ANJy2s+GwB1hGN8T/HS+cb0JttaBJRAO+JCn5tWZhnRAPDMzWGY; Expires=Tue, 08 Oct 2024 09:07:04 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "2cc-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:04 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6c21a88f98dc05bf345d31b96407e6d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: rVtGiSGeh8x8L8iijKC4IiWyp1gfwOPhcVaoqAH1xbLDDKHq3N9-9A== Age: 2673
2024-10-01 09:51:37 UTC	716	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 34 36 38 38 20 31 33 2e 30 33 31 32 43 31 31 2e 37 35 20 31 31 2e 38 31 32 35 20 31 30 2e 34 36 38 38 20 31 31 20 39 20 31 31 48 37 43 35 2e 35 20 31 31 20 34 2e 32 31 38 37 35 20 31 31 2e 38 31 32 35 20 33 2e 35 33 31 32 35 20 31 33 2e 30 33 31 32 43 34 2e 36 32 35 20 31 34 2e 32 35 20 36 2e 32 31 38 37 35 20 31 35 20 38 20 31 35 43 39 2e 37 35 20 31 35 20 31 31 2e 33 34 33 38 20 31 34 2e 32 35 20 31 32 2e 34 36 38 38 20 31 33 2e 30 Data Ascii: <svg width="16" height="18" viewBox="0 0 16 18" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12.4688 13.0312C11.75 11.8125 10.4688 11 9 11H7C5.5 11 4.21875 11.8125 3.53125 13.0312C4.625 14.25 6.21875 15 8 15C9.75 15 11.3438 14.25 12.4688 13.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49823	155.46.172.12	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	768	OUT	GET /law-products/cart/cart.json?callback=jsonp_1727776295567_43608 HTTP/1.1 Host: store.legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true
2024-10-01 09:51:37 UTC	1461	IN	HTTP/1.1 200 200 Date: Tue, 01 Oct 2024 09:51:37 GMT Server: Apache Set-Cookie: ADRUM_BTa=R:33\|g:7d43d81e-41e3-42bd-9a65-bd3c6e9c2fa3; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:07 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:33\|g:7d43d81e-41e3-42bd-9a65-bd3c6e9c2fa3\|n:thomsonreutersebs_3755e129-eecf-46d8-aaca-243b802ef37f; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:07 GMT; Path=/; Secure Set-Cookie: SameSite=None; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:07 GMT; Path=/; Secure Set-Cookie: JSESSIONID=9743F877B6563E5488505A1D2F7D5BED; Path=/law-products; Secure; HttpOnly Set-Cookie: JSESSIONID=9743F877B6563E5488505A1D2F7D5BED; Path=/law-products; HttpOnly Set-Cookie: USER_ID_COOKIE=anonymous; Max-Age=31536000; Expires=Wed, 01 Oct 2025 09:51:37 GMT; Path=/law-products Set-Cookie: ADRUM_BT1=R:33\|i:32781; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:07 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:33\|i:32781\|e:18; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:07 GMT; Path=/; Secure Cache-Control: no-store Set-Cookie: ADRUM_BT1=R:33\|i:32781\|e:18\|d:17; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:07 GMT; Path=/; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Type: application/json;charset=UTF-8 Content-Length: 108 Vary: User-Agent Connection: close Set-Cookie: BIGipServerHYBRISESTORE-443=269462794.47873.0000; path=/; Httponly; Secure
2024-10-01 09:51:37 UTC	108	IN	Data Raw: 6a 73 6f 6e 70 5f 31 37 32 37 37 37 36 32 39 35 35 36 37 5f 34 33 36 30 38 28 7b 22 70 72 69 63 65 53 75 62 54 6f 74 61 6c 22 3a 30 2c 22 74 6f 74 61 6c 55 6e 69 74 43 6f 75 6e 74 22 3a 30 2c 22 75 73 65 72 4e 61 6d 65 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 22 2c 22 74 6f 74 61 6c 49 74 65 6d 43 6f 75 6e 74 22 3a 30 7d 29 3b Data Ascii: jsonp_1727776295567_43608({"priceSubTotal":0,"totalUnitCount":0,"userName":"Anonymous","totalItemCount":0});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49828	34.252.162.78	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	767	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: westthomson.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=52383547755092570744435798233617763102
2024-10-01 09:51:37 UTC	608	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:37 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: 8F5LUUh7SDw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Wed, 18 Sep 2024 09:37:18 GMT DCS: dcs-prod-irl1-1-v065-05c311266.edge-irl1.demdex.com 13 ms
2024-10-01 09:51:37 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49825	54.77.208.237	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	519	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=A7D63BC75245AE300A490D4D%40AdobeOrg&d_nsid=0&ts=1727776295181 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=52383547755092570744435798233617763102
2024-10-01 09:51:37 UTC	713	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:37 GMT Content-Type: application/json;charset=utf-8 Content-Length: 2579 Connection: close X-TID: Ap1nrEz8QmQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-1-v065-030adfb8b.edge-irl1.demdex.com 5 ms set-cookie: demdex=52383547755092570744435798233617763102; Max-Age=15552000; Expires=Sun, 30 Mar 2025 09:51:37 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-01 09:51:37 UTC	2579	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 32 35 30 39 37 30 39 37 33 38 31 33 32 31 30 35 33 32 34 34 35 39 32 35 33 33 37 30 33 35 37 36 32 38 33 36 30 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"52509709738132105324459253370357628360","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49827	63.140.62.222	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	762	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=A7D63BC75245AE300A490D4D%40AdobeOrg&mid=52509709738132105324459253370357628360&ts=1727776296115 HTTP/1.1 Host: westthomsoncom.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	449	IN	HTTP/1.1 200 OK access-control-allow-origin: https://legal.thomsonreuters.com access-control-allow-credentials: true date: Tue, 01 Oct 2024 09:51:37 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-01 09:51:37 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49826	66.235.152.221	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	721	OUT	POST /rest/v1/delivery?client=westservicesinc&sessionId=e6cec483bd984004a698fc8e4aebdb06&version=2.11.4 HTTP/1.1 Host: westservicesinc.tt.omtrdc.net Connection: keep-alive Content-Length: 1272 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	1272	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 31 66 30 64 38 37 65 37 62 36 64 30 34 63 64 61 39 31 61 36 63 65 36 34 36 36 36 32 35 61 37 32 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 63 6c 69 65 6e 74 48 69 6e 74 73 22 3a 7b 22 6d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 62 72 6f 77 73 65 72 55 41 57 69 74 68 4d 61 6a 6f 72 Data Ascii: {"requestId":"1f0d87e7b6d04cda91a6ce6466625a72","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","clientHints":{"mobile":false,"platform":"Windows","browserUAWithMajor
2024-10-01 09:51:37 UTC	850	IN	HTTP/1.1 200 OK date: Tue, 01 Oct 2024 09:51:37 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://legal.thomsonreuters.com access-control-allow-credentials: true x-request-id: a64f6470-553c-4abc-929b-aa2c26e3dedb timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-10-01 09:51:37 UTC	5050	IN	Data Raw: 31 33 62 32 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 31 66 30 64 38 37 65 37 62 36 64 30 34 63 64 61 39 31 61 36 63 65 36 34 36 36 36 32 35 61 37 32 22 2c 22 63 6c 69 65 6e 74 22 3a 22 77 65 73 74 73 65 72 76 69 63 65 73 69 6e 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 65 36 63 65 63 34 38 33 62 64 39 38 34 30 30 34 61 36 39 38 66 63 38 65 34 61 65 62 64 62 30 36 2e 33 37 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 35 32 35 30 39 37 30 39 37 33 38 31 33 32 31 30 35 33 32 34 34 35 39 32 35 33 33 37 30 33 35 37 36 32 38 33 36 30 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 37 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 Data Ascii: 13b2{"status":200,"requestId":"1f0d87e7b6d04cda91a6ce6466625a72","client":"westservicesinc","id":{"tntId":"e6cec483bd984004a698fc8e4aebdb06.37_0","marketingCloudVisitorId":"52509709738132105324459253370357628360"},"edgeHost":"mboxedge37.tt.omtrdc.net","
2024-10-01 09:51:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49832	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	652	OUT	GET /consent/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35/d44bc8d7-bab6-412b-8d1b-627d267abba5/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8cbb8e25ffa5236a-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 53402 Cache-Control: public, max-age=86400 Expires: Wed, 02 Oct 2024 09:51:37 GMT Last-Modified: Tue, 05 Sep 2023 21:16:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: C8SEwbGEqC7qiBGsz9wOGQ== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a077584d-d01e-0013-7987-131d8f000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-01 09:51:37 UTC	387	IN	Data Raw: 37 62 63 61 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7bca{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 69 67 68 74 20 62 65 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e Data Ascii: of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 72 74 4d 6f 72 65 49 6e 66 6f 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 20 53 65 74 74 69 6e 67 73 22 2c 22 43 6f 6f 6b 69 65 53 65 74 74 69 6e 67 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 20 53 65 74 74 69 6e 67 73 22 2c 22 41 6c 65 72 74 41 6c 6c 6f 77 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 41 63 63 65 70 74 20 41 6c 6c 20 43 6f 6f 6b 69 65 73 22 2c 22 43 6c 6f 73 65 53 68 6f 75 6c 64 41 63 63 65 70 74 41 6c 6c 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 31 36 31 39 31 39 35 30 32 32 33 38 33 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 4f 75 72 20 50 72 69 76 61 63 79 20 53 74 61 74 65 6d 65 6e 74 20 26 20 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 46 6f 72 63 65 Data Ascii: rtMoreInfoText":"Cookies Settings","CookieSettingButtonText":"Cookies Settings","AlertAllowCookiesText":"Accept All Cookies","CloseShouldAcceptAllCookies":false,"LastReconsentDate":1619195022383,"BannerTitle":"Our Privacy Statement & Cookie Policy","Force
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 65 73 20 61 6e 64 20 6f 74 68 65 72 20 74 72 61 63 6b 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 75 72 70 6f 73 65 73 3a 22 2c 22 47 72 6f 75 70 73 22 3a 5b 7b 22 53 68 6f 77 49 6e 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 49 6e 50 6f 70 75 70 4e 6f 6e 49 41 42 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 31 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 31 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 Data Ascii: es and other tracking technologies for the following purposes:","Groups":[{"ShowInPopup":true,"ShowInPopupNonIAB":true,"ShowSDKListLink":true,"Order":"1","OptanonGroupId":"1","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupTogg
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 49 61 62 50 75 72 70 6f 73 65 22 3a 66 61 6c 73 65 2c 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 41 57 53 41 4c 42 22 2c 22 69 64 22 3a 22 66 63 63 61 36 37 31 30 2d 34 35 65 61 2d 34 66 66 61 2d 39 61 64 34 2d 38 33 66 61 63 32 35 35 30 36 65 31 22 2c 22 4e 61 6d 65 22 3a 22 41 57 53 41 4c 42 22 2c 22 48 6f 73 74 22 3a 22 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 Data Ascii: IabPurpose":false,"GeneralVendorsIds":[],"FirstPartyCookies":[{"thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"CookieAWSALB","id":"fcca6710-45ea-4ffa-9ad4-83fac25506e1","Name":"AWSALB","Host":"legal.thomsonreuters.com","
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 65 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 69 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 72 65 6d 65 6d 62 65 72 65 64 2e 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 73 69 74 65 20 76 69 73 69 74 6f 72 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 Data Ascii: e site will have their preferences remembered. It contains no information that can identify the site visitor.","DurationType":1,"category":null,"isThirdParty":false},{"thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"Cooki
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 22 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 42 49 47 69 70 53 65 72 76 65 72 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 42 49 47 69 70 53 65 72 76 65 72 22 2c 22 69 64 22 3a 22 37 30 37 64 30 33 30 32 2d 61 35 61 36 2d 34 34 39 36 2d 62 38 32 32 2d 32 34 66 38 33 37 64 36 62 36 65 66 22 2c 22 4e 61 6d 65 22 3a 22 42 49 47 69 70 53 65 72 76 65 72 48 59 42 52 49 53 45 53 54 4f 52 45 2d 41 4e 59 22 2c 22 48 6f 73 74 22 3a 22 73 74 6f 72 65 2e 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 Data Ascii: ","thirdPartyKey":"Pattern\|BIGipServer","firstPartyKey":"Pattern\|BIGipServer","id":"707d0302-a5a6-4496-b822-24f837d6b6ef","Name":"BIGipServerHYBRISESTORE-ANY","Host":"store.legal.thomsonreuters.com","IsSession":true,"Length":"0","description":"This cookie
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 5f 68 6a 54 4c 44 54 65 73 74 22 2c 22 69 64 22 3a 22 61 62 36 33 62 62 34 38 2d 39 30 36 38 2d 34 37 62 61 2d 61 65 30 30 2d 63 30 61 30 65 31 30 64 34 33 31 66 22 2c 22 4e 61 6d 65 22 3a 22 5f 68 6a 54 4c 44 54 65 73 74 22 2c 22 48 6f 73 74 22 3a 22 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 57 68 65 6e 20 74 68 65 20 48 6f 74 6a 61 72 20 73 63 72 69 70 74 20 65 78 65 63 75 74 65 73 20 Data Ascii: ription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"Cookie_hjTLDTest","id":"ab63bb48-9068-47ba-ae00-c0a0e10d431f","Name":"_hjTLDTest","Host":"thomsonreuters.com","IsSession":true,"Length":"0","description":"When the Hotjar script executes
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 31 39 36 37 61 35 38 34 22 2c 22 4e 61 6d 65 22 3a 22 41 57 53 45 4c 42 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 6e 61 6d 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 41 6d 61 7a 6f 6e 20 57 65 62 20 53 65 72 76 69 63 65 73 20 45 6c 61 73 74 69 63 20 4c 6f 61 64 20 42 61 6c 61 6e 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 66 6f 72 20 72 6f 75 74 69 6e 67 20 63 6c 69 65 6e 74 20 72 65 71 75 65 73 74 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 Data Ascii: 1967a584","Name":"AWSELB","Host":"www.thomsonreuters.com","IsSession":false,"Length":"0","description":"This cookie name is associated with the Amazon Web Services Elastic Load Balancing functionality for routing client request on the server.","DurationTy
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 6e 61 6d 65 20 69 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 42 49 47 2d 49 50 20 70 72 6f 64 75 63 74 20 73 75 69 74 65 20 66 72 6f 6d 20 63 6f 6d 70 61 6e 79 20 46 35 2e 20 55 73 75 61 6c 6c 79 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 6d 61 6e 61 67 69 6e 67 20 73 65 73 73 69 6f 6e 73 20 6f 6e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 73 65 72 76 65 72 73 2c 20 74 6f 20 65 6e 73 75 72 65 20 75 73 65 72 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 6f 75 74 65 64 20 63 6f 6e 73 69 73 74 65 6e 74 6c 79 20 74 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 73 65 72 76 65 72 2e 20 54 68 Data Ascii: Cookies":[{"thirdPartyDescription":"This cookie name is associated with the BIG-IP product suite from company F5. Usually associated with managing sessions on load balanced servers, to ensure user requests are routed consistently to the correct server. Th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49831	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:37 UTC	382	OUT	GET /scripttemplates/202308.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:37 UTC	859	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:37 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: 2+I2Cj649lHjQKiedh8F2Q== Last-Modified: Wed, 25 Oct 2023 03:55:47 GMT x-ms-request-id: 6c1c0484-d01e-0095-66e7-99d136000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 38651 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e25fc5d6a5e-EWR
2024-10-01 09:51:37 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 33 30 38 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202308.1.0 * by OneTrust LLC * Copyright 2023 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 46 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4b 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 58 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 24 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 58 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof K)return t._state=3,t._value=e,void X(t);if("function"==typeof o)return void $((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,X(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 4b 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4b 3f 74 3a 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 4b 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},K.resolve=function(t){return t&&"object"==typeof t&&t.constructor===K?t:new K(function(e){e(t)})},K.reject=function(o){re
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 2e 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 Data Ascii: .BannerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=te=te\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=oe=oe\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConse
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 79 65 3d 79 65 7c 7c 7b Data Ascii: ll"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=Ce=Ce\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ye=ye\|\|{
2024-10-01 09:51:37 UTC	1369	IN	Data Raw: 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 45 65 3d 45 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 49 41 42 3d 22 49 41 42 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e 45 52 49 43 3d 22 47 45 4e 45 52 49 43 22 2c 65 2e 4c 47 50 44 3d 22 4c 47 50 44 22 2c 65 2e 47 45 4e 45 52 49 43 5f 50 52 4f 4d 50 54 3d 22 47 45 4e 45 52 49 43 5f 50 52 4f 4d Data Ascii: oLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=_e=_e\|\|{}).cookies="cookies",e.vendors="vendors",(e=Ee=Ee\|\|{}).GDPR="GDPR",e.IAB="IAB",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GENERIC="GENERIC",e.LGPD="LGPD",e.GENERIC_PROMPT="GENERIC_PROM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49834	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	955	OUT	GET /etc.clientlibs/emcm/components/structure/page/tracking-clientlibs.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:38 UTC	1306	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 352 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=67Vu+t6te46udB8PdJVk/C6S54FdmW8HfwD64yI0tBSTfmJx+u+70Rppf2DjKd94/EiAeqwfTfNcA9V9rdQAff/yKcPwfXCtYk7U3XmC/F0oL/3gCHwfX3FoDGkp; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=67Vu+t6te46udB8PdJVk/C6S54FdmW8HfwD64yI0tBSTfmJx+u+70Rppf2DjKd94/EiAeqwfTfNcA9V9rdQAff/yKcPwfXCtYk7U3XmC/F0oL/3gCHwfX3FoDGkp; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Tue, 26 Oct 2021 09:16:42 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "160-5cf3def855280" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3d95fd99ed5f07db9d464a35af433056.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: uSdM6S6b8KehyiLH5nEEdtw3nE934sSUxuBuxOCYMVVVS4BDWrSCNA== Age: 417
2024-10-01 09:51:38 UTC	352	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 62 28 65 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 62 28 22 2e 63 68 61 74 42 6f 74 54 72 61 63 6b 69 6e 67 56 61 72 69 61 62 6c 65 73 22 29 2c 63 3d 61 2e 64 61 74 61 28 22 74 72 61 63 6b 69 6e 67 2d 63 61 6d 70 61 69 67 6e 2d 63 6f 64 65 22 29 2c 64 3d 61 2e 64 61 74 61 28 22 74 72 61 63 6b 69 6e 67 2d 63 68 61 6e 6e 65 6c 2d 63 6f 64 65 22 29 3b 61 3d 61 2e 64 61 74 61 28 22 74 72 61 63 6b 69 6e 67 2d 73 66 64 63 2d 63 6f 64 65 22 29 3b 74 72 79 7b 63 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 63 69 64 22 2c 63 29 2c 64 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 63 68 6c 22 2c Data Ascii: (function(e,b){b(e).ready(function(){var a=b(".chatBotTrackingVariables"),c=a.data("tracking-campaign-code"),d=a.data("tracking-channel-code");a=a.data("tracking-sfdc-code");try{c&&window.localStorage.setItem("cid",c),d&&window.localStorage.setItem("chl",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49833	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	972	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/apps-icon-v1.5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:38 UTC	1308	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1416 Connection: close Date: Tue, 01 Oct 2024 09:06:52 GMT Set-Cookie: AWSALB=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7; Expires=Tue, 08 Oct 2024 09:06:52 GMT; Path=/ Set-Cookie: AWSALBCORS=tkiPJmZGq1gf4mSuYtPN/L17ZggboLNXKHf1eV7iKRqoxBZ3wb3c5rzQd4VkJVLR8Aj1Va6iJybbJ5vhYnEKKu8rh+aW3blygxa4BLDhvZaYzHfZCblg3JoIE/l7; Expires=Tue, 08 Oct 2024 09:06:52 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "588-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:21:52 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5a2cb96a37aeca3f9626798c4e9dab28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: dgaGP_pmC2hAz2xmOrpyZ460N--ODFlOAbJxckTu-NhVGwyJYj8D0A== Age: 2685
2024-10-01 09:51:38 UTC	1416	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 32 2e 32 35 43 31 20 31 2e 35 36 32 35 20 31 2e 35 33 31 32 35 20 31 20 32 2e 32 35 20 31 48 33 2e 37 35 43 34 2e 34 33 37 35 20 31 20 35 20 31 2e 35 36 32 35 20 35 20 32 2e 32 35 56 33 2e 37 35 43 35 20 34 2e 34 36 38 37 35 20 34 2e 34 33 37 35 20 35 20 33 2e 37 35 20 35 48 32 2e 32 35 43 31 2e 35 33 31 32 35 20 35 20 31 20 34 2e 34 36 38 37 35 20 31 20 33 2e 37 35 56 32 2e 32 35 5a 4d 31 20 37 2e 32 35 43 31 20 36 2e 35 36 32 35 20 31 Data Ascii: <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 2.25C1 1.5625 1.53125 1 2.25 1H3.75C4.4375 1 5 1.5625 5 2.25V3.75C5 4.46875 4.4375 5 3.75 5H2.25C1.53125 5 1 4.46875 1 3.75V2.25ZM1 7.25C1 6.5625 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49835	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	939	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:38 UTC	1311	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 140139 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=RohfDQQWjIt7lJ/S190ONdtME2IX3V8rt9Qu51Mnmm3yA4UpqTLZP3ReHLB1WJ9jtRq1Qk4uM6Pyldsvzy1XF7Bki2eKSXIebcAAlNb0WO1TinTbyQSNNDruMEIH; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=RohfDQQWjIt7lJ/S190ONdtME2IX3V8rt9Qu51Mnmm3yA4UpqTLZP3ReHLB1WJ9jtRq1Qk4uM6Pyldsvzy1XF7Bki2eKSXIebcAAlNb0WO1TinTbyQSNNDruMEIH; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT ETag: "2236b-622c22f032900" Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f5af2731a86629973e69564f824d95be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: i8X0R6Chc4tLBtmhWgh-RzSlJz4TrOZSu93LbyRspMRAeAgFQY7i6w== Age: 417
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=fun
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 3d 30 7c 70 28 65 2c 6e 29 2c 69 3d 28 74 3d 73 28 74 2c 72 29 29 2e 77 72 69 74 65 28 65 2c 6e 29 3b 69 21 3d 3d 72 26 26 28 74 3d 74 2e 73 6c 69 63 65 28 30 2c 69 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 74 2c 65 2c 6e 29 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 63 2e 69 73 42 75 66 66 65 72 28 65 29 29 7b 76 61 72 20 6e 3d 30 7c 68 28 65 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 3d 73 28 74 2c 6e 29 29 2e 6c 65 6e 67 74 68 7c 7c 65 2e 63 6f 70 79 28 74 2c 30 2c 30 2c 6e 29 2c 74 7d 69 66 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 65 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 7c 7c 22 6c 65 6e 67 Data Ascii: =0\|p(e,n),i=(t=s(t,r)).write(e,n);i!==r&&(t=t.slice(0,i));return t}(t,e,n):function(t,e){if(c.isBuffer(e)){var n=0\|h(e.length);return 0===(t=s(t,n)).length\|\|e.copy(t,0,0,n),t}if(e){if("undefined"!=typeof ArrayBuffer&&e.buffer instanceof ArrayBuffer\|\|"leng
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 69 73 2e 6c 65 6e 67 74 68 26 26 28 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 2e 6c 65 6e 67 74 68 2d 65 3c 72 2d 6e 26 26 28 72 3d 74 2e 6c 65 6e 67 74 68 2d 65 2b 6e 29 3b 76 61 72 20 69 2c 6f 3d 72 2d 6e 3b 69 66 28 74 68 69 73 3d 3d 3d 74 26 26 6e 3c 65 26 26 65 3c 72 29 66 6f 72 28 69 3d 6f 2d 31 3b 69 3e 3d 30 3b 2d 2d 69 29 74 5b 69 2b 65 5d 3d 74 68 69 73 5b 69 2b 6e 5d 3b 65 6c 73 65 20 69 66 28 6f 3c 31 65 33 7c 7c 21 63 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 66 6f 72 28 69 3d 30 3b 69 3c 6f 3b 2b 2b 69 29 74 5b 69 2b 65 5d 3d 74 68 69 73 5b 69 2b 6e 5d 3b 65 6c 73 65 20 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 2e 63 61 6c 6c 28 74 2c 74 68 69 73 2e 73 75 62 61 72 72 61 79 28 6e 2c 6e Data Ascii: is.length&&(r=this.length),t.length-e<r-n&&(r=t.length-e+n);var i,o=r-n;if(this===t&&n<e&&e<r)for(i=o-1;i>=0;--i)t[i+e]=this[i+n];else if(o<1e3\|\|!c.TYPED_ARRAY_SUPPORT)for(i=0;i<o;++i)t[i+e]=this[i+n];else Uint8Array.prototype.set.call(t,this.subarray(n,n
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 74 2e 61 64 64 28 22 72 65 73 70 6f 6e 73 69 76 65 2d 6d 6f 64 65 22 29 7d 2c 74 68 69 73 2e 6f 6e 43 6c 69 63 6b 50 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 73 77 69 74 63 68 28 65 2e 76 69 64 65 6f 48 65 72 6f 43 6f 76 65 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 65 2e 70 61 72 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 70 6c 61 79 2d 76 69 64 65 6f 22 29 2c 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 69 64 65 6f 2d 68 65 72 6f 2d 70 6c 61 79 22 29 29 7b 63 61 73 65 22 79 6f 75 74 75 62 65 22 3a 65 2e 76 69 64 65 6f 59 6f 75 74 75 62 65 50 6c 61 79 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 76 69 64 79 61 72 64 22 3a 65 Data Ascii: t.add("responsive-mode")},this.onClickPlay=function(t){var n=t.currentTarget;switch(e.videoHeroCover.style.display="none",e.parent.classList.add("play-video"),n.getAttribute("data-video-hero-play")){case"youtube":e.videoYoutubePlay();break;case"vidyard":e
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 2e 70 61 74 68 6e 61 6d 65 7d 7d 72 65 74 75 72 6e 20 6e 3d 72 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 45 2e 61 2e 69 73 53 74 72 69 6e 67 28 74 29 3f 72 28 74 29 3a 74 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 63 6f 6c 3d 3d 3d 6e 2e 70 72 6f 74 6f 63 6f 6c 26 26 65 2e 68 6f 73 74 3d 3d 3d 6e 2e 68 6f 73 74 7d 7d 28 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 2c 75 74 3d 4d 2e 68 61 73 53 74 61 6e 64 61 72 64 42 72 6f 77 73 65 72 45 6e 76 3f 7b 77 72 69 74 65 28 74 2c 65 2c 6e 2c 72 2c 69 2c 6f 29 7b 63 6f 6e 73 74 20 61 3d 5b 74 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 5d 3b 45 2e 61 2e 69 73 4e 75 6d 62 Data Ascii: .pathname}}return n=r(window.location.href),function(t){const e=E.a.isString(t)?r(t):t;return e.protocol===n.protocol&&e.host===n.host}}():function(){return!0},ut=M.hasStandardBrowserEnv?{write(t,e,n,r,i,o){const a=[t+"="+encodeURIComponent(e)];E.a.isNumb
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 65 2e 74 72 61 63 6b 28 4b 74 2e 73 74 61 72 74 29 7d 2c 74 68 69 73 2e 74 72 61 63 6b 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 64 69 67 69 74 61 6c 44 61 74 61 2e 70 61 67 65 2e 66 6f 72 6d 26 26 28 65 2e 64 69 67 69 74 61 6c 44 61 74 61 2e 70 61 67 65 2e 66 6f 72 6d 2e 66 6f 72 6d 45 72 72 6f 72 73 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2e 6a 6f 69 6e 28 22 2c 22 29 29 2c 65 2e 74 72 61 63 6b 28 4b 74 2e 65 72 72 6f 72 73 29 29 7d 2c 74 68 69 73 2e 74 72 61 63 6b 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 6f 70 75 6c 61 74 65 47 74 61 67 28 29 2c 65 2e 74 72 61 63 6b 28 4b 74 2e 73 75 63 63 65 73 73 29 7d 2c 74 68 69 73 2e 74 72 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 73 61 Data Ascii: nction(){e.track(Kt.start)},this.trackError=function(t){e.digitalData.page.form&&(e.digitalData.page.form.formErrors="".concat(t.join(",")),e.track(Kt.errors))},this.trackSuccess=function(){e.populateGtag(),e.track(Kt.success)},this.track=function(t){e.sa
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 22 5d 27 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 64 61 74 61 73 65 74 2e 64 65 70 65 6e 64 65 6e 63 79 4f 70 74 69 6f 6e 3f 74 2e 63 68 65 63 6b 65 64 26 26 65 2e 64 61 74 61 73 65 74 2e 64 65 70 65 6e 64 65 6e 63 79 4f 70 74 69 6f 6e 2e 69 6e 63 6c 75 64 65 73 28 74 2e 64 61 74 61 73 65 74 2e 72 61 64 69 6f 56 61 6c 75 65 29 3f 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 44 69 73 70 6c 61 79 28 65 29 3a 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 44 69 73 70 6c 61 79 28 65 29 3a 74 2e 64 61 74 61 73 65 74 2e 72 61 64 69 6f 56 61 6c 75 65 3f 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 44 69 73 70 6c 61 79 28 65 29 3a 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 44 69 73 70 6c 61 79 28 65 29 7d 29 29 7d 2c 6e Data Ascii: "]')).forEach((function(e){e.dataset.dependencyOption?t.checked&&e.dataset.dependencyOption.includes(t.dataset.radioValue)?n.removeAttributeDisplay(e):n.setAttributeDisplay(e):t.dataset.radioValue?n.removeAttributeDisplay(e):n.setAttributeDisplay(e)}))},n
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 65 66 74 22 29 7c 7c 28 6e 2e 73 74 79 6c 65 2e 6d 69 6e 48 65 69 67 68 74 3d 22 22 2e 63 6f 6e 63 61 74 28 72 2e 68 65 69 67 68 74 2c 22 70 78 22 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 74 29 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 69 6e 63 6c 75 64 65 73 28 22 4c 65 66 74 22 29 7c 7c 28 65 2e 73 74 79 6c 65 2e 72 69 67 68 74 3d 22 22 2e 63 6f 6e 63 61 74 28 30 2c 22 70 78 22 29 29 3b 76 61 72 20 6e 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 74 2e 69 6e 63 6c 75 64 65 73 28 22 4c 65 66 74 22 29 3f 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 22 2e 63 6f 6e 63 61 74 28 62 65 2c 22 70 78 Data Ascii: eft")\|\|(n.style.minHeight="".concat(r.height,"px"))}))}function Ae(t){document.querySelectorAll(t).forEach((function(e){t.includes("Left")\|\|(e.style.right="".concat(0,"px"));var n=e.getBoundingClientRect();t.includes("Left")?e.style.width="".concat(be,"px
2024-10-01 09:51:38 UTC	9067	IN	Data Raw: 68 74 22 2c 74 2e 73 74 79 6c 65 2e 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 22 6d 61 72 67 69 6e 2d 6c 65 66 74 22 29 29 7d 7d 7d 7d 28 61 29 2c 65 2e 72 6f 6f 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 21 65 2e 72 6f 6f 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 76 65 6e 74 73 2d 61 64 64 65 64 22 29 26 26 65 2e 72 6f 6f 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 22 29 26 26 28 65 2e 72 6f 6f 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 66 6c 65 78 22 2c 6e 75 6c 6c 3d 3d 3d 28 72 3d 65 2e 72 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 69 6d 67 22 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 72 2e 73 65 74 41 Data Ascii: ht",t.style.removeProperty("margin-left"))}}}}(a),e.root.style.display="block",!e.root.hasAttribute("data-events-added")&&e.root.classList.contains("image-container")&&(e.root.style.display="flex",null===(r=e.root.querySelector("img"))\|\|void 0===r\|\|r.setA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49843	155.46.172.12	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	1091	OUT	GET /law-products/cart/cart.json?callback=jsonp_1727776295567_43608 HTTP/1.1 Host: store.legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=9743F877B6563E5488505A1D2F7D5BED; USER_ID_COOKIE=anonymous; at_check=true; AMCVS_A7D63BC75245AE300A490D4D%40AdobeOrg=1; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CMCMID%7C52509709738132105324459253370357628360%7CMCAAMLH-1728381096%7C6%7CMCAAMB-1728381096%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1727783496s%7CNONE%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778157; ADRUM_BTa=R:33\|g:7d43d81e-41e3-42bd-9a65-bd3c6e9c2fa3\|n:thomsonreutersebs_3755e129-eecf-46d8-aaca-243b802ef37f; SameSite=None; ADRUM_BT1=R:33\|i:32781\|e:18\|d:17; BIGipServerHYBRISESTORE-443=269462794.47873.0000
2024-10-01 09:51:38 UTC	1658	IN	HTTP/1.1 200 200 Date: Tue, 01 Oct 2024 09:51:38 GMT Server: Apache Set-Cookie: ADRUM_BTa=R:33\|g:7d43d81e-41e3-42bd-9a65-bd3c6e9c2fa3\|n:thomsonreutersebs_3755e129-eecf-46d8-aaca-243b802ef37f; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:33\|i:32781\|e:18\|d:17; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:0\|g:2d7cd03c-bbcd-445e-8440-ef3ac984d87c; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:08 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:0\|g:2d7cd03c-bbcd-445e-8440-ef3ac984d87c\|n:thomsonreutersebs_3755e129-eecf-46d8-aaca-243b802ef37f; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:08 GMT; Path=/; Secure Set-Cookie: SameSite=None; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:08 GMT; Path=/; Secure Set-Cookie: JSESSIONID=9743F877B6563E5488505A1D2F7D5BED; Path=/law-products; HttpOnly Set-Cookie: CART_ID_COOKIE=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/law-products Set-Cookie: USER_ID_COOKIE=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/law-products Set-Cookie: ADRUM_BT1=R:0\|i:32781; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:08 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:32781\|e:18; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:08 GMT; Path=/; Secure Cache-Control: no-store Set-Cookie: ADRUM_BT1=R:0\|i:32781\|e:18\|d:19; Max-Age=30; Expires=Tue, 01 Oct 2024 09:52:08 GMT; Path=/; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Type: application/json;charset=UTF-8 Content-Length: 108 Vary: User-Agent Connection: close
2024-10-01 09:51:38 UTC	108	IN	Data Raw: 6a 73 6f 6e 70 5f 31 37 32 37 37 37 36 32 39 35 35 36 37 5f 34 33 36 30 38 28 7b 22 70 72 69 63 65 53 75 62 54 6f 74 61 6c 22 3a 30 2c 22 74 6f 74 61 6c 55 6e 69 74 43 6f 75 6e 74 22 3a 30 2c 22 75 73 65 72 4e 61 6d 65 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 22 2c 22 74 6f 74 61 6c 49 74 65 6d 43 6f 75 6e 74 22 3a 30 7d 29 3b Data Ascii: jsonp_1727776295567_43608({"priceSubTotal":0,"totalUnitCount":0,"userName":"Anonymous","totalItemCount":0});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49836	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	958	OUT	GET /etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+
2024-10-01 09:51:38 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 1271 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Aug 2024 05:58:33 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "4f7-6208fd0a2b440" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c5b802393a68d17f06973bb92695544a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: -okq_X57GddpA5v2sFais13Asmh60bGfYcJyHs2QN6o6K6UYO92WkQ== Age: 417
2024-10-01 09:51:38 UTC	1271	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 43 51 3d 77 69 6e 64 6f 77 2e 43 51 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 3d 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 75 74 69 6c 73 3d 7b 7d 3b 77 69 6e 64 6f 77 2e 43 51 2e 43 6f 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 75 74 69 6c 73 3d 7b 72 65 6d 6f 76 Data Ascii: (function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={remov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49841	52.58.230.154	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	359	OUT	GET /tags/dnb_coretag_v6.min.js HTTP/1.1 Host: v2.d41.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:38 UTC	366	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:38 GMT Content-Type: application/javascript Content-Length: 99032 Connection: close x-amzn-RequestId: 1597e08f-a52e-4d12-bbc7-4b02a225542c x-amzn-Remapped-Content-Length: 99032 x-amz-apigw-id: e9vmrHwiliAEJsQ= Timestamp: Tue, 01 Oct 2024 09:51:39 GMT X-Amzn-Trace-Id: Root=1-66fbc62a-6104825878eaac1c483f770c
2024-10-01 09:51:38 UTC	16018	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 6e 62 5f 63 6f 72 65 74 61 67 5f 65 75 5f 76 36 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 2f 2f 20 56 65 72 73 69 6f 6e 20 36 2e 30 2e 30 0a 2f 2f 20 46 6f 72 20 6f 70 74 2d 6f 75 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 70 6c 65 61 73 65 20 76 69 73 69 74 3a 20 68 74 74 70 73 3a 2f 2f 64 34 31 2e 63 6f 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 33 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 28 39 30 37 30 29 2c 65 28 37 39 34 31 29 2c 65 28 32 35 32 36 29 2c 65 28 37 33 32 37 29 2c 65 28 35 30 30 33 29 2c 65 28 34 37 34 37 29 2c 65 Data Ascii: /! For license information please see dnb_coretag_eu_v6.min.js.LICENSE.txt /// Version 6.0.0// For opt-out information, please visit: https://d41.co/!function(){var t={355:function(t,r,e){"use strict";e(9070),e(7941),e(2526),e(7327),e(5003),e(4747),e
2024-10-01 09:51:38 UTC	56	IN	Data Raw: 2e 6b 65 79 3d 3d 72 29 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 69 28 6c 2c 7b 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: .key==r)return e};return i(l,{clear:function(){for(var t
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 3d 79 28 74 68 69 73 29 2c 72 3d 74 2e 69 6e 64 65 78 2c 65 3d 74 2e 66 69 72 73 74 3b 65 3b 29 65 2e 72 65 6d 6f 76 65 64 3d 21 30 2c 65 2e 70 72 65 76 69 6f 75 73 26 26 28 65 2e 70 72 65 76 69 6f 75 73 3d 65 2e 70 72 65 76 69 6f 75 73 2e 6e 65 78 74 3d 76 6f 69 64 20 30 29 2c 64 65 6c 65 74 65 20 72 5b 65 2e 69 6e 64 65 78 5d 2c 65 3d 65 2e 6e 65 78 74 3b 74 2e 66 69 72 73 74 3d 74 2e 6c 61 73 74 3d 76 6f 69 64 20 30 2c 76 3f 74 2e 73 69 7a 65 3d 30 3a 74 68 69 73 2e 73 69 7a 65 3d 30 7d 2c 64 65 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 65 3d 79 28 72 29 2c 6e 3d 78 28 72 2c 74 29 3b 69 66 28 6e 29 7b 76 61 72 20 6f 3d 6e 2e 6e 65 78 74 2c 69 3d 6e 2e 70 72 65 76 69 6f 75 73 3b 64 65 6c 65 74 65 20 65 2e 69 6e Data Ascii: =y(this),r=t.index,e=t.first;e;)e.removed=!0,e.previous&&(e.previous=e.previous.next=void 0),delete r[e.index],e=e.next;t.first=t.last=void 0,v?t.size=0:this.size=0},delete:function(t){var r=this,e=y(r),n=x(r,t);if(n){var o=n.next,i=n.previous;delete e.in
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 6f 72 74 73 3d 7b 7d 7d 2c 36 32 34 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 37 34 36 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 2e 6c 65 6e 67 74 68 29 7d 7d 2c 36 33 33 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 37 32 39 33 29 2c 6f 3d 65 28 36 31 34 29 2c 69 3d 65 28 32 35 39 37 29 2c 75 3d 65 28 39 37 38 31 29 2c 61 3d 65 28 36 35 33 30 29 2e 43 4f 4e 46 49 47 55 52 41 42 4c 45 2c 63 3d 65 28 32 37 38 38 29 2c 73 3d 65 28 39 39 30 39 29 2c 66 3d 73 2e 65 6e 66 6f 72 63 65 2c 70 3d 73 2e 67 65 74 2c 6c 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 76 3d 75 26 26 21 6e 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: orts={}},6244:function(t,r,e){var n=e(7466);t.exports=function(t){return n(t.length)}},6339:function(t,r,e){var n=e(7293),o=e(614),i=e(2597),u=e(9781),a=e(6530).CONFIGURABLE,c=e(2788),s=e(9909),f=s.enforce,p=s.get,l=Object.defineProperty,v=u&&!n((function
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 76 3d 30 3b 66 6f 72 28 72 3d 2d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 67 28 69 3d 2d 31 3d 3d 3d 72 3f 75 3a 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 29 66 6f 72 28 6f 3d 63 28 69 29 2c 73 28 76 2b 6f 29 2c 65 3d 30 3b 65 3c 6f 3b 65 2b 2b 2c 76 2b 2b 29 65 20 69 6e 20 69 26 26 66 28 6c 2c 76 2c 69 5b 65 5d 29 3b 65 6c 73 65 20 73 28 76 2b 31 29 2c 66 28 6c 2c 76 2b 2b 2c 69 29 3b 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 76 2c 6c 7d 7d 29 7d 2c 37 33 32 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 65 28 32 31 30 39 29 2c 6f 3d 65 28 32 30 39 32 29 2e 66 69 6c 74 65 72 3b 6e 28 7b 74 61 72 67 65 74 3a 22 41 72 72 61 79 22 2c 70 Data Ascii: v=0;for(r=-1,n=arguments.length;r<n;r++)if(g(i=-1===r?u:arguments[r]))for(o=c(i),s(v+o),e=0;e<o;e++,v++)e in i&&f(l,v,i[e]);else s(v+1),f(l,v++,i);return l.length=v,l}})},7327:function(t,r,e){"use strict";var n=e(2109),o=e(2092).filter;n({target:"Array",p
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 41 72 72 61 79 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 35 37 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 38 35 32 29 28 65 28 35 36 33 39 29 2c 22 57 65 61 6b 4d 61 70 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 34 39 36 33 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 2d 31 2c 6e 3d 6e 75 6c 6c 3d 3d 74 3f 30 3a 74 2e 6c 65 6e 67 74 68 2c 6f 3d 30 2c 69 3d 5b 5d 3b 2b 2b 65 3c 6e 3b 29 7b 76 61 72 20 75 3d 74 5b 65 5d 3b 72 28 75 2c 65 2c 74 29 26 26 28 69 5b 6f 2b 2b 5d 3d 75 29 7d 72 65 74 75 72 6e 20 69 7d 7d 2c 34 36 33 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 6e 3d 65 28 32 35 34 35 29 2c 6f Data Ascii: Array;t.exports=n},577:function(t,r,e){var n=e(852)(e(5639),"WeakMap");t.exports=n},4963:function(t){t.exports=function(t,r){for(var e=-1,n=null==t?0:t.length,o=0,i=[];++e<n;){var u=t[e];r(u,e,t)&&(i[o++]=u)}return i}},4636:function(t,r,e){var n=e(2545),o
2024-10-01 09:51:40 UTC	16384	IN	Data Raw: 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 2b 22 22 3b 72 65 74 75 72 6e 22 30 22 3d 3d 72 26 26 31 2f 74 3d 3d 2d 49 6e 66 69 6e 69 74 79 3f 22 2d 30 22 3a 72 7d 7d 2c 33 34 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 74 2b 22 22 7d 63 61 74 63 68 28 74 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 7d 2c 37 38 31 33 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 Data Ascii: (t))return t;var r=t+"";return"0"==r&&1/t==-Infinity?"-0":r}},346:function(t){var r=Function.prototype.toString;t.exports=function(t){if(null!=t){try{return r.call(t)}catch(t){}try{return t+""}catch(t){}}return""}},7813:function(t){t.exports=function(t,r)
2024-10-01 09:51:40 UTC	1038	IN	Data Raw: 2e 68 65 61 64 65 72 73 5b 74 5d 29 29 7d 29 29 2c 69 2e 73 69 67 6e 61 6c 26 26 28 69 2e 73 69 67 6e 61 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 73 29 2c 61 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 61 2e 72 65 61 64 79 53 74 61 74 65 26 26 69 2e 73 69 67 6e 61 6c 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 73 29 7d 29 2c 61 2e 73 65 6e 64 28 76 6f 69 64 20 30 3d 3d 3d 69 2e 5f 62 6f 64 79 49 6e 69 74 3f 6e 75 6c 6c 3a 69 2e 5f 62 6f 64 79 49 6e 69 74 29 7d 29 29 7d 45 2e 70 6f 6c 79 66 69 6c 6c 3d 21 30 2c 6e 2e 66 65 74 63 68 7c 7c 28 6e 2e 66 65 74 63 68 3d 45 2c 6e 2e 48 65 61 64 65 72 73 3d 68 2c 6e 2e 52 Data Ascii: .headers[t]))})),i.signal&&(i.signal.addEventListener("abort",s),a.onreadystatechange=function(){4===a.readyState&&i.signal.removeEventListener("abort",s)}),a.send(void 0===i._bodyInit?null:i._bodyInit)}))}E.polyfill=!0,n.fetch\|\|(n.fetch=E,n.Headers=h,n.R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49842	13.35.58.39	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	424	OUT	GET /ThomsonReuters/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20vZW4vcHJvZHVjdHMvaGlnaHE HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:38 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Date: Tue, 01 Oct 2024 09:44:15 GMT Server: AmazonS3 access-control-expose-headers: x-amz-meta-source, x-amz-meta-accountid, x-amz-meta-url Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: max-age=14400 X-Cache: Hit from cloudfront Via: 1.1 c8ad942d9a5a20a8da22d39de4142f78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 1KS0liSaAWKgtNTMPvPKbskAzDvRs1sIR7Pgm0vRjZJTtlQNBtDaZw== Age: 442

