Edit tour

Windows Analysis Report
https://getsesametime.com/

Overview

General Information

Sample URL:	https://getsesametime.com/
Analysis ID:	1525857
Tags:	urlscan
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2208,i,7160991135955468368,2434131914208012291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5212 --field-trial-handle=2208,i,7160991135955468368,2434131914208012291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://getsesametime.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /add/player-stats?beacon=1&session-id=b9ef8a21753309fb6081d9e409cb42c45d757c6f1728049100 HTTP/1.1Host: fresnel.vimeocdn.comConnection: keep-aliveContent-Length: 1103sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://player.vimeo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: http://adnordic.eu/privacypolicy.html
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: http://adserver.admost.com/privacypolicy.html
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: http://astromotiongames.com/gdpr
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: http://google.com
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: http://help.dhgate.com/help/buyer_about_usen.php?catpid=g9
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: http://mediapal.net/gdpr-compliance
Source: chromecache_437.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_336.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_336.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_336.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_336.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_351.2.dr, chromecache_336.2.dr	String found in binary or memory: http://stuartk.com/jszip
Source: chromecache_363.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_363.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html)
Source: chromecache_447.2.dr, chromecache_325.2.dr, chromecache_263.2.dr, chromecache_438.2.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: http://www.signifimedia.com.au/home/privacy
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: http://www.xcheck.co/privacy
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://admasters.media/en/privacy/
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://admasters.media/privacy/
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://admasters.media/static/vendorDisclosure.json
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://admin.pubwise.io/publisher/device-disclosure.json
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://admin.pubwise.io/publisher/privacypolicy
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://admin.pubwise.io/publisher/privacypolicy#gli
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://ads.cazamba.com/policies/dsd.json
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://ads.holid.io/devicestorage.json
Source: chromecache_536.2.dr, chromecache_528.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_427.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://advrtas.com/privacy-policy/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://affiliates.netbet.gr/en/terms-conditions.html
Source: chromecache_437.2.dr	String found in binary or memory: https://animate.style/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://answers.chartboost.com/en-us/articles/200780269
Source: chromecache_468.2.dr	String found in binary or memory: https://api.hsforms.com/submissions/v3/integration/submit/8564339/eb88e368-c444-4933-b982-b7a173664b
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_400.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_400.2.dr	String found in binary or memory: https://apis.google.com/js/platform.js
Source: chromecache_468.2.dr	String found in binary or memory: https://apis.google.com/js/platform.js?onload=renderButton
Source: chromecache_468.2.dr	String found in binary or memory: https://app-sq2.sesametime.com/login/?googleTokenId=
Source: chromecache_468.2.dr	String found in binary or memory: https://app-sq2.sesametime.com/register/
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://app.clipflip.video/static/iab-vendor.json
Source: chromecache_478.2.dr	String found in binary or memory: https://app.holid.io/assets/documents/PrivacyPolicyHolid.pdf
Source: chromecache_449.2.dr	String found in binary or memory: https://app.sesametime.com
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://app.sesametime.com/
Source: chromecache_468.2.dr	String found in binary or memory: https://app.sesametime.com/login/?googleTokenId=
Source: chromecache_468.2.dr	String found in binary or memory: https://app.sesametime.com/register/
Source: chromecache_468.2.dr	String found in binary or memory: https://app.sesametime.com/signup/
Source: chromecache_449.2.dr	String found in binary or memory: https://apps.apple.com/app/sesame-hr-software-de-rrhh/id1499352325?referral=utm_source%3Dhome%26utm_
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://apps.apple.com/au/app/sesame-rrhh-suite/id1499352325?l=es
Source: chromecache_468.2.dr	String found in binary or memory: https://back-eu1.sesametime.com/api/v3/pre-register
Source: chromecache_468.2.dr	String found in binary or memory: https://back-eu2.sesametime.com/api/v3/pre-register
Source: chromecache_468.2.dr	String found in binary or memory: https://back-sq2.sesametime.com/api/v3/google/pre-register
Source: chromecache_468.2.dr	String found in binary or memory: https://back.sesametime.com/api/v3/google/pre-register
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://bannerse.com/wp-content/uploads/2023/07/Privacy-Policy_2023_6_7_Bannerse.pdf
Source: chromecache_478.2.dr	String found in binary or memory: https://cazamba.com/en/platform-privacy/
Source: chromecache_353.2.dr, chromecache_334.2.dr, chromecache_269.2.dr, chromecache_505.2.dr, chromecache_413.2.dr, chromecache_300.2.dr, chromecache_382.2.dr, chromecache_321.2.dr, chromecache_370.2.dr, chromecache_296.2.dr, chromecache_255.2.dr, chromecache_291.2.dr, chromecache_530.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_445.2.dr, chromecache_467.2.dr	String found in binary or memory: https://cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://cdn.datalabsgroup.com/iab-disclosure.json
Source: chromecache_468.2.dr	String found in binary or memory: https://cdn.neverbounce.com/widget/dist/NeverBounce.js
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://cdn.raptorstatic.com/tcf/tcf.json
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://clickwise.net/section/terms
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_322.2.dr, chromecache_317.2.dr	String found in binary or memory: https://cmp.inmobi.com/tcfv2/53/CMP_FILE?referer=www.sesamehr.com
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://compliance.iris.synamedia.com/tcf/DDS.json
Source: chromecache_522.2.dr, chromecache_360.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_522.2.dr, chromecache_360.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_370.2.dr, chromecache_427.2.dr	String found in binary or memory: https://ct.capterra.com/capterra_tracker.gif
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_333.2.dr	String found in binary or memory: https://dev.sesamehr.es/wp-content/uploads/2024/08/bg-linear.svg
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://developers.ironsrc.com/ironsource-mobile/air/ironsource-mobile-privacy-policy
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://es.linkedin.com/company/sesamehr
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_340.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Albert
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/albertsans/v1/i7dOIFdwYjGaAMFtZd_QA1ZVYFeCGg.woff2)
Source: chromecache_446.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/albertsans/v1/i7dOIFdwYjGaAMFtZd_QA1ZbYFc.woff2)
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_303.2.dr, chromecache_388.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_351.2.dr, chromecache_336.2.dr	String found in binary or memory: https://github.com/nodeca/pako/blob/master/LICENSE
Source: chromecache_311.2.dr, chromecache_421.2.dr	String found in binary or memory: https://github.com/vimeo/player.js
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_427.2.dr	String found in binary or memory: https://google.com
Source: chromecache_427.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://help.sesamehr.com/en
Source: chromecache_510.2.dr, chromecache_499.2.dr	String found in binary or memory: https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://hopla.online/privacy-policy/
Source: chromecache_447.2.dr, chromecache_325.2.dr	String found in binary or memory: https://js-na1.hs-scripts.com/8564339.js
Source: chromecache_282.2.dr, chromecache_429.2.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1728048900000/8564339.js
Source: chromecache_263.2.dr, chromecache_438.2.dr	String found in binary or memory: https://js.hs-banner.com/v2
Source: chromecache_282.2.dr, chromecache_429.2.dr	String found in binary or memory: https://js.hs-banner.com/v2/8564339/banner.js
Source: chromecache_282.2.dr, chromecache_429.2.dr	String found in binary or memory: https://js.hsadspixel.net/fb.js
Source: chromecache_282.2.dr, chromecache_429.2.dr	String found in binary or memory: https://js.hubspot.com/web-interactives-embed.js
Source: chromecache_282.2.dr, chromecache_429.2.dr	String found in binary or memory: https://js.hubspotfeedback.com/feedbackweb-new.js
Source: chromecache_282.2.dr, chromecache_429.2.dr	String found in binary or memory: https://js.usemessages.com/conversations-embed.js
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://lacunads.ushareit.com/policy.html
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://laser.arcanor.com/file.json
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://lbx-iab-tcf.s3.eu-west-3.amazonaws.com/privacy.json
Source: chromecache_468.2.dr	String found in binary or memory: https://login.sesametime.com/private/api/v1/pre-register
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://m-t.io/privacy
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://maxetise.net/device-storage-disclosure.json
Source: chromecache_478.2.dr	String found in binary or memory: https://maxetise.net/privacy-policy.html
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://medialabs.es/privacy-policy
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://mygaru.com/.well-known/deviceStorage.json
Source: chromecache_478.2.dr	String found in binary or memory: https://mygaru.com/privacy-policy
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://old.viewst.com/privacy_policy
Source: chromecache_427.2.dr, chromecache_528.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_536.2.dr, chromecache_528.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_353.2.dr, chromecache_334.2.dr, chromecache_269.2.dr, chromecache_505.2.dr, chromecache_413.2.dr, chromecache_300.2.dr, chromecache_382.2.dr, chromecache_321.2.dr, chromecache_370.2.dr, chromecache_296.2.dr, chromecache_255.2.dr, chromecache_291.2.dr, chromecache_530.2.dr, chromecache_427.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-4356324893470239
Source: chromecache_369.2.dr, chromecache_316.2.dr, chromecache_536.2.dr, chromecache_528.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_369.2.dr, chromecache_316.2.dr, chromecache_536.2.dr, chromecache_528.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_528.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_316.2.dr, chromecache_536.2.dr, chromecache_528.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_400.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_274.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=es.sesametime.mobile.v2&gl=ES
Source: chromecache_449.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=es.sesametime.mobile.v2&referral=utm_source%3Dhome%26u
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_510.2.dr, chromecache_499.2.dr, chromecache_356.2.dr, chromecache_549.2.dr	String found in binary or memory: https://player.vimeo.com/NOTICE.txt
Source: chromecache_449.2.dr	String found in binary or memory: https://player.vimeo.com/api/player.js
Source: chromecache_449.2.dr	String found in binary or memory: https://player.vimeo.com/video/888991500?badge=0&autopause=0&player_id=0&app_id=58479
Source: chromecache_449.2.dr	String found in binary or memory: https://player.vimeo.com/video/889001864?autoplay=1&loop=1&autopause=0&background=1
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_478.2.dr	String found in binary or memory: https://privacy.opt-me-in.com
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://privacy.uber.com/policy
Source: chromecache_351.2.dr, chromecache_336.2.dr	String found in binary or memory: https://raw.github.com/Stuk/jszip/master/LICENSE.markdown.
Source: chromecache_274.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://scaledinference.com/privacy-policy
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_370.2.dr, chromecache_427.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://squeezely.tech/privacy
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://static.first-id.fr/tcf/cookie.json
Source: chromecache_353.2.dr, chromecache_334.2.dr, chromecache_505.2.dr, chromecache_413.2.dr, chromecache_300.2.dr, chromecache_382.2.dr, chromecache_291.2.dr, chromecache_530.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_274.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_535.2.dr, chromecache_308.2.dr	String found in binary or memory: https://t.firstpromoter.com/get_details
Source: chromecache_535.2.dr, chromecache_308.2.dr	String found in binary or memory: https://t.firstpromoter.com/tr
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_353.2.dr, chromecache_334.2.dr, chromecache_269.2.dr, chromecache_505.2.dr, chromecache_413.2.dr, chromecache_300.2.dr, chromecache_382.2.dr, chromecache_321.2.dr, chromecache_370.2.dr, chromecache_296.2.dr, chromecache_255.2.dr, chromecache_291.2.dr, chromecache_530.2.dr, chromecache_427.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://throtle.io/privacy/
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_332.2.dr, chromecache_431.2.dr	String found in binary or memory: https://tracker.metricool.com/resources/be.js
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://twistdigital.net/iab.json
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://twitter.com/wordpress
Source: chromecache_449.2.dr	String found in binary or memory: https://unpkg.com/
Source: chromecache_468.2.dr	String found in binary or memory: https://unpkg.com/sweetalert/dist/sweetalert.min.js
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://ux.porsche.com/privacy-policy/
Source: chromecache_299.2.dr	String found in binary or memory: https://vimeo.com/ablincoln/vuid
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://world.calzedonia.com/custserv/custserv.jsp?pageName=faq-legal-information#tab1
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.algorix.co/gdpr-disclosure.json
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.algorix.co/privacy-policy/
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.algorix.co/privacy-policy/#section-3-3
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.anonymised.io/privacy
Source: chromecache_478.2.dr	String found in binary or memory: https://www.arcanor.com/privacy
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.azurebid.com/privacy-policy
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.bannercloud.io/privacy-policy
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.bfmtv.com/politique-donnees-personnelles/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.blisspointmedia.com/privacy
Source: chromecache_478.2.dr	String found in binary or memory: https://www.blueseasx.com/policy.html
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.blueseasx.com/tcf-disclosure.json
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.bluesummit.de/datenschutz/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.bose.co.uk/en_gb/legal/cookie_policy.html
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.butlers.com/COMPANY_PRIVACY.html
Source: chromecache_305.2.dr, chromecache_256.2.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_478.2.dr	String found in binary or memory: https://www.clipflip.video/data-privacy
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.coupling-media.de/datenschutz.html
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.dm3concepts.com/privacy-policy/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.eterna.de/datenschutz
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.first-id.fr/fr/politique-de-confidentialite
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.first-id.fr/politique-de-confidentialite
Source: chromecache_427.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_536.2.dr, chromecache_528.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_468.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_381.2.dr, chromecache_410.2.dr, chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_427.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_427.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_269.2.dr, chromecache_321.2.dr, chromecache_370.2.dr, chromecache_296.2.dr, chromecache_255.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WWBXHVT
Source: chromecache_269.2.dr, chromecache_321.2.dr, chromecache_370.2.dr, chromecache_296.2.dr, chromecache_255.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_302.2.dr, chromecache_274.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_369.2.dr, chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_381.2.dr, chromecache_410.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.iab.com/topics/public-policy/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.instagram.com/explore/tags/wordcamp/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.instagram.com/sesame_hr/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.jysk.ee/cookies
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.lightboxtv.co.uk/privacy
Source: chromecache_353.2.dr, chromecache_334.2.dr, chromecache_505.2.dr, chromecache_413.2.dr, chromecache_300.2.dr, chromecache_382.2.dr, chromecache_291.2.dr, chromecache_530.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.modellbau-universe.de/datenschutz.htm
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.nmic.dk/privatlivspolitik?hsLang=da-dk
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.nowbetnow.com/privacy.php
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.octillion.tech/privacy-policy
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.position2.com/privacy-policy/
Source: chromecache_478.2.dr	String found in binary or memory: https://www.raptorservices.com/privacy-policy
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.redcubes.biz/privacy-policy
Source: chromecache_370.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.sabio.inc/privacypolicy
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.ar
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.cl
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.co
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.co.uk
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com.br
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/#/schema/logo/image/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/#breadcrumb
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/#organization
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/#website