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49846	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	966	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-base.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; tr_ewp_tracking_params={}; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:38 UTC	1309	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 24157 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=CG0oTTKhAXL+ECDZJcFTQ/u5bFCw/uZg4ZvfQ2hd2wRetGi/RDxCyLPzCsEM4+K/OAA/goaese+vXC3IOyyMJqLqOo6U3HxGgzbgLLNuCH5dcoezOQ0rjgvEtJhf; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=CG0oTTKhAXL+ECDZJcFTQ/u5bFCw/uZg4ZvfQ2hd2wRetGi/RDxCyLPzCsEM4+K/OAA/goaese+vXC3IOyyMJqLqOo6U3HxGgzbgLLNuCH5dcoezOQ0rjgvEtJhf; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Aug 2024 05:58:33 GMT ETag: "5e5d-6208fd0a2b440" Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7ab8983df8c6e33475e52fb04de82cbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: ymZXusaMgDSM7j4eWSLL1ssQ181RSSZK7NDZQD7hj5JHDOFA8Vku2w== Age: 416
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 3b 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 7c 7c 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 6d 3d 74 68 69 73 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 6d 29 29 72 65 74 75 72 Data Ascii: Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector);Element.prototype.closest\|\|(Element.prototype.closest=function(v){var m=this;if(!document.documentElement.contains(m))retur
2024-10-01 09:51:38 UTC	7773	IN	Data Raw: 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 26 26 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 3d 28 74 68 Data Ascii: ment.prototype.matches&&(Element.prototype.matches=Element.prototype.matchesSelector\|\|Element.prototype.mozMatchesSelector\|\|Element.prototype.msMatchesSelector\|\|Element.prototype.oMatchesSelector\|\|Element.prototype.webkitMatchesSelector\|\|function(v){v=(th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49844	34.200.154.196	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	614	OUT	GET /api?ctver=6&req=paapi4153&form=json HTTP/1.1 Host: paapi4153.d41.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:38 UTC	1018	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:38 GMT Content-Type: application/json Content-Length: 1451 Connection: close access-control-allow-origin: https://legal.thomsonreuters.com access-control-allow-credentials: true Cache-control: no-store Pragma: no-cache X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly" Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self'; Set-Cookie: D41ID=v3\|v4\|87da2e27ef0a4f40a0631985bf59db5a\|https://d41.co; path=/; expires=Wed, 01 Oct 2025 09:51:38 GMT; domain=.d41.co; samesite=none; secure Set-Cookie: D41IDT=7278856cefd3405ca02dbd3a6f10b469; path=/; expires=Tue, 01 Oct 2024 09:51:43 GMT; domain=.d41.co; samesite=none; secure
2024-10-01 09:51:38 UTC	1451	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 32 30 30 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 66 75 6c 20 6d 61 74 63 68 22 2c 22 64 75 6e 73 22 3a 22 30 36 33 34 32 35 32 37 30 22 2c 22 70 61 72 65 6e 74 44 75 6e 73 22 3a 6e 75 6c 6c 2c 22 64 6f 6d 65 73 74 69 63 55 6c 74 69 6d 61 74 65 44 75 6e 73 22 3a 6e 75 6c 6c 2c 22 75 6c 74 69 6d 61 74 65 44 75 6e 73 22 3a 6e 75 6c 6c 2c 22 63 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 54 72 61 6e 73 70 6f 72 74 61 74 69 6f 6e 20 4c 4c 43 22 2c 22 63 6f 6d 70 61 6e 79 41 64 64 72 65 73 73 22 3a 22 36 32 39 20 57 20 31 37 33 52 44 20 53 74 20 41 50 54 20 33 45 22 2c 22 63 6f 6d 70 61 6e 79 43 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6d 70 61 6e 79 53 74 61 74 Data Ascii: {"status":"200","message":"Successful match","duns":"063425270","parentDuns":null,"domesticUltimateDuns":null,"ultimateDuns":null,"companyName":"Centurylink Transportation LLC","companyAddress":"629 W 173RD St APT 3E","companyCity":"New York","companyStat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49850	216.58.206.36	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	953	OUT	GET /recaptcha/enterprise/anchor?ar=1&k=6Lcg8t8aAAAAAEg-ugVYe6QCmneyyVZm6ExG-4vv&co=aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb206NDQz&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=invisible&cb=reogs5wi8i9b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:38 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 01 Oct 2024 09:51:38 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-m2S4a3dFPYf6Bhp473Vcng' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 09:51:38 UTC	229	IN	Data Raw: 35 37 34 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 5749<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A64
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 Data Ascii: s.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqE
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 Data Ascii: 0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUt
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 Data Ascii: 8-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/r
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 37 49 68 7a 49 4f 62 6b 59 54 44 30 58 53 47 43 77 47 6c 6f 46 46 38 56 68 30 4b 42 4c 35 2d 56 44 42 47 46 6f 6f 4e 72 46 4e 74 7a 6f 53 6a 34 46 63 50 73 76 31 77 4c 42 2d 65 76 45 6f 5a 57 61 35 37 78 67 66 41 33 4c 57 72 4d 39 48 77 53 4e 64 4a 50 68 47 58 6b 74 65 7a 47 73 78 53 62 4a 43 64 5a 6c 73 64 67 76 30 61 70 39 34 6e 6c 55 65 49 64 34 65 50 67 4a 2d 75 73 55 61 5f 52 53 45 6c 65 37 57 65 37 6c 32 66 4d 53 73 38 41 74 72 54 5a 65 49 37 66 37 59 6e 64 51 35 54 4a 42 54 4a 64 33 77 4a 51 42 4c 33 70 59 49 7a 30 56 5a 43 36 4e 51 54 47 6b 5a 72 73 61 30 6b 72 55 33 72 7a 4b 56 33 39 38 47 48 47 Data Ascii: type="hidden" id="recaptcha-token" value="03AFcWeA7IhzIObkYTD0XSGCwGloFF8Vh0KBL5-VDBGFooNrFNtzoSj4FcPsv1wLB-evEoZWa57xgfA3LWrM9HwSNdJPhGXktezGsxSbJCdZlsdgv0ap94nlUeId4ePgJ-usUa_RSEle7We7l2fMSs8AtrTZeI7f7YndQ5TJBTJd3wJQBL3pYIz0VZC6NQTGkZrsa0krU3rzKV398GHG
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 74 57 48 6e 37 56 49 36 4d 64 64 70 4c 74 64 5f 65 32 37 66 47 62 62 59 2d 51 78 31 54 51 68 6c 51 70 70 64 37 4a 6c 33 71 5a 61 79 6e 45 38 62 38 77 76 66 31 6f 4f 57 69 4d 69 4e 47 63 69 6d 43 6d 31 61 71 6f 41 57 7a 49 59 58 62 6d 58 43 33 48 33 67 63 4b 78 77 6e 6a 31 67 65 48 5a 71 59 6b 5a 6d 76 4b 6a 30 39 5f 77 4e 77 78 57 42 73 2d 58 76 61 5a 41 5a 52 6e 43 41 7a 61 6c 44 4b 77 69 6a 64 5f 44 75 53 51 5f 33 45 6b 43 70 74 6f 68 46 62 77 74 61 56 59 6f 46 4f 4c 4d 6b 4e 4f 41 32 45 50 7a 42 75 61 75 51 43 43 59 73 55 6a 68 37 37 5f 6c 65 68 36 70 30 63 54 76 34 52 73 75 53 44 75 6a 58 73 49 6f 51 48 76 72 78 59 68 6d 4a 50 53 68 42 51 45 5a 55 6b 49 72 35 6a 6a 5f 73 4b 50 47 49 66 4a 4d 50 6c 55 65 6b 37 4e 77 6b 76 6e 62 64 61 76 4d 56 34 56 31 Data Ascii: tWHn7VI6MddpLtd_e27fGbbY-Qx1TQhlQppd7Jl3qZaynE8b8wvf1oOWiMiNGcimCm1aqoAWzIYXbmXC3H3gcKxwnj1geHZqYkZmvKj09_wNwxWBs-XvaZAZRnCAzalDKwijd_DuSQ_3EkCptohFbwtaVYoFOLMkNOA2EPzBuauQCCYsUjh77_leh6p0cTv4RsuSDujXsIoQHvrxYhmJPShBQEZUkIr5jj_sKPGIfJMPlUek7NwkvnbdavMV4V1
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 34 52 32 6f 77 59 54 4d 35 4e 46 4e 61 54 57 4a 46 4e 32 67 30 59 58 68 44 62 47 4e 32 64 57 4a 32 63 33 68 61 53 32 6c 72 59 6e 46 69 4e 46 56 56 61 32 68 47 56 6d 64 42 63 6d 64 4b 57 48 68 75 64 54 49 7a 5a 44 64 4e 56 6c 42 46 59 6a 4e 33 56 31 64 6a 5a 55 55 33 57 48 42 4c 4e 6a 56 55 56 6b 68 43 51 54 4a 72 52 47 6c 61 54 33 67 78 57 47 46 54 5a 6d 64 55 61 57 6c 51 61 7a 6c 47 52 46 6c 43 4b 7a 6b 78 5a 6b 68 56 55 32 6f 78 65 6e 46 50 52 6e 70 73 4d 54 4a 6d 64 55 68 4b 4d 47 34 79 55 6b 31 78 54 33 68 58 59 57 59 32 53 6a 6c 32 52 57 39 4d 57 57 5a 71 55 31 4e 34 61 32 56 69 4b 31 67 35 53 30 52 43 63 56 6c 61 65 45 4a 31 57 47 39 7a 65 44 52 6e 63 31 4a 79 4c 32 64 35 4d 6c 56 4e 54 45 56 4f 59 6e 68 5a 59 31 5a 77 4e 30 6c 6a 53 6b 49 72 53 54 Data Ascii: 4R2owYTM5NFNaTWJFN2g0YXhDbGN2dWJ2c3haS2lrYnFiNFVVa2hGVmdBcmdKWHhudTIzZDdNVlBFYjN3V1djZUU3WHBLNjVUVkhCQTJrRGlaT3gxWGFTZmdUaWlQazlGRFlCKzkxZkhVU2oxenFPRnpsMTJmdUhKMG4yUk1xT3hXYWY2Sjl2RW9MWWZqU1N4a2ViK1g5S0RCcVlaeEJ1WG9zeDRnc1JyL2d5MlVNTEVOYnhZY1ZwN0ljSkIrST
2024-10-01 09:51:38 UTC	1390	IN	Data Raw: 55 49 30 61 6a 52 54 4e 53 39 56 4d 6d 74 32 62 31 52 6e 51 55 39 6b 56 6a 42 30 62 33 4a 71 4e 32 4a 4f 55 7a 64 48 65 6d 4e 56 55 46 6f 7a 65 57 52 56 4e 31 42 46 61 69 38 78 51 6b 78 69 56 57 51 34 61 6e 4a 5a 53 33 6f 30 4e 44 67 35 54 47 68 78 4b 31 64 55 57 45 35 5a 63 47 52 48 51 6a 64 69 63 6d 39 4b 52 55 77 77 4e 54 56 44 4d 44 68 53 53 6a 68 54 62 32 74 30 54 6c 56 30 55 58 52 49 62 6b 38 79 5a 46 6c 4d 51 6c 4a 47 4d 56 6c 46 4e 31 68 35 63 44 63 31 57 55 39 50 57 55 30 7a 56 46 6c 79 65 55 5a 4b 4f 56 45 34 4d 55 64 47 52 6a 4e 54 52 6b 6c 36 62 44 46 4e 51 6d 35 47 51 6a 59 77 59 6e 64 52 62 32 39 5a 4c 33 68 74 5a 43 73 30 63 7a 45 32 51 31 70 78 59 54 42 4f 61 6a 59 78 61 56 46 47 63 54 5a 4e 64 55 6c 46 65 48 68 4e 4d 6c 4e 68 64 6b 4a 5a Data Ascii: UI0ajRTNS9VMmt2b1RnQU9kVjB0b3JqN2JOUzdHemNVUFozeWRVN1BFai8xQkxiVWQ4anJZS3o0NDg5TGhxK1dUWE5ZcGRHQjdicm9KRUwwNTVDMDhSSjhTb2t0TlV0UXRIbk8yZFlMQlJGMVlFN1h5cDc1WU9PWU0zVFlyeUZKOVE4MUdGRjNTRkl6bDFNQm5GQjYwYndRb29ZL3htZCs0czE2Q1pxYTBOajYxaVFGcTZNdUlFeHhNMlNhdkJZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49845	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	974	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-dependencies.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778156; at_check=true; AWSALB=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; AWSALBCORS=ku3KAEfzocIzzcGBAonPTKai4Bkv1IrGA9D7tBr58/H7RkhhNjGbOBJTsL/dUECIuE/bTEGLx9QB4m3I1/rBBz1vvBUN/LTXXjtbpp/M9cAudAvi9MHV55q5PtE+; tr_ewp_tracking_params={}; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461
2024-10-01 09:51:38 UTC	1312	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 1043927 Connection: close Date: Tue, 01 Oct 2024 09:44:41 GMT Set-Cookie: AWSALB=gRTRpPoAWYWch0zgyIHqDR8aN7lasxnRXV7cCjm/tb+DbQHKwfowKeLmORRC/H7LHQscCyYx3o58DsGgmiuNIspslR8qUYACjS+rczpbbZsJ/Sbk4BeSpnTJNJN0; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/ Set-Cookie: AWSALBCORS=gRTRpPoAWYWch0zgyIHqDR8aN7lasxnRXV7cCjm/tb+DbQHKwfowKeLmORRC/H7LHQscCyYx3o58DsGgmiuNIspslR8qUYACjS+rczpbbZsJ/Sbk4BeSpnTJNJN0; Expires=Tue, 08 Oct 2024 09:44:41 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT ETag: "fedd7-622c22f032900" Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:41 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0b328de7c6916513ee4489477445f2e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: jQo445MzVqGhlWdic0xydkjS7vKee2E9NSBSLOEon-f1wB8nQuugNg== Age: 417
2024-10-01 09:51:38 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 72 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6f 2c 65 2c 6c 3d 74 5b 30 5d 2c 69 3d 74 5b 31 5d 2c 70 3d 30 2c 6e 3d 5b 5d 3b 70 3c 6c 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 65 3d 6c 5b 70 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 65 29 26 26 61 5b 65 5d 26 26 6e 2e 70 75 73 68 28 61 5b 65 5d 5b 30 5d 29 2c 61 5b 65 5d 3d 30 3b 66 6f 72 28 6f 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6f 29 26 26 28 72 5b 6f 5d 3d 69 5b 6f 5d 29 3b 66 6f 72 28 68 26 26 68 28 74 29 3b 6e 2e 6c 65 6e 67 74 68 3b 29 6e 2e 73 68 69 66 74 28 29 28 29 Data Ascii: !function(r){function t(t){for(var o,e,l=t[0],i=t[1],p=0,n=[];p<l.length;p++)e=l[p],Object.prototype.hasOwnProperty.call(a,e)&&a[e]&&n.push(a[e][0]),a[e]=0;for(o in i)Object.prototype.hasOwnProperty.call(i,o)&&(r[o]=i[o]);for(h&&h(t);n.length;)n.shift()()
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 48 28 6b 72 2c 22 61 70 70 6c 6f 61 64 22 2c 7b 64 65 74 61 69 6c 3a 7b 6e 61 6d 65 73 70 61 63 65 3a 61 2e 61 7d 7d 29 29 7d 2c 72 72 3d 28 72 2c 74 2c 6f 29 3d 3e 7b 69 66 28 72 26 26 72 5b 74 5d 29 74 72 79 7b 72 65 74 75 72 6e 20 72 5b 74 5d 28 6f 29 7d 63 61 74 63 68 28 72 29 7b 62 72 28 72 29 7d 7d 2c 74 72 3d 28 72 2c 74 29 3d 3e 72 26 26 72 2e 74 68 65 6e 3f 72 2e 74 68 65 6e 28 74 29 3a 74 28 29 2c 6f 72 3d 72 3d 3e 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 79 64 72 61 74 65 64 22 29 2c 61 72 3d 28 72 2c 74 2c 6f 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 66 72 28 72 29 2c 6c 3d 65 2e 24 68 6f 73 74 45 6c 65 6d 65 6e 74 24 2c 69 3d 65 2e 24 69 6e 73 74 61 6e 63 65 56 61 6c 75 65 73 24 2e 67 65 74 28 74 29 2c 70 3d 65 2e 24 66 6c 61 67 Data Ascii: H(kr,"appload",{detail:{namespace:a.a}}))},rr=(r,t,o)=>{if(r&&r[t])try{return r[t](o)}catch(r){br(r)}},tr=(r,t)=>r&&r.then?r.then(t):t(),or=r=>r.classList.add("hydrated"),ar=(r,t,o,a)=>{const e=fr(r),l=e.$hostElement$,i=e.$instanceValues$.get(t),p=e.$flag
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 20 32 76 32 30 4d 32 32 20 31 32 48 32 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 72 53 76 67 45 52 65 6d 6f 76 65 3d 76 6f 69 64 20 30 2c 74 2e 54 72 53 76 67 45 52 65 6d 6f 76 65 3d 7b 6e 61 6d 65 3a 22 65 5f 72 65 6d 6f 76 65 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 67 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 Data Ascii: 2v20M22 12H2"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TrSvgERemove=void 0,t.TrSvgERemove={name:"e_remove",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><g stroke-linecap="round" s
2024-10-01 09:51:39 UTC	11610	IN	Data Raw: 32 20 30 20 30 30 32 20 32 6c 31 38 2d 31 38 4c 32 20 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 72 53 76 67 46 6c 61 67 42 77 3d 76 6f 69 64 20 30 2c 74 2e 54 72 53 76 67 46 6c 61 67 42 77 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 62 77 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 Data Ascii: 2 0 002 2l18-18L2 6z"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TrSvgFlagBw=void 0,t.TrSvgFlagBw={name:"flag_bw",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><g class="nc-icon-wrapp
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 45 36 45 36 22 20 64 3d 22 4d 34 38 20 32 34 48 32 30 4c 32 20 36 68 34 34 61 32 20 32 20 30 20 30 31 32 20 32 76 31 36 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 37 31 34 31 41 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 31 2d 32 20 32 48 32 6c 31 38 2d 31 38 68 32 38 76 31 36 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 31 34 35 37 45 22 20 64 3d 22 4d 32 20 36 61 32 20 32 20 30 20 30 30 2d 32 20 32 76 33 32 61 32 20 32 20 30 20 30 30 32 20 32 6c 31 38 2d 31 38 4c 32 20 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c Data Ascii: E6E6" d="M48 24H20L2 6h44a2 2 0 012 2v16z"/><path fill="#D7141A" d="M48 40a2 2 0 01-2 2H2l18-18h28v16z"/><path fill="#11457E" d="M2 6a2 2 0 00-2 2v32a2 2 0 002 2l18-18L2 6z"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProperty(t,"__esModule",
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 4d 32 20 36 61 32 20 32 20 30 20 30 30 2d 32 20 32 76 33 32 61 32 20 32 20 30 20 30 30 32 20 32 6c 31 38 2d 31 38 4c 32 20 36 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 34 34 34 33 43 22 20 64 3d 22 4d 33 34 20 32 30 68 2d 38 76 35 2e 33 33 32 4c 33 30 20 32 38 6c 34 2d 32 2e 36 36 38 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 72 53 76 67 46 6c 61 67 47 72 3d 76 6f 69 64 20 30 2c 74 2e 54 72 53 76 67 46 6c 61 67 47 72 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 67 72 22 2c 64 61 74 61 3a 27 3c 73 76 Data Ascii: M2 6a2 2 0 00-2 2v32a2 2 0 002 2l18-18L2 6z"/><path fill="#44443C" d="M34 20h-8v5.332L30 28l4-2.668z"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TrSvgFlagGr=void 0,t.TrSvgFlagGr={name:"flag_gr",data:'<sv
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 38 2e 35 35 35 2d 2e 36 39 37 7a 4d 31 33 2e 30 34 33 20 31 39 2e 32 39 31 68 2d 2e 38 33 36 6c 2d 2e 32 37 39 2d 2e 36 39 37 2d 2e 32 37 39 2e 36 39 37 68 2d 2e 38 33 36 6c 2e 35 35 37 2e 36 39 37 2d 2e 32 37 39 2e 38 33 38 2e 38 33 38 2d 2e 34 32 2e 38 33 38 2e 34 32 2d 2e 32 37 39 2d 2e 38 33 38 2e 35 35 35 2d 2e 36 39 37 7a 4d 31 33 2e 30 34 33 20 32 37 2e 38 37 31 68 2d 2e 38 33 36 6c 2d 2e 32 37 39 2d 2e 36 39 37 2d 2e 32 37 39 2e 36 39 37 68 2d 2e 38 33 36 6c 2e 35 35 37 2e 36 39 39 2d 2e 32 37 39 2e 38 33 36 2e 38 33 38 2d 2e 34 31 38 2e 38 33 38 2e 34 31 38 2d 2e 32 37 39 2d 2e 38 33 36 2e 35 35 35 2d 2e 36 39 39 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 Data Ascii: 8.555-.697zM13.043 19.291h-.836l-.279-.697-.279.697h-.836l.557.697-.279.838.838-.42.838.42-.279-.838.555-.697zM13.043 27.871h-.836l-.279-.697-.279.697h-.836l.557.699-.279.836.838-.418.838.418-.279-.836.555-.699z"/></g></svg>'}},function(r,t,o){"use strict
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 30 31 37 33 38 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 31 2d 32 20 32 48 32 61 32 20 32 20 30 20 30 31 2d 32 2d 32 56 38 61 32 20 32 20 30 20 30 31 32 2d 32 68 34 34 61 32 20 32 20 30 20 30 31 32 20 32 76 33 32 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 46 37 44 33 44 22 20 64 3d 22 4d 38 20 31 34 68 33 32 76 32 30 48 38 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 64 3d 22 4d 32 32 20 32 34 63 30 2d 33 2e 37 32 33 20 32 2e 35 35 37 2d 36 2e 38 32 34 20 36 2d 37 2e 37 31 37 2d 2e 36 34 33 2d 2e 31 Data Ascii: 2000/svg" viewBox="0 0 48 48"><g class="nc-icon-wrapper"><path fill="#D01738" d="M48 40a2 2 0 01-2 2H2a2 2 0 01-2-2V8a2 2 0 012-2h44a2 2 0 012 2v32z"/><path fill="#0F7D3D" d="M8 14h32v20H8z"/><path fill="#FFF" d="M22 24c0-3.723 2.557-6.824 6-7.717-.643-.1
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 32 76 31 30 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 54 72 53 76 67 46 6c 61 67 52 77 3d 76 6f 69 64 20 30 2c 74 2e 54 72 53 76 67 46 6c 61 67 52 77 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 72 77 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d Data Ascii: 2v10z"/></g></svg>'}},function(r,t,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TrSvgFlagRw=void 0,t.TrSvgFlagRw={name:"flag_rw",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><g class="nc-icon-wrapper"><path fill=
2024-10-01 09:51:39 UTC	16384	IN	Data Raw: 66 6c 61 67 2d 62 68 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 43 43 31 36 32 43 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 31 2d 32 20 32 48 31 36 56 36 68 33 30 61 32 20 32 20 30 20 30 31 32 20 32 76 33 32 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 36 45 36 45 36 22 20 64 3d 22 4d 31 36 20 31 36 6c 36 2d 34 2d 36 2d 34 56 36 48 32 61 32 20 32 20 30 20 30 30 2d 32 20 32 76 33 32 61 32 20 32 20 30 20 30 30 32 20 32 68 31 34 76 2d 32 6c 36 2d 34 2d 36 2d 34 20 36 2d 34 2d 36 2d 34 20 36 2d 34 2d 36 2d 34 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 Data Ascii: flag-bh" viewBox="0 0 48 48"><g class="nc-icon-wrapper"><path fill="#CC162C" d="M48 40a2 2 0 01-2 2H16V6h30a2 2 0 012 2v32z"/><path fill="#E6E6E6" d="M16 16l6-4-6-4V6H2a2 2 0 00-2 2v32a2 2 0 002 2h14v-2l6-4-6-4 6-4-6-4 6-4-6-4z"/></g></symbol><symbol id="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49847	13.35.58.22	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	616	OUT	OPTIONS /ThomsonReuters/aHR0cDovL3NjaGVtYWFwcC5jb20vZGIvVGhvbXNvblJldXRlcnNfU2hhcmVkRGF0YUl0ZW0 HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-account-id,x-api-key Origin: https://legal.thomsonreuters.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:38 UTC	667	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Tue, 01 Oct 2024 09:44:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: x-account-id, x-api-key Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 7bih_7yKcSYKjeB3baFKFHA3_N-sjaEjZvw-G0EFcRAT1U39e-84Lg== Age: 440

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49849	52.202.121.139	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	1180	OUT	OPTIONS /entityrecognition/entities?highlight_id=http%3A%2F%2Fschemaapp.com%2Fresources%2FTagLookupOmniLinkedEntity_66d1ef27337706.91744641&highlight_config=%7B%22%40id%22%3A%22http%3A%2F%2Fschemaapp.com%2Fresources%2FTagLookupOmniLinkedEntity_66d1ef27337706.91744641%22%2C%22xPath-input%22%3A%22%2F%2Ftitle+%7C+%2F%2Fmeta%5B%40name%3D%5C%22description%5C%22%5D%2F%40content+%22%2C%22target%22%3A%22https%3A%2F%2Fapi.schemaapp.com%2Fentityrecognition%2Fentities%22%2C%22propertyPath%22%3A%5B%22mainEntityOfPage%22%2C%22WebPage%22%2C%22mentions%22%5D%2C%22%40type%22%3A%22TagLookupOmniLinkedEntity%22%7D&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq HTTP/1.1 Host: api.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-account-id Origin: https://legal.thomsonreuters.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:38 UTC	517	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:38 GMT Content-Type: application/json Content-Length: 3 Connection: close x-amzn-RequestId: c39135e3-1212-4907-aed5-644d89f6e9ff Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Requested-With,X-Hash,cache-control,x-account-id x-amz-apigw-id: e9vmuGRroAMEqRw= Access-Control-Allow-Methods: POST, DELETE, OPTIONS, HEAD X-Amzn-Trace-Id: Root=1-66fbc62a-3610eb2128879d0e63da3658
2024-10-01 09:51:38 UTC	3	IN	Data Raw: 7b 7d 0a Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49848	13.35.58.22	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:38 UTC	616	OUT	OPTIONS /ThomsonReuters/aHR0cDovL3NjaGVtYWFwcC5jb20vZGIvVGhvbXNvblJldXRlcnNfU2hhcmVkRGF0YUl0ZW0 HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-account-id,x-api-key Origin: https://legal.thomsonreuters.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:38 UTC	667	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Tue, 01 Oct 2024 09:44:18 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: x-account-id, x-api-key Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 3de687dde9ccf524586562826ee53358.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: cQvndg-tK1ygXEfYPN05OQa5cftfsDqMswaAJvsKYy1U7TcfsPGDPg== Age: 440

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49852	3.233.158.33	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:39 UTC	935	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=e535ace7-d6a6-48d1-9914-314163a6721f&batch_time=1727776297632 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 15790 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:39 UTC	15790	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 31 7d 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 32 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 65 35 33 34 33 36 34 2d 37 30 31 63 2d 34 64 35 36 2d 62 34 62 65 2d 30 32 30 61 37 65 30 33 65 66 61 32 22 7d 2c 22 64 61 74 65 22 3a 31 37 32 37 37 37 36 32 38 38 33 32 34 2c 22 73 65 72 76 69 63 65 22 3a 22 6c 65 67 61 6c 2e 74 68 6f 6d Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":1},"configuration":{"session_sample_rate":100,"session_replay_sample_rate":20},"discarded":false},"application":{"id":"fe534364-701c-4d56-b4be-020a7e03efa2"},"date":1727776288324,"service":"legal.thom
2024-10-01 09:51:39 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: e535ace7-d6a6-48d1-9914-314163a6721f cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Tue, 01 Oct 2024 09:51:39 GMT connection: close
2024-10-01 09:51:39 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 65 35 33 35 61 63 65 37 2d 64 36 61 36 2d 34 38 64 31 2d 39 39 31 34 2d 33 31 34 31 36 33 61 36 37 32 31 66 22 7d Data Ascii: {"request_id":"e535ace7-d6a6-48d1-9914-314163a6721f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49853	52.202.121.139	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:39 UTC	1328	OUT	POST /entityrecognition/entities?highlight_id=http%3A%2F%2Fschemaapp.com%2Fresources%2FTagLookupOmniLinkedEntity_66d1ef27337706.91744641&highlight_config=%7B%22%40id%22%3A%22http%3A%2F%2Fschemaapp.com%2Fresources%2FTagLookupOmniLinkedEntity_66d1ef27337706.91744641%22%2C%22xPath-input%22%3A%22%2F%2Ftitle+%7C+%2F%2Fmeta%5B%40name%3D%5C%22description%5C%22%5D%2F%40content+%22%2C%22target%22%3A%22https%3A%2F%2Fapi.schemaapp.com%2Fentityrecognition%2Fentities%22%2C%22propertyPath%22%3A%5B%22mainEntityOfPage%22%2C%22WebPage%22%2C%22mentions%22%5D%2C%22%40type%22%3A%22TagLookupOmniLinkedEntity%22%7D&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq HTTP/1.1 Host: api.schemaapp.com Connection: keep-alive Content-Length: 257 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-platform: "Windows" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-account-id: ThomsonReuters Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:39 UTC	257	OUT	Data Raw: 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 3c 74 69 74 6c 65 3e 48 69 67 68 51 20 7c 20 4c 65 67 61 6c 20 42 75 73 69 6e 65 73 73 20 4d 61 6e 61 67 65 6d 65 6e 74 20 26 61 6d 70 3b 20 4f 70 65 72 61 74 69 6f 6e 73 20 53 6f 66 74 77 61 72 65 20 7c 20 54 68 6f 6d 73 6f 6e 20 52 65 75 74 65 72 73 3c 2f 74 69 74 6c 65 3e 5c 6e 43 6f 6c 6c 61 62 6f 72 61 74 65 20 77 69 74 68 20 79 6f 75 72 20 6c 65 67 61 6c 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 73 20 69 6e 20 61 6e 20 69 6e 74 65 67 72 61 74 65 64 20 64 69 67 69 74 61 6c 20 77 6f 72 6b 73 70 61 63 65 20 74 6f 20 61 75 74 6f 6d 61 74 65 20 64 6f 63 75 6d 65 6e 74 20 26 20 63 6f 6e 74 72 61 63 74 20 6d 61 6e 61 67 65 6d 65 6e 74 2c 20 77 6f 72 6b 66 6c 6f 77 73 2c 20 61 6e 64 20 70 72 6f 64 75 63 74 69 76 69 74 79 2e Data Ascii: {"content":"<title>HighQ \| Legal Business Management & Operations Software \| Thomson Reuters</title>\nCollaborate with your legal professionals in an integrated digital workspace to automate document & contract management, workflows, and productivity.
2024-10-01 09:51:39 UTC	493	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:39 GMT Content-Type: application/json Content-Length: 473 Connection: close x-amzn-RequestId: 09b0f222-79d2-4b02-8c4c-876d1ccab35a Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Requested-With,cache-control,x-account-id x-amz-apigw-id: e9vm4Ec6oAMEhrQ= X-Amzn-Trace-Id: Root=1-66fbc62b-7df9b6dc1c381e9075bc92e5 Access-Control-Allow-Credentials: true
2024-10-01 09:51:39 UTC	473	IN	Data Raw: 5b 7b 22 40 63 6f 6e 74 65 78 74 22 3a 20 7b 22 40 76 6f 63 61 62 22 3a 20 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 2c 20 22 6b 67 22 3a 20 22 68 74 74 70 3a 2f 2f 67 2e 63 6f 2f 6b 67 22 7d 2c 20 22 40 74 79 70 65 22 3a 20 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 20 22 6e 61 6d 65 22 3a 20 22 48 69 67 68 51 22 2c 20 22 73 61 6d 65 41 73 22 3a 20 5b 22 6b 67 3a 2f 6d 2f 30 7a 36 76 6d 6b 79 22 2c 20 22 68 74 74 70 73 3a 2f 2f 65 6e 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 2f 77 69 6b 69 2f 48 69 67 68 51 22 2c 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 69 6b 69 64 61 74 61 2e 6f 72 67 2f 65 6e 74 69 74 79 2f 51 31 37 30 35 35 31 37 33 22 5d 7d 2c 20 7b 22 40 63 6f 6e 74 65 78 74 22 3a 20 7b 22 40 76 6f 63 61 62 22 3a 20 22 68 74 Data Ascii: [{"@context": {"@vocab": "http://schema.org/", "kg": "http://g.co/kg"}, "@type": "Organization", "name": "HighQ", "sameAs": ["kg:/m/0z6vmky", "https://en.wikipedia.org/wiki/HighQ", "https://www.wikidata.org/entity/Q17055173"]}, {"@context": {"@vocab": "ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49854	13.35.58.22	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:39 UTC	729	OUT	GET /ThomsonReuters/aHR0cDovL3NjaGVtYWFwcC5jb20vZGIvVGhvbXNvblJldXRlcnNfU2hhcmVkRGF0YUl0ZW0 HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json x-account-id: ThomsonReuters sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: KL5JC-HLSCB-N415D-I7OO0 sec-ch-ua-platform: "Windows" Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:40 UTC	1107	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1577 Connection: close Date: Tue, 01 Oct 2024 09:44:20 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Oct 2023 18:33:43 GMT ETag: "2ed566dff74bb3ca46aac4d7cbf78d59" x-amz-server-side-encryption: AES256 x-amz-meta-url: http://schemaapp.com/db/ThomsonReuters_SharedDataItem Cache-Control: max-age=699840 x-amz-meta-mainaccount: ThomsonReuters x-amz-meta-source: Editor x-amz-meta-accountid: ThomsonReuters x-amz-version-id: 6MTtd7epViy0LUncnbjFh5yo009JFRE7 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 9a97e41242551c9a56be1311e4d3db70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: CNTcicOfire6kJR4hu026kieDj9jdE4aNo930_486quBh_hLj4ujow== Age: 439
2024-10-01 09:51:40 UTC	1577	IN	Data Raw: 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 63 6f 6e 74 61 63 74 50 6f 69 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 43 6f 6e 74 61 63 74 50 6f 69 6e 74 22 2c 22 63 6f 6e 74 61 63 74 54 79 70 65 22 3a 22 43 61 6c 6c 20 55 73 22 2c 22 74 65 6c 65 70 68 6f 6e 65 22 3a 22 2b 31 20 36 34 36 20 35 34 30 20 33 30 30 30 22 2c 22 6e 61 6d 65 22 3a 22 43 61 6c 6c 20 55 73 20 2d 20 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 40 69 64 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 64 62 2f 54 68 6f 6d 73 6f 6e 52 65 75 74 65 72 73 5f 53 68 61 72 65 64 44 61 74 61 49 74 65 6d 23 43 6f 6e 74 61 63 74 50 6f 69 6e 74 Data Ascii: {"@context":"http://schema.org","@type":"Organization","contactPoint":[{"@type":"ContactPoint","contactType":"Call Us","telephone":"+1 646 540 3000","name":"Call Us - United States","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49855	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:39 UTC	1222	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/brand-right-arrow.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; tr_ewp_tracking_params={}; AMCVS_A7D63BC75245AE300A490D4D%40AdobeOrg=1; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CMCMID%7C52509709738132105324459253370357628360%7CMCAAMLH-1728381096%7C6%7CMCAAMB-1728381096%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1727783496s%7CNONE%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778157; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=OjLH40WPoVraaBYEPcluPn8Pafc2jnGG0JO9tbMG90if7m+v4XwgsC4EQnE3f5JyFZaouhgCVWs6dBQQJtqdW1BQcPG9Yjylfph9sauz6wkQI+2IKsJmNEQ6PrBo; AWSALBCORS=OjLH40WPoVraaBYEPcluPn8Pafc2jnGG0JO9tbMG90if7m+v4XwgsC4EQnE3f5JyFZaouhgCVWs6dBQQJtqdW1BQcPG9Yjylfph9sauz6wkQI+2IKsJmNEQ6PrBo
2024-10-01 09:51:40 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 409 Connection: close Date: Tue, 01 Oct 2024 09:07:31 GMT Set-Cookie: AWSALB=449YKlr246heZcG7rRwZYpbgOHGGjhiRiTn0SLLHwKxE8RtBu5Z9194IVMgJefXIMSmOZbHLBD9+xixA91ecDeJkZxnS3hqinVoE8thP2uUXKUdidhkURll48IhE; Expires=Tue, 08 Oct 2024 09:07:31 GMT; Path=/ Set-Cookie: AWSALBCORS=449YKlr246heZcG7rRwZYpbgOHGGjhiRiTn0SLLHwKxE8RtBu5Z9194IVMgJefXIMSmOZbHLBD9+xixA91ecDeJkZxnS3hqinVoE8thP2uUXKUdidhkURll48IhE; Expires=Tue, 08 Oct 2024 09:07:31 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Jul 2021 08:55:26 GMT ETag: "199-5c802ea109b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:31 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ae80ccab7109b5d2f1c1ee784af203a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 6QhdtgVUOTcGfdqPGVP_JFNbughWJsQVBXAs7pB280fN5RBIP6-y4w== Age: 2649
2024-10-01 09:51:40 UTC	409	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 2e 30 38 33 35 20 37 2e 34 31 36 39 39 48 31 37 2e 37 35 30 32 22 20 73 74 72 6f 6b 65 3d 22 23 46 41 36 34 30 30 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 39 31 37 20 Data Ascii: <svg width="19" height="14" viewBox="0 0 19 14" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1.0835 7.41699H17.7502" stroke="#FA6400" stroke-width="1.5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/><path d="M11.917

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49856	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:39 UTC	1214	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-site/resources/images/play-icon.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; tr_ewp_tracking_params={}; AMCVS_A7D63BC75245AE300A490D4D%40AdobeOrg=1; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CMCMID%7C52509709738132105324459253370357628360%7CMCAAMLH-1728381096%7C6%7CMCAAMB-1728381096%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1727783496s%7CNONE%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778157; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289460&expire=1727777189461; AWSALB=OjLH40WPoVraaBYEPcluPn8Pafc2jnGG0JO9tbMG90if7m+v4XwgsC4EQnE3f5JyFZaouhgCVWs6dBQQJtqdW1BQcPG9Yjylfph9sauz6wkQI+2IKsJmNEQ6PrBo; AWSALBCORS=OjLH40WPoVraaBYEPcluPn8Pafc2jnGG0JO9tbMG90if7m+v4XwgsC4EQnE3f5JyFZaouhgCVWs6dBQQJtqdW1BQcPG9Yjylfph9sauz6wkQI+2IKsJmNEQ6PrBo
2024-10-01 09:51:40 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 452 Connection: close Date: Tue, 01 Oct 2024 09:07:30 GMT Set-Cookie: AWSALB=Q83djYiYtIUmaATmRMflb+X6Uslyb7Mt3rAwFdFnf9b7zXDkxuF7pthY+evLobGpV4wzF4RzezOBpUzam4ngqrgGP9h6F5cE5+DjI30aiJGCQqgJK0C8UbHthrPq; Expires=Tue, 08 Oct 2024 09:07:30 GMT; Path=/ Set-Cookie: AWSALBCORS=Q83djYiYtIUmaATmRMflb+X6Uslyb7Mt3rAwFdFnf9b7zXDkxuF7pthY+evLobGpV4wzF4RzezOBpUzam4ngqrgGP9h6F5cE5+DjI30aiJGCQqgJK0C8UbHthrPq; Expires=Tue, 08 Oct 2024 09:07:30 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 28 Aug 2023 05:07:10 GMT ETag: "1c4-603f4aaa35b80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:30 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6c21a88f98dc05bf345d31b96407e6d0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 4s1soAskrlFTa-r6Q__DKGAfn1gdgj80OC2HHS8xgg-r-L7MsYALZg== Age: 2650
2024-10-01 09:51:40 UTC	452	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 6c 61 79 20 69 63 6f 6e 22 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 23 34 30 34 30 34 30 22 3e 3c 74 69 74 6c 65 3e 62 75 74 74 6f 6e 20 70 6c 61 79 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 64 3d 27 4d 32 30 2e 35 35 35 2c 31 31 2e 31 36 38 6c 2d 31 35 2d 31 30 63 2d 30 2e 33 30 37 2d 30 2e 32 30 34 2d 30 2e 37 30 32 2d 30 2e 32 32 34 2d 31 2e 30 32 36 2d 30 2e 30 35 43 34 2e 32 30 33 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Play icon" class="nc-icon-wrapper" width="24" height="24" viewBox="0 0 24 24" fill="#404040"><title>button play</title><path d='M20.555,11.168l-15-10c-0.307-0.204-0.702-0.224-1.026-0.05C4.203