Source: chromecache_468.2.dr	String found in binary or memory: https://www.sesamehr.com/?p=979
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/?s=
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/about-us/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/absences-holidays/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/advanced-electronic-signature/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/ai/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/blog/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/blog/sesame-investment-round/?utm_source=web&utm_medium=bann
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/brand-kit/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/contact/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/cookies-policy/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/demo/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/document-management/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/employee-survey/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/general-contracting-conditions/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/hr-reports/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/internal-communication/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/legal-advice/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/objectives-okr/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/onboarding/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/overtime-management/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/payroll/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/people-analytics/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/people-database/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/performance-evaluations/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/pricing/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/recruitment/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/remote-work/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/security-policy/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/sesame-for-ngo/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/shift-management/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/signup/
Source: chromecache_468.2.dr	String found in binary or memory: https://www.sesamehr.com/signup/#breadcrumb
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/task-tracking/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/time-tracking/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/training-management/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/workspace-booking-system/
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/plugins/review-post-plugin-sesame-main/assets/css/style.css?ver=
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/css/animate.min.css?ver=1.0
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/css/splide.min.css?ver=4.1.3
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/css/style-child.css?ver=1.0
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/css/themecss.css?ver=1.0
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/fonts/albert.css?ver=1.0
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/images/capterra47.svg
Source: chromecache_468.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/images/img-bg-form.png)
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/images/iso-27001.svg
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/images/triangle-down.svg);
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/amplitude.js?ver=1.0
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/index.js?ver=3.0
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/load-more-post.js?ver=6.6.1
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/metricool.js?ver=1.0
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/splide.min.js?ver=4.1.3
Source: chromecache_468.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/loading.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/Casa.lottie
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/Corazon.lottie
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/Rocket.lottie
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/down.svg);
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/evento_kleta-03.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/familyday-130.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/familyday-205.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/familyday-297.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/oficina-inside.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/podcast_kleta-05.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/summerParty-447.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/dashboard_sidebar_plegado.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/elipse_4853.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/ilustracion.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/mockup_tel_fono.webp
Source: chromecache_468.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/pages/registro/Fondo-form.png
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/resenas/capterra_01.png
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/img/resenas/getapp_01.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/print.css?ver=3.0
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/themes/sesamehr/style.css?ver=3.0
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2021/03/cropped-favicon-ses-hr--180x180.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2021/03/cropped-favicon-ses-hr--192x192.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2021/03/cropped-favicon-ses-hr--270x270.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2021/03/cropped-favicon-ses-hr--32x32.png
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2021/07/logohr.svg
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/brazil.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/chile.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/colombia.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/costarica.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/espana.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/france.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/germany.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/italy.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/mexico.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/netherlands.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/peru.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/portugal.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/uk.png
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2023/06/united-states.png
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/01/gestion-de-equipos.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/01/gestion-de-talento.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/01/gestion-de-tiempo.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/01/sesamehr-logo.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63781.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63782.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63790.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63875.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-1.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-10.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-11.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-12.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-13.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-14.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-15.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-2.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-3.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-4.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-5.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-6.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-7.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-8.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-9.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/administraci_n.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/gesti_n_del_tiempo.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/05/talento_y_cultura.webp
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/06/BLACKDECKER.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/06/LATAM-AIRLINES.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/06/MEDICOS-SIN-FRONTERAS.svg
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-content/uploads/2024/06/Vector_Logo.svg
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-json/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.sesamehr.com%2F
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.sesamehr.com%2F&format=
Source: chromecache_468.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F
Source: chromecache_468.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F&#03
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-json/wp/v2/pages/38
Source: chromecache_468.2.dr	String found in binary or memory: https://www.sesamehr.com/wp-json/wp/v2/pages/979
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.com/xmlrpc.php?rsd
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.cr
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.de
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.es
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.es/agendar-demo/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.fr
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.it
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.mx
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.nl
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.pe
Source: chromecache_449.2.dr	String found in binary or memory: https://www.sesamehr.pt
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.sgs.com/en/certified-clients-and-products
Source: chromecache_478.2.dr	String found in binary or memory: https://www.synamedia.com/iris-privacy-policy/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.synamedia.com/privacy-policy/
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.tchibo.de/cookies-tracking-re-targeting-s400092901.html
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.tiktok.com/
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.twist.win/privacy
Source: chromecache_297.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.twist.win/terms
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.videostori.io/privacy_policy
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.yelp.com
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCDkKd1M7DOqcwHDzmpsKCCw
Source: chromecache_353.2.dr, chromecache_334.2.dr, chromecache_505.2.dr, chromecache_382.2.dr, chromecache_370.2.dr, chromecache_291.2.dr, chromecache_530.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_552.2.dr, chromecache_523.2.dr	String found in binary or memory: https://www.ysocorp.com/privacy-policy
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 60334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 60655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 60139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60774
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60770
Source: unknown	Network traffic detected: HTTP traffic on port 60735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60776
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 60528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60542
Source: unknown	Network traffic detected: HTTP traffic on port 60105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60782
Source: unknown	Network traffic detected: HTTP traffic on port 60266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60548
Source: unknown	Network traffic detected: HTTP traffic on port 60082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60545
Source: unknown	Network traffic detected: HTTP traffic on port 60495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 60198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 60310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 60117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60563
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60562
Source: unknown	Network traffic detected: HTTP traffic on port 60516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 60162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60326
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60567
Source: unknown	Network traffic detected: HTTP traffic on port 60346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 60164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 60229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60730
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60737
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60736
Source: unknown	Network traffic detected: HTTP traffic on port 60196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60735
Source: unknown	Network traffic detected: HTTP traffic on port 60230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 60312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60508
Source: unknown	Network traffic detected: HTTP traffic on port 60725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60740
Source: unknown	Network traffic detected: HTTP traffic on port 60692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60505
Source: unknown	Network traffic detected: HTTP traffic on port 60665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60747
Source: unknown	Network traffic detected: HTTP traffic on port 60256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60504
Source: unknown	Network traffic detected: HTTP traffic on port 60531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60746
Source: unknown	Network traffic detected: HTTP traffic on port 60069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60744
Source: unknown	Network traffic detected: HTTP traffic on port 60757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 60252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 60577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60519
Source: unknown	Network traffic detected: HTTP traffic on port 60747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60750
Source: unknown	Network traffic detected: HTTP traffic on port 60291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60757
Source: unknown	Network traffic detected: HTTP traffic on port 60217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 60599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 60687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60762
Source: unknown	Network traffic detected: HTTP traffic on port 60130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60761
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60760
Source: unknown	Network traffic detected: HTTP traffic on port 60070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60769
Source: unknown	Network traffic detected: HTTP traffic on port 60438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60375
Source: unknown	Network traffic detected: HTTP traffic on port 60395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60130
Source: unknown	Network traffic detected: HTTP traffic on port 60286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60371
Source: unknown	Network traffic detected: HTTP traffic on port 60234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60139
Source: unknown	Network traffic detected: HTTP traffic on port 60475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60138
Source: unknown	Network traffic detected: HTTP traffic on port 60641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60137
Source: unknown	Network traffic detected: HTTP traffic on port 60767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60391
Source: unknown	Network traffic detected: HTTP traffic on port 60675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60390
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60386
Source: unknown	Network traffic detected: HTTP traffic on port 60514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60385
Source: unknown	Network traffic detected: HTTP traffic on port 60590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60382
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60149
Source: unknown	Network traffic detected: HTTP traffic on port 60348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60148
Source: unknown	Network traffic detected: HTTP traffic on port 60606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60161
Source: unknown	Network traffic detected: HTTP traffic on port 60137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60160
Source: unknown	Network traffic detected: HTTP traffic on port 60200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60398
Source: unknown	Network traffic detected: HTTP traffic on port 60779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60397
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60154
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60395
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60152
Source: unknown	Network traffic detected: HTTP traffic on port 60182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60394
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60393
Source: unknown	Network traffic detected: HTTP traffic on port 60406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 60383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60170
Source: unknown	Network traffic detected: HTTP traffic on port 60618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60168
Source: unknown	Network traffic detected: HTTP traffic on port 60428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60164
Source: unknown	Network traffic detected: HTTP traffic on port 60159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60162
Source: unknown	Network traffic detected: HTTP traffic on port 60694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 60418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60331
Source: unknown	Network traffic detected: HTTP traffic on port 60777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60572
Source: unknown	Network traffic detected: HTTP traffic on port 60184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60577
Source: unknown	Network traffic detected: HTTP traffic on port 60524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60590
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60103
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60102
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60343
Source: unknown	Network traffic detected: HTTP traffic on port 60453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60580
Source: unknown	Network traffic detected: HTTP traffic on port 60711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60588
Source: unknown	Network traffic detected: HTTP traffic on port 60441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60594
Source: unknown	Network traffic detected: HTTP traffic on port 60127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60350
Source: unknown	Network traffic detected: HTTP traffic on port 60557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60591
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.5:60352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.109:443 -> 192.168.2.5:60084 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@22/472@212/61