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49857	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:40 UTC	608	OUT	GET /scripttemplates/202308.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:40 UTC	853	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: C2c3Qd8FHm1wstxOFHDJ2w== Last-Modified: Wed, 25 Oct 2023 03:55:37 GMT x-ms-request-id: d970d27e-901e-0094-2e72-798eea000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 73121 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e34bf2c43ec-EWR
2024-10-01 09:51:40 UTC	516	IN	Data Raw: 33 33 38 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 3382 { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 62 6d 56 30 63 6e 56 7a 64 43 31 77 62 32 78 70 59 33 6b 74 64 47 56 34 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 Data Ascii: PC9oMj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQ
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 57 6b 67 59 6d 46 75 62 6d 56 79 4c 57 4e 73 62 33 4e 6c 4c 57 4a 31 64 48 52 76 62 69 42 76 64 43 31 6a 62 47 39 7a 5a 53 31 70 59 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 Data Ascii: WkgYmFubmVyLWNsb3NlLWJ1dHRvbiBvdC1jbG9zZS1pY29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:21
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 Data Ascii: ght:bold;margin-left:5px}#onetrust-banner-sdk #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-but
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 65 6d 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e Data Ascii: th:calc(100% - 1em)}#onetrust-banner-sdk .banner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;fon
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d Data Ascii: ght:inherit;color:dimgray}#onetrust-banner-sdk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 3a 2e 38 31 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 Data Ascii: -size:.813em;line-height:1.5}#onetrust-banner-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-c
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 Data Ascii: ion:relative;margin-left:0}#onetrust-banner-sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 65 6d 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 37 65 6d 29 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 38 39 37 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 33 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d Data Ascii: ght:30%}#onetrust-banner-sdk #banner-options{margin-left:2em;margin-right:5em;margin-bottom:1.25em;width:calc(100% - 7em)}}@media only screen and (min-width: 897px)and (max-width: 1023px){#onetrust-banner-sdk.vertical-align-content #onetrust-button-group-
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 34 35 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e Data Ascii: ttom:0;padding-bottom:1em}#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bottom:0;padding-bottom:1em}#onetrust-banner-sdk.ot-iab-2 .ot-dpd-container{width:45%;padding-left:1rem;display:inline-block;float:none}#onetrust-banner-sdk.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49858	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:40 UTC	615	OUT	GET /scripttemplates/202308.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:40 UTC	853	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: jih879mbIcNSFioYCdj3Tg== Last-Modified: Wed, 25 Oct 2023 03:55:39 GMT x-ms-request-id: 325171a7-601e-0029-1a58-7907f7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 29590 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e34bea77cff-EWR
2024-10-01 09:51:40 UTC	516	IN	Data Raw: 37 63 34 63 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c4c { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 50 53 4a 44 62 47 39 7a 5a 53 49 2b 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 47 39 7a 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 Data Ascii: PSJDbG9zZSI+PC9idXR0b24+PC9kaXY+PCEtLSBDbG9zZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnR
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 57 46 6a 59 79 31 6e 63 6e 42 6b 5a 58 4e 6a 49 6a 34 38 4c 33 41 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c Data Ascii: WFjYy1ncnBkZXNjIj48L3A+PC9kaXY+PC9kaXY+PCEtLSBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxl
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 56 30 64 47 39 75 50 6a 78 6f 4d 7a 35 51 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 42 44 62 32 39 72 61 57 56 7a 50 43 39 6f 4d 7a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a Data Ascii: V0dG9uPjxoMz5QZXJmb3JtYW5jZSBDb29raWVzPC9oMz48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZ
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 76 4d 54 6b 35 4f 53 39 34 62 47 6c 75 61 79 49 67 65 44 30 69 4d 48 42 34 49 69 42 35 50 53 49 77 63 48 67 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 Data Ascii: vMTk5OS94bGluayIgeD0iMHB4IiB5PSIwcHgiIHZpZXdCb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NG
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 4c 58 4e 6c 62 43 31 69 62 47 73 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 Data Ascii: LXNlbC1ibGsiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 47 52 79 49 6a 34 38 61 44 4d 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 75 59 57 31 6c 49 6a 34 38 4c 32 67 7a 50 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 48 52 76 5a 32 64 73 5a 58 4d 67 59 57 35 6b 49 47 46 79 63 6d 39 33 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 52 6e 62 43 31 6a 62 6e 52 79 49 6a 34 38 4c 32 52 70 64 6a 34 38 4c 33 4e 6c 59 33 52 70 62 32 34 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 57 4e 6a 4c 58 52 34 64 43 49 2b 50 48 56 73 49 47 4e 73 Data Ascii: GRyIj48aDMgY2xhc3M9Im90LXZlbi1uYW1lIj48L2gzPjxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48L2Rpdj48IS0tIHRvZ2dsZXMgYW5kIGFycm93IC0tPjxkaXYgY2xhc3M9Im90LXRnbC1jbnRyIj48L2Rpdj48L3NlY3Rpb24+PGRpdiBjbGFzcz0ib3QtYWNjLXR4dCI+PHVsIGNs
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 6a 59 58 52 6c 5a 32 39 79 65 53 31 6f 62 33 4e 30 4c 57 78 70 63 33 51 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 53 47 39 7a 64 43 42 4d 61 58 4e 30 50 43 39 69 64 58 52 30 62 32 34 2b 50 Data Ascii: 1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBjYXRlZ29yeS1ob3N0LWxpc3QtaGFuZGxlciI+SG9zdCBMaXN0PC9idXR0b24+P
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 55 31 4c 6a 5a 6a 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4e 43 Data Ascii: 9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMTU1LjZjLTQuNy00LjctNC
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 6a 62 6e 51 69 50 6b 64 76 62 32 64 73 5a 53 42 Data Ascii: dGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZuZC1jbnQiPkdvb2dsZSB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49859	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:40 UTC	615	OUT	GET /scripttemplates/202308.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:40 UTC	870	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:40 GMT Content-Type: text/css Content-Length: 21778 Connection: close Content-MD5: c7xAZ9MSGAobGaTYg/Qtag== Last-Modified: Wed, 25 Oct 2023 03:55:54 GMT ETag: 0x8DBD50E49DDD45B x-ms-request-id: f0436e6d-001e-004d-609f-0bf66f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 57637 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e34be451778-EWR
2024-10-01 09:51:40 UTC	499	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 Data Ascii: trust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 34 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 36 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 Data Ascii: ,#ot-sync-ntfy h4 ,#ot-sync-ntfy h6 ,#ot-sync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#one
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 Data Ascii: pc-sdk .ot-pc-logo{height:60px;width:180px;background-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-heig
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 Data Ascii: ion:fixed;top:0;bottom:0;left:0}@keyframes onetrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.7
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d Data Ascii: -sdk .ot-optout-signal .ot-optout-icon{display:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 74 62 6f 64 79 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b Data Ascii: tbody,#onetrust-banner-sdk .ot-main-content,#onetrust-banner-sdk .ot-toggle,#onetrust-banner-sdk #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 65 2d 70 6f 6c 69 63 79 20 74 68 65 61 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 62 6f 64 79 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 Data Ascii: e-policy thead,#ot-sdk-cookie-policy tr,#ot-sdk-cookie-policy td,#ot-sdk-cookie-policy tbody,#ot-sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-poli
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f Data Ascii: trust-banner-sdk label:before,#onetrust-banner-sdk label:after,#onetrust-banner-sdk .checkbox:after,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbo
2024-10-01 09:51:40 UTC	1369	IN	Data Raw: 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c Data Ascii: k .ot-sdk-column,#onetrust-banner-sdk .ot-sdk-columns,#onetrust-pc-sdk .ot-sdk-column,#onetrust-pc-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-chil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49860	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:40 UTC	1754	OUT	GET /content/dam/ue/en-us/images/video-covers/234635.jpg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; tr_ewp_tracking_params={}; AMCVS_A7D63BC75245AE300A490D4D%40AdobeOrg=1; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CMCMID%7C52509709738132105324459253370357628360%7CMCAAMLH-1728381096%7C6%7CMCAAMB-1728381096%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1727783497s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778158\|PC#e6cec483bd984004a698fc8e4aebdb06.37_0#1791021098; gpv_pn=legal%3Aproducts%3Ahighq; gpv_pu=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq; s_ips=907; s_tp=4681; s_ppv=legal%253Aproducts%253Ahighq%2C19%2C19%2C907%2C1%2C5; s_cc=true; AWSALB=gRTRpPoAWYWch0zgyIHqDR8aN7lasxnRXV7cCjm/tb+DbQHKwfowKeLmORRC/H7LHQscCyYx3o58DsGgmiuNIspslR8qUYACjS+rczpbbZsJ/Sbk4BeSpnTJNJN0; AWSALBCORS=gRTRpPoAWYWch0zgyIHqDR8aN7lasxnRXV7cCjm/tb+DbQHKwfowKeLmORRC/H7LHQscCyYx3o58DsGgmiuNIspslR8qUYACjS+rczpbbZsJ/Sbk4BeSpnTJNJN0; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a784-3fc4350e9943&created=1727776289 [TRUNCATED]
2024-10-01 09:51:40 UTC	1701	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 45487 Connection: close Date: Tue, 01 Oct 2024 09:51:40 GMT Set-Cookie: AWSALB=7CgADGRdATw3YBzaRlSIwvy637cv6HVfwqnbwqyELYamYxChRdKx7KmEz+M7I/MCL3z+nsUgOGTTgM973oNIdqtoY82glIwlWB4371IJ9sY5AD+FJGG3np5ZthNB; Expires=Tue, 08 Oct 2024 09:51:40 GMT; Path=/ Set-Cookie: AWSALBCORS=7CgADGRdATw3YBzaRlSIwvy637cv6HVfwqnbwqyELYamYxChRdKx7KmEz+M7I/MCL3z+nsUgOGTTgM973oNIdqtoY82glIwlWB4371IJ9sY5AD+FJGG3np5ZthNB; Expires=Tue, 08 Oct 2024 09:51:40 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dispatcher: dispatcher1useast1-28593890 X-Frame-Options: ALLOW-FROM http://thomsonreuterstax.lookbookhq.com, ALLOW-FROM https://thomsonreuterstax.lookbookhq.com, ALLOW-FROM http://answers.legalprof.thomsonreuters.com, ALLOW-FROM https://answers.legalprof.thomsonreuters.com, ALLOW-FROM http://app.accelus.com, ALLOW-FROM https://app.accelus.com X-Content-Type-Options: nosniff Last-Modified: Tue, 22 Nov 2022 15:25:55 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 10:06:40 GMT X-UA-Compatible: IE=edge X-Vhost: legal.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' http://thomsonreuterstax.lookbookhq.com https://thomsonreuterstax.lookbookhq.com http://answers.legalprof.thomsonreuters.com https://answers.legalprof.thomsonreuters.com http://app.accelus.com https://app.accelus.com ETag: "b1af-5ee10c9bc46c0" X-Cache: Miss from cloudfront Via: 1.1 79d85d2de1f5aa38558ef6bab6274390.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 8OwykKzv1Dj2KIeW339bSB2UD8HQ8-3Pg77DVn2_OSNPrfafL9me7w== Age: 1913597
2024-10-01 09:51:40 UTC	16384	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 1e 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-10-01 09:51:40 UTC	16384	IN	Data Raw: 34 d4 69 98 d2 0b 1a 8c c6 91 54 41 42 b3 69 58 df b3 8a 8d ce 1c 73 ce fb 7c 3a cf 13 ca c3 58 b9 71 f6 7b 27 ae 7c b5 fb 1e fc e6 3e 57 b7 dd ad eb 92 f8 56 6d 74 f7 7e c5 dd e4 70 9d 23 43 34 e8 82 b2 a2 2a 83 51 23 51 07 6f 5d e5 8f a9 fa 77 9c 7c 9c 5f 2f a1 fa ba f3 11 1f 6f 17 f8 c5 73 f5 5e e6 3a 02 c5 48 aa 0a 8a 00 00 2a 28 00 08 2a 28 00 00 a8 a0 00 28 00 00 00 a8 a2 00 00 00 00 00 00 00 00 00 00 00 00 02 80 82 a0 00 20 00 00 02 80 00 00 00 00 00 80 00 00 00 02 80 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 18 0a 00 00 00 00 00 00 00 00 a8 a0 00 00 02 00 01 14 05 00 50 00 00 00 00 00 01 40 40 00 00 00 40 50 00 00 00 00 00 01 44 10 00 04 a8 a9 7e 3a 0f 3f ed 6f eb 8a f8 1e dd 77 7a af a9 ff 00 a1 ee Data Ascii: 4iTABiXs\|:Xq{'\|>WVmt~p#C4Q#Qo]w\|_/os^:H(*(( P@@@PD~:?owz
2024-10-01 09:51:40 UTC	12719	IN	Data Raw: bd eb c3 38 ff 00 29 b0 4c 4e e9 de 67 8e 3e b9 7a ef bf 19 f0 81 69 9c f9 71 c6 ef db cb d3 90 76 cf 88 bf 64 96 71 9b db 41 d2 6b ad 46 33 9e 37 14 50 14 00 00 00 00 00 01 05 40 14 40 14 00 04 50 22 a4 50 00 00 00 00 a0 80 00 a8 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 02 00 0a 00 00 00 00 03 e6 00 80 22 6a f8 06 37 5c 37 d7 5b 58 d4 e8 39 7d db cd eb 37 d6 b3 c0 2e f3 e1 c6 cf 2e d6 f5 8b 00 cd 6a fc 31 3c 56 ba 0e 56 72 ba e2 cb 39 59 d3 39 bc a2 b5 ec cb 39 8e 97 cc 63 e2 a8 e9 de 39 eb b5 7e d3 f2 96 f7 e0 1b f5 fc 37 64 72 97 85 f6 03 70 b6 24 bd 28 39 ea 74 cf 86 ac 63 54 1d 26 ba b6 78 71 c6 f9 5d 65 e8 39 dd 5e b7 9d f8 67 51 9e 83 a5 cf 5c b5 7e ae b8 37 eb fb 79 06 7d 7a b5 df 93 8e 13 99 75 c6 ba 0e 3e cf 45 d5 5c 7a be Data Ascii: 8)LNg>ziqvdqAkF37P@@P"P "j7\7[X9}7..j1<VVr9Y99c9~7drp$(9tcT&xq]e9^gQ\~7y}zu>E\z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49866	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:41 UTC	610	OUT	GET /logos/static/ot_close.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:41 UTC	873	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:41 GMT Content-Type: image/svg+xml Content-Length: 651 Connection: close Content-MD5: pcXWFGpuVeSg/jVnYCseRg== Last-Modified: Mon, 30 Sep 2024 02:09:18 GMT ETag: 0x8DCE0F4E460B42B x-ms-request-id: 5f836168-c01e-007c-0b4e-130ebf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 53904 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e3aff174301-EWR
2024-10-01 09:51:41 UTC	496	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 34 38 2e 33 33 33 22 20 68 65 69 67 68 74 3d 22 33 34 38 2e 33 33 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 38 2e 33 33 33 20 33 34 38 2e 33 33 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 36 35 36 35 36 22 20 64 3d 22 4d 33 33 36 2e 35 35 39 20 36 38 2e 36 31 31 4c 32 33 31 2e 30 31 36 20 31 37 34 2e 31 36 35 6c 31 30 35 2e 35 34 33 20 31 30 35 2e 35 34 39 63 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 34 31 2e 31 34 35 20 30 20 35 36 2e 38 35 2d 37 2e 38 34 34 20 37 2e 38 34 34 2d 31 38 2e 31 32 38 20 31 31 2e 37 36 39 2d 32 38 2e 34 30 37 20 31 31 2e 37 36 39 2d 31 30 2e 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="348.333" height="348.333" viewBox="0 0 348.333 348.334"><path fill="#565656" d="M336.559 68.611L231.016 174.165l105.543 105.549c15.699 15.705 15.699 41.145 0 56.85-7.844 7.844-18.128 11.769-28.407 11.769-10.2
2024-10-01 09:51:41 UTC	155	IN	Data Raw: 34 20 31 35 2e 36 39 36 2d 31 35 2e 36 38 37 20 34 31 2e 31 32 37 2d 31 35 2e 36 38 37 20 35 36 2e 38 32 39 20 30 6c 31 30 35 2e 35 36 33 20 31 30 35 2e 35 35 34 4c 32 37 39 2e 37 32 31 20 31 31 2e 37 36 37 63 31 35 2e 37 30 35 2d 31 35 2e 36 38 37 20 34 31 2e 31 33 39 2d 31 35 2e 36 38 37 20 35 36 2e 38 33 32 20 30 20 31 35 2e 37 30 35 20 31 35 2e 36 39 39 20 31 35 2e 37 30 35 20 34 31 2e 31 34 35 2e 30 30 36 20 35 36 2e 38 34 34 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 4 15.696-15.687 41.127-15.687 56.829 0l105.563 105.554L279.721 11.767c15.705-15.687 41.139-15.687 56.832 0 15.705 15.699 15.705 41.145.006 56.844z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49869	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:41 UTC	593	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:41 UTC	873	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:41 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Mon, 30 Sep 2024 02:09:18 GMT ETag: 0x8DCE0F4E41055C0 x-ms-request-id: 62b45912-d01e-002c-705b-1311b7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 35885 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e3aff011831-EWR
2024-10-01 09:51:41 UTC	496	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7
2024-10-01 09:51:41 UTC	1	IN	Data Raw: 3e Data Ascii: >