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2208,i,7160991135955468368,2434131914208012291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://getsesametime.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5212 --field-trial-handle=2208,i,7160991135955468368,2434131914208012291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2208,i,7160991135955468368,2434131914208012291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5212 --field-trial-handle=2208,i,7160991135955468368,2434131914208012291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
group39.sites.hscoscdn30.net	199.60.103.29	true	false	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
cta-service-cms2.hubspot.com	104.16.118.116	true	false	unknown
js.hs-analytics.net	104.16.160.168	true	false	unknown
platform.twitter.map.fastly.net	146.75.52.157	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
sesamehr.es	54.38.108.40	true	false	unknown
scontent.xx.fbcdn.net	157.240.251.9	true	false	unknown
t.co	172.66.0.227	true	false	unknown
track.hubspot.com	104.16.118.116	true	false	unknown
getsesametime.com	15.197.225.128	true	false	unknown
fresnel.vimeocdn.com	34.120.202.204	true	false	unknown
choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com	35.157.41.160	true	false	unknown
js.hs-scripts.com	104.16.138.209	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
js.usemessages.com	104.16.76.142	true	false	unknown
js.hubspotfeedback.com	104.18.64.124	true	false	unknown
d2ycxbs0cq3yaz.cloudfront.net	18.245.31.86	true	false	unknown
js.hs-banner.com	104.18.40.240	true	false	unknown
capig.stape.cloud	188.114.96.3	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
static.hsappstatic.net	104.17.175.91	true	false	unknown
s.twitter.com	104.244.42.67	true	false	unknown
app.hubspot.com	104.16.118.116	true	false	unknown
feedback.hubapi.com	104.18.240.108	true	false	unknown
plus.l.google.com	142.250.74.206	true	false	unknown
api-w-ssh-1606603881.us-east-1.elb.amazonaws.com	54.165.55.65	true	false	unknown
js.hubspot.com	104.16.118.116	true	false	unknown
cdn.amplitude.com	18.245.86.4	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
js.hsadspixel.net	104.17.128.172	true	false	unknown
sesamehr.com	15.235.45.220	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
vimeo.com	162.159.138.60	true	false	unknown
vimeo.map.fastly.net	151.101.128.217	true	false	unknown
api.hubspot.com	104.16.117.116	true	false	unknown
fresnel-events.vimeocdn.com	34.120.15.67	true	false	unknown
googleads.g.doubleclick.net	142.250.186.34	true	false	unknown
api.hubapi.com	104.18.243.108	true	false	unknown
d3g1ftmock1oxn.cloudfront.net	18.245.46.122	true	false	unknown
unpkg.com	104.17.246.203	true	false	unknown
perf-na1.hsforms.com	104.18.80.204	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
d23sp3kzv1t6m5.cloudfront.net	3.160.150.36	true	false	unknown
vimeo-video.map.fastly.net	151.101.194.109	true	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
cdn.neverbounce.com	unknown	unknown	false	unknown
t.clarity.ms	unknown	unknown	false	unknown
i.vimeocdn.com	unknown	unknown	false	unknown
api.cmp.inmobi.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown
www.sesamehr.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
tracker.metricool.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
api.neverbounce.com	unknown	unknown	false	unknown
cdn.firstpromoter.com	unknown	unknown	false	unknown
f.vimeocdn.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
assets.sesamehr.com	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
vod-adaptive-ak.vimeocdn.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
player.vimeo.com	unknown	unknown	false	unknown
cmp.inmobi.com	unknown	unknown	false	unknown
www.sesamehr.es	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://feedback.hubapi.com/feedback/public/v1/web-config?portalId=8564339&utk=6431421cfebbb0c5029e008c4fb6bcf4&bundleVersion=1.21796&currentUrl=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F&pageUrl=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F	false	unknown
https://www.sesamehr.com/wp-content/themes/sesamehr/assets/images/capterra47.svg	false	unknown
https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/ilustracion.webp	false	unknown
https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/index.js?ver=3.0	false	unknown
https://www.facebook.com/tr/?id=1100471544585903&ev=PageView&dl=https%3A%2F%2Fwww.sesamehr.com%2F&rl=&if=false&ts=1728049138942&sw=1280&sh=1024&ud[external_id]=6431421cfebbb0c5029e008c4fb6bcf4&v=2.9.170&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1728049138940.727017134249654115&ler=empty&cdl=API_unavailable&it=1728049128185&coo=false&rqm=GET	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-7.svg	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=8564339&rcu=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F&pu=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F&t=Sign+Up+-+Sesame+HR&cts=1728049164247&vi=6431421cfebbb0c5029e008c4fb6bcf4&nc=false&u=21905764.6431421cfebbb0c5029e008c4fb6bcf4.1728049126817.1728049126817.1728049126817.1&b=21905764.2.1728049126817&cc=15	false	unknown
https://cmp.inmobi.com/tcfv2/53/cmp2ui-en.js	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=1100471544585903&ev=PageView&dl=https%3A%2F%2Fwww.sesamehr.com%2F&rl=&if=false&ts=1728049138942&sw=1280&sh=1024&ud[external_id]=6431421cfebbb0c5029e008c4fb6bcf4&v=2.9.170&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1728049138940.727017134249654115&ler=empty&cdl=API_unavailable&it=1728049128185&coo=false&rqm=FGET	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/01/sesamehr-logo.svg	false	unknown
https://connect.facebook.net/signals/config/1100471544585903?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=746567544052736&ev=PageView&dl=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F&rl=&if=false&ts=1728049164544&sw=1280&sh=1024&ud[external_id]=6431421cfebbb0c5029e008c4fb6bcf4&v=2.9.170&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1728049138940.727017134249654115&ler=empty&cdl=API_unavailable&it=1728049164328&coo=false&rqm=FGET	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63790.svg	false	unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=8564339&rcu=https%3A%2F%2Fwww.sesamehr.com%2F&pu=https%3A%2F%2Fwww.sesamehr.com%2F&t=Sesame+HR+-+The+most+complete+Human+Resources+Software&cts=1728049126820&vi=6431421cfebbb0c5029e008c4fb6bcf4&nc=true&u=21905764.6431421cfebbb0c5029e008c4fb6bcf4.1728049126817.1728049126817.1728049126817.1&b=21905764.1.1728049126817&cc=15	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/01/gestion-de-tiempo.svg	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63782.svg	false	unknown
https://a.nel.cloudflare.com/report/v4?s=qvi51zdXRcAUvgktCaghBhlt8iZxNfLtoShDt%2Fnz%2BGZaA50d6lYYO%2FdTFBJSjekMUJ9Q%2Btwbx30kxHd2LAnfwVFoJVwl7F160GYalM9LadaFoxBEw6u2MqOWQolfp0UeFA%3D%3D	false	unknown
https://www.facebook.com/tr/?id=885752078714622&ev=PageView&dl=https%3A%2F%2Fwww.sesamehr.com%2F&rl=&if=false&ts=1728049138962&sw=1280&sh=1024&ud[external_id]=6431421cfebbb0c5029e008c4fb6bcf4&v=2.9.170&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1728049138940.727017134249654115&ler=empty&cdl=API_unavailable&cs_est=true&it=1728049128185&coo=false&rqm=GET	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/06/LATAM-AIRLINES.svg	false	unknown
https://www.facebook.com/tr/?id=3852657628303348&ev=PageView&dl=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F&rl=&if=false&ts=1728049164556&sw=1280&sh=1024&ud[external_id]=6431421cfebbb0c5029e008c4fb6bcf4&v=2.9.170&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1728049138940.727017134249654115&ler=empty&cdl=API_unavailable&it=1728049164328&coo=false&rqm=GET	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-8.svg	false	unknown
https://www.sesamehr.com/wp-content/uploads/2023/06/peru.png	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=424873573760210&ev=PageView&dl=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F&rl=&if=false&ts=1728049164541&sw=1280&sh=1024&ud[external_id]=6431421cfebbb0c5029e008c4fb6bcf4&v=2.9.170&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1728049138940.727017134249654115&ler=empty&cdl=API_unavailable&it=1728049164328&coo=false&rqm=FGET	false	unknown
https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/podcast_kleta-05.webp	false	unknown
https://www.facebook.com/tr/?id=746567544052736&ev=PageView&dl=https%3A%2F%2Fwww.sesamehr.com%2F&rl=&if=false&ts=1728049138958&sw=1280&sh=1024&ud[external_id]=6431421cfebbb0c5029e008c4fb6bcf4&v=2.9.170&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1728049138940.727017134249654115&ler=empty&cdl=API_unavailable&it=1728049128185&coo=false&rqm=GET	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/05/talento_y_cultura.webp	false	unknown
https://cmp.inmobi.com/GVL-v2/cmp-list.json	false	unknown
https://cmp.inmobi.com/choice/srUtCbgF3R7rD/www.sesamehr.com/choice.js?tag_version=V2	false	unknown
https://www.google.com/recaptcha/api.js	false	unknown
https://cta-service-cms2.hubspot.com/web-interactives/public/v1/embed/combinedConfigs?portalId=8564339&currentUrl=https%3A%2F%2Fwww.sesamehr.com%2F	false	unknown
https://getsesametime.com/	false	unknown
https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/elipse_4853.webp	false	unknown
https://www.sesamehr.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	unknown
https://www.sesamehr.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1	false	unknown
https://api.cmp.inmobi.com/?log=%7B%22accountId%22%3A%22srUtCbgF3R7rD%22%2C%22domain%22%3A%22www.sesamehr.com%22%2C%22publisher%22%3A%22SesameHR%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.53%22%2C%22displayType%22%3A%22gbc%3Amandatory%22%2C%22configurationHashCode%22%3A%22ZaXh4z9yxA%2BQ4O5urX%2BYvg%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1728049150528%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GBC-o8kux8nnxg950ni5vt0c%22%7D	false	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=885752078714622&ev=PageView&dl=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F&rl=&if=false&ts=1728049164551&sw=1280&sh=1024&ud[external_id]=6431421cfebbb0c5029e008c4fb6bcf4&v=2.9.170&r=stable&a=hubspot&ec=0&o=4126&fbp=fb.1.1728049138940.727017134249654115&ler=empty&cdl=API_unavailable&cs_est=true&it=1728049164328&coo=false&rqm=FGET	false	unknown
https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja.svg	false	unknown
https://cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://player.vimeo.com/api/player.js	chromecache_449.2.dr	false		unknown
https://play.google.com/store/apps/details?id=es.sesametime.mobile.v2&referral=utm_source%3Dhome%26u	chromecache_449.2.dr	false		unknown
https://www.anonymised.io/privacy	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
https://answers.chartboost.com/en-us/articles/200780269	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
http://polymer.github.io/AUTHORS.txt	chromecache_336.2.dr	false	URL Reputation: safe	unknown
https://fundingchoicesmessages.google.com/i/$	chromecache_369.2.dr, chromecache_316.2.dr	false		unknown
https://pay.google.com/gp/v/widget/save	chromecache_400.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_302.2.dr, chromecache_274.2.dr	false	URL Reputation: safe	unknown
https://t.firstpromoter.com/get_details	chromecache_535.2.dr, chromecache_308.2.dr	false		unknown
https://admasters.media/static/vendorDisclosure.json	chromecache_297.2.dr, chromecache_478.2.dr	false		unknown
https://www.sesamehr.com/ai/	chromecache_449.2.dr	false		unknown
https://www.sesamehr.com/advanced-electronic-signature/	chromecache_468.2.dr, chromecache_449.2.dr	false		unknown
https://www.sesamehr.it	chromecache_449.2.dr	false		unknown
https://github.com/microsoft/clarity	chromecache_303.2.dr, chromecache_388.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_274.2.dr	false	URL Reputation: safe	unknown
https://www.sesamehr.com/signup/#breadcrumb	chromecache_468.2.dr	false		unknown
https://www.instagram.com/sesame_hr/	chromecache_468.2.dr, chromecache_449.2.dr	false		unknown
http://polymer.github.io/PATENTS.txt	chromecache_336.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_504.2.dr, chromecache_400.2.dr	false		unknown
https://www.synamedia.com/privacy-policy/	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
https://www.sesamehr.com/shift-management/	chromecache_449.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_369.2.dr, chromecache_316.2.dr	false	URL Reputation: safe	unknown
https://app.sesametime.com/login/?googleTokenId=	chromecache_468.2.dr	false		unknown
https://www.bose.co.uk/en_gb/legal/cookie_policy.html	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
http://googleads.g.doubleclick.net	chromecache_369.2.dr, chromecache_316.2.dr	false		unknown
https://t.firstpromoter.com/tr	chromecache_535.2.dr, chromecache_308.2.dr	false		unknown
https://app.clipflip.video/static/iab-vendor.json	chromecache_297.2.dr, chromecache_478.2.dr	false		unknown
https://www.jysk.ee/cookies	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_369.2.dr, chromecache_316.2.dr	false		unknown
https://www.first-id.fr/politique-de-confidentialite	chromecache_297.2.dr, chromecache_478.2.dr	false		unknown
http://www.hubspot.com	chromecache_447.2.dr, chromecache_325.2.dr, chromecache_263.2.dr, chromecache_438.2.dr	false		unknown
https://www.redcubes.biz/privacy-policy	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
https://play.google.com/store/apps/details?id=es.sesametime.mobile.v2&gl=ES	chromecache_468.2.dr, chromecache_449.2.dr	false		unknown
https://www.sesamehr.com/workspace-booking-system/	chromecache_468.2.dr, chromecache_449.2.dr	false		unknown
https://www.sesamehr.nl	chromecache_449.2.dr	false		unknown
https://www.sesamehr.com/performance-evaluations/	chromecache_449.2.dr	false		unknown
https://js.hs-banner.com/v2	chromecache_263.2.dr, chromecache_438.2.dr	false		unknown
https://www.sesamehr.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F	chromecache_468.2.dr	false		unknown
https://app-sq2.sesametime.com/register/	chromecache_468.2.dr	false		unknown
https://github.com/google/safevalues/issues	chromecache_504.2.dr, chromecache_400.2.dr	false		unknown
https://www.clipflip.video/data-privacy	chromecache_478.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_302.2.dr, chromecache_274.2.dr	false	URL Reputation: safe	unknown
https://ads.cazamba.com/policies/dsd.json	chromecache_297.2.dr, chromecache_478.2.dr	false		unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_504.2.dr, chromecache_400.2.dr	false		unknown
https://cazamba.com/en/platform-privacy/	chromecache_478.2.dr	false		unknown
https://www.algorix.co/gdpr-disclosure.json	chromecache_297.2.dr, chromecache_478.2.dr	false		unknown
https://www.iab.com/topics/public-policy/	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
https://www.sesamehr.com/wp-content/themes/sesamehr/img/pages/registro/Fondo-form.png	chromecache_468.2.dr	false		unknown
https://admasters.media/privacy/	chromecache_297.2.dr, chromecache_478.2.dr	false		unknown
https://www.sesamehr.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.sesamehr.com%2F	chromecache_449.2.dr	false		unknown
https://apis.google.com	chromecache_400.2.dr	false	URL Reputation: safe	unknown
https://www.sesamehr.mx	chromecache_449.2.dr	false		unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_336.2.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_302.2.dr, chromecache_274.2.dr	false	URL Reputation: safe	unknown
https://player.vimeo.com/NOTICE.txt	chromecache_510.2.dr, chromecache_499.2.dr, chromecache_356.2.dr, chromecache_549.2.dr	false		unknown
http://www.xcheck.co/privacy	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
https://www.sesamehr.com/security-policy/	chromecache_468.2.dr, chromecache_449.2.dr	false		unknown
http://www.signifimedia.com.au/home/privacy	chromecache_552.2.dr, chromecache_523.2.dr	false		unknown
https://cse.google.com/cse.js	chromecache_369.2.dr, chromecache_316.2.dr	false		unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_302.2.dr, chromecache_274.2.dr	false	URL Reputation: safe	unknown
https://cdn.ampproject.org/rtv/$	chromecache_369.2.dr, chromecache_316.2.dr	false		unknown
https://www.sesamehr.com/task-tracking/	chromecache_449.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
15.235.45.220	sesamehr.com	United States	71	HP-INTERNET-ASUS	false
15.197.225.128	getsesametime.com	United States	7430	TANDEMUS	false
52.28.88.203	unknown	United States	16509	AMAZON-02US	false
142.250.74.206	plus.l.google.com	United States	15169	GOOGLEUS	false
146.75.52.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.245.46.122	d3g1ftmock1oxn.cloudfront.net	United States	16509	AMAZON-02US	false
104.16.118.116	cta-service-cms2.hubspot.com	United States	13335	CLOUDFLARENETUS	false
104.18.40.240	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.18.240.108	feedback.hubapi.com	United States	13335	CLOUDFLARENETUS	false
104.16.138.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.245.86.69	unknown	United States	16509	AMAZON-02US	false
104.17.128.172	js.hsadspixel.net	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.80.204	perf-na1.hsforms.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
151.101.192.217	unknown	United States	54113	FASTLYUS	false
54.38.108.40	sesamehr.es	France	16276	OVHFR	false
104.18.241.108	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.64.124	js.hubspotfeedback.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.109	unknown	United States	54113	FASTLYUS	false
104.17.224.124	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.253.72	s-part-0044.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
54.165.55.65	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
199.60.103.29	group39.sites.hscoscdn30.net	Canada	23181	QUICKSILVER1CA	false
104.17.175.91	static.hsappstatic.net	United States	13335	CLOUDFLARENETUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.19.175.188	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.243.108	api.hubapi.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
104.17.245.203	unknown	United States	13335	CLOUDFLARENETUS	false
172.64.147.16	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.128.217	vimeo.map.fastly.net	United States	54113	FASTLYUS	false
104.16.160.168	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
104.18.244.108	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.246.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
34.120.202.204	fresnel.vimeocdn.com	United States	15169	GOOGLEUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
34.120.15.67	fresnel-events.vimeocdn.com	United States	15169	GOOGLEUS	false
104.244.42.3	unknown	United States	13414	TWITTERUS	false
18.245.31.86	d2ycxbs0cq3yaz.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
3.160.150.36	d23sp3kzv1t6m5.cloudfront.net	United States	16509	AMAZON-02US	false
18.245.86.4	cdn.amplitude.com	United States	16509	AMAZON-02US	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
151.101.194.109	vimeo-video.map.fastly.net	United States	54113	FASTLYUS	false
35.157.41.160	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
188.114.96.3	capig.stape.cloud	European Union	13335	CLOUDFLARENETUS	false
104.16.76.142	js.usemessages.com	United States	13335	CLOUDFLARENETUS	false
104.16.117.116	api.hubspot.com	United States	13335	CLOUDFLARENETUS	false
104.17.223.152	unknown	United States	13335	CLOUDFLARENETUS	false
172.66.0.227	t.co	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.9
192.168.2.5
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525857
Start date and time:	2024-10-04 15:37:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://getsesametime.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/472@212/61
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.sesamehr.com/registro/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 142.250.184.206, 108.177.15.84, 34.104.35.123, 142.250.185.200, 142.250.185.74, 142.250.185.98, 162.159.128.61, 162.159.138.60, 142.250.186.72, 88.221.110.227, 88.221.110.136, 172.217.16.206, 13.107.42.14, 216.58.206.66, 172.217.16.131, 2.16.238.145, 2.16.238.149, 4.245.163.56, 23.206.121.47, 23.206.121.20, 172.217.18.3, 192.229.221.95, 40.69.42.241, 104.18.41.41, 172.64.146.215, 20.114.189.70, 20.3.187.198, 13.74.129.1, 204.79.197.237, 13.107.21.237, 104.18.186.31, 104.18.187.31, 142.250.181.227, 172.217.18.10, 142.250.186.74, 142.250.186.138, 142.250.185.170, 172.217.16.138, 216.58.206.74, 216.58.212.138, 172.217.16.202, 142.250.185.106, 142.250.186.106, 216.58.206.42, 142.250.185.138, 142.250.186.170, 172.217.23.106, 142.250.186.42, 142.250.185.67, 142.250.186.174, 142.250.184.238
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, otelrules.afd.azureedge.net, clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com, clientservices.googleapis.com, a767.dspw65.akamai.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bat.bing.com, sls.update.microsoft.com, update.googleapis.com, azurefd-t-prod.trafficmanager.net, www.gstatic.com, a1792.dscc.akamai.net, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, player.vimeo.com.cdn.cloudflare.net, content-autofill.googleapis.com, fonts.gstatic.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, c-bing-com.dual-a-0034.a-msedge.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://getsesametime.com/