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49861	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:41 UTC	561	OUT	GET /emcm-ui/bundle/v24.69.0/0.js HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:41 UTC	771	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 53936 Connection: close Date: Tue, 24 Sep 2024 08:12:39 GMT Last-Modified: Wed, 28 Aug 2024 15:48:01 GMT ETag: "59739e7fa80bdb59faf18c5d65f906ee" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 38f2daae6c849ed5f695333a9d4104ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: XFJYC7hsgrhOtanNASXcPrmRaJunH0zLo0TfpBP8hseAlSyQQXxU3g== Age: 610743 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="XFJYC7hsgrhOtanNASXcPrmRaJunH0zLo0TfpBP8hseAlSyQQXxU3g==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 28 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 44 43 4c 3d 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 44 43 4c 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 35 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 77 65 62 70 61 63 6b 50 6f 6c 79 66 69 6c 6c 7c 7c 28 65 2e 64 65 70 72 65 63 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 2e 70 61 74 68 73 3d 5b 5d 2c 65 2e 63 68 69 6c 64 72 65 6e 7c 7c 28 65 2e 63 68 69 6c 64 72 65 6e 3d 5b 5d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 6c 6f 61 64 65 64 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: (this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[0],{159:function(e,t){e.exports=function(e){return e.webpackPolyfill\|\|(e.deprecate=function(){},e.paths=[],e.children\|\|(e.children=[]),Object.defineProperty(e,"loaded",{enumerable:!0,get:function(){re
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 6c 21 3d 74 3f 74 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 2c 72 2c 61 2c 6f 3d 5b 5d 3b 69 66 28 21 65 2e 5f 64 29 7b 66 6f 72 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 73 2e 6e 6f 77 28 29 29 3b 72 65 74 75 72 6e 20 65 2e 5f 75 73 65 55 54 43 3f 5b 74 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2c 74 2e 67 65 74 55 54 43 4d 6f 6e 74 68 28 29 2c 74 2e 67 65 74 55 54 43 44 61 74 65 28 29 5d 3a 5b 74 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 74 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 74 2e 67 65 74 44 61 74 65 28 29 5d 7d 28 65 29 2c 65 2e 5f 77 26 26 6e 75 6c 6c 3d 3d 65 2e 5f 61 5b 76 65 5d 26 26 6e 75 6c 6c 3d 3d 65 2e 5f 61 5b 70 65 5d 26 26 66 75 6e 63 74 69 Data Ascii: l!=t?t:n}function yt(e){var t,n,i,r,a,o=[];if(!e._d){for(i=function(e){var t=new Date(s.now());return e._useUTC?[t.getUTCFullYear(),t.getUTCMonth(),t.getUTCDate()]:[t.getFullYear(),t.getMonth(),t.getDate()]}(e),e._w&&null==e._a[ve]&&null==e._a[pe]&&functi
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 2c 74 29 7b 76 61 72 20 6e 3d 77 28 65 29 3f 65 3a 57 74 28 65 29 3b 72 65 74 75 72 6e 21 28 21 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 7c 7c 21 6e 2e 69 73 56 61 6c 69 64 28 29 29 26 26 28 22 6d 69 6c 6c 69 73 65 63 6f 6e 64 22 3d 3d 3d 28 74 3d 52 28 74 29 7c 7c 22 6d 69 6c 6c 69 73 65 63 6f 6e 64 22 29 3f 74 68 69 73 2e 76 61 6c 75 65 4f 66 28 29 3e 6e 2e 76 61 6c 75 65 4f 66 28 29 3a 6e 2e 76 61 6c 75 65 4f 66 28 29 3c 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 73 74 61 72 74 4f 66 28 74 29 2e 76 61 6c 75 65 4f 66 28 29 29 7d 2c 77 6e 2e 69 73 42 65 66 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 77 28 65 29 3f 65 3a 57 74 28 65 29 3b 72 65 74 75 72 6e 21 28 21 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 7c 7c 21 6e 2e 69 73 56 Data Ascii: ,t){var n=w(e)?e:Wt(e);return!(!this.isValid()\|\|!n.isValid())&&("millisecond"===(t=R(t)\|\|"millisecond")?this.valueOf()>n.valueOf():n.valueOf()<this.clone().startOf(t).valueOf())},wn.isBefore=function(e,t){var n=w(e)?e:Wt(e);return!(!this.isValid()\|\|!n.isV
2024-10-01 09:51:41 UTC	2016	IN	Data Raw: 79 73 29 21 3d 3d 58 6e 28 64 29 3f 22 2d 22 3a 22 22 2c 5f 3d 58 6e 28 74 68 69 73 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 29 21 3d 3d 58 6e 28 64 29 3f 22 2d 22 3a 22 22 3b 72 65 74 75 72 6e 20 63 2b 22 50 22 2b 28 72 3f 66 2b 72 2b 22 59 22 3a 22 22 29 2b 28 61 3f 66 2b 61 2b 22 4d 22 3a 22 22 29 2b 28 6f 3f 6d 2b 6f 2b 22 44 22 3a 22 22 29 2b 28 75 7c 7c 6c 7c 7c 68 3f 22 54 22 3a 22 22 29 2b 28 75 3f 5f 2b 75 2b 22 48 22 3a 22 22 29 2b 28 6c 3f 5f 2b 6c 2b 22 4d 22 3a 22 22 29 2b 28 68 3f 5f 2b 68 2b 22 53 22 3a 22 22 29 7d 76 61 72 20 65 73 3d 46 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 73 2e 69 73 56 61 6c 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 73 56 61 6c 69 64 7d 2c 65 73 2e 61 62 Data Ascii: ys)!==Xn(d)?"-":"",_=Xn(this._milliseconds)!==Xn(d)?"-":"";return c+"P"+(r?f+r+"Y":"")+(a?f+a+"M":"")+(o?m+o+"D":"")+(u\|\|l\|\|h?"T":"")+(u?_+u+"H":"")+(l?_+l+"M":"")+(h?_+h+"S":"")}var es=Ft.prototype;return es.isValid=function(){return this._isValid},es.ab
2024-10-01 09:51:41 UTC	2768	IN	Data Raw: 75 72 6e 20 4d 28 74 68 69 73 2e 64 61 79 73 28 29 2f 37 29 7d 2c 65 73 2e 6d 6f 6e 74 68 73 3d 24 6e 2c 65 73 2e 79 65 61 72 73 3d 4a 6e 2c 65 73 2e 68 75 6d 61 6e 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 65 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 73 3d 24 74 28 65 29 2e 61 62 73 28 29 2c 69 3d 71 6e 28 73 2e 61 73 28 22 73 22 29 29 2c 72 3d 71 6e 28 73 2e 61 73 28 22 6d 22 29 29 2c 61 3d 71 6e 28 73 2e 61 73 28 22 68 22 29 29 2c 6f 3d 71 6e 28 73 2e 61 73 28 22 64 22 29 29 2c 75 3d Data Ascii: urn M(this.days()/7)},es.months=$n,es.years=Jn,es.humanize=function(e){if(!this.isValid())return this.localeData().invalidDate();var t=this.localeData(),n=function(e,t,n){var s=$t(e).abs(),i=qn(s.as("s")),r=qn(s.as("m")),a=qn(s.as("h")),o=qn(s.as("d")),u=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49864	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:41 UTC	561	OUT	GET /emcm-ui/bundle/v24.69.0/4.js HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:41 UTC	773	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3097940 Connection: close Date: Tue, 24 Sep 2024 08:12:39 GMT Last-Modified: Wed, 28 Aug 2024 15:48:02 GMT ETag: "82131697cb9d045382a3f4107f3f8995" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 43244f77affffa1d8942dd025413b8d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: NFY6DJz8J2ChP19qoIYzpGi1hGqX2yvtp5CQzHaB4fpLH-7CLsFX9g== Age: 610743 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="NFY6DJz8J2ChP19qoIYzpGi1hGqX2yvtp5CQzHaB4fpLH-7CLsFX9g==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 28 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 44 43 4c 3d 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 44 43 4c 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 5d 2c 7b 35 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 6f 28 35 39 34 29 7d 2c 35 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2a 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 20 76 31 36 2e 31 33 2e 31 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2d 73 65 72 76 65 72 2e 62 72 6f 77 73 65 72 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e Data Ascii: (this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[4],{563:function(e,t,o){"use strict";e.exports=o(594)},594:function(e,t,o){"use strict";/** @license React v16.13.1 * react-dom-server.browser.production.min.js * * Copyright (c) Facebook, Inc. an
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 63 74 6f 72 3b 74 3d 74 28 29 2c 65 2e 5f 72 65 73 75 6c 74 3d 74 2c 74 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 30 3d 3d 3d 65 2e 5f 73 74 61 74 75 73 26 26 28 74 3d 74 2e 64 65 66 61 75 6c 74 2c 65 2e 5f 73 74 61 74 75 73 3d 31 2c 65 2e 5f 72 65 73 75 6c 74 3d 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 30 3d 3d 3d 65 2e 5f 73 74 61 74 75 73 26 26 28 65 2e 5f 73 74 61 74 75 73 3d 32 2c 65 2e 5f 72 65 73 75 6c 74 3d 74 29 7d 29 7d 7d 28 61 3d 65 2e 74 79 70 65 29 2c 61 2e 5f 73 74 61 74 75 73 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 3d 5b 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 2e 5f 72 65 73 75 6c 74 2c 6e 28 7b 72 65 66 3a 65 2e 72 65 66 7d 2c 65 2e 70 72 6f 70 73 29 29 5d 2c 74 68 69 73 2e 73 74 61 63 6b 2e 70 75 Data Ascii: ctor;t=t(),e._result=t,t.then(function(t){0===e._status&&(t=t.default,e._status=1,e._result=t)},function(t){0===e._status&&(e._status=2,e._result=t)})}}(a=e.type),a._status){case 1:return e=[i.createElement(a._result,n({ref:e.ref},e.props))],this.stack.pu
2024-10-01 09:51:41 UTC	2410	IN	Data Raw: 55 4c 54 3d 22 64 65 66 61 75 6c 74 22 2c 65 2e 42 55 54 54 4f 4e 3d 22 62 75 74 74 6f 6e 22 2c 65 2e 49 43 4f 4e 3d 22 69 63 6f 6e 22 2c 65 2e 57 49 54 48 4f 55 54 5f 49 4e 50 55 54 3d 22 77 69 74 68 6f 75 74 49 6e 70 75 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 2c 65 2e 44 52 4f 50 44 4f 57 4e 3d 22 64 72 6f 70 64 6f 77 6e 22 7d 28 54 7c 7c 28 54 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4c 45 46 54 3d 22 6c 65 66 74 22 2c 65 2e 63 65 6e 74 65 72 3d 22 63 65 6e 74 65 72 22 7d 28 6b 7c 7c 28 6b 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 44 45 46 41 55 4c 54 3d 22 64 65 66 61 75 6c 74 22 2c 65 2e 4d 4f 44 49 46 49 45 44 3d 22 6d 6f 64 69 66 69 65 64 22 7d 28 52 7c 7c 28 52 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e Data Ascii: ULT="default",e.BUTTON="button",e.ICON="icon",e.WITHOUT_INPUT="withoutInput",e.DARK="dark",e.DROPDOWN="dropdown"}(T\|\|(T={})),function(e){e.LEFT="left",e.center="center"}(k\|\|(k={})),function(e){e.DEFAULT="default",e.MODIFIED="modified"}(R\|\|(R={})),function
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 3d 22 4e 65 77 20 70 72 6f 64 75 63 74 22 2c 65 2e 53 41 4c 45 3d 22 53 61 6c 65 22 7d 28 71 7c 7c 28 71 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 57 3d 22 4e 45 57 22 2c 65 2e 50 52 45 5f 53 41 4c 45 3d 22 50 52 45 2d 53 41 4c 45 22 2c 65 2e 46 52 45 4e 43 48 5f 4e 45 57 3d 22 4e 4f 55 56 45 41 55 22 2c 65 2e 46 52 45 4e 43 48 5f 50 52 45 5f 53 41 4c 45 3d 22 50 52 c3 89 2d 56 45 4e 54 45 22 7d 28 48 7c 7c 28 48 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 42 45 46 4f 52 45 5f 52 45 44 49 52 45 43 54 3d 22 62 65 66 6f 72 65 52 65 64 69 72 65 63 74 22 2c 65 2e 4e 45 57 5f 51 55 45 52 59 3d 22 6e 65 77 51 75 65 72 79 22 2c 65 2e 41 46 54 45 52 5f 49 4e 49 54 49 41 4c 49 5a 41 54 49 4f 4e 3d 22 61 66 74 65 72 49 6e 69 Data Ascii: ="New product",e.SALE="Sale"}(q\|\|(q={})),function(e){e.NEW="NEW",e.PRE_SALE="PRE-SALE",e.FRENCH_NEW="NOUVEAU",e.FRENCH_PRE_SALE="PR-VENTE"}(H\|\|(H={})),function(e){e.BEFORE_REDIRECT="beforeRedirect",e.NEW_QUERY="newQuery",e.AFTER_INITIALIZATION="afterIni
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 4c 4f 41 44 2c 4c 2e 49 4e 54 45 52 46 41 43 45 5f 43 48 41 4e 47 45 2c 4c 2e 4d 45 47 41 4d 45 4e 55 5f 53 45 41 52 43 48 5f 53 55 42 4d 49 54 2c 4c 2e 4d 45 47 41 4d 45 4e 55 5f 53 45 41 52 43 48 5f 41 55 54 4f 5f 53 55 47 47 45 53 54 5d 2e 69 6e 63 6c 75 64 65 73 28 6f 2e 61 63 74 69 6f 6e 43 61 75 73 65 29 26 26 6d 29 7b 76 61 72 20 67 3d 6f 2e 6f 72 69 67 69 6e 4c 65 76 65 6c 32 3b 69 66 28 67 29 7b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 69 6e 74 65 72 61 63 74 69 6f 6e 22 29 7c 7c 22 7b 7d 22 29 2e 69 74 65 6d 54 65 78 74 3b 72 65 74 75 72 6e 20 74 21 3d 3d 4c 2e 4d 45 47 41 4d 45 4e 55 5f 53 45 41 52 43 48 Data Ascii: LOAD,L.INTERFACE_CHANGE,L.MEGAMENU_SEARCH_SUBMIT,L.MEGAMENU_SEARCH_AUTO_SUGGEST].includes(o.actionCause)&&m){var g=o.originLevel2;if(g){var y=function(e,t){var o=JSON.parse(sessionStorage.getItem("interaction")\|\|"{}").itemText;return t!==L.MEGAMENU_SEARCH
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 2c 73 70 64 69 73 63 75 73 73 69 6f 6e 62 6f 61 72 64 6c 69 73 74 3a 22 44 69 73 63 75 73 73 69 6f 6e 20 42 6f 61 72 64 73 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 64 69 73 63 75 73 73 69 6f 6e 62 6f 61 72 64 6c 69 73 74 3a 22 44 69 73 63 75 73 73 69 6f 6e 20 42 6f 61 72 64 73 22 2c 73 70 64 6f 63 75 6d 65 6e 74 6c 69 62 72 61 72 79 6c 69 73 74 3a 22 44 6f 63 75 6d 65 6e 74 20 4c 69 62 72 61 72 79 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 64 6f 63 75 6d 65 6e 74 6c 69 62 72 61 72 79 6c 69 73 74 3a 22 44 6f 63 75 6d 65 6e 74 20 4c 69 62 72 61 72 79 22 2c 73 70 65 76 65 6e 74 3a 22 45 76 65 6e 74 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 65 76 65 6e 74 3a 22 45 76 65 6e 74 22 2c 73 70 65 76 65 6e 74 6c 69 73 74 3a 22 45 76 65 6e 74 73 22 2c 66 69 6c 65 74 79 70 65 Data Ascii: ,spdiscussionboardlist:"Discussion Boards",filetype_spdiscussionboardlist:"Discussion Boards",spdocumentlibrarylist:"Document Library",filetype_spdocumentlibrarylist:"Document Library",spevent:"Event",filetype_spevent:"Event",speventlist:"Events",filetype
2024-10-01 09:51:41 UTC	14808	IN	Data Raw: 65 77 65 72 4b 65 79 77 6f 72 64 73 3a 22 54 72 79 20 75 73 69 6e 67 20 66 65 77 65 72 2c 20 64 69 66 66 65 72 65 6e 74 20 6f 72 20 6d 6f 72 65 20 67 65 6e 65 72 61 6c 20 6b 65 79 77 6f 72 64 73 2e 22 2c 53 65 6c 65 63 74 46 65 77 65 72 46 69 6c 74 65 72 73 3a 22 53 65 6c 65 63 74 20 66 65 77 65 72 20 66 69 6c 74 65 72 73 20 74 6f 20 62 72 6f 61 64 65 6e 20 79 6f 75 72 20 73 65 61 72 63 68 2e 22 2c 44 6f 63 75 6d 65 6e 74 3a 22 44 6f 63 75 6d 65 6e 74 22 2c 54 69 6d 65 3a 22 54 69 6d 65 22 2c 53 74 61 72 74 44 61 74 65 3a 22 53 74 61 72 74 20 44 61 74 65 22 2c 53 74 61 72 74 54 69 6d 65 3a 22 53 74 61 72 74 20 54 69 6d 65 22 2c 44 75 72 61 74 69 6f 6e 54 69 74 6c 65 3a 22 44 75 72 61 74 69 6f 6e 22 2c 55 73 65 72 51 75 65 72 79 3a 22 55 73 65 72 20 71 75 Data Ascii: ewerKeywords:"Try using fewer, different or more general keywords.",SelectFewerFilters:"Select fewer filters to broaden your search.",Document:"Document",Time:"Time",StartDate:"Start Date",StartTime:"Start Time",DurationTitle:"Duration",UserQuery:"User qu
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 6e 74 3a 22 52 65 6e 64 65 7a 20 76 6f 75 73 22 2c 73 70 70 6f 72 74 61 6c 3a 22 50 6f 72 74 61 69 6c 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 70 6f 72 74 61 6c 3a 22 50 6f 72 74 61 69 6c 22 2c 73 70 73 69 74 65 3a 22 53 69 74 65 20 53 68 61 72 65 50 6f 69 6e 74 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 73 69 74 65 3a 22 53 69 74 65 20 53 68 61 72 65 50 6f 69 6e 74 22 2c 73 70 75 73 65 72 70 72 6f 66 69 6c 65 3a 22 55 74 69 6c 69 73 61 74 65 75 72 20 53 68 61 72 65 50 6f 69 6e 74 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 75 73 65 72 70 72 6f 66 69 6c 65 3a 22 55 74 69 6c 69 73 61 74 65 75 72 20 53 68 61 72 65 50 6f 69 6e 74 22 2c 73 70 61 72 65 61 3a 22 5a 6f 6e 65 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 61 72 65 61 3a 22 5a 6f 6e 65 22 2c 73 70 61 6e 6e 6f 75 6e Data Ascii: nt:"Rendez vous",spportal:"Portail",filetype_spportal:"Portail",spsite:"Site SharePoint",filetype_spsite:"Site SharePoint",spuserprofile:"Utilisateur SharePoint",filetype_spuserprofile:"Utilisateur SharePoint",sparea:"Zone",filetype_sparea:"Zone",spannoun
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 61 69 64 65 7a 20 61 20 64 c3 a9 6d 61 72 72 65 72 22 2c 4c 69 6b 65 73 54 68 69 73 3a 22 7b 30 7d 20 61 69 6d 65 3c 70 6c 3e 6e 74 3c 2f 70 6c 3e 20 c3 a7 61 2e 22 2c 43 61 6e 6e 6f 74 43 6f 6e 6e 65 63 74 53 65 61 72 63 68 50 61 67 65 3a 22 49 6d 70 6f 73 73 69 62 6c 65 20 64 65 20 72 65 6a 6f 69 6e 64 72 65 20 76 6f 74 72 65 20 70 61 67 65 20 64 65 20 72 65 63 68 65 72 63 68 65 22 2c 41 72 65 59 6f 75 53 75 72 65 44 65 6c 65 74 65 46 69 6c 74 65 72 3a 22 c3 8a 74 65 73 20 76 6f 75 73 20 73 75 72 20 64 65 20 76 6f 75 6c 6f 69 72 20 65 66 66 61 63 65 72 20 6c 65 20 66 69 6c 74 72 65 20 7b 30 7d 61 76 65 63 20 6c 27 65 78 70 72 65 73 73 69 6f 6e 20 7b 31 7d 22 2c 4f 6e 6c 69 6e 65 48 65 6c 70 3a 22 41 69 64 65 20 65 6e 20 6c 69 67 6e 65 22 2c 44 6f 6e 65 Data Ascii: aidez a dmarrer",LikesThis:"{0} aime<pl>nt</pl> a.",CannotConnectSearchPage:"Impossible de rejoindre votre page de recherche",AreYouSureDeleteFilter:"tes vous sur de vouloir effacer le filtre {0}avec l'expression {1}",OnlineHelp:"Aide en ligne",Done
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 74 6c 69 73 74 3a 22 e5 85 ac e5 91 8a 22 2c 73 70 63 6f 6e 74 61 63 74 3a 22 e8 81 94 e7 b3 bb 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 63 6f 6e 74 61 63 74 3a 22 e8 81 94 e7 b3 bb 22 2c 73 70 63 6f 6e 74 61 63 74 6c 69 73 74 3a 22 e8 81 94 e7 b3 bb 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 63 6f 6e 74 61 63 74 6c 69 73 74 3a 22 e8 81 94 e7 b3 bb 22 2c 73 70 63 75 73 74 6f 6d 6c 69 73 74 3a 22 e8 87 aa e5 ae 9a e4 b9 89 e5 88 97 e8 a1 a8 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 63 75 73 74 6f 6d 6c 69 73 74 3a 22 e8 87 aa e5 ae 9a e4 b9 89 e5 88 97 e8 a1 a8 22 2c 73 70 64 69 73 63 75 73 73 69 6f 6e 62 6f 61 72 64 3a 22 e8 ae a8 e8 ae ba e6 9d bf e5 9d 97 22 2c 66 69 6c 65 74 79 70 65 5f 73 70 64 69 73 63 75 73 73 69 6f 6e 62 6f 61 72 64 3a 22 e8 ae a8 e8 ae ba Data Ascii: tlist:"",spcontact:"",filetype_spcontact:"",spcontactlist:"",filetype_spcontactlist:"",spcustomlist:"",filetype_spcustomlist:"",spdiscussionboard:"",filetype_spdiscussionboard:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49863	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:41 UTC	562	OUT	GET /emcm-ui/bundle/v24.69.0/43.js HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:41 UTC	746	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 299 Connection: close Date: Tue, 24 Sep 2024 08:12:39 GMT Last-Modified: Wed, 28 Aug 2024 15:48:02 GMT ETag: "e2c3a51528343e3660d27149ab2266cf" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 35cfa6fbcb341fd2ae15e24a43e2f57a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: __ZKKqnT9u3tqqmxMcv08j-VztZqDqFfY4ZWyb3p3HlxMns43UsDyw== Age: 610743 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="__ZKKqnT9u3tqqmxMcv08j-VztZqDqFfY4ZWyb3p3HlxMns43UsDyw==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1
2024-10-01 09:51:41 UTC	299	IN	Data Raw: 28 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 44 43 4c 3d 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 44 43 4c 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 31 30 32 39 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 76 61 72 20 65 3d 61 28 36 39 31 29 2c 6e 3d 65 2e 61 2e 74 65 6d 70 6c 61 74 65 3b 6e 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 43 6f 76 65 6f 53 65 61 72 63 68 42 6f 78 22 3b 76 61 72 20 6f 3d 6e 2c 73 3d 65 2e 61 2e 72 65 68 79 64 72 61 74 6f 72 3b 61 2e 64 28 74 2c 22 64 65 66 61 75 6c 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 2c 61 2e 64 28 74 2c 22 72 65 68 79 64 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: (this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[43],{1029:function(r,t,a){"use strict";a.r(t);var e=a(691),n=e.a.template;n.displayName="CoveoSearchBox";var o=n,s=e.a.rehydrator;a.d(t,"default",function(){return o}),a.d(t,"rehydrator",function(){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49862	13.35.58.63	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:41 UTC	562	OUT	GET /emcm-ui/bundle/v24.69.0/16.js HTTP/1.1 Host: app-data.gcs.trstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:41 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4505 Connection: close Date: Tue, 24 Sep 2024 08:12:39 GMT Last-Modified: Wed, 28 Aug 2024 15:48:01 GMT ETag: "f3f6bb12e873d35ec002e1954cc3d4a9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=365000000,immutable Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab85f05f60638addab7913cfb252c99a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: UD2BXRP39jjgVi2YLlnrKLj5Q2Nu71zYdVL3HZWMWW0cXGD6OOlA8Q== Age: 610743 Vary: Origin Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA60-P10",cdn-rid;desc="UD2BXRP39jjgVi2YLlnrKLj5Q2Nu71zYdVL3HZWMWW0cXGD6OOlA8Q==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=1
2024-10-01 09:51:41 UTC	4505	IN	Data Raw: 28 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 44 43 4c 3d 74 68 69 73 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 44 43 4c 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 5d 2c 7b 31 30 32 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 76 61 72 20 6e 3d 61 28 33 36 29 2c 72 3d 61 28 30 29 2c 63 3d 61 2e 6e 28 72 29 2c 69 3d 61 28 31 35 29 2c 73 3d 61 28 37 36 34 29 2c 6c 3d 61 28 35 29 2c 6f 3d 61 2e 6e 28 6c 29 2c 75 3d 61 28 36 38 33 29 2c 64 3d 61 28 36 38 34 29 2c 6d 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 61 3d 74 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 74 2e 74 69 74 6c 65 2c 72 3d 74 2e 68 61 6e 64 6c 65 49 74 65 6d 43 6c 69 63 6b 2c 6c 3d 74 2e 69 73 45 78 70 61 6e 64 Data Ascii: (this.webpackJsonpDCL=this.webpackJsonpDCL\|\|[]).push([[16],{1020:function(e,t,a){"use strict";a.r(t);var n=a(36),r=a(0),c=a.n(r),i=a(15),s=a(764),l=a(5),o=a.n(l),u=a(683),d=a(684),m=function e(t){var a=t.children,n=t.title,r=t.handleItemClick,l=t.isExpand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49865	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:41 UTC	1977	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-dependencies/resources/8.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/en/products/highq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; tr_ewp_tracking_params={}; AMCVS_A7D63BC75245AE300A490D4D%40AdobeOrg=1; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CMCMID%7C52509709738132105324459253370357628360%7CMCAAMLH-1728381096%7C6%7CMCAAMB-1728381096%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1727783497s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778158\|PC#e6cec483bd984004a698fc8e4aebdb06.37_0#1791021098; gpv_pn=legal%3Aproducts%3Ahighq; gpv_pu=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq; s_ips=907; s_tp=4681; s_ppv=legal%253Aproducts%253Ahighq%2C19%2C19%2C907%2C1%2C5; s_cc=true; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+01+2024+05%3A51%3A38+GMT-0400+(Eastern+Daylight+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=67167bfd-3edb-43d3-b383-770516ff7cf1&interactionCount=0&landingPath=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq; _dd_s=rum=2&id=010aaccb-9ce0-42eb-a [TRUNCATED]
2024-10-01 09:51:41 UTC	1322	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1511540 Connection: close Date: Tue, 01 Oct 2024 09:44:48 GMT Set-Cookie: AWSALB=+Dxd+HtxPnHJfpowMyGbTbfBbjdtW38cAbHEiGiO+9HwRiXU+x0Kh5B8GZizgvKl8jMklgHZ+iPXzBYqfy7twvG5cjzv7WBaZh3NMzeAjFA8OgjHWoFjLueTXS13; Expires=Tue, 08 Oct 2024 09:44:47 GMT; Path=/ Set-Cookie: AWSALBCORS=+Dxd+HtxPnHJfpowMyGbTbfBbjdtW38cAbHEiGiO+9HwRiXU+x0Kh5B8GZizgvKl8jMklgHZ+iPXzBYqfy7twvG5cjzv7WBaZh3NMzeAjFA8OgjHWoFjLueTXS13; Expires=Tue, 08 Oct 2024 09:44:47 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT ETag: "171074-622c22f032900" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:59:47 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 827d4b9f3280fc9410e1e1ce54fbedda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: ZfrZWTTcNsGjL4tcZXo7EJTxW8bUzn-3HfbxGCVJfBU8RvaW5Nh-Fg== Age: 413
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 5d 2c 7b 33 30 36 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 2e 64 28 61 2c 22 64 69 67 5f 61 63 63 6f 72 64 69 6f 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 2c 72 2e 64 28 61 2c 22 64 69 67 5f 61 63 63 6f 72 64 69 6f 6e 5f 69 74 65 6d 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 74 7d 29 29 2c 72 2e 64 28 61 2c 22 64 69 67 5f 61 63 63 6f 72 64 69 6f 6e 5f 70 61 6e 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{306:function(o,a,r){"use strict";r.r(a),function(o){r.d(a,"dig_accordion",(function(){return l})),r.d(a,"dig_accordion_item",(function(){return lt})),r.d(a,"dig_accordion_panel",(function(){return d
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 7d 7d 29 29 2c 52 3d 70 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 61 2e 54 72 53 76 67 46 6c 61 67 41 67 3d 76 6f 69 64 20 30 2c 61 2e 54 72 53 76 67 46 6c 61 67 41 67 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 61 67 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 44 39 30 45 32 42 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 Data Ascii: }})),R=p((function(o,a){Object.defineProperty(a,"__esModule",{value:!0}),a.TrSvgFlagAg=void 0,a.TrSvgFlagAg={name:"flag_ag",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><g class="nc-icon-wrapper"><path fill="#D90E2B" d="M48 40a2 2 0 0
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 31 30 2e 39 31 38 20 31 36 6c 2d 2e 37 38 36 2d 33 2e 31 38 39 20 32 2e 31 32 34 2d 32 2e 31 39 34 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 29 29 2c 73 6f 3d 70 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 61 2e 54 72 53 76 67 46 6c 61 67 43 66 3d 76 6f 69 64 20 30 2c 61 2e 54 72 53 76 67 46 6c 61 67 43 66 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 63 66 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f Data Ascii: 10.918 16l-.786-3.189 2.124-2.194z"/></g></svg>'}})),so=p((function(o,a){Object.defineProperty(a,"__esModule",{value:!0}),a.TrSvgFlagCf=void 0,a.TrSvgFlagCf={name:"flag_cf",data:'<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><g class="nc-ico
2024-10-01 09:51:41 UTC	11610	IN	Data Raw: 39 34 37 4c 32 34 20 31 31 2e 38 35 39 6c 2d 31 2e 32 33 38 20 32 2e 36 38 36 68 2d 32 2e 39 34 35 6c 32 2e 31 35 32 20 32 2e 32 32 31 4c 32 31 2e 31 37 32 20 32 30 20 32 34 20 31 38 2e 33 39 35 20 32 36 2e 38 32 38 20 32 30 6c 2d 2e 37 39 37 2d 33 2e 32 33 34 20 32 2e 31 35 33 2d 32 2e 32 32 31 7a 4d 32 38 2e 31 38 34 20 33 30 2e 35 34 35 68 2d 32 2e 39 34 37 4c 32 34 20 32 37 2e 38 35 39 6c 2d 31 2e 32 33 38 20 32 2e 36 38 36 68 2d 32 2e 39 34 35 6c 32 2e 31 35 32 20 32 2e 32 32 31 4c 32 31 2e 31 37 32 20 33 36 20 32 34 20 33 34 2e 33 39 35 20 32 36 2e 38 32 38 20 33 36 6c 2d 2e 37 39 37 2d 33 2e 32 33 34 20 32 2e 31 35 33 2d 32 2e 32 32 31 7a 4d 31 38 2e 33 36 37 20 32 32 2e 36 38 36 48 31 35 2e 34 32 4c 31 34 2e 31 38 34 20 32 30 6c 2d 31 2e 32 33 38 Data Ascii: 947L24 11.859l-1.238 2.686h-2.945l2.152 2.221L21.172 20 24 18.395 26.828 20l-.797-3.234 2.153-2.221zM28.184 30.545h-2.947L24 27.859l-1.238 2.686h-2.945l2.152 2.221L21.172 36 24 34.395 26.828 36l-.797-3.234 2.153-2.221zM18.367 22.686H15.42L14.184 20l-1.238
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 36 45 36 45 36 22 20 64 3d 22 4d 30 20 31 38 68 34 38 76 31 32 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 37 31 37 39 36 22 20 64 3d 22 4d 34 38 20 34 30 63 30 20 31 2e 31 2d 2e 39 20 32 2d 32 20 32 48 32 63 2d 31 2e 31 20 30 2d 32 2d 2e 39 2d 32 2d 32 56 33 30 68 34 38 76 31 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 64 3d 22 4d 32 34 20 33 33 63 2d 33 2e 39 20 30 2d 37 2d 33 2e 31 2d 37 2d 37 76 2d 39 68 31 34 76 39 63 30 20 33 2e 39 2d 33 2e 31 20 37 2d 37 20 37 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 72 65 64 22 20 64 3d 22 4d 32 34 20 33 32 63 2d 33 2e 33 20 30 2d 36 2d 32 2e 37 2d 36 2d 36 76 2d 38 68 31 32 76 38 63 30 20 33 2e 33 2d 32 2e 37 20 36 2d 36 20 36 Data Ascii: path fill="#E6E6E6" d="M0 18h48v12H0z"/><path fill="#171796" d="M48 40c0 1.1-.9 2-2 2H2c-1.1 0-2-.9-2-2V30h48v10z"/><path fill="#FFF" d="M24 33c-3.9 0-7-3.1-7-7v-9h14v9c0 3.9-3.1 7-7 7z"/><path fill="red" d="M24 32c-3.3 0-6-2.7-6-6v-8h12v8c0 3.3-2.7 6-6 6
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 56 38 61 32 20 32 20 30 20 30 31 32 2d 32 68 34 34 61 32 20 32 20 30 20 30 31 32 20 32 76 38 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 31 37 41 35 35 34 22 20 64 3d 22 4d 32 34 20 31 38 6c 2d 36 20 38 68 34 76 34 68 34 76 2d 34 68 34 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 29 29 2c 4f 61 3d 70 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 61 2e 54 72 53 76 67 46 6c 61 67 4c 63 3d 76 6f 69 64 20 30 2c 61 2e 54 72 53 76 67 46 6c 61 67 4c 63 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 6c 63 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 Data Ascii: V8a2 2 0 012-2h44a2 2 0 012 2v8z"/><path fill="#17A554" d="M24 18l-6 8h4v4h4v-4h4z"/></g></svg>'}})),Oa=p((function(o,a){Object.defineProperty(a,"__esModule",{value:!0}),a.TrSvgFlagLc=void 0,a.TrSvgFlagLc={name:"flag_lc",data:'<svg xmlns="http://www.w3.or
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 32 20 30 20 30 31 2d 32 2d 32 56 33 30 68 34 38 76 31 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 33 30 34 36 33 39 22 20 64 3d 22 4d 32 34 20 31 39 2e 39 36 38 4c 32 36 2e 33 32 38 20 32 34 6c 32 2e 33 32 38 20 34 2e 30 33 33 68 2d 39 2e 33 31 32 4c 32 31 2e 36 37 32 20 32 34 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 29 29 2c 67 72 3d 70 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 61 2e 54 72 53 76 67 46 6c 61 67 4e 6c 3d 76 6f 69 64 20 30 2c 61 2e 54 72 53 76 67 46 6c 61 67 4e 6c 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 6e 6c 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 Data Ascii: 2 0 01-2-2V30h48v10z"/><path fill="#304639" d="M24 19.968L26.328 24l2.328 4.033h-9.312L21.672 24z"/></g></svg>'}})),gr=p((function(o,a){Object.defineProperty(a,"__esModule",{value:!0}),a.TrSvgFlagNl=void 0,a.TrSvgFlagNl={name:"flag_nl",data:'<svg xmlns="h
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 36 45 36 45 36 22 20 64 3d 22 4d 30 20 31 38 68 34 38 76 31 32 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 37 42 33 34 41 22 20 64 3d 22 4d 34 38 20 31 38 48 30 56 38 61 32 20 32 20 30 20 30 31 32 2d 32 68 34 34 61 32 20 32 20 30 20 30 31 32 20 32 76 31 30 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e 27 7d 7d 29 29 2c 57 72 3d 70 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 61 2e 54 72 53 76 67 46 6c 61 67 53 6d 3d 76 6f 69 64 20 30 2c 61 2e 54 72 53 76 67 46 6c 61 67 53 6d 3d 7b 6e 61 6d 65 3a 22 66 6c 61 67 5f 73 6d 22 2c 64 61 74 61 3a 27 3c 73 76 67 20 Data Ascii: path fill="#E6E6E6" d="M0 18h48v12H0z"/><path fill="#27B34A" d="M48 18H0V8a2 2 0 012-2h44a2 2 0 012 2v10z"/></g></svg>'}})),Wr=p((function(o,a){Object.defineProperty(a,"__esModule",{value:!0}),a.TrSvgFlagSm=void 0,a.TrSvgFlagSm={name:"flag_sm",data:'<svg
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 6c 61 67 2d 63 61 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 67 20 63 6c 61 73 73 3d 22 6e 63 2d 69 63 6f 6e 2d 77 72 61 70 70 65 72 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 36 45 36 45 36 22 20 64 3d 22 4d 31 36 20 36 68 31 36 76 33 36 48 31 36 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 45 30 30 30 30 22 20 64 3d 22 4d 34 38 20 34 30 61 32 20 32 20 30 20 30 31 2d 32 20 32 48 33 32 56 36 68 31 34 61 32 20 32 20 30 20 30 31 32 20 32 76 33 32 7a 4d 31 36 20 34 32 48 32 61 32 20 32 20 30 20 30 31 2d 32 2d 32 56 38 61 32 20 32 20 30 20 30 31 32 2d 32 68 31 34 76 33 36 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 Data Ascii: lag-ca" viewBox="0 0 48 48"><g class="nc-icon-wrapper"><path fill="#E6E6E6" d="M16 6h16v36H16z"/><path fill="#FE0000" d="M48 40a2 2 0 01-2 2H32V6h14a2 2 0 012 2v32zM16 42H2a2 2 0 01-2-2V8a2 2 0 012-2h14v36z"/><path fill-rule="evenodd" clip-rule="evenodd"
2024-10-01 09:51:41 UTC	16384	IN	Data Raw: 32 20 31 32 76 32 34 6c 2d 31 33 2e 30 31 2d 38 2e 36 37 33 41 35 2e 39 36 33 20 35 2e 39 36 33 20 30 20 30 30 33 30 20 32 34 7a 22 2f 3e 3c 63 69 72 63 6c 65 20 66 69 6c 6c 3d 22 23 44 35 30 46 32 38 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 36 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 43 41 31 43 22 20 64 3d 22 4d 32 32 20 33 38 68 34 76 32 68 2d 34 7a 4d 31 34 20 33 38 68 34 76 32 68 2d 34 7a 4d 33 30 20 33 38 68 34 76 32 68 2d 34 7a 4d 32 32 20 38 68 34 76 32 68 2d 34 7a 4d 31 34 20 38 68 34 76 32 68 2d 34 7a 4d 33 30 20 38 68 34 76 32 68 2d 34 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 37 43 45 30 32 22 20 64 3d 22 4d 32 38 2e 32 34 38 20 32 32 2e 34 36 36 68 2d 32 2e 39 39 32 4c 32 34 20 31 39 2e 37 34 33 Data Ascii: 2 12v24l-13.01-8.673A5.963 5.963 0 0030 24z"/><circle fill="#D50F28" cx="24" cy="24" r="6"/><path fill="#FFCA1C" d="M22 38h4v2h-4zM14 38h4v2h-4zM30 38h4v2h-4zM22 8h4v2h-4zM14 8h4v2h-4zM30 8h4v2h-4z"/><path fill="#E7CE02" d="M28.248 22.466h-2.992L24 19.743

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49868	142.250.184.238	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:41 UTC	610	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:41 UTC	2191	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Tue, 01 Oct 2024 09:51:41 GMT Date: Tue, 01 Oct 2024 09:51:41 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Content-Security-Policy: require-trusted-types-for 'script' Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=yNU2zOkI_pM; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=92mSRZvxhtc; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 09:51:41 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgVg%3D%3D; Domain=.youtube.com; Expires=Sun, 30-Mar-2025 09:51:41 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 09:51:41 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 64 39 34 31 38 34 39 34 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/d9418494\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2024-10-01 09:51:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49870	18.245.46.125	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:42 UTC	2135	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/close-icon-1-5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; tr_ewp_tracking_params={}; AMCVS_A7D63BC75245AE300A490D4D%40AdobeOrg=1; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CMCMID%7C52509709738132105324459253370357628360%7CMCAAMLH-1728381096%7C6%7CMCAAMB-1728381096%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1727783497s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778158\|PC#e6cec483bd984004a698fc8e4aebdb06.37_0#1791021098; gpv_pn=legal%3Aproducts%3Ahighq; gpv_pu=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq; s_ips=907; s_tp=4681; s_ppv=legal%253Aproducts%253Ahighq%2C19%2C19%2C907%2C1%2C5; s_cc=true; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+01+2024+05%3A51%3A39+GMT-0400+(Eastern+Daylight+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=67167bfd-3edb-43d3-b383-770516ff7cf1&interactionCount=0&landingPath=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1 [TRUNCATED]
2024-10-01 09:51:42 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 469 Connection: close Date: Tue, 01 Oct 2024 09:07:01 GMT Set-Cookie: AWSALB=lHVdc3awFJqZPjqhgE2Vi8QF8RLBXmXXFJxHnleLwLiCAj4rYMbnmCJUIUhlQyo4+X1z5oPuXUTpiKdgeApa5aBPIECReQRuTlH5Rg11l805Wch+n6vzuPHuy8Sm; Expires=Tue, 08 Oct 2024 09:07:01 GMT; Path=/ Set-Cookie: AWSALBCORS=lHVdc3awFJqZPjqhgE2Vi8QF8RLBXmXXFJxHnleLwLiCAj4rYMbnmCJUIUhlQyo4+X1z5oPuXUTpiKdgeApa5aBPIECReQRuTlH5Rg11l805Wch+n6vzuPHuy8Sm; Expires=Tue, 08 Oct 2024 09:07:01 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 14 Aug 2023 04:42:46 GMT ETag: "1d5-602dab1993d80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:01 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e999795aa400a9b7027a66ec4ada5728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: V6yDu3tqXaXhpzmuNr1O_8_GoUADpcJ3VdZO0JOTehWPMPmmU73e9g== Age: 2681
2024-10-01 09:51:42 UTC	469	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 37 20 30 2e 33 43 31 33 2e 33 20 2d 30 2e 31 20 31 32 2e 37 20 2d 30 2e 31 20 31 32 2e 33 20 30 2e 33 4c 37 20 35 2e 36 4c 31 2e 37 20 30 2e 33 43 31 2e 33 20 2d 30 2e 31 20 30 2e 37 20 2d 30 2e 31 20 30 2e 33 20 30 2e 33 43 2d 30 2e 31 20 30 2e 37 20 2d 30 2e 31 20 31 2e 33 20 30 2e 33 20 31 2e 37 4c 35 2e 36 20 37 4c 30 2e 33 20 31 32 2e 33 43 2d 30 2e 31 20 31 32 2e 37 20 2d 30 2e 31 20 31 33 2e 33 20 30 2e 33 20 31 33 Data Ascii: <svg width="18" height="18" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M13.7 0.3C13.3 -0.1 12.7 -0.1 12.3 0.3L7 5.6L1.7 0.3C1.3 -0.1 0.7 -0.1 0.3 0.3C-0.1 0.7 -0.1 1.3 0.3 1.7L5.6 7L0.3 12.3C-0.1 12.7 -0.1 13.3 0.3 13

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49872	18.66.102.106	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:42 UTC	548	OUT	GET /c/hotjar-466896.js?sv=5 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:42 UTC	639	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Date: Tue, 01 Oct 2024 09:51:42 GMT Cache-Control: max-age=60 ETag: W/b9d6b72d13d44f89a96de90208a2739b Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 367a4718be97a49df7ac0500a986437a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: lfGuqLXCKnjueJNdv5jGP9RB-wDowXdQHAnDH7TmcFsiNQ8K6bnuig==
2024-10-01 09:51:42 UTC	16384	IN	Data Raw: 36 32 63 35 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 34 36 36 38 39 36 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 31 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 61 6e Data Ascii: 62c5window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":466896,"rec_value":1.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"an
2024-10-01 09:51:42 UTC	8909	IN	Data Raw: 74 6f 72 29 28 72 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 21 31 3d 3d 3d 74 29 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 61 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 72 29 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 65 34 2c 61 2e 73 65 6e 64 28 69 29 7d 63 61 74 63 68 28 65 29 7b 7d 63 2e 62 72 6f 77 73 65 72 2e 73 68 6f 75 6c 64 4c 6f 67 4d 65 74 72 69 63 73 26 26 63 6f 6e 73 6f 6c 65 2e 64 65 62 75 67 28 22 4e 65 77 20 4d 65 74 72 69 63 73 3a 20 22 2c 65 29 7d 2c 70 3d 7b 67 65 74 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 5b 65 5d 7d 2c 67 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 5b 65 5d 7d 2c 73 74 61 72 74 3a 66 75 6e 63 74 Data Ascii: tor)(r,i)}catch(e){}if(!1===t)try{var a=new XMLHttpRequest;a.open("POST",r),a.timeout=1e4,a.send(i)}catch(e){}c.browser.shouldLogMetrics&&console.debug("New Metrics: ",e)},p={getConfig:function(e){return c[e]},getState:function(e){return l[e]},start:funct
2024-10-01 09:51:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49880	3.233.158.33	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:42 UTC	935	OUT	POST /api/v2/rum?ddsource=browser&ddtags=sdk_version%3A4.50.1%2Capi%3Afetch%2Cenv%3Aprod%2Cservice%3Alegal.thomsonreuters.com&dd-api-key=pub62df06fe98be88d223c0b56e30910186&dd-evp-origin-version=4.50.1&dd-evp-origin=browser&dd-request-id=4871f537-9eca-4498-aeab-8df61f960c10&batch_time=1727776301373 HTTP/1.1 Host: rum.browser-intake-datadoghq.com Connection: keep-alive Content-Length: 16153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:42 UTC	16153	OUT	Data Raw: 7b 22 5f 64 64 22 3a 7b 22 66 6f 72 6d 61 74 5f 76 65 72 73 69 6f 6e 22 3a 32 2c 22 64 72 69 66 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 22 3a 7b 22 70 6c 61 6e 22 3a 31 7d 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 30 30 2c 22 73 65 73 73 69 6f 6e 5f 72 65 70 6c 61 79 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 32 30 7d 2c 22 64 69 73 63 61 72 64 65 64 22 3a 66 61 6c 73 65 7d 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 7b 22 69 64 22 3a 22 66 65 35 33 34 33 36 34 2d 37 30 31 63 2d 34 64 35 36 2d 62 34 62 65 2d 30 32 30 61 37 65 30 33 65 66 61 32 22 7d 2c 22 64 61 74 65 22 3a 31 37 32 37 37 37 36 32 39 37 32 34 37 2c 22 73 65 72 76 69 63 65 22 3a 22 6c 65 67 61 6c 2e 74 68 6f 6d Data Ascii: {"_dd":{"format_version":2,"drift":0,"session":{"plan":1},"configuration":{"session_sample_rate":100,"session_replay_sample_rate":20},"discarded":false},"application":{"id":"fe534364-701c-4d56-b4be-020a7e03efa2"},"date":1727776297247,"service":"legal.thom
2024-10-01 09:51:42 UTC	430	IN	HTTP/1.1 202 Accepted content-type: application/json content-length: 53 dd-request-id: 4871f537-9eca-4498-aeab-8df61f960c10 cross-origin-resource-policy: cross-origin access-control-allow-origin: * accept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload date: Tue, 01 Oct 2024 09:51:42 GMT connection: close
2024-10-01 09:51:42 UTC	53	IN	Data Raw: 7b 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 34 38 37 31 66 35 33 37 2d 39 65 63 61 2d 34 34 39 38 2d 61 65 61 62 2d 38 64 66 36 31 66 39 36 30 63 31 30 22 7d Data Ascii: {"request_id":"4871f537-9eca-4498-aeab-8df61f960c10"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49879	13.32.121.46	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:42 UTC	419	OUT	GET /highlighter/prod/ThomsonReuters/v2/aHR0cHM6Ly9sZWdhbC50aG9tc29ucmV1dGVycy5jb20 HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:42 UTC	1050	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 48232 Connection: close Date: Tue, 01 Oct 2024 09:44:17 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 09 Sep 2024 18:35:25 GMT ETag: "49f6aac73a3a7ef3e2c0972877ad456b" x-amz-server-side-encryption: AES256 x-amz-meta-url: https://legal.thomsonreuters.com Cache-Control: max-age=699840 x-amz-meta-source: SchemaApp x-amz-meta-templateid: x-amz-meta-companyid: http://schemaapp.com/resources/Company/ThomsonReuters x-amz-version-id: 5gK7Bwv1AaOD7IrQQdfOQwWoQatgXpHm Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5fa65194b963365c20fbd28444032cfc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: d_qhch-17tVMq_6ij1RhNBA7-AmPSYMtGsLSD6X5trOYXPOteheu7A== Age: 446 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-01 09:51:42 UTC	16384	IN	Data Raw: 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 64 62 5c 2f 54 68 6f 6d 73 6f 6e 52 65 75 74 65 72 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 54 68 6f 6d 73 6f 6e 52 65 75 74 65 72 73 5c 2f 54 65 6d 70 6c 61 74 65 32 30 32 34 30 38 31 39 31 36 31 38 32 30 22 2c 22 70 75 62 6c 69 73 68 44 61 74 65 22 3a 22 32 30 32 34 2d 30 39 2d 30 34 54 31 39 3a 31 35 3a 31 39 2e 30 30 30 5a 22 2c 22 6c 61 62 65 6c 22 3a Data Ascii: {"accountId":"http:\/\/schemaapp.com\/db\/ThomsonReuters","url":"https:\/\/legal.thomsonreuters.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ThomsonReuters\/Template20240819161820","publishDate":"2024-09-04T19:15:19.000Z","label":
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 70 72 6f 64 75 63 74 73 5c 2f 6c 69 76 65 6e 6f 74 65 2d 73 74 72 65 61 6d 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 70 72 6f 64 75 63 74 73 5c 2f 63 2d 74 72 61 63 6b 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 70 72 6f 64 75 63 74 73 5c 2f 64 65 61 64 6c 69 6e 65 2d 61 73 73 69 73 74 61 6e 74 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 70 72 6f 64 75 63 74 73 5c 2f 66 6f 72 6d 2d 62 75 69 6c 64 65 72 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f Data Ascii: rs.com\/en\/products\/livenote-stream","https:\/\/legal.thomsonreuters.com\/en\/products\/c-track","https:\/\/legal.thomsonreuters.com\/en\/products\/deadline-assistant","https:\/\/legal.thomsonreuters.com\/en\/products\/form-builder","https:\/\/legal.tho
2024-10-01 09:51:43 UTC	15202	IN	Data Raw: 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 6c 65 67 61 6c 5c 2f 64 61 74 61 2d 64 6f 63 75 6d 65 6e 74 2d 6d 61 6e 61 67 65 6d 65 6e 74 5c 2f 64 6f 63 75 6d 65 6e 74 2d 73 74 6f 72 61 67 65 2d 72 65 74 72 69 65 76 61 6c 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 6c 65 67 61 6c 5c 2f 6c 65 67 61 6c 2d 66 6f 72 6d 73 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 6c 65 67 61 6c 5c 2f 6c 65 67 61 6c 2d 66 6f 72 6d 73 5c 2f 6c 65 67 61 6c 2d 66 6f 72 6d 2d 62 75 69 6c 64 69 6e 67 2d 73 6f 66 74 77 61 72 65 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e Data Ascii: nreuters.com\/en\/legal\/data-document-management\/document-storage-retrieval","https:\/\/legal.thomsonreuters.com\/en\/legal\/legal-forms","https:\/\/legal.thomsonreuters.com\/en\/legal\/legal-forms\/legal-form-building-software","https:\/\/legal.thomson
2024-10-01 09:51:43 UTC	262	IN	Data Raw: 74 69 6f 6e 5c 2f 65 6e 74 69 74 69 65 73 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 6d 61 69 6e 45 6e 74 69 74 79 4f 66 50 61 67 65 22 2c 22 57 65 62 50 61 67 65 22 2c 22 61 62 6f 75 74 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 4c 6f 6f 6b 75 70 4f 6d 6e 69 4c 69 6e 6b 65 64 45 6e 74 69 74 79 22 7d 5d 2c 22 70 61 74 74 65 72 6e 73 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 50 61 67 65 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 6d 65 6d 62 65 72 73 22 3a 5b 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 5c 2f 65 6e 5c 2f 6c 65 67 61 6c 5c 2f 6c 65 67 61 6c 2d 72 65 73 65 61 72 63 68 2d 67 75 69 64 61 6e 63 65 5c 2f 6c 65 67 61 6c 2d 72 65 73 65 61 72 63 68 2d 74 65 63 68 6e 6f 6c 6f 67 79 Data Ascii: tion\/entities","propertyPath":["mainEntityOfPage","WebPage","about"],"@type":"TagLookupOmniLinkedEntity"}],"patterns":[{"@type":"PageCollection","members":["https:\/\/legal.thomsonreuters.com\/en\/legal\/legal-research-guidance\/legal-research-technology

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49878	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:42 UTC	1806	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-dcl_components.min.js HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; tr_ewp_tracking_params={}; AMCVS_A7D63BC75245AE300A490D4D%40AdobeOrg=1; AMCV_A7D63BC75245AE300A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C19998%7CMCMID%7C52509709738132105324459253370357628360%7CMCAAMLH-1728381096%7C6%7CMCAAMB-1728381096%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1727783497s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.5.0; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778158\|PC#e6cec483bd984004a698fc8e4aebdb06.37_0#1791021098; gpv_pn=legal%3Aproducts%3Ahighq; gpv_pu=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq; s_ips=907; s_tp=4681; s_ppv=legal%253Aproducts%253Ahighq%2C19%2C19%2C907%2C1%2C5; s_cc=true; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+01+2024+05%3A51%3A39+GMT-0400+(Eastern+Daylight+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=67167bfd-3edb-43d3-b383-770516ff7cf1&interactionCount=0&landingPath=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1 [TRUNCATED]
2024-10-01 09:51:42 UTC	1311	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 591445 Connection: close Date: Tue, 01 Oct 2024 09:44:43 GMT Set-Cookie: AWSALB=X0b2Lo2mNIYhHFk9Cgstw40iZikQOBnrQDKztaq0E9UXo/C9LMhSIigvbvYoev5IrvM5idy+pnzug6sZDneTf4+tGwhGDzkrmlBRIpGn/4i25EFdnjDXPsPr2iYW; Expires=Tue, 08 Oct 2024 09:44:43 GMT; Path=/ Set-Cookie: AWSALBCORS=X0b2Lo2mNIYhHFk9Cgstw40iZikQOBnrQDKztaq0E9UXo/C9LMhSIigvbvYoev5IrvM5idy+pnzug6sZDneTf4+tGwhGDzkrmlBRIpGn/4i25EFdnjDXPsPr2iYW; Expires=Tue, 08 Oct 2024 09:44:43 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com X-Content-Type-Options: nosniff Last-Modified: Mon, 23 Sep 2024 04:54:28 GMT Accept-Ranges: bytes Cache-Control: max-age=900 Expires: Tue, 01 Oct 2024 09:59:43 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher1useast1-28593890 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com ETag: "90655-622c22f032900" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 77e414816706879c16a3707f261f0b5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: NR2kSHqvVBvl8KgwybTOD3qfdGQTWzZCD_udGRUEbpd0xiH5i56fqw== Age: 419
2024-10-01 09:51:42 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 65 6e 73 65 4c 69 73 74 3a 4a 2c 6c 61 7a 79 3a 58 2c 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 3a 62 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 39 30 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 29 3b 76 61 72 20 72 3d 6e 28 33 35 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 28 74 3d 4f 62 6a 65 63 74 28 72 2e 61 29 28 74 29 29 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c Data Ascii: enseList:J,lazy:X,__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED:be}},function(e,t,n){e.exports=n(90)()},function(e,t,n){"use strict";n.d(t,"a",(function(){return o}));var r=n(35);function o(e,t,n){return(t=Object(r.a)(t))in e?Object.defineProperty(e,
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 65 74 52 65 68 79 64 72 61 74 61 62 6c 65 4e 61 6d 65 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 65 74 43 6c 61 73 73 4e 61 6d 65 46 61 63 74 6f 72 79 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 Data Ascii: 0,get:function(){return u.default}}),Object.defineProperty(t,"getRehydratableName",{enumerable:!0,get:function(){return c.default}}),Object.defineProperty(t,"getClassNameFactory",{enumerable:!0,get:function(){return l.default}}),Object.defineProperty(t,"g
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 65 4c 6f 63 61 74 69 6f 6e 2c 22 3f 61 63 74 69 6f 6e 3d 6c 6f 67 69 6e 22 29 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6c 6f 63 61 74 69 6f 6e 2c 22 2f 74 6f 6b 65 6e 3f 69 73 73 3d 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6c 69 65 6e 74 49 64 2c 22 26 73 65 72 76 69 63 65 73 3d 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 63 6c 69 65 6e 74 49 64 2c 22 26 70 72 6f 76 69 64 65 72 3d 6f 6e 65 70 61 73 73 26 63 61 6c 6c 62 61 63 6b 5f 75 72 6c 3d 22 29 2e 63 6f 6e 63 61 74 28 65 29 7d 2c 73 65 74 20 6c 6f 67 69 6e 55 72 6c 28 65 29 7b 74 68 69 73 2e 6c 6f 67 69 6e 55 72 6c 49 6e 74 65 72 6e 61 6c 3d 65 7d 7d 2c 74 68 69 73 2e 6f 6e 65 70 61 73 73 3d 7b 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 70 72 6f 64 75 63 74 49 64 3a Data Ascii: eLocation,"?action=login"));return"".concat(this.location,"/token?iss=").concat(this.clientId,"&services=").concat(this.clientId,"&provider=onepass&callback_url=").concat(e)},set loginUrl(e){this.loginUrlInternal=e}},this.onepass={location:null,productId:
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 3e 3d 79 3f 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 79 29 2b 22 73 22 3a 65 2b 22 6d 73 22 7d 28 65 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 76 61 6c 20 69 73 20 6e 6f 74 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 73 74 72 69 6e 67 20 6f 72 20 61 20 76 61 6c 69 64 20 6e 75 6d 62 65 72 2e 20 76 61 6c 3d 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 74 3e 3d 31 2e 35 2a 6e 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 6e 29 2b 22 20 22 2b 72 2b 28 6f 3f 22 73 22 3a 22 22 29 7d 76 61 72 20 45 2c 43 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 2e 66 6f 72 6d 61 74 41 72 67 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 Data Ascii: >=y?Math.round(e/y)+"s":e+"ms"}(e);throw new Error("val is not a non-empty string or a valid number. val="+JSON.stringify(e))};function O(e,t,n,r){var o=t>=1.5*n;return Math.round(e/n)+" "+r+(o?"s":"")}var E,C=m((function(e,t){t.formatArgs=function(t){if(
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 75 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 3f 6e 65 77 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 28 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 61 73 20 61 62 6f 72 74 65 64 2e 22 2c 22 41 62 6f 72 74 45 72 72 6f 72 22 29 3a 6e 65 77 20 6e 65 29 2c 74 28 29 7d 3b 69 2e 61 62 6f 72 74 65 64 26 26 28 5a 28 22 73 69 67 6e 61 6c 20 69 73 20 61 6c 72 65 61 64 79 20 61 62 6f 72 74 65 64 20 2d 20 61 62 6f 72 74 69 6e 67 20 74 68 65 20 66 65 74 63 68 22 29 2c 73 28 29 29 2c 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 73 29 7d 6e 2e 67 65 6e 65 72 61 74 65 52 65 73 70 6f 6e 73 65 28 7b 72 6f 75 74 65 3a 63 2c 75 72 6c 3a 72 2c 6f 70 74 69 6f 6e 73 3a 6f 2c 72 65 71 75 Data Ascii: u("undefined"!=typeof DOMException?new DOMException("The operation was aborted.","AbortError"):new ne),t()};i.aborted&&(Z("signal is already aborted - aborting the fetch"),s()),i.addEventListener("abort",s)}n.generateResponse({route:c,url:r,options:o,requ
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 76 65 28 6e 65 77 20 47 28 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 31 29 29 29 7c 7c 7a 26 26 76 65 28 6e 65 77 20 7a 29 21 3d 72 7c 7c 57 26 26 22 5b 6f 62 6a 65 63 74 20 50 72 6f 6d 69 73 65 5d 22 21 3d 76 65 28 57 2e 72 65 73 6f 6c 76 65 28 29 29 7c 7c 56 26 26 76 65 28 6e 65 77 20 56 29 21 3d 61 7c 7c 71 26 26 22 5b 6f 62 6a 65 63 74 20 57 65 61 6b 4d 61 70 5d 22 21 3d 76 65 28 6e 65 77 20 71 29 29 26 26 28 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 75 65 28 65 29 2c 6e 3d 74 3d 3d 6f 3f 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3a 76 6f 69 64 20 30 2c 69 3d 6e 3f 79 65 28 6e 29 3a 22 22 3b 69 66 28 69 29 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 59 3a 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 44 61 74 61 56 69 65 77 5d Data Ascii: ve(new G(new ArrayBuffer(1)))\|\|z&&ve(new z)!=r\|\|W&&"[object Promise]"!=ve(W.resolve())\|\|V&&ve(new V)!=a\|\|q&&"[object WeakMap]"!=ve(new q))&&(ve=function(e){var t=ue(e),n=t==o?e.constructor:void 0,i=n?ye(n):"";if(i)switch(i){case Y:return"[object DataView]
2024-10-01 09:51:43 UTC	10034	IN	Data Raw: 74 65 64 20 52 65 71 75 65 73 74 22 2c 34 32 32 3a 22 55 6e 70 72 6f 63 65 73 73 61 62 6c 65 20 45 6e 74 69 74 79 22 2c 34 32 33 3a 22 4c 6f 63 6b 65 64 22 2c 34 32 34 3a 22 46 61 69 6c 65 64 20 44 65 70 65 6e 64 65 6e 63 79 22 2c 34 32 35 3a 22 55 6e 6f 72 64 65 72 65 64 20 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 34 32 36 3a 22 55 70 67 72 61 64 65 20 52 65 71 75 69 72 65 64 22 2c 34 32 38 3a 22 50 72 65 63 6f 6e 64 69 74 69 6f 6e 20 52 65 71 75 69 72 65 64 22 2c 34 32 39 3a 22 54 6f 6f 20 4d 61 6e 79 20 52 65 71 75 65 73 74 73 22 2c 34 33 31 3a 22 52 65 71 75 65 73 74 20 48 65 61 64 65 72 20 46 69 65 6c 64 73 20 54 6f 6f 20 4c 61 72 67 65 22 2c 34 35 31 3a 22 55 6e 61 76 61 69 6c 61 62 6c 65 20 46 6f 72 20 4c 65 67 61 6c 20 52 65 61 73 6f 6e 73 22 2c 35 30 Data Ascii: ted Request",422:"Unprocessable Entity",423:"Locked",424:"Failed Dependency",425:"Unordered Collection",426:"Upgrade Required",428:"Precondition Required",429:"Too Many Requests",431:"Request Header Fields Too Large",451:"Unavailable For Legal Reasons",50
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 28 6e 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 6e 2e 63 6f 6d 70 6c 65 74 69 6f 6e 2c 6e 2e 61 66 74 65 72 4c 6f 63 29 2c 53 28 6e 29 2c 6d 7d 7d 2c 63 61 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 2d 2d 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 74 5d 3b 69 66 28 6e 2e 74 72 79 4c 6f 63 3d 3d 3d 65 29 7b 76 61 72 20 72 3d 6e 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 72 2e 74 79 70 65 29 7b 76 61 72 20 6f 3d 72 2e 61 72 67 3b 53 28 6e 29 7d 72 65 74 75 72 6e 20 6f 7d 7d 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: (n.finallyLoc===e)return this.complete(n.completion,n.afterLoc),S(n),m}},catch:function(e){for(var t=this.tryEntries.length-1;t>=0;--t){var n=this.tryEntries[t];if(n.tryLoc===e){var r=n.completion;if("throw"===r.type){var o=r.arg;S(n)}return o}}throw new
2024-10-01 09:51:43 UTC	16384	IN	Data Raw: 2e 63 61 6c 6c 28 73 2c 22 5f 5f 61 77 61 69 74 22 29 3f 74 2e 72 65 73 6f 6c 76 65 28 73 2e 5f 5f 61 77 61 69 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 6e 65 78 74 22 2c 65 2c 69 2c 75 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 74 68 72 6f 77 22 2c 65 2c 69 2c 75 29 7d 29 29 3a 74 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 76 61 6c 75 65 3d 65 2c 69 28 6c 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 22 74 68 72 6f 77 22 2c 65 2c 69 2c 75 29 7d 29 29 7d 75 28 63 2e 61 72 67 29 7d 76 61 72 20 72 3b 61 28 74 68 69 73 2c 22 5f 69 6e 76 6f 6b 65 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 66 75 6e 63 74 Data Ascii: .call(s,"__await")?t.resolve(s.__await).then((function(e){n("next",e,i,u)}),(function(e){n("throw",e,i,u)})):t.resolve(s).then((function(e){l.value=e,i(l)}),(function(e){return n("throw",e,i,u)}))}u(c.arg)}var r;a(this,"_invoke",{value:function(e,o){funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49882	18.202.150.204	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:42 UTC	673	OUT	GET /ibs:dpid=411&dpuuid=ZvvGLQAAAG9rCQNx HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=52383547755092570744435798233617763102
2024-10-01 09:51:43 UTC	891	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:42 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ziLKt5isQ8w= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0b4c0805d.edge-irl1.demdex.com 2 ms set-cookie: dpm=52383547755092570744435798233617763102; Max-Age=15552000; Expires=Sun, 30 Mar 2025 09:51:42 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=52383547755092570744435798233617763102; Max-Age=15552000; Expires=Sun, 30 Mar 2025 09:51:42 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-01 09:51:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49889	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:43 UTC	753	OUT	GET /logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_tr_h_lg_rgb_ps.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:43 UTC	869	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:43 GMT Content-Type: mage/png Content-Length: 2598 Connection: close Content-MD5: /nUA4vfxrprTgaspScI7+g== Last-Modified: Wed, 21 Apr 2021 14:26:26 GMT ETag: 0x8D904D172ABCB0D x-ms-request-id: b5b8231a-201e-0017-7e08-7c9088000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 73233 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e499ffec427-EWR
2024-10-01 09:51:43 UTC	500	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c1 00 00 00 1b 08 03 00 00 00 f2 39 1b e7 00 00 03 00 50 4c 54 45 47 70 4c ff ff 00 ff 67 00 fa 64 00 fa 64 00 fa 65 00 fa 65 00 fa 65 00 fa 64 00 ff 68 00 ff 67 00 fa 66 00 ff 73 00 fa 67 00 ff 69 00 fa 66 00 ff 6f 00 fa 64 00 ff 7f 00 ff aa 00 ff 6a 00 fc 64 00 fa 64 00 fa 66 00 ff 67 00 fb 64 00 fa 65 00 fb 64 00 ff 71 00 fc 65 00 fc 65 00 ff 7f 00 ff 7f 00 ff 6d 00 fb 65 00 ff 6a 00 ff 6a 00 fc 65 00 ff 68 00 fb 65 00 ff 7f 00 ff 66 00 fb 66 00 fe 65 00 fc 64 00 fa 64 00 fa 64 00 fc 65 00 fb 64 00 fa 64 00 fb 64 00 ff 75 00 fa 64 00 fa 64 00 ff 66 00 fa 64 00 fa 65 00 fb 64 00 ff 66 00 fa 64 00 fb 64 00 ff 66 00 fb 64 00 ff 67 00 ff 6a 00 fc 66 00 fa 65 00 ff 6d 00 ff 66 00 fb 65 00 fa 64 00 fa Data Ascii: PNGIHDR9PLTEGpLgddeeedhgfsgifodjddfgdedqeemejjeheffedddeddduddfdedfddfdgjfemfed
2024-10-01 09:51:43 UTC	1369	IN	Data Raw: 40 40 40 40 40 40 46 46 46 4e 4e 4e 40 40 40 40 40 40 40 40 40 41 41 41 40 40 40 41 41 41 40 40 40 40 40 40 42 42 42 41 41 41 41 41 41 41 41 41 40 40 40 40 40 40 41 41 41 40 40 40 40 40 40 40 40 40 40 40 40 44 44 44 41 41 41 40 40 40 40 40 40 66 66 66 40 40 40 fa 65 00 fa 64 00 41 41 41 40 40 40 40 40 40 43 43 43 40 40 40 4a 4a 4a 66 66 66 7f 7f 7f 40 40 40 41 41 41 41 41 41 42 42 42 43 43 43 ff ff ff fa 65 00 ff 71 00 fa 65 00 fa 64 00 41 41 41 41 41 41 42 42 42 40 40 40 40 40 40 41 41 41 40 40 40 42 42 42 44 44 44 42 42 42 40 40 40 fa 64 00 ff 67 00 fa 64 00 40 40 40 40 40 40 40 40 40 40 40 40 41 41 41 40 40 40 41 41 41 41 41 41 40 40 40 50 50 50 fa 65 00 ff 67 00 fa 65 00 40 40 40 41 41 41 40 40 40 40 40 40 40 40 40 40 40 40 fa 64 00 fb 66 00 41 41 41 Data Ascii: @@@@@@FFFNNN@@@@@@@@@AAA@@@AAA@@@@@@BBBAAAAAAAAA@@@@@@AAA@@@@@@@@@@@@DDDAAA@@@@@@fff@@@edAAA@@@@@@CCC@@@JJJfff@@@AAAAAABBBCCCeqedAAAAAABBB@@@@@@AAA@@@BBBDDDBBB@@@dgd@@@@@@@@@@@@AAA@@@AAAAAA@@@PPPege@@@AAA@@@@@@@@@@@@dfAAA
2024-10-01 09:51:43 UTC	729	IN	Data Raw: 68 b0 da fa 79 79 c0 1c f0 54 cf 38 ed 25 cd f5 79 0e cc ab df 3c e7 f9 82 64 82 02 59 b1 a9 f0 82 ac 2f a9 fc 2a 67 f3 fa f3 c2 ae a2 40 96 f3 5a 17 b0 68 ab f5 c6 e0 4d 67 6d 79 ab d7 4f 8c 01 cf 1f 77 91 e6 1c f6 65 95 d1 32 d8 97 1a 83 e7 43 74 30 c4 3e d8 bd fb 9d a6 5f b3 0c 6c 76 45 68 60 33 0e 7a 6a cd ee 4d ef f5 61 03 74 7a da 51 5a 3c d0 01 c5 49 f2 f1 00 e9 ce 64 a4 0e 16 49 ce 66 8d f4 09 e2 57 b0 7e 0a c7 e0 e4 0d c3 e4 30 73 f0 e6 b3 36 6f d5 0d db 00 4e 9f bc 27 f5 0a 31 07 1b 74 82 6b fa 30 25 98 c1 8e 21 7b 34 73 39 96 c1 9b 1b 86 9d 5c d2 7b 0c 4b a5 25 21 0c 3e 5b 3f 7f b1 0c de 0f b9 af 0f 57 b0 e9 36 e6 83 be c2 a2 85 35 b3 96 c3 af 58 5c be 4b 9b 09 f8 be 21 e6 60 aa 52 00 eb 2c fa f6 7d f0 c6 d9 4e 3a 8e 6d 60 f3 58 93 42 ed 83 13 Data Ascii: hyyT8%y<dY/*g@ZhMgmyOwe2Ct0>_lvEh`3zjMatzQZ<IdIfW~0s6oN'1tk0%!{4s9\{K%!>[?W65X\K!`R,}N:m`XB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49888	63.140.62.222	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:43 UTC	1866	OUT	GET /b/ss/thacctrglobalprod,thwest,thaccwestbeta/10/JS-2.22.0-LEWM/s91383992082830?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=1%2F9%2F2024%205%3A51%3A37%202%20240&d.&nsid=0&jsonv=1&.d&sdid=5625DE92922DF2B8-78BD2E3078268887&mid=52509709738132105324459253370357628360&aamlh=6&ce=UTF-8&pageName=legal%3Aproducts%3Ahighq&g=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&cc=USD&server=legal.thomsonreuters.com&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&v6=legal&c10=us&c11=en_us&c15=D%3Dv15&v15=69f4aeb9-0041-4ebc-9002-b65fd405d70a&c16=D%3Dv56&c18=legal&c22=1541&c24=2024-06-25&v25=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&c28=D%3Dv25&c32=2020-07-13&c36=product-overview-page&c50=Legal%20AEM%7C2.22.0&c53=D%3Dv53&v53=tr_product-overview-page_template&v56=20241001095135&v67=product-overview-page&v68=business-development%2Claw-firm-marketing%2Cdata-and-document-management%7Cproject-and-knowledge-management%2Cattracting-and-re [TRUNCATED] Host: westthomsoncom.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:43 UTC	616	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 01 Oct 2024 09:51:43 GMT expires: Mon, 30 Sep 2024 09:51:43 GMT last-modified: Wed, 02 Oct 2024 09:51:43 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3710371358857068544-4618671260375271630 vary: * x-aam-tid: XwimmeGER6g= dcs: dcs-prod-irl1-1-v065-09a5ea745.edge-irl1.demdex.com 10 ms content-type: application/x-javascript;charset=utf-8 content-length: 2883 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-01 09:51:43 UTC	2883	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 64 65 73 74 73 22 3a 5b 7b 22 68 72 22 3a 31 2c 22 69 64 22 3a 22 34 33 31 37 33 32 37 2d 31 37 32 37 37 37 36 33 30 33 7c 34 33 33 38 34 31 35 2d 31 37 32 37 37 37 36 33 30 33 7c 34 35 32 32 31 38 39 2d 31 37 32 37 37 37 36 33 30 33 7c 34 35 32 32 32 30 37 2d 31 37 32 37 37 37 36 33 30 33 7c 33 33 32 36 34 30 31 2d 31 37 32 37 37 37 36 33 30 33 22 2c 22 79 22 3a 22 69 6d 67 22 2c 22 63 22 3a 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 39 39 36 38 33 34 35 38 Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"dests":[{"hr":1,"id":"4317327-1727776303\|4338415-1727776303\|4522189-1727776303\|4522207-1727776303\|3326401-1727776303","y":"img","c":"https://googleads.g.doubleclick.net/pagead/viewthroughconversion/99683458