Input	Output
URL: https://www.sesamehr.com/ Model: jbxai	{ "brand":["Sesame"], "contains_trigger_text":true, "trigger_text":"14-day free trial", "prominent_button_name":"Free trial", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.sesamehr.com/ Model: jbxai	{ "brand":["Sesame"], "contains_trigger_text":true, "trigger_text":"Reshape your team's work experience", "prominent_button_name":"Free trial", "text_input_field_labels":["Hello Susan, welcome", "Who's in"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.sesamehr.com/ Model: jbxai	{ "brand":["Sesame"], "contains_trigger_text":true, "trigger_text":"We and our partners store and/or access information on a device, such as cookies and process personal data, such as unique identifiers and standard information sent by a device for personalised advertising and content, advertising and content measurement, audience research and services development. With your permission we and our partners may use precise geolocation data and identification through device scanning. You may click to consent to our and our 101 partners' processing as described above. Alternatively you may click to refuse to consent or access more detailed information and change your preferences before consenting.", "prominent_button_name":"MORE OPTIONS", "text_input_field_labels":["Hello Susan, welcome"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.sesamehr.com/signup/ Model: jbxai	{ "brand":["Sesame"], "contains_trigger_text":true, "trigger_text":"We and our partners store and/or access information on a device, such as cookies and process personal data, such as unique identifiers and standard information sent by a device for personalised advertising and content, advertising and content measurement, audience research and services development. With your permission we and our partners may use precise geolocation data and identification through device scanning. You may click to consent to our and our 101 partners' processing as described above. Alternatively you may click to refuse to consent or access more detailed information and change your preferences before consenting.", "prominent_button_name":"Create your account!", "text_input_field_labels":["Number of employees"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:38:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.972654618421191
Encrypted:	false
SSDEEP:	48:8jdaTmOYcH8idAKZdA19ehwiZUklqehyy+3:8I/Y3dy
MD5:	78B6824F4C8BFA1215DC05A6B10A84EE
SHA1:	26BFB0E7A7A388B5C4C2943550A9CDEA52B6F692
SHA-256:	0870805A2E3D853B9F54E987D4E2FDC70784DB08EBB0C1C9E53B3C93E89B80A0
SHA-512:	51C4B7F09F30B143242DE8B551CF34C41A40F9375A834CB863FC4897C45D0513AE2CA9AFD03DBFFA79E733CD6E93C9BEAEAAAE2C6A167277F6DB8CDFBD6EE8B5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......1.b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:38:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9913334816144577
Encrypted:	false
SSDEEP:	48:81daTmOYcH8idAKZdA1weh/iZUkAQkqehNy+2:8S/Y99Qoy
MD5:	9B90B886FA589B656E86DA36C2A373CE
SHA1:	4A1F5EFD2A9FA59706DD6FDD9F6EA96A00E4BE6A
SHA-256:	F78C02D85EF532D60C93547A7D2A4BFB78215C26875388133E4657309B8A03C9
SHA-512:	67C8A3DCF94DFEF03CABE32E0061750139E5E28A9B6BDB7E88E84E659CEE45078361128B7EB16AB64BEF4C5F1713EAB2DD0AB143A7EB364B79AD753D87A45E24
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......#.b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0001420396666205
Encrypted:	false
SSDEEP:	48:8x/daTmOsH8idAKZdA14tseh7sFiZUkmgqeh7sDy+BX:8xs/dn5y
MD5:	B03C595F46D0A1DFF2D6AAB396244E30
SHA1:	44B64ECEF7CE719825979C8D699C217E1D762C1E
SHA-256:	C9A03D729D0797A0055011DF1508403155B9633F6A3FB0BD802071F8D8676662
SHA-512:	26CC689323F5331897C3513454A4C0EFBEFDA8FACC7A1BAAF96D98286D16551870AA2F7982FFFFCFFF9FA1FA37BAB6D1C480E5B48A3704DCC88FD2E34C5827C9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:38:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9875026768928183
Encrypted:	false
SSDEEP:	48:8OdaTmOYcH8idAKZdA1vehDiZUkwqehBy+R:8n/Y+Ly
MD5:	D28403A6B23F087E38BE70740AC79F60
SHA1:	E398D3942D6650AD37698D3080CB9797148B97D5
SHA-256:	78762467A5AE3CC0C20D2791B3D8504937ACDFD333A25E2F2875C2843543FB3B
SHA-512:	AEEDA93A669D98E62A9435DCAA5DE813F1CA14B49EFF6A18B3C969445D7EE17C86BC7699182C5F011E794A6454DD6779B27CFE54C7AA5A7A5A6CDCE27F7EA232
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....A..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:38:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9749339957776546
Encrypted:	false
SSDEEP:	48:89daTmOYcH8idAKZdA1hehBiZUk1W1qeh/y+C:8q/YO9fy
MD5:	C3FCFEF517C702C3359C325B2C808CF8
SHA1:	54A408A2DEB4B718DD1CC56CF51FC6466DB9B472
SHA-256:	D4F7B796CFF2FF462DD0B3723F64149ABFFF3581C337FD007ED026BB0650284F
SHA-512:	89F7185D329A35AECE4222C5CFEB0ACFD5AFF77B1887D22A3263B2D096ED2900404F528EA72C205B3DC68E49C2F85CC38A22FE61B3CB4DBE8C7E43C158B06203
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....:.,.b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:38:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.985873364109904
Encrypted:	false
SSDEEP:	48:8kdaTmOYcH8idAKZdA1duT+ehOuTbbiZUk5OjqehOuTb5y+yT+:8N/YwT/TbxWOvTb5y7T
MD5:	E525A01A785D8283CCD26C7E55AFD553
SHA1:	852423162D467DD0008A9DC4DAA34FDE84A0D0C0
SHA-256:	937778FC3BC1DB51BDD671FB11BBB1F6656A4A329FEAB568CA7A5805952D068C
SHA-512:	8AD0C4840B4B4C87DF62AD3B470ED21D7B396ECD951C2DC72981748BB08A8D0276445718BA42C0DDB976A370B7815663A09DFF1FADB1FC659B77444CA23AED8D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....t4..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........O........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1402
Entropy (8bit):	7.794041175461214
Encrypted:	false
SSDEEP:	24:7KPYK6WVsN1neq0Sl3apmcRqCeSbdRRKErE9pp4u:7KPYzWVUneq0S4p3TL1ELyu
MD5:	63FD1712F7CC6446DDDD5D64DD5B0115
SHA1:	FEAAC329542064E54FCF6063353780A54A35D3F4
SHA-256:	16300D443AF4AB535247010DE7D26BD4ABC979A4923EA2A8F3FA0D76AE3EFC06
SHA-512:	D7AD0D24F64099FF71E50630EC45C35EBEC9AF40055ABF48CAC242909908A7C6B39765899AA9A77A933739731BD6CC369FACD72A1EA72948B60041C7A5F4985C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....AIDATX...oTU..?.s.SP.".......-..A....j.A:.&......;\|E..u.caL..Q...!...<li.....`.Y -3..s1g.2.Z.~...s.~~.s~....(.0.P#...4p70.8....d......A........G..."...2.<0..?.........m..d..-....v..g....60.".z...p(......=...l?(c!#G.o.......@...P.i....@....~..l..`..5..V..{....].f.....U.8.....ND.A.uuM'N.....h-.\E.+....`.....E..P.../.`P.."T.l;=..]....6@.L.y.A.F..w..&ZR ..,D.`1..X...\.#Q._.=ea.5..E."..u.....:...H...u.s.j.:.Y.....Tz.z....n...m..-xe...:.Hg{...0.9../S.l.X...%@.o......N9...^.^,.j%.;.K.~..Lo..w`...%5.....8..A/T...t......H.....;K..4#..=../....iF.d9.Lg....=.....&..X...+;...x..._I..u.h?V...h}....s./.Q.4./...U./f...{..A....'..(..)Ua.c.0.y8Kh.......q.../...x..4`.....V.\..Ds....;...IC..r....z...#>.x.....N...9..1......,u...}_...z4..\....S...7.s.p4.<...w...7r.o.h.J.n].`.......Q(..9\...q......../\.s.w.U].'.~.!....k.C.P/...L..-..X..)..1..o..>..p...e.6`.a..lT[R......."...yCd.0.0p...N....W........ea\.6.o,...o.2.@M].$........!....k..9'9V3....

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	276406
Entropy (8bit):	5.545778541249646
Encrypted:	false
SSDEEP:	3072:gKIp9SXNKW4s96M9C0xsiC2uBcO9yyqo5/Aux9SEgpix72Dej771i:lIGKlu6512vO5gbcx72Dej7U
MD5:	24E36B21159466226205C9957AF5A20E
SHA1:	16C46D3D1310AE4861BEF49DDE3B79CA08D14EB7
SHA-256:	C38FE583441AB5C4C276C2F58E8A874C07EE8A7F88B7735943729EFA32DFF586
SHA-512:	C8710415465DCD0CEFD567A5DD630EED57082229C2A523F8138D0B715D2F7B286F93E9C3672B32AA8032D95C122CFB51597FE53707D1F079D7B964F0CAFE3F20
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-665634807","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4112
Entropy (8bit):	4.695920519585393
Encrypted:	false
SSDEEP:	96:4ecVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOo+:4ecVWNXK3XuXW5i
MD5:	44B586013F63C7CE3F8F0284D98D2009
SHA1:	4AFD3B9D47BD532116F849784C5C9B015B587A6B
SHA-256:	F4B0F46D782F318FDEE620F094F08CCC4E06B13EDA75A6B986ADB0BE116D1ABB
SHA-512:	EC796CAAC7049676F96D178088EA15E1F738D71CF816342F229CD7285AE26CF31A2E83E16953CF9EE9D87F6EDCC85DB3C7BC6E244981C7BF786C7490CD4909AB
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {..