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49891	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:43 UTC	617	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:43 UTC	874	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:43 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Thu, 26 Sep 2024 06:47:54 GMT ETag: 0x8DCDDF726108DF2 x-ms-request-id: d417574b-501e-00b5-154f-109e75000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 56900 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e4b1f7a41cd-EWR
2024-10-01 09:51:43 UTC	495	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-10-01 09:51:43 UTC	1369	IN	Data Raw: 31 38 48 2e 38 31 76 36 7a 6d 37 2e 37 34 2e 31 61 32 2e 32 39 20 32 2e 32 39 20 30 20 30 31 2d 31 2e 32 2d 2e 33 32 20 32 2e 32 39 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 Data Ascii: 18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6
2024-10-01 09:51:43 UTC	1369	IN	Data Raw: 30 31 2d 2e 32 38 2d 31 2e 33 36 41 33 2e 32 34 20 33 2e 32 34 20 30 20 30 31 32 37 20 38 2e 34 36 61 32 2e 31 38 20 32 2e 31 38 20 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 Data Ascii: 01-.28-1.36A3.24 3.24 0 0127 8.46a2.18 2.18 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0
2024-10-01 09:51:43 UTC	1369	IN	Data Raw: 20 30 20 30 30 2e 31 37 20 31 20 31 2e 35 20 31 2e 35 20 30 20 30 30 2e 34 39 2e 36 38 20 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c Data Ascii: 0 00.17 1 1.5 1.5 0 00.49.68 1.39 1.39 0 001.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l
2024-10-01 09:51:43 UTC	592	IN	Data Raw: 38 2e 34 37 61 32 2e 37 36 20 32 2e 37 36 20 30 20 30 31 32 2e 37 37 20 32 2e 39 33 68 2d 35 2e 36 43 38 31 20 35 2e 34 36 20 38 32 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 Data Ascii: 8.47a2.76 2.76 0 012.77 2.93h-5.6C81 5.46 82 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49892	52.202.121.139	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:44 UTC	552	OUT	OPTIONS /pagecount HTTP/1.1 Host: api.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-account-id,x-api-key Origin: https://legal.thomsonreuters.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:44 UTC	464	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:44 GMT Content-Type: application/json Content-Length: 0 Connection: close x-amzn-RequestId: d0514346-9a08-4346-a107-9343c0e8f010 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,x-account-id x-amz-apigw-id: e9vnnG0JIAMEBQw= Access-Control-Allow-Methods: OPTIONS,POST X-Amzn-Trace-Id: Root=1-66fbc630-351f02527e37be3f389d433a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49895	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:44 UTC	430	OUT	GET /consent/88f9c6ac-fbaa-4d32-a2e8-ad5925270c35/d44bc8d7-bab6-412b-8d1b-627d267abba5/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8cbb8e51aff443a4-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 60777 Cache-Control: public, max-age=86400 Expires: Wed, 02 Oct 2024 09:51:44 GMT Last-Modified: Tue, 05 Sep 2023 21:16:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: C8SEwbGEqC7qiBGsz9wOGQ== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 044ffc8f-401e-0063-3f59-79a478000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-10-01 09:51:45 UTC	387	IN	Data Raw: 32 30 34 31 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 2041{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 54 68 69 73 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6d 69 67 68 74 20 62 65 20 61 62 6f 75 74 20 79 6f 75 2c 20 79 6f 75 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e Data Ascii: of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 72 74 4d 6f 72 65 49 6e 66 6f 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 20 53 65 74 74 69 6e 67 73 22 2c 22 43 6f 6f 6b 69 65 53 65 74 74 69 6e 67 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 20 53 65 74 74 69 6e 67 73 22 2c 22 41 6c 65 72 74 41 6c 6c 6f 77 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 41 63 63 65 70 74 20 41 6c 6c 20 43 6f 6f 6b 69 65 73 22 2c 22 43 6c 6f 73 65 53 68 6f 75 6c 64 41 63 63 65 70 74 41 6c 6c 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 31 36 31 39 31 39 35 30 32 32 33 38 33 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 4f 75 72 20 50 72 69 76 61 63 79 20 53 74 61 74 65 6d 65 6e 74 20 26 20 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 46 6f 72 63 65 Data Ascii: rtMoreInfoText":"Cookies Settings","CookieSettingButtonText":"Cookies Settings","AlertAllowCookiesText":"Accept All Cookies","CloseShouldAcceptAllCookies":false,"LastReconsentDate":1619195022383,"BannerTitle":"Our Privacy Statement & Cookie Policy","Force
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 65 73 20 61 6e 64 20 6f 74 68 65 72 20 74 72 61 63 6b 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 75 72 70 6f 73 65 73 3a 22 2c 22 47 72 6f 75 70 73 22 3a 5b 7b 22 53 68 6f 77 49 6e 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 49 6e 50 6f 70 75 70 4e 6f 6e 49 41 42 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 31 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 31 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 Data Ascii: es and other tracking technologies for the following purposes:","Groups":[{"ShowInPopup":true,"ShowInPopupNonIAB":true,"ShowSDKListLink":true,"Order":"1","OptanonGroupId":"1","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupTogg
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 49 61 62 50 75 72 70 6f 73 65 22 3a 66 61 6c 73 65 2c 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 65 41 57 53 41 4c 42 22 2c 22 69 64 22 3a 22 66 63 63 61 36 37 31 30 2d 34 35 65 61 2d 34 66 66 61 2d 39 61 64 34 2d 38 33 66 61 63 32 35 35 30 36 65 31 22 2c 22 4e 61 6d 65 22 3a 22 41 57 53 41 4c 42 22 2c 22 48 6f 73 74 22 3a 22 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 Data Ascii: IabPurpose":false,"GeneralVendorsIds":[],"FirstPartyCookies":[{"thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"CookieAWSALB","id":"fcca6710-45ea-4ffa-9ad4-83fac25506e1","Name":"AWSALB","Host":"legal.thomsonreuters.com","
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 65 20 73 69 74 65 20 77 69 6c 6c 20 68 61 76 65 20 74 68 65 69 72 20 70 72 65 66 65 72 65 6e 63 65 73 20 72 65 6d 65 6d 62 65 72 65 64 2e 20 49 74 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 68 61 74 20 63 61 6e 20 69 64 65 6e 74 69 66 79 20 74 68 65 20 73 69 74 65 20 76 69 73 69 74 6f 72 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 43 6f 6f 6b 69 Data Ascii: e site will have their preferences remembered. It contains no information that can identify the site visitor.","DurationType":1,"category":null,"isThirdParty":false},{"thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":"Cooki
2024-10-01 09:51:45 UTC	1033	IN	Data Raw: 22 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 42 49 47 69 70 53 65 72 76 65 72 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 42 49 47 69 70 53 65 72 76 65 72 22 2c 22 69 64 22 3a 22 37 30 37 64 30 33 30 32 2d 61 35 61 36 2d 34 34 39 36 2d 62 38 32 32 2d 32 34 66 38 33 37 64 36 62 36 65 66 22 2c 22 4e 61 6d 65 22 3a 22 42 49 47 69 70 53 65 72 76 65 72 48 59 42 52 49 53 45 53 54 4f 52 45 2d 41 4e 59 22 2c 22 48 6f 73 74 22 3a 22 73 74 6f 72 65 2e 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 Data Ascii: ","thirdPartyKey":"Pattern\|BIGipServer","firstPartyKey":"Pattern\|BIGipServer","id":"707d0302-a5a6-4496-b822-24f837d6b6ef","Name":"BIGipServerHYBRISESTORE-ANY","Host":"store.legal.thomsonreuters.com","IsSession":true,"Length":"0","description":"This cookie
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 61 66 74 65 72 20 76 69 73 69 74 6f 72 73 20 68 61 76 65 20 73 65 65 6e 20 61 20 63 6f 6f 6b 69 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6e 6f 74 69 63 65 20 61 6e 64 20 69 6e 20 73 6f 6d 65 20 63 61 73 65 73 20 6f 6e 6c 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f Data Ascii: 7ff9after visitors have seen a cookie information notice and in some cases only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no perso
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 22 3a 22 22 2c 22 69 64 22 3a 22 61 66 30 66 37 66 35 31 2d 35 38 33 34 2d 34 31 33 37 2d 62 35 62 34 2d 34 36 61 39 61 63 64 32 32 35 37 36 22 2c 22 4e 61 6d 65 22 3a 22 6c 65 67 61 6c 2d 63 61 72 74 22 2c 22 48 6f 73 74 22 3a 22 73 74 6f 72 65 2e 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a Data Ascii: ":"","id":"af0f7f51-5834-4137-b5b4-46a9acd22576","Name":"legal-cart","Host":"store.legal.thomsonreuters.com","IsSession":false,"Length":"0","description":"","DurationType":1,"category":null,"isThirdParty":false},{"thirdPartyDescription":null,"patternKey":
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 33 37 31 22 2c 22 4e 61 6d 65 22 3a 22 53 6e 61 70 41 42 75 67 55 73 65 72 41 6c 69 61 73 22 2c 22 48 6f 73 74 22 3a 22 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 2c 22 48 6f 73 74 73 22 3a 5b 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 73 74 61 74 69 63 2e 6c 65 67 61 6c 73 6f 6c 75 74 69 6f 6e 73 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 73 74 61 74 69 63 Data Ascii: 371","Name":"SnapABugUserAlias","Host":"legal.thomsonreuters.com","IsSession":false,"Length":"0","description":"","DurationType":1,"category":null,"isThirdParty":false}],"Hosts":[{"HostName":"static.legalsolutions.thomsonreuters.com","DisplayName":"static