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11186
Entropy (8bit):	4.0042504408879225
Encrypted:	false
SSDEEP:	192:h7cHMmkxI86RIIW/RcxGF6U/8IpEdAd88qYkEDuoeB8iy1Wv8j/:hYoxI8OTkcx43/85mC83kEyoa8d1WEj/
MD5:	3012CB799A53603E03B6B92FFC5E0416
SHA1:	10ADCA112E8F5485636805DB7B9B61338A042DCC
SHA-256:	EB64F0AAB1BEF09AA25FD470B3FAAC0C63C0DC4C0D63B41B9B996D43845F3144
SHA-512:	D0D910649C910EB192CC5B41E2ABEC504928D5CC8009629D8C04C76EE77B7E80E7777CCCEA05EE585B874BDC5E66DB480E757E44A5562B318E9EBFD8EAD4F0A1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 352.09 113.04"><defs><style> .cls-1 { fill: #27304f; stroke-width: 0px; } </style></defs><g id="RAm8iY.tif"><g><path class="cls-1" d="M52.44,26.48c-4.4-1.58-8.81-3.16-13.21-4.74-6.14-2.2-12.28-4.4-18.42-6.61-.65-.23-1.27-.55-1.86-.92-1.9-1.19-2.84-2.92-2.85-5.15,0-2.02,0-4.05,0-6.07,0-.42.06-.81.43-1.09.21,0,.43,0,.64,0,2.65.95,5.29,1.91,7.95,2.86,12.55,4.48,25.11,8.96,37.66,13.44.97.35,1.94.68,2.9,1.06.97.39,1.05,1.04.23,1.7-.87.71-1.9,1.08-2.94,1.47-.37.14-.74.29-1.01.59,0,0,0-.01,0-.01-.11-.03-.21-.05-.22.11h.01c-.16-.06-.28.01-.39.11-2.93,1.2-5.95,2.17-8.92,3.26Z"></path><path class="cls-1" d="M352.2,102.92c-.19.27-.16.6-.26.89-.65,2.09-2.13,3.38-4.07,4.23-1.95.85-4.03,1.13-6.13,1.14-3.3.03-6.5-.54-9.52-1.91q-.84-.38-.54-1.25c.21-.62.42-1.24.63-1.86,0-.01.02-.02.03-.02,2.02,1.3,4.31,1.78,6.64,2.06,2.12.26,4.25.31,6.36-.19.85-.2,1.66-.52,2.37-1.04.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	333
Entropy (8bit):	5.2692285785442605
Encrypted:	false
SSDEEP:	6:TMVBd/qOI9mc4slz2lWejZ0cldUbqdjrWXvJiVthw49dVQ6mqZlloqo:TMHdiO44lWejZ01bqdQvJiVthw4PVQ6U
MD5:	FA0FD36E8C2CFFB3E4FB0DC8AF397F02
SHA1:	9555AC2465477941B928C0EF28AA3CEB1DE07B99
SHA-256:	B6CC2393DFEF8BA44857C6F6639A065B8A34193C6DCA3590B0FB8AD46017F845
SHA-512:	4914F715764B50C7E1EF7F4EE5E1E48D1F7A5EA49AEC728E24CE77989CB979F8BD89FB8E1A346FEC018D8E39283AD6A2AF60AA9BD976E2D420198375D70F209C
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-2.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M18 27V23M18 19V15M18 11V9M16 27H20M14 11V15H25L27 13L25 11H14ZM20 19V23H12L10 21L12 19H20Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	515
Entropy (8bit):	7.089198709884326
Encrypted:	false
SSDEEP:	12:6v/7gVvZiFtCCNWUxT0125XYDIJOJnq5XN:XQk3UuqIDIEJi9
MD5:	9D245EE08FFDA6EB9003D1DA746368C2
SHA1:	BEBA9DBCDC80B89AC68DD9388D75C537500E0892
SHA-256:	5A2324B04BF9EEC32B58575F28585CE1A5700C8F6C0CCD3018CA6BDCD1FDCFAB
SHA-512:	61C155ADF191A222DD990A0C4389DF85DAF3AB2AD4D30BD9EF05CD140C384F539E2F84EAE02FB9CB391467DB3D7A29915E80C5B94B7828A4A34EC8C3E3581FB6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE....CJ.BJ.BK.AK.AK.AK.vn....o.AK.nY.~R.lI.wc.w_.{c...c.`.R.~H..H.....^.H..T.u.K._.W..\.....a...q...Z..g.q.....\......].....r..Q.....R..P..P..s..r....j..l..P..O..P..Q..P..Q4.C.....tRNS.&].....w&}....IDAT(..E..0...q...M.......>...u..+I..q..x.3.p\.....2..e....a..E.W....$...0..~.=}./...bb...Lx..Ht>(.L(mk.XaX9.p.[.Lr...0.s.vWU...m@..\|..Z..T}>..WpI.......IEND.B`.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1541
Entropy (8bit):	4.4748128794032125
Encrypted:	false
SSDEEP:	48:c35VVfIUZDZmUWupqnGUwE5rQmtd7J2pBG:IFJgGhWrQmtFEpBG
MD5:	FE0E798E1499121727306002D29FCAE6
SHA1:	D4E62A62523BD846754179BC010CBA192CC5CDBF
SHA-256:	8412763457FA476615E881AD4B5FB462F1D3224B967E3C98D5906B408B2E9E72
SHA-512:	5818FC05F8E15665C0B6CA216437CCED6811172CABBBD28DFAD251F12EB7B4146748EA0C92A4879AAD9E10390D0966CA09655C629DFE63DFBD769FD0F14D5EB9
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-15.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M27 26V18.5C27 17.6716 26.3284 17 25.5 17H24.5C23.6716 17 23 17.6716 23 18.5V26M20 26V22.5C20 21.6716 19.3284 21 18.5 21H17.5C16.6716 21 16 21.6716 16 22.5V26M13 26V20.5C13 19.6716 12.3284 19 11.5 19H10.5C9.67157 19 9 19.6716 9 20.5V26M16 15.5L12.5 14.5M23.5 13L20 15M9 14C9 14.5304 9.21071 15.0391 9.58579 15.4142C9.96086 15.7893 10.4696 16 11 16C11.5304 16 12.0391 15.7893 12.4142 15.4142C12.7893 15.0391 13 14.5304 13 14C13 13.4696 12.7893 12.9609 12.4142 12.5858C12.0391 12.2107 11.5304 12 11 12C10.4696 12 9.96086 12.2107 9.58579 12.5858C9.21071 12.9609 9 13.4696 9 14ZM16 16C16 16.5304 16.2107 17.0391 16.5858 17.4142C16.9609 17.7893 17.4696 18 18 18C18.5304 18 19.0391 17.7893 19.4142 17.4142C19.7893 17.0391 20 16.5304 20 16C20 15.4696 19.7893 14.9609 19.4142 14.5858C19.0391 14.2107 18.530

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	582
Entropy (8bit):	6.910549381630345
Encrypted:	false
SSDEEP:	12:6v/7gVvZh+4WVr6Ueeaotc+gjFMAlEJs41Jzu+LqYz:XOBVmUeeYBxOfk+LqYz
MD5:	F51630022AFD40C583D00E1951F44D73
SHA1:	BBA437915FBCFBED1868DA9BD24E365826299D2E
SHA-256:	DE0E858E544D3B31EB2F88E7950AEDBE1EF8EA03D1BD00917B731960DE7974DA
SHA-512:	1027304FD8B5462E90EF78F4B0191D7507D54F1F10850C565B849163D3E687E6B8654C073A2AC3F15B2F7ED1AE7145807F3A05EE6D0D5A8728417854811E502E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE...r...JWs...JUt...KT.........s...KUs...KUs...KUs..w..x..............................@.......K....Y..U.....X..Y..d..o.KU.QU.SU.TU.ZU.[V.\U.]U._U.bV.jV.lV.oV.rW.\|W.}W..W..W..W..W..X..X..X..X..X..Y..Y..Y..Y..Y..Y..Z..Z..Z.\|BP....tRNS.&&]].............S.....IDAT(Su....0.E#.HS...`.],......3..y.I6w.!..YA.....c(..MI....>...~.....0.1.........tr.7..T...& .-.p..Z+}.O.../.0..J{..._.............b....Y/.0n.U..Wc1..........K.`h$......E.-q.H...P.K.D?\#....IEND.B`.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62794)
Category:	dropped
Size (bytes):	75331
Entropy (8bit):	5.418017137406179
Encrypted:	false
SSDEEP:	1536:zfeebkbR3g0L7rQiG3EhCoVqF17QRA3yPv5uxL5lH757YMiLpGTD2dX7c4MYECgM:uuxVlV7VT6Bw4zK4
MD5:	496F65F7E4116CBBA9D2347C44A1F5AC
SHA1:	65EC28B1BD3A5CD5DBAFEFE289D758A7A9785507
SHA-256:	A349D89CFCEB05F93214FB7A4461BFBB23444C5E67A6CEECBBE0AD0245B2FA9A
SHA-512:	F035C6B77A03D6D1E3CE8E588A48207A24C544A30CD4367D4A7A39DE43A8167CBD193AE6CA459608F80D4E900A2407DF326495A9C8139FB23C8A4264BBA34579
Malicious:	false
Reputation:	low
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {"try.sesamehr.co":[{"id":249824,"portalId":8564339,"label":"test","enabled":true,"configuration":{"allUrlsAndLocations":false,"path":null,"targetedCountries":["CO"],"targetedRegions":[]},"policy":{"type":0,"text":{"notification":"","acceptLabel":"","declineLabel":"","disclaimer":"","modalText":null}},"legacyCustomization":{"position":0,"accentColor":"#ffffff","showCloseButton":false},"gpcSettings":{"enabled":false,"notificationText":""}}]}]);._hsp.push(['setCustomizationSettings', {"dev.sesamehr.es":{"bannerColor":"#ffffff","bannerTextColor":"#15295a","bannerSettingsButtonTextColor":"#15295a","bannerWidth":{"number":67,"units":"em"},"bannerPadding":{"number":2,"units":"em"},"bannerCorners":0,"bannerButtonCorners":2,"bannerAcceptButtonStyle":{"color":"#425b76","textColor":"#ffffff","borderColor":"#425b76"},"bannerDeclineButtonStyle":{"color":"#425b76","textColor":"#ffffff","borderColor":"#425b76"},"positi

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	288
Entropy (8bit):	6.089234388823977
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKccPKs6tt44RNcfwlP/+mtV0vXkdld8up:6v/7A/0vZcijHTlX+mtVWXkdF
MD5:	468970F001D3AAE0263508BAE18E41E3
SHA1:	DD5205A1B815275E0DD609FBE9623D2B54DB4B91
SHA-256:	FE5E5C6EBBF52F1B1475087C584A415836C2C084B2CF45E7E883CF4070ACD523
SHA-512:	151AA42E89E7B2C2C5A6D6E151DDC782B6C8E2A55B5A7FE92E71B0B39F5458EB1941BA7413744B6C2DCE36A72F8E02CC97546AA576BE667A9080343C6619D151
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/italy.png
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....0PLTE...r...JWs...JUt...KTs...KUs...KUs...KUs......KU.=......tRNS.&&]]...............IIDAT..c`........Hb``.{.....A......C,...........p...?.8(.E....P... .A..E}..z.6t....IEND.B`.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12219), with no line terminators
Category:	downloaded
Size (bytes):	12219
Entropy (8bit):	5.098138560740693
Encrypted:	false
SSDEEP:	192:j0/L/+fmuvvlkiXwX7XRXDXAXYSsA03fh5nmF5JvWYcRXnwl+nMk:Ci3vvlkkKLRzaYSO38Dc9wl6Mk
MD5:	314EFC88CB514FF3274339C0B4AB0D6A
SHA1:	649E21CA96C8BC2500CFD081C15FF477C55BB267
SHA-256:	C3A16525C5B4B78521E2ED89C22C10424E8867033EC40485E8791247CE1E9420
SHA-512:	56D9A091378048231BE1CBADEE8493B40C36BE092A9B561A047F8D529E09ECDCDB9D2AE3CC7FA60A1BCE6630976E109A25C2A35735AADD9A3DE48AB51FF50E42
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/css/style-child.css?ver=1.0
Preview:	.btn-acceder a,.btn-gratis a,.hs-submit{text-align:center}:root{--bg-primary-color:white;--btn-primary-color:#6C63FF;--btn-hover-color:#5C56DB;--font-primary-color:#1F2D52}html.js{overflow-x:hidden!important}.administracion-title,.footer-nav-widgets-wrapper.header-footer-group,.qc-cmp2-consent-info h2,ul.social-menu.reset-list-style.social-icons.fill-children-current-color{display:none!important}.max-width{max-width:1400px!important}.resaltado{color:#6c63ff;font-weight:700}.wrap{max-width:1280px;margin:0 auto}.bg-ses{background:#55e5bc}.bg-gray-ses{background:#f8f9fa!important}.bg-purple-ses,.btn-hero{background:#6c63ff}.bg-blue-ses{background:var(--font-primary-color)}.border-gray-ses{border-color:#e2e8f0!important}.demo a,.qc-cmp2-summary-buttons button,body:not(.overlay-header) .primary-menu>li>a .demo li>a,nav.primary-menu-wrapper .demo a{color:#fff!important}.blog_related_post a,.mobile-menu span.menu-image-title-after.menu-image-title,a:active,nav.primary-menu-wrapper .mega-menu-

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3038
Entropy (8bit):	4.3991893757606935
Encrypted:	false
SSDEEP:	48:c3ldXfF1YtisCflouaMF4uHtZAl8ety3AvCAZM9PA3Ky9oX8H0j:A6tisCflo5MXtZApdCsuP7aE
MD5:	99796784E0D9023C8C293B4D26071519
SHA1:	2E41E028667CDD634982C302B457BF503D02FFB6
SHA-256:	950757B3CE1C2961B21CCF0D1A205B084FDFC57E980A453F407EEDC3E11F53DC
SHA-512:	F992DFB170D2871146D8905879FC58DBB1F752B29D4CAF87FB39D55862E45870E30C98F41D8BF0FFFD9A260658B640099BB4CCC0DD7BB96AB17DD69362452429
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/06/Vector_Logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="214" height="41" viewBox="0 0 214 41" fill="none"><g clip-path="url(#clip0_226_454)"><path fill-rule="evenodd" clip-rule="evenodd" d="M16.3708 20.1931C20.136 21.7702 22.7617 24.0464 25.0379 29.1215C27.4021 24.0435 29.8516 21.5059 33.7901 19.9287C37.0296 18.704 40.3572 17.5645 43.5967 16.3397C43.6848 16.4278 43.6848 16.513 43.6848 16.6011C43.861 17.7377 43.9462 19.0506 43.9462 20.4515C43.9462 34.3699 34.7534 37.1718 25.0379 37.0866C15.4075 37.1748 6.21467 34.3729 6.21467 20.4515C6.21467 19.4001 6.21467 18.3516 6.39089 17.4764C6.479 17.3001 6.479 17.1239 6.56418 16.8625C9.80368 17.9991 13.0432 19.1387 16.3708 20.1872V20.1931ZM41.4968 10.5627C41.4086 10.4746 41.4086 10.3013 41.3235 10.2132C37.8226 5.04701 31.605 3.91039 25.0408 3.91039C18.4766 3.91039 12.0828 5.13512 8.75517 10.3894C8.58189 10.5627 8.49378 10.827 8.40567 11.0032C14.1827 14.3308 20.6617 14.3308 25.0408 22.7336C29.0674 14.0665 35.7197 13.9

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	50030
Entropy (8bit):	7.994792866149325
Encrypted:	true
SSDEEP:	768:YoC39X3Agw5oqi2zV7SiyYop59wokxPK2KRTtAzdMjWyW:+x3Rwdui2CouHMCyW
MD5:	83E1978FF3CF34DA8460CFDC384A801D
SHA1:	993C7357045DFF0391E4938C9BD40A81C94A6761
SHA-256:	43B7AD81B01A86968CF8D1817DE5D07FB84C3141C6D50CE087930A9ACD8631DC
SHA-512:	046C91C020B3608EB24A33437DBBDA11F77B711ABE1EED3347F0130B6C3918CADB7AB00EB423FD4E6F1C52294891AFC41CA7752325BA3294AB6655E7FB1F0C9A
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/evento_kleta-03.webp
Preview:	RIFFf...WEBPVP8LY.../../.M8l.F..ev..y./...".?.m.3(. t../...w...w.Q..A.....(..X..j.,.v]....@rN..^...Gp.$..&'!.Z&[..3a.....&..&..4."..^....L.....`R!Z.AE.Bc...JK.i...8.v.TU.i.J.b.Z.PUWw.......\|.....^..u.Dk-........:...H.$W.v..g.w}.u(..QQ.......r$...e..<f..k...z.L.G.$...x$9Z ...m..$.V.Bp.S.....L...W...v........&_._\|Zb..'...W..!O...0`....'.....L......oq.w.I.O..._...a.../{..[L..L.s..S.........f;s.C ....h._...w.._.R.{............Q...3..L\|.,e.[.H5gL..kb..%\|..pL..5.[X,w.t$=...%..Wq....1.'......w..J..Kp..Tr.z!...10.W...X..q...7..b...mj..+......f...Q.......9.".......9m&e.5q..dt.7...-.!o.....j?3~9........j...E.DM..w.....2..\g!V...e....S#5...4..L..Q.......DsWQ.N.ML..7y.n,.vZ...p...k.v.....4..vlwc..aG.;.1...[...;B..........Uj....J..........z..j....K.n.4..p.. .5&..[.R.H.....H..19+R..r.57.6i.S..x7......"...8...H....J.}Z.;...I.IZRE.......d...{:tV.V.N.....r....~.6...h.V{9T...5uv..._......!.u.s...V.v..cSr:.0.2..7..4.hFS..B-..........J.J.O0.....I.......

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	18081
Entropy (8bit):	4.193095505552643
Encrypted:	false
SSDEEP:	384:d3kpjEQhvWRdO/k14ygO03NeN45jyV8D7rAE3uULBLMgysJTGAUHXs9uggcOduej:KEaWUO0W45jyVV2gsVN9ut30dxi
MD5:	0DA49DFE0B88BC804177F5A8072ABDB3
SHA1:	ACEECAB554F7219E60C4FD78840E4298D2B6670B
SHA-256:	7D31701A3BE824531002A9276E7F48EDD59DC4D98712B9C77E292F96942CF742
SHA-512:	31735078BE633A14FEB6E3E1F0E3E94E0BDFAA1B76CE5C429E89090CFC9172D86146A4F616B518F9437AFE46291F1CDE3021C266A7F814F743C858076D316B2D
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/images/iso-27001.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: $$$/GeneralStr/196=Adobe Illustrator 27.6.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 156.2 151.2" style="enable-background:new 0 0 156.2 151.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#757675;}...st1{fill:#F37021;}...st2{fill:#E1B18B;}.</style>.<g>..<path class="st0" d="M77.7,2.1C91,2.8,103.1,7,114,14.6c13.6,9.5,22.8,22.2,27.6,38.1c1.2,4,2.1,8.1,2.4,12.4...c0.2,2.7,0.4,5.5,0.4,8.2c0,11.2,0,22.3,0,33.5c0,0.4,0,0.9,0,1.4c-4.7,0-9.4,0-14.1,0c0-0.4,0-0.8,0-1.2c0-11.7,0.1-23.4,0-35.2...c-0.1-10.2-2.8-19.6-8.1-28.3c-8-13.1-19.5-21.6-34.4-25.6c-3.2-0.9-6.5-1.4-9.9-1.6c-3.4-0.3-6.8-0.3-10.2,0.1...c-10,1.1-19.2,4.5-27.4,10.5c-9.5,6.9-16.3,16-20.3,27c-1.3,3.6-2.2,7.3-2.7,11.1c-0.4,2.6-0.4,5.2-0.7,7.9c-0.3,0-0.8,0-1.2,0...c-3.8,0-7.7,0-11.5,0c-0.4,0-0.9,0-1.3,0.1c0-1,0-2.1,0

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	276399
Entropy (8bit):	5.545736873207595
Encrypted:	false
SSDEEP:	3072:gKIp9SXNKW4s+DM9C0xsiC2uBcO9yyqo5/Aux9SEgpix72Dej771i:lIGKljD512vO5gbcx72Dej7U
MD5:	6DAFC75417751731DD4054577EDC5F56
SHA1:	B723D9CEA5C61515B5467ADCF81B01A7B13159D8
SHA-256:	4BEEEFDA5E2D1B2A56E1F5D5160BB7CAAE4193850BE9B556F082EFD0CB8BA3EE
SHA-512:	1BC00799D42F2BFE54018DA0B875F8517F531B09370F63F27BF491F33470226C06BA373A8E754CFFB77D7E2090E88DC93B6707E8B9E4695CA99D72948210BEAE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-665634807&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-665634807","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3038
Entropy (8bit):	4.3991893757606935
Encrypted:	false
SSDEEP:	48:c3ldXfF1YtisCflouaMF4uHtZAl8ety3AvCAZM9PA3Ky9oX8H0j:A6tisCflo5MXtZApdCsuP7aE
MD5:	99796784E0D9023C8C293B4D26071519
SHA1:	2E41E028667CDD634982C302B457BF503D02FFB6
SHA-256:	950757B3CE1C2961B21CCF0D1A205B084FDFC57E980A453F407EEDC3E11F53DC
SHA-512:	F992DFB170D2871146D8905879FC58DBB1F752B29D4CAF87FB39D55862E45870E30C98F41D8BF0FFFD9A260658B640099BB4CCC0DD7BB96AB17DD69362452429
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="214" height="41" viewBox="0 0 214 41" fill="none"><g clip-path="url(#clip0_226_454)"><path fill-rule="evenodd" clip-rule="evenodd" d="M16.3708 20.1931C20.136 21.7702 22.7617 24.0464 25.0379 29.1215C27.4021 24.0435 29.8516 21.5059 33.7901 19.9287C37.0296 18.704 40.3572 17.5645 43.5967 16.3397C43.6848 16.4278 43.6848 16.513 43.6848 16.6011C43.861 17.7377 43.9462 19.0506 43.9462 20.4515C43.9462 34.3699 34.7534 37.1718 25.0379 37.0866C15.4075 37.1748 6.21467 34.3729 6.21467 20.4515C6.21467 19.4001 6.21467 18.3516 6.39089 17.4764C6.479 17.3001 6.479 17.1239 6.56418 16.8625C9.80368 17.9991 13.0432 19.1387 16.3708 20.1872V20.1931ZM41.4968 10.5627C41.4086 10.4746 41.4086 10.3013 41.3235 10.2132C37.8226 5.04701 31.605 3.91039 25.0408 3.91039C18.4766 3.91039 12.0828 5.13512 8.75517 10.3894C8.58189 10.5627 8.49378 10.827 8.40567 11.0032C14.1827 14.3308 20.6617 14.3308 25.0408 22.7336C29.0674 14.0665 35.7197 13.9

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32208, version 1.0
Category:	downloaded
Size (bytes):	32208
Entropy (8bit):	7.993010034198065
Encrypted:	true
SSDEEP:	768:rMgN0SPk/KymEf2wulTCVcPXdsCHJ2ODAzph2dCEChWX3DG:rpvomE0uSjHJ2ODEzPECwX3i
MD5:	B92E468146B95554624F44461DE8E5C0
SHA1:	70EBCB05C01D79BBFE2C13CED7681750792FBF14
SHA-256:	B7372B629E997F9980D46C4DEA3A384F8D1C9F2FCB21AD395711D14F80FDA8C4
SHA-512:	ED7AF62D2CB1FAD2A8C6FDCE8A325EC9DA1C08D88536E31BC1F90F133BBA09BB01312F24538D1B8D577B73811FE0CF9BE9D4CCC00BDA04E98794645C41C9CCB9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/albertsans/v1/i7dOIFdwYjGaAMFtZd_QA1ZbYFc.woff2
Preview:	wOF2......}...........}]..........................M..... ?HVAR.j.`?STAT.8'...N/~.....d....:.0..8.6.$..p. .. ..1.......[3.n...\|Uo.....@....t........z..OH."c%S/......#F....j.z....DU.....T.R...EWT...SGf..o..Y.....u.F.v.-.87..B.0......#\|..x>..s[....}..T<c^[..-.Q..C.?.o..}..h..1.sF.."...7...um-..tQ..E..s....cx....+..I.."..r...]...]..bx.R1..D+.S.L....l^.*...S.!~.......TR.b.......C....h~.i_.Jd..a...,.]..r.H..=^....'FQ...sZ3.e.-C@.6.M.K..&..~.R..> N....:.K.......!X........o.,.Y..@z@8=..lQA.f)I.=.Mx5!.v..3C.<.?!\['6.N.'.q........4......P.5a'.I...k....\|U...{..]..A'.Y.A.#..-3.5.o...J.<....M...........s..I..$.D.I....0..0w..o..B.....lD...3..V.....^..$F...[......m..@...@..I..\|>1..T.kr.T....n.,.;IS.$.$.P..1...LgH^r..@S.NK..R.v.l.)........t:..OY';_]... ...j....R.(.....p..6.,...].6.L...nm5.u..P.....-...=......7..M..9{..X......c.....A.....!.!R..=.g...t..u.tw%U.uw%..xh.Y.....`(..^..d.......B2....Z..=m.F[..O....$2.o.DZ"^.c......=.I....I.R.......g..,\.J6..N.q.L..