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49893	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:44 UTC	386	OUT	GET /scripttemplates/202308.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	852	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: C2c3Qd8FHm1wstxOFHDJ2w== Last-Modified: Wed, 25 Oct 2023 03:55:37 GMT x-ms-request-id: d970934f-901e-0094-7f72-798eea000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 4600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e51a86bde97-EWR
2024-10-01 09:51:45 UTC	517	IN	Data Raw: 33 33 38 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 3382 { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 62 6d 56 30 63 6e 56 7a 64 43 31 77 62 32 78 70 59 33 6b 74 64 47 56 34 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 Data Ascii: C9oMj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3ktdGV4dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQi
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 6b 67 59 6d 46 75 62 6d 56 79 4c 57 4e 73 62 33 4e 6c 4c 57 4a 31 64 48 52 76 62 69 42 76 64 43 31 6a 62 47 39 7a 5a 53 31 70 59 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 Data Ascii: kgYmFubmVyLWNsb3NlLWJ1dHRvbiBvdC1jbG9zZS1pY29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:214
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 Data Ascii: ht:bold;margin-left:5px}#onetrust-banner-sdk #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-butt
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 65 6d 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 Data Ascii: h:calc(100% - 1em)}#onetrust-banner-sdk .banner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 Data Ascii: ht:inherit;color:dimgray}#onetrust-banner-sdk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 73 69 7a 65 3a 2e 38 31 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c Data Ascii: size:.813em;line-height:1.5}#onetrust-banner-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-cl
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d Data Ascii: on:relative;margin-left:0}#onetrust-banner-sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 68 74 3a 33 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 65 6d 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 37 65 6d 29 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 38 39 37 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 33 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 Data Ascii: ht:30%}#onetrust-banner-sdk #banner-options{margin-left:2em;margin-right:5em;margin-bottom:1.25em;width:calc(100% - 7em)}}@media only screen and (min-width: 897px)and (max-width: 1023px){#onetrust-banner-sdk.vertical-align-content #onetrust-button-group-p
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 34 35 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f Data Ascii: tom:0;padding-bottom:1em}#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bottom:0;padding-bottom:1em}#onetrust-banner-sdk.ot-iab-2 .ot-dpd-container{width:45%;padding-left:1rem;display:inline-block;float:none}#onetrust-banner-sdk.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49896	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:44 UTC	393	OUT	GET /scripttemplates/202308.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	870	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:44 GMT Content-Type: text/css Content-Length: 21778 Connection: close Content-MD5: c7xAZ9MSGAobGaTYg/Qtag== Last-Modified: Wed, 25 Oct 2023 03:55:54 GMT ETag: 0x8DBD50E49DDD45B x-ms-request-id: f042c46f-001e-004d-6e9e-0bf66f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 64594 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e51aa63438b-EWR
2024-10-01 09:51:45 UTC	499	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 Data Ascii: trust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 34 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 36 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 Data Ascii: ,#ot-sync-ntfy h4 ,#ot-sync-ntfy h6 ,#ot-sync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#one
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 Data Ascii: pc-sdk .ot-pc-logo{height:60px;width:180px;background-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-heig
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 Data Ascii: ion:fixed;top:0;bottom:0;left:0}@keyframes onetrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.7
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d Data Ascii: -sdk .ot-optout-signal .ot-optout-icon{display:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 74 62 6f 64 79 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b Data Ascii: tbody,#onetrust-banner-sdk .ot-main-content,#onetrust-banner-sdk .ot-toggle,#onetrust-banner-sdk #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 65 2d 70 6f 6c 69 63 79 20 74 68 65 61 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 62 6f 64 79 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 Data Ascii: e-policy thead,#ot-sdk-cookie-policy tr,#ot-sdk-cookie-policy td,#ot-sdk-cookie-policy tbody,#ot-sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-poli
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f Data Ascii: trust-banner-sdk label:before,#onetrust-banner-sdk label:after,#onetrust-banner-sdk .checkbox:after,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbo
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c Data Ascii: k .ot-sdk-column,#onetrust-banner-sdk .ot-sdk-columns,#onetrust-pc-sdk .ot-sdk-column,#onetrust-pc-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-chil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49897	104.18.87.42	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:44 UTC	393	OUT	GET /scripttemplates/202308.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	853	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:44 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: jih879mbIcNSFioYCdj3Tg== Last-Modified: Wed, 25 Oct 2023 03:55:39 GMT x-ms-request-id: 32506c30-601e-0029-3957-7907f7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 30641 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cbb8e51bd910ced-EWR
2024-10-01 09:51:45 UTC	516	IN	Data Raw: 37 63 34 63 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c4c { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 50 53 4a 44 62 47 39 7a 5a 53 49 2b 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 62 47 39 7a 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 Data Ascii: PSJDbG9zZSI+PC9idXR0b24+PC9kaXY+PCEtLSBDbG9zZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnR
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 57 46 6a 59 79 31 6e 63 6e 42 6b 5a 58 4e 6a 49 6a 34 38 4c 33 41 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c Data Ascii: WFjYy1ncnBkZXNjIj48L3A+PC9kaXY+PC9kaXY+PCEtLSBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxl
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 56 30 64 47 39 75 50 6a 78 6f 4d 7a 35 51 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 42 44 62 32 39 72 61 57 56 7a 50 43 39 6f 4d 7a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a Data Ascii: V0dG9uPjxoMz5QZXJmb3JtYW5jZSBDb29raWVzPC9oMz48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZ
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 76 4d 54 6b 35 4f 53 39 34 62 47 6c 75 61 79 49 67 65 44 30 69 4d 48 42 34 49 69 42 35 50 53 49 77 63 48 67 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 Data Ascii: vMTk5OS94bGluayIgeD0iMHB4IiB5PSIwcHgiIHZpZXdCb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NG
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 4c 58 4e 6c 62 43 31 69 62 47 73 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 Data Ascii: LXNlbC1ibGsiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 47 52 79 49 6a 34 38 61 44 4d 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 75 59 57 31 6c 49 6a 34 38 4c 32 67 7a 50 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 48 52 76 5a 32 64 73 5a 58 4d 67 59 57 35 6b 49 47 46 79 63 6d 39 33 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 52 6e 62 43 31 6a 62 6e 52 79 49 6a 34 38 4c 32 52 70 64 6a 34 38 4c 33 4e 6c 59 33 52 70 62 32 34 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 57 4e 6a 4c 58 52 34 64 43 49 2b 50 48 56 73 49 47 4e 73 Data Ascii: GRyIj48aDMgY2xhc3M9Im90LXZlbi1uYW1lIj48L2gzPjxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48L2Rpdj48IS0tIHRvZ2dsZXMgYW5kIGFycm93IC0tPjxkaXYgY2xhc3M9Im90LXRnbC1jbnRyIj48L2Rpdj48L3NlY3Rpb24+PGRpdiBjbGFzcz0ib3QtYWNjLXR4dCI+PHVsIGNs
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 6a 59 58 52 6c 5a 32 39 79 65 53 31 6f 62 33 4e 30 4c 57 78 70 63 33 51 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 53 47 39 7a 64 43 42 4d 61 58 4e 30 50 43 39 69 64 58 52 30 62 32 34 2b 50 Data Ascii: 1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBjYXRlZ29yeS1ob3N0LWxpc3QtaGFuZGxlciI+SG9zdCBMaXN0PC9idXR0b24+P
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 55 31 4c 6a 5a 6a 4c 54 51 75 4e 79 30 30 4c 6a 63 74 4e 43 Data Ascii: 9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMTU1LjZjLTQuNy00LjctNC
2024-10-01 09:51:45 UTC	1369	IN	Data Raw: 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 5a 43 31 6a 62 6e 51 69 50 6b 64 76 62 32 64 73 5a 53 42 Data Ascii: dGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZuZC1jbnQiPkdvb2dsZSB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49899	66.235.152.156	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	450	OUT	GET /rest/v1/delivery?client=westservicesinc&sessionId=e6cec483bd984004a698fc8e4aebdb06&version=2.11.4 HTTP/1.1 Host: westservicesinc.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Tue, 01 Oct 2024 09:51:45 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-10-01 09:51:45 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-10-01 09:51:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49894	13.35.58.39	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	428	OUT	GET /ThomsonReuters/aHR0cDovL3NjaGVtYWFwcC5jb20vZGIvVGhvbXNvblJldXRlcnNfU2hhcmVkRGF0YUl0ZW0 HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	974	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1577 Connection: close Date: Tue, 01 Oct 2024 09:44:23 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 17 Oct 2023 18:33:43 GMT ETag: "2ed566dff74bb3ca46aac4d7cbf78d59" x-amz-server-side-encryption: AES256 x-amz-meta-url: http://schemaapp.com/db/ThomsonReuters_SharedDataItem Cache-Control: max-age=699840 x-amz-meta-mainaccount: ThomsonReuters x-amz-meta-source: Editor x-amz-meta-accountid: ThomsonReuters x-amz-version-id: 6MTtd7epViy0LUncnbjFh5yo009JFRE7 Accept-Ranges: bytes Server: AmazonS3 access-control-expose-headers: x-amz-meta-source, x-amz-meta-accountid, x-amz-meta-url Strict-Transport-Security: max-age=31536000; includeSubDomains; Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f1b6636265d2ca44d8a0ca5488a5ec0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: 3ah-6bxGJiUvM-j6Lx5PYhBzFxPCUFtphEKf27R0a87UvLgU3sizSQ== Age: 443
2024-10-01 09:51:45 UTC	1577	IN	Data Raw: 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 74 79 70 65 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 63 6f 6e 74 61 63 74 50 6f 69 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 43 6f 6e 74 61 63 74 50 6f 69 6e 74 22 2c 22 63 6f 6e 74 61 63 74 54 79 70 65 22 3a 22 43 61 6c 6c 20 55 73 22 2c 22 74 65 6c 65 70 68 6f 6e 65 22 3a 22 2b 31 20 36 34 36 20 35 34 30 20 33 30 30 30 22 2c 22 6e 61 6d 65 22 3a 22 43 61 6c 6c 20 55 73 20 2d 20 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 40 69 64 22 3a 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 64 62 2f 54 68 6f 6d 73 6f 6e 52 65 75 74 65 72 73 5f 53 68 61 72 65 64 44 61 74 61 49 74 65 6d 23 43 6f 6e 74 61 63 74 50 6f 69 6e 74 Data Ascii: {"@context":"http://schema.org","@type":"Organization","contactPoint":[{"@type":"ContactPoint","contactType":"Call Us","telephone":"+1 646 540 3000","name":"Call Us - United States","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49903	52.202.121.139	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	723	OUT	POST /pagecount HTTP/1.1 Host: api.schemaapp.com Connection: keep-alive Content-Length: 7065 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-account-id: ThomsonReuters content-type: application/json accept: application/json x-api-key: BiQcqdttWn7eunp8jvxM5oZl3DIx08J42LtTmaaj sec-ch-ua-platform: "Windows" Origin: https://legal.thomsonreuters.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	7065	OUT	Data Raw: 7b 22 41 63 63 6f 75 6e 74 49 64 22 3a 22 54 68 6f 6d 73 6f 6e 52 65 75 74 65 72 73 22 2c 22 53 75 62 41 63 63 6f 75 6e 74 22 3a 22 22 2c 22 53 6f 75 72 63 65 22 3a 22 48 69 67 68 6c 69 67 68 74 4a 53 3a 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 72 65 73 6f 75 72 63 65 73 2f 43 6f 6d 70 61 6e 79 2f 54 68 6f 6d 73 6f 6e 52 65 75 74 65 72 73 2f 54 65 6d 70 6c 61 74 65 32 30 32 34 30 38 31 39 31 36 31 38 32 30 22 2c 22 44 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 22 2c 22 44 61 74 65 53 65 65 6e 22 3a 22 32 30 32 34 2d 30 37 2d 31 38 22 2c 22 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 65 67 61 6c 2e 74 68 6f 6d 73 6f 6e 72 65 75 74 65 72 73 2e 63 6f 6d 2f 65 Data Ascii: {"AccountId":"ThomsonReuters","SubAccount":"","Source":"HighlightJS:http://schemaapp.com/resources/Company/ThomsonReuters/Template20240819161820","Domain":"https://legal.thomsonreuters.com","DateSeen":"2024-07-18","URL":"https://legal.thomsonreuters.com/e
2024-10-01 09:51:45 UTC	309	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:45 GMT Content-Type: application/json Content-Length: 256 Connection: close x-amzn-RequestId: 69891d65-d6b7-4c62-ac40-f6177483131c Access-Control-Allow-Origin: * x-amz-apigw-id: e9vnuEAyoAMEsPA= X-Amzn-Trace-Id: Root=1-66fbc631-69f1d9a313cd54f628b0a995
2024-10-01 09:51:45 UTC	256	IN	Data Raw: 7b 22 45 6e 63 72 79 70 74 65 64 22 3a 74 72 75 65 2c 22 52 65 63 6f 72 64 49 64 22 3a 22 57 48 6b 62 59 66 4d 5a 48 65 56 49 58 39 49 62 39 67 69 6b 39 77 47 2f 46 75 6a 75 6e 30 49 53 6f 65 4d 4c 39 5a 36 53 6b 70 6c 53 36 41 44 51 78 67 32 36 38 2b 6c 49 5a 33 44 65 30 58 45 46 66 31 42 62 38 64 72 75 42 61 6e 43 30 32 41 52 2b 35 52 43 54 43 49 6e 54 69 56 76 71 6a 47 31 6c 44 4c 46 36 49 49 37 41 5a 36 6f 2b 36 56 68 54 33 44 79 6f 69 48 49 37 55 6a 71 6b 4d 73 32 6b 4c 68 72 34 49 33 5a 47 4e 53 42 43 47 46 64 6d 48 70 6b 61 45 44 33 35 61 64 42 78 7a 6c 41 58 76 73 5a 42 55 76 52 72 33 30 71 42 56 37 30 42 32 6d 65 34 59 52 73 70 31 6a 6d 7a 57 67 50 54 32 6a 6d 47 55 57 71 4a 46 65 62 58 34 71 4b 74 48 30 31 47 53 4f 32 64 76 69 6a 75 4a 56 66 22 Data Ascii: {"Encrypted":true,"RecordId":"WHkbYfMZHeVIX9Ib9gik9wG/Fujun0ISoeML9Z6SkplS6ADQxg268+lIZ3De0XEFf1Bb8druBanC02AR+5RCTCInTiVvqjG1lDLF6II7AZ6o+6VhT3DyoiHI7UjqkMs2kLhr4I3ZGNSBCGFdmHpkaED35adBxzlAXvsZBUvRr30qBV70B2me4YRsp1jmzWgPT2jmGUWqJFebX4qKtH01GSO2dvijuJVf"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49900	63.140.62.17	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	491	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=A7D63BC75245AE300A490D4D%40AdobeOrg&mid=52509709738132105324459253370357628360&ts=1727776296115 HTTP/1.1 Host: westthomsoncom.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Tue, 01 Oct 2024 09:51:45 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-01 09:51:45 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49901	98.82.73.200	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	1001	OUT	GET /entityrecognition/entities?highlight_id=http%3A%2F%2Fschemaapp.com%2Fresources%2FTagLookupOmniLinkedEntity_66d1ef27337706.91744641&highlight_config=%7B%22%40id%22%3A%22http%3A%2F%2Fschemaapp.com%2Fresources%2FTagLookupOmniLinkedEntity_66d1ef27337706.91744641%22%2C%22xPath-input%22%3A%22%2F%2Ftitle+%7C+%2F%2Fmeta%5B%40name%3D%5C%22description%5C%22%5D%2F%40content+%22%2C%22target%22%3A%22https%3A%2F%2Fapi.schemaapp.com%2Fentityrecognition%2Fentities%22%2C%22propertyPath%22%3A%5B%22mainEntityOfPage%22%2C%22WebPage%22%2C%22mentions%22%5D%2C%22%40type%22%3A%22TagLookupOmniLinkedEntity%22%7D&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq HTTP/1.1 Host: api.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	338	IN	HTTP/1.1 403 Forbidden Date: Tue, 01 Oct 2024 09:51:45 GMT Content-Type: application/json Content-Length: 42 Connection: close x-amzn-RequestId: e74e3459-7d4e-4b58-8a6a-f45339a7dd0a x-amzn-ErrorType: MissingAuthenticationTokenException x-amz-apigw-id: e9vnuF8OoAMEKpQ= X-Amzn-Trace-Id: Root=1-66fbc631-52c9c50951f0c775335eb65b
2024-10-01 09:51:45 UTC	42	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 4d 69 73 73 69 6e 67 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 54 6f 6b 65 6e 22 7d Data Ascii: {"message":"Missing Authentication Token"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49902	3.228.39.208	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	485	OUT	GET /api?ctver=6&req=paapi4153&form=json HTTP/1.1 Host: paapi4153.d41.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D41ID=v3\|v4\|87da2e27ef0a4f40a0631985bf59db5a\|https://d41.co; D41IDT=7278856cefd3405ca02dbd3a6f10b469
2024-10-01 09:51:45 UTC	662	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:45 GMT Content-Type: application/json; charset=utf-8 Content-Length: 44 Connection: close Access-Control-Allow-Origin: * Cache-control: no-store Pragma: no-cache X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly" Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self';
2024-10-01 09:51:45 UTC	44	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 34 30 30 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 22 7d Data Ascii: {"status":"400","message":"Invalid request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49908	75.2.108.141	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	545	OUT	OPTIONS /v3/company/details HTTP/1.1 Host: eps.6sc.co Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,x-6s-customid Origin: https://legal.thomsonreuters.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:45 UTC	440	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 09:51:45 GMT Content-Length: 0 Connection: close Timing-Allow-Origin: https://6sense.com X-6si-Region: us-east-1 Access-Control-Expose-Headers: X-6si-Region Access-Control-Allow-Origin: https://legal.thomsonreuters.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 1800 Access-Control-Allow-Methods: OPTIONS,GET Access-Control-Allow-Headers: authorization,x-6s-customid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49905	142.250.186.130	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	1250	OUT	GET /td/rul/996834583?random=1727776303589&cv=11&fst=1727776303589&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&hn=www.googleadservices.com&frm=0&tiba=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:46 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 01 Oct 2024 09:51:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 01-Oct-2024 10:06:45 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 09:51:46 UTC	605	IN	Data Raw: 34 34 65 62 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 44eb<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 74 65 3f 69 67 5f 6e 61 6d 65 3d 34 73 34 38 38 37 38 32 30 34 34 2e 31 37 32 37 37 37 36 33 30 34 5c 75 30 30 32 36 69 67 5f 6b 65 79 3d 31 73 4e 48 4d 30 4f 44 67 33 4f 44 49 77 4e 44 51 75 4d 54 63 79 4e 7a 63 33 4e 6a 4d 77 4e 41 21 32 73 5a 33 4a 74 4d 51 21 33 73 41 41 70 74 44 56 35 37 59 36 64 30 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 35 54 46 31 53 51 21 32 73 5a 33 4a 74 4d 51 21 33 73 41 41 70 74 44 56 35 37 59 36 64 30 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b Data Ascii: te?ig_name=4s488782044.1727776304\u0026ig_key=1sNHM0ODg3ODIwNDQuMTcyNzc3NjMwNA!2sZ3JtMQ!3sAAptDV57Y6d0","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s5TF1SQ!2sZ3JtMQ!3sAAptDV57Y6d0"],"userBiddingSignals":[[
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 33 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 36 37 31 34 30 39 39 33 38 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 75 6d 72 72 6c 71 74 6e 38 6d 6b 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 36 37 31 34 30 39 39 33 38 36 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 30 31 39 33 30 30 33 37 36 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 31 31 30 32 33 32 31 39 30 30 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 Data Ascii: 37",null,null,null,null,null,null,"6714099386"],"adRenderId":"umrrlqtn8mk","buyerReportingId":"1j6714099386!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=140193003769\u0026cr_id=711023219001\u0026cv_id=0\u0026format=${AD_WIDTH}x
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 32 31 39 30 30 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 39 30 33 38 33 38 37 30 34 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 30 31 39 33 30 30 33 37 36 39 22 2c 22 37 31 31 30 32 33 32 31 39 30 30 31 22 2c 6e 75 6c 6c 2c 22 31 37 34 31 37 31 32 31 33 33 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 39 30 33 38 33 38 37 30 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 76 70 5f 31 63 63 46 37 39 35 59 22 2c Data Ascii: 219001\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j903838704!4s*2A","metadata":["140193003769","711023219001",null,"17417121337",null,null,null,null,null,null,"903838704"],"adRenderId":"vp_1ccF795Y",
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 64 52 65 6e 64 65 72 49 64 22 3a 22 76 72 31 34 6f 6e 49 53 6b 61 6b 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 34 38 32 31 33 37 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 33 37 39 37 30 34 38 33 32 37 32 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 31 33 31 36 33 33 35 31 30 31 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 Data Ascii: dRenderId":"vr14onISkak","buyerReportingId":"1j5482137!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=137970483272\u0026cr_id=713163351012\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u002
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 34 38 32 31 33 37 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 33 37 39 37 30 34 38 33 32 37 32 22 2c 22 37 31 33 31 36 33 33 35 31 30 31 32 22 2c 6e 75 6c 6c 2c 22 31 37 34 31 35 32 31 32 33 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 34 38 32 31 33 37 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 55 33 30 77 35 78 34 35 38 44 73 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 34 38 32 31 33 37 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 Data Ascii: RENDER_DATA}\u0026seat=2\u0026rp_id=r1j5482137!4s2A","metadata":["137970483272","713163351012",null,"17415212397",null,null,null,null,null,null,"5482137"],"adRenderId":"U30w5x458Ds","buyerReportingId":"1j5482137!4s2A"},{"renderUrl":"https://tdsf.doublec
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 30 38 34 37 31 34 38 38 39 37 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 30 30 37 36 39 37 39 32 38 37 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 39 30 33 38 33 38 37 30 34 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 30 38 34 37 31 34 38 38 39 37 22 2c 22 37 30 30 37 36 39 37 Data Ascii: ,{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=160847148897\u0026cr_id=700769792871\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j903838704!4s*2A","metadata":["160847148897","7007697
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 30 38 34 37 31 34 38 38 39 37 22 2c 22 37 30 30 37 36 39 37 39 32 38 37 31 22 2c 6e 75 6c 6c 2c 22 31 37 34 31 35 32 31 32 33 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 34 38 32 31 33 37 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 35 4a 37 46 39 6a 48 32 78 34 55 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 34 38 32 31 33 37 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 30 38 34 37 31 34 38 38 39 37 5c 75 30 30 32 36 63 Data Ascii: 2A","metadata":["160847148897","700769792871",null,"17415212397",null,null,null,null,null,null,"5482137"],"adRenderId":"5J7F9jH2x4U","buyerReportingId":"1j5482137!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=160847148897\u0026c
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 64 61 3f 61 64 67 5f 69 64 3d 31 37 31 35 30 39 33 36 37 37 38 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 30 30 37 39 35 32 39 35 32 34 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 30 38 36 32 36 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 37 31 35 30 39 33 36 37 37 38 38 22 2c 22 37 30 30 37 39 35 32 39 35 32 34 32 22 2c 6e 75 6c 6c 2c 22 31 37 34 31 35 32 31 32 33 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: da?adg_id=171509367788\u0026cr_id=700795295242\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j470862665!4s*2A","metadata":["171509367788","700795295242",null,"17415212397",null,null,null,null,null,null,
2024-10-01 09:51:46 UTC	1390	IN	Data Raw: 33 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 39 30 33 38 33 38 37 30 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 32 76 6e 37 30 76 66 6c 62 51 6f 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 39 30 33 38 33 38 37 30 34 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 37 31 35 30 39 33 36 37 37 38 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 37 31 32 39 39 34 34 38 36 35 34 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 Data Ascii: 397",null,null,null,null,null,null,"903838704"],"adRenderId":"2vn70vflbQo","buyerReportingId":"1j903838704!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=171509367788\u0026cr_id=712994486540\u0026cv_id=0\u0026format=${AD_WIDTH}x$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49909	142.250.186.130	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:45 UTC	1252	OUT	GET /td/rul/11093504263?random=1727776303693&cv=11&fst=1727776303693&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be49u0v870534657za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101686685~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&hn=www.googleadservices.com&frm=0&tiba=HighQ%20%7C%20Legal%20Business%20Management%20%26%20Operations%20Software%20%7C%20Thomson%20Reuters&npa=0&pscdl=noapi&auid=488782044.1727776304&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://legal.thomsonreuters.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 09:51:46 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 01 Oct 2024 09:51:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 01-Oct-2024 10:06:45 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 09:51:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-01 09:51:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49920	18.245.46.35	443	3204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 09:51:47 UTC	2036	OUT	GET /etc.clientlibs/uefalcon/clientlibs/clientlib-bayberry/resources/images/close-icon-1-5.svg HTTP/1.1 Host: legal.thomsonreuters.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: at_check=true; tr_ewp_tracking_params={}; AMCVS_A7D63BC75245AE300A490D4D%40AdobeOrg=1; mbox=session#e6cec483bd984004a698fc8e4aebdb06#1727778158\|PC#e6cec483bd984004a698fc8e4aebdb06.37_0#1791021098; gpv_pn=legal%3Aproducts%3Ahighq; gpv_pu=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq; s_ips=907; s_tp=4681; s_ppv=legal%253Aproducts%253Ahighq%2C19%2C19%2C907%2C1%2C5; s_cc=true; OptanonConsent=isGpcEnabled=0&datestamp=Tue+Oct+01+2024+05%3A51%3A39+GMT-0400+(Eastern+Daylight+Time)&version=202308.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=67167bfd-3edb-43d3-b383-770516ff7cf1&interactionCount=0&landingPath=https%3A%2F%2Flegal.thomsonreuters.com%2Fen%2Fproducts%2Fhighq&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; AWSALB=X0b2Lo2mNIYhHFk9Cgstw40iZikQOBnrQDKztaq0E9UXo/C9LMhSIigvbvYoev5IrvM5idy+pnzug6sZDneTf4+tGwhGDzkrmlBRIpGn/4i25EFdnjDXPsPr2iYW; AWSALBCORS=X0b2Lo2mNIYhHFk9Cgstw40iZikQOBnrQDKztaq0E9UXo/C9LMhSIigvbvYoev5IrvM5idy+pnzug6sZDneTf4+tGwhGDzkrmlBRIpGn/4i25EFdnjDXPsPr2iYW; AMCV_A7D63 [TRUNCATED]
2024-10-01 09:51:47 UTC	1307	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 469 Connection: close Date: Tue, 01 Oct 2024 09:07:01 GMT Set-Cookie: AWSALB=lHVdc3awFJqZPjqhgE2Vi8QF8RLBXmXXFJxHnleLwLiCAj4rYMbnmCJUIUhlQyo4+X1z5oPuXUTpiKdgeApa5aBPIECReQRuTlH5Rg11l805Wch+n6vzuPHuy8Sm; Expires=Tue, 08 Oct 2024 09:07:01 GMT; Path=/ Set-Cookie: AWSALBCORS=lHVdc3awFJqZPjqhgE2Vi8QF8RLBXmXXFJxHnleLwLiCAj4rYMbnmCJUIUhlQyo4+X1z5oPuXUTpiKdgeApa5aBPIECReQRuTlH5Rg11l805Wch+n6vzuPHuy8Sm; Expires=Tue, 08 Oct 2024 09:07:01 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: ALLOW-FROM https://www.thomsonreuters.com Cache-Control: max-age=86400, public, max-age=900 X-Content-Type-Options: nosniff Last-Modified: Mon, 14 Aug 2023 04:42:46 GMT ETag: "1d5-602dab1993d80" Accept-Ranges: bytes Expires: Tue, 01 Oct 2024 09:22:01 GMT X-UA-Compatible: IE=edge X-Dispatcher: dispatcher2useast1-28594929 X-Vhost: www.thomsonreuters.com Content-Security-Policy: frame-ancestors 'self' https://www.thomsonreuters.com Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c5b802393a68d17f06973bb92695544a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: nd0Vn8WgvVYRqDKbdsz1jNzhgJXo1MrDWvBVL1HEEfZ0p5cBGeIQrg== Age: 2686
2024-10-01 09:51:47 UTC	469	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 37 20 30 2e 33 43 31 33 2e 33 20 2d 30 2e 31 20 31 32 2e 37 20 2d 30 2e 31 20 31 32 2e 33 20 30 2e 33 4c 37 20 35 2e 36 4c 31 2e 37 20 30 2e 33 43 31 2e 33 20 2d 30 2e 31 20 30 2e 37 20 2d 30 2e 31 20 30 2e 33 20 30 2e 33 43 2d 30 2e 31 20 30 2e 37 20 2d 30 2e 31 20 31 2e 33 20 30 2e 33 20 31 2e 37 4c 35 2e 36 20 37 4c 30 2e 33 20 31 32 2e 33 43 2d 30 2e 31 20 31 32 2e 37 20 2d 30 2e 31 20 31 33 2e 33 20 30 2e 33 20 31 33 Data Ascii: <svg width="18" height="18" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M13.7 0.3C13.3 -0.1 12.7 -0.1 12.3 0.3L7 5.6L1.7 0.3C1.3 -0.1 0.7 -0.1 0.3 0.3C-0.1 0.7 -0.1 1.3 0.3 1.7L5.6 7L0.3 12.3C-0.1 12.7 -0.1 13.3 0.3 13

Target ID:	0
Start time:	05:51:21
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:51:22
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2304,i,10470009356049978610,4068125326516324767,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:51:25
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mailto:noreply-eversheds-sutherland@highq.com"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/search-results#t=Legal&sort=relevancy	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/search-results#t=Legal&sort=relevancy	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/search-results#t=Legal&sort=relevancy	HTTP Parser: No favicon
Source: https://legal.thomsonreuters.com/en/search-results#t=Legal&sort=relevancy	HTTP Parser: No favicon

Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No <meta name="author".. found
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No <meta name="author".. found
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No <meta name="author".. found

Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No <meta name="copyright".. found
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No <meta name="copyright".. found
Source: https://legal.thomsonreuters.com/en/products/highq/request-demo	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: <a class="tr-SiteFooterNavItem-link" href="https://www.facebook.com/thomsonreuters">Facebook</a> equals www.facebook.com (Facebook)
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: <a class="tr-SiteFooterNavItem-link" href="https://www.linkedin.com/company/thomson-reuters">LinkedIn</a> equals www.linkedin.com (Linkedin)
Source: chromecache_535.2.dr, chromecache_317.2.dr, chromecache_457.2.dr	String found in binary or memory: <a class="tr-SiteFooterNavItem-link" href="https://www.youtube.com/thomsonreuters">YouTube</a> equals www.youtube.com (Youtube)
Source: chromecache_468.2.dr	String found in binary or memory: _satellite.__registerScript('https://assets.adobedtm.com/fcbff6e82c08/3d4fcf8b9e7c/653459f3e2fe/RC1043e003412140f8ab9e58fbe496aab7-source.min.js', "<!-- Facebook Pixel Code -->\n<script>\n!function(f,b,e,v,n,t,s)\n{if(f.fbq)return;n=f.fbq=function(){n.callMethod?\nn.callMethod.apply(n,arguments):n.queue.push(arguments)};\nif(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';\nn.queue=[];t=b.createElement(e);t.async=!0;\nt.src=v;s=b.getElementsByTagName(e)[0];\ns.parentNode.insertBefore(t,s)}(window,document,'script',\n'https://connect.facebook.net/en_US/fbevents.js');\nfbq('set', 'autoConfig', false, '156351445072315');\nfbq('init', '156351445072315'); \nfbq('track', 'PageView');\n</script>\n<noscript>\n<img height=\"1\" width=\"1\" \nsrc=\"https://www.facebook.com/tr?id=156351445072315&ev=PageView\n&noscript=1\"/>\n</noscript>\n<!-- End Facebook Pixel Code -->\n\n\n"); equals www.facebook.com (Facebook)
Source: chromecache_499.2.dr, chromecache_527.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_311.2.dr, chromecache_265.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&vb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?ob(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_311.2.dr, chromecache_265.2.dr	String found in binary or memory: function vb(){var a=new tb,b=["https://www.youtube.com"];b=b===void 0?sb:b;pa(function(c){switch(c.g){case 1:return C(c,ub(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr, chromecache_527.2.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_499.2.dr, chromecache_527.2.dr	String found in binary or memory: var XB=function(a,b,c,d,e){var f=Oz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Oz("fsl","nv.ids",[]):Oz("fsl","ids",[]);if(!g.length)return!0;var k=Tz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!By(k,Dy(b, equals www.facebook.com (Facebook)
Source: chromecache_451.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/26636eff\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_257.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/d9418494\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_268.2.dr, chromecache_301.2.dr	String found in binary or memory: {"@context":"http://schema.org","@type":"Organization","contactPoint":[{"@type":"ContactPoint","contactType":"Call Us","telephone":"+1 646 540 3000","name":"Call Us - United States","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint"},{"@type":"ContactPoint","telephone":"+1 647 480 7000","name":"Call Us - Canada","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint1"},{"@type":"ContactPoint","telephone":"+44 20 3197 3000","name":"Call Us - United Kingdom","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint2"}],"sameAs":["https://www.youtube.com/thomsonreuters","https://www.linkedin.com/company/thomson-reuters","https://twitter.com/thomsonreuters","https://www.facebook.com/thomsonreuters","https://www.youtube.com/user/ThomsonReutersLegal"],"logo":"https://cdn.cookielaw.org/logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_tr_h_lg_rgb_ps.png","description":"Discover Thomson Reuters legal, risk, and fraud solutions, including Westlaw, Practical Law, CLEAR, law books, and more.","url":"https://legal.thomsonreuters.com/en","parentOrganization":"http://www.wikidata.org/entity/Q1141267","telephone":"1-888-728-7677","hasOfferCatalog":"https://legal.thomsonreuters.com/en/products","name":"Thomson Reuters Legal","knowsAbout":["Legal research & guidance","https://www.wikidata.org/wiki/Q12042875","http://www.wikidata.org/entity/Q6517578"],"@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem"} equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_301.2.dr	String found in binary or memory: {"@context":"http://schema.org","@type":"Organization","contactPoint":[{"@type":"ContactPoint","contactType":"Call Us","telephone":"+1 646 540 3000","name":"Call Us - United States","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint"},{"@type":"ContactPoint","telephone":"+1 647 480 7000","name":"Call Us - Canada","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint1"},{"@type":"ContactPoint","telephone":"+44 20 3197 3000","name":"Call Us - United Kingdom","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint2"}],"sameAs":["https://www.youtube.com/thomsonreuters","https://www.linkedin.com/company/thomson-reuters","https://twitter.com/thomsonreuters","https://www.facebook.com/thomsonreuters","https://www.youtube.com/user/ThomsonReutersLegal"],"logo":"https://cdn.cookielaw.org/logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_tr_h_lg_rgb_ps.png","description":"Discover Thomson Reuters legal, risk, and fraud solutions, including Westlaw, Practical Law, CLEAR, law books, and more.","url":"https://legal.thomsonreuters.com/en","parentOrganization":"http://www.wikidata.org/entity/Q1141267","telephone":"1-888-728-7677","hasOfferCatalog":"https://legal.thomsonreuters.com/en/products","name":"Thomson Reuters Legal","knowsAbout":["Legal research & guidance","https://www.wikidata.org/wiki/Q12042875","http://www.wikidata.org/entity/Q6517578"],"@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem"} equals www.linkedin.com (Linkedin)
Source: chromecache_268.2.dr, chromecache_301.2.dr	String found in binary or memory: {"@context":"http://schema.org","@type":"Organization","contactPoint":[{"@type":"ContactPoint","contactType":"Call Us","telephone":"+1 646 540 3000","name":"Call Us - United States","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint"},{"@type":"ContactPoint","telephone":"+1 647 480 7000","name":"Call Us - Canada","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint1"},{"@type":"ContactPoint","telephone":"+44 20 3197 3000","name":"Call Us - United Kingdom","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint2"}],"sameAs":["https://www.youtube.com/thomsonreuters","https://www.linkedin.com/company/thomson-reuters","https://twitter.com/thomsonreuters","https://www.facebook.com/thomsonreuters","https://www.youtube.com/user/ThomsonReutersLegal"],"logo":"https://cdn.cookielaw.org/logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_tr_h_lg_rgb_ps.png","description":"Discover Thomson Reuters legal, risk, and fraud solutions, including Westlaw, Practical Law, CLEAR, law books, and more.","url":"https://legal.thomsonreuters.com/en","parentOrganization":"http://www.wikidata.org/entity/Q1141267","telephone":"1-888-728-7677","hasOfferCatalog":"https://legal.thomsonreuters.com/en/products","name":"Thomson Reuters Legal","knowsAbout":["Legal research & guidance","https://www.wikidata.org/wiki/Q12042875","http://www.wikidata.org/entity/Q6517578"],"@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem"} equals www.twitter.com (Twitter)
Source: chromecache_301.2.dr	String found in binary or memory: {"@context":"http://schema.org","@type":"Organization","contactPoint":[{"@type":"ContactPoint","contactType":"Call Us","telephone":"+1 646 540 3000","name":"Call Us - United States","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint"},{"@type":"ContactPoint","telephone":"+1 647 480 7000","name":"Call Us - Canada","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint1"},{"@type":"ContactPoint","telephone":"+44 20 3197 3000","name":"Call Us - United Kingdom","@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem#ContactPoint2"}],"sameAs":["https://www.youtube.com/thomsonreuters","https://www.linkedin.com/company/thomson-reuters","https://twitter.com/thomsonreuters","https://www.facebook.com/thomsonreuters","https://www.youtube.com/user/ThomsonReutersLegal"],"logo":"https://cdn.cookielaw.org/logos/dbf5ae8a-0a6a-4f4b-b527-7f94d0de6bbc/a08ca288-4428-47cc-857d-186e117c6b89/b1045116-2c1f-45a6-8366-a1c4a4118e2c/2021-site-brand-update-logos_PNG_tr_h_lg_rgb_ps.png","description":"Discover Thomson Reuters legal, risk, and fraud solutions, including Westlaw, Practical Law, CLEAR, law books, and more.","url":"https://legal.thomsonreuters.com/en","parentOrganization":"http://www.wikidata.org/entity/Q1141267","telephone":"1-888-728-7677","hasOfferCatalog":"https://legal.thomsonreuters.com/en/products","name":"Thomson Reuters Legal","knowsAbout":["Legal research & guidance","https://www.wikidata.org/wiki/Q12042875","http://www.wikidata.org/entity/Q6517578"],"@id":"http://schemaapp.com/db/ThomsonReuters_SharedDataItem"} equals www.youtube.com (Youtube)

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Source: global traffic	DNS traffic detected: DNS query: highq.com
Source: global traffic	DNS traffic detected: DNS query: www.highq.com
Source: global traffic	DNS traffic detected: DNS query: legal.thomsonreuters.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.datadoghq-browser-agent.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: cdn.appdynamics.com
Source: global traffic	DNS traffic detected: DNS query: app-data.gcs.trstatic.net
Source: global traffic	DNS traffic detected: DNS query: rum.browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: cdn.schemaapp.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: thomsonreuters.scene7.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: cdn.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: data.schemaapp.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: v2.d41.co
Source: global traffic	DNS traffic detected: DNS query: store.legal.thomsonreuters.com
Source: global traffic	DNS traffic detected: DNS query: westservicesinc.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: westthomson.demdex.net
Source: global traffic	DNS traffic detected: DNS query: westthomsoncom.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: paapi4153.d41.co
Source: global traffic	DNS traffic detected: DNS query: api.schemaapp.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: eps.6sc.co
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.thomsonreuters.com
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: dx.mountain.com
Source: global traffic	DNS traffic detected: DNS query: ws.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: content.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: img04.en25.com
Source: global traffic	DNS traffic detected: DNS query: partner.mediawallahscript.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: surveystats.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: trail.thomsonreuters.com
Source: global traffic	DNS traffic detected: DNS query: px.mountain.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: gs.mountain.com
Source: global traffic	DNS traffic detected: DNS query: zn9nxfmd5iboqorgm-trdigital.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: assets.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: fra-col.eum-appdynamics.com
Source: global traffic	DNS traffic detected: DNS query: metrics.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: platform.cloud.coveo.com
Source: global traffic	DNS traffic detected: DNS query: analytics.cloud.coveo.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://mailto:noreply-eversheds-sutherland@highq.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Windows Analysis Report
http://mailto:noreply-eversheds-sutherland@highq.com