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	25856
Entropy (8bit):	5.301826254785076
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYmd28AN5AxyXf9N76WczZ:RIT7sZwuvL54WAcl/n
MD5:	6B982EA0A6A079881650E5606790A567
SHA1:	29D4BE972F3FAC6319DAE9C5646173CD557FF0E0
SHA-256:	6D4BE80CD2E845D02066269B52DA5710F4687D18D9812510C589FAA3AD40B8E1
SHA-512:	B7062FC7A1322264EE994997F6153DD7BF19C1AE660E70EE9312E0358AEB2FB44414A149A186BCA1E474C65C667FD9939310A43634DC9B5DA9B5124160FE05D9
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21410)
Category:	dropped
Size (bytes):	21526
Entropy (8bit):	5.370104983763485
Encrypted:	false
SSDEEP:	384:wpZNGinIIl19VWpA21BR/XR4P/01ezThhnxORR92mfQbZzd0yTvWNkiBDKV:QMwD9VWpAUfXWP/01Ghhn8fQbZz+uONS
MD5:	71020E406AE1476FD34C864FDDF987D3
SHA1:	6C89BD9B5654927F6D5C42FEE40EFED6A15E19C7
SHA-256:	AEF5D822FB9C3AE69F16ADFA41CAD9F8C1B9BDFD61165CC2D967B3DB7E56B731
SHA-512:	81F4A9EF3E3E55F82503A1BF60DFE006C1DEC24C071F834C8B9F349B0389A3F216D58E438FD6021EF109C326AFB593FE8DBE075992925C10B6FAE3B9D01D49D6
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e,t){return e(t={exports:{}},t.exports),t.exports}var n=function(e){return e&&e.Math==Math&&e},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof e&&e)\|\|Function("return this")(),o=function(e){try{return!!e()}catch(e){return!0}},i=!o((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),s={}.propertyIsEnumerable,a=Object.getOwnPropertyDescriptor,c={f:a&&!s.call({1:2},1)?function(e){var t=a(this,e);return!!t&&t.enumerable}:s},u=function(e,t){return{enumerable:!(1&e),configurable:!(2&e),writable:!(4&e),value:t}},d={}.toString,h=function(e){return d.call(e).slice(8,-1)},l="".split,f=o((function(){return!Object("z").propertyIsEnumerable(0)}))?function(e){return"String"==h(e)?l.call(e,""):Object(e)}:Object,p=function(e){if(null==e)throw Type

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:v:v
MD5:	41C068B2F6D1CCFE3F227223FF489C1E
SHA1:	4CB89C07CAC98EBDBF521BBC4C3F6544B63368AA
SHA-256:	21152971983AB0F08638F7BC1619A54EFD4D9F3115FFDEF92C151B9B9D1A109D
SHA-512:	7911A56666A48A12D0B08145F7FF80650C42A96AD29EB0F7D113C86EE5FA7EFF72C541CA592D43A561EC9A1AD03F3F3EFD5631FAE86F80ECD427A92EAA1C7B72
Malicious:	false
Reputation:	low
Preview:	US-NY

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	545
Entropy (8bit):	4.924217514358177
Encrypted:	false
SSDEEP:	12:YL0T4QGwaZFsUwaZRG/MUwaZ0waZdqTwaZdbXsUwaZztwaZbVQFNwaJmDw:YsZaKSRCoqMogRoqGV7GmU
MD5:	092BBEF13DF81B2AC9C566140F8C90E9
SHA1:	35ABA80FDCF4960DF209F4EDC0CD8B847A7AF17B
SHA-256:	C3558F66DAC66DBB8B5058C3082724E425DA03161862A49E36BEF61F34F22DAB
SHA-512:	104A5C05DC44532CCBDC81ECA86A21363B51AD4E3D0D6717A60FC76D676E9A16F09708367341125CA84B29A896F419ADD939FD01165FFD210EC98507E7F4503A
Malicious:	false
Reputation:	low
URL:	https://api.hubapi.com/hs-script-loader-public/v1/config/pixels-and-events/json?portalId=8564339
Preview:	{"pixels":{"FACEBOOK":[{"pixelId":"1100471544585903","limitedDataUseEnabled":false},{"pixelId":"378668614805602","limitedDataUseEnabled":false},{"pixelId":"424873573760210","limitedDataUseEnabled":false},{"pixelId":"746567544052736","limitedDataUseEnabled":false},{"pixelId":"829891824052519","limitedDataUseEnabled":false},{"pixelId":"885752078714622","limitedDataUseEnabled":false},{"pixelId":"1916122565318891","limitedDataUseEnabled":false},{"pixelId":"3852657628303348","limitedDataUseEnabled":false}]},"enhancedConversionEventSettings":{}}

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	17245
Entropy (8bit):	7.865436692381872
Encrypted:	false
SSDEEP:	384:SRFrdU3/KAEVP0kbmKDC7ys0jV1U8VQD1KWMRMIJAa:E6/IVck6KDCh0jA11KMa
MD5:	B64B2C26AACB484CC7EB5F0D69F1DFD3
SHA1:	615E2D0DB7B88BE2FA15DBE778F4C9C99BF819F0
SHA-256:	FA0C49A1D25F8D5357DE31CA0507B2BB49EDE75FAC89F2BB723B9342E1045CBF
SHA-512:	4E076EADC6113B6080346E22214C3DB1F0BE6BFE4E4BB3244978314601B369A4C129EFB116C8D859B935FF9F352DD1BDAB219A6BF396575988AF4880730B93DD
Malicious:	false
Reputation:	low
Preview:	PK...............K............manifest.json%.A.. ....ZLA...p.....&....Pc..].....'..F.c..<A.........Y..F+..Fu..lg..-.`dOEG...r. .j..z..._..R.s.t....(9...By\).`.S.y..^..._.U.&IKJ....PK..............`D....n...4...animations/2dcaaa75-3eeb-4b21-bc50-8126b82c9815.json.VKn.0....5-...~.@..M.a..-..[2(.mj.0=C.......%....a..<.<...<..l..#0L....#69...>.y...m.q6zu5..........Bw....gK.&.29....]...0..y..l.>.8KvX.&...?../.P.d.eq.....6.~..V..b..q..a....d......m..K...I..0~....'......\,.h.. ..YJ.....0I.O....\CVJLH..!.......&(...D......].<.K..P..">.#4...4<'.U..X.-M..o....F..L..H..G.\. 7..Q6.^..hY5C...V]S...~....,.F.......K.hf..~aGX.e.....G.t{y{...j...^i.7B.....s......-p..C4m....(.U.g7./........8...?l.>..>.....[I...4.Q.J...dk.PU(+SU;...u........1\..i..Oa......@..^........1.=..0h..4.UA.J.;.j...yA%.iQ.l.P...4..v(.!}i.k.!..e..i..U.UZ`..Q..1<]..V..t.%.x.....s<.S9..`..k.......e....O.c..[......-.eZ....D...".....l..7....+ .....2.7sP..ez..r^n.9...8..6.1..a...x...')..@.....

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9548
Entropy (8bit):	7.978538014767999
Encrypted:	false
SSDEEP:	192:bfFBfcTo5hFn2kJaEpgDppytXvtZWfGo+xd4K3RxmMj4ney:bfsOjJlIqBvUR3u4T
MD5:	05DDEED0A6389404149B29C4F285402E
SHA1:	C2B9EBAF074C633947A15CCD80C8DE6DB850BA3F
SHA-256:	94F2F0E5DCC4BF21B46C2B0D87D4D79849D0670FD420313CD1209C7C6B23A808
SHA-512:	AE82006E7C7671F1743780FD0EC19A9AF09EA3FA6E32E68094A423BA653AFB52DB50FDBB718846BBCA219C13A4FFB95971221BFD5CCC9D3A98F04B7D38DEE760
Malicious:	false
Reputation:	low
Preview:	RIFFD%..WEBPVP8X........>.....ALPH/.....b....$..a.4..8.....ZW.ve.d....O!y......Kz.O/.4V~]...."...7.C...S...X.[.H.b.1.X.B......<._=EId{5...mk..N0..v4N..6.....e......c.....@...v.<.J..N...yD.<_..........................y..y..<v.<.B...<.....2u...?q.....3..y_...`.6..?M.i$.pP.,#.J...ds....G#T.."... MB.mHk..."...H......O...g..)..VP8 .#.......?...>.>.I%."").L....Ma..-....ym....O.<.}.....[...y.z...m.g....]<..O..i.U0{..k...<I........_..i...v..0.....<....:......^#.U.....b.S.^.%].\|..*.5d...b..!Ka...@+.M.b...X.=5Wh...^........8S.3................9...h.)Xq..l...C...j?.l.`.h{&N.].o^..7 P..].."O..g>.(]......Ea.&.#...R..EXj..7.W[.?..Q..x9t........Q._.MS.5..>...P....yh .o.^.....g.2..Sv7....WG.].x..g}.~....o..]h.;.....K@..n.m.)V..m...6....]k...j.P.n[...GZ.v...c\&..2..-1/igW.M.}......Xj.~..+x.........../P....r.cQ....xu#@..,.....`....@....M_..n.6..J.....k...y.E;.l.......=.2=5.#.=.k.Ax....P...8o.-z...v.[@~....1....$.........[...^..\|.X%......\|W.....'.t

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 277, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29267
Entropy (8bit):	7.8670320510063325
Encrypted:	false
SSDEEP:	768:iL53lvsR0GiShNfLqEsJeuv48wQDCYM0WDBhFTDcWNs:iLbvFsNfLqaG1BDC90C5a
MD5:	006550619BF1B0FC5846C5BCE54196F7
SHA1:	7FE02E54DB5C1D766877335C31E65E03C8B8824A
SHA-256:	BDDE876CB39C7B34F8AF950EBD37496BEE7255E186E7DC62C93325D6E8066C51
SHA-512:	1C30A964A4A919335D78FF9DC6C9C464678FC5AC27CAFF7DC85F842239E82CFCD2FCC477C4CB09526516FCCDEDA33E854367F05C67454463CA7556294134966B
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/resenas/capterra_01.png
Preview:	.PNG........IHDR................5....sBIT....\|.d... .IDATx^.m.eEz...jz,!OSU(...(...x.....]wM31...-.[3.....{......Xp.o.....E@...4.v.>.,=..'...w..l.ca.Xz..[!....PU7..{...z..%_.s."zz../.'O...>.df....ZM.om....o.k....?:s....j 4...... ...@............A..Q...w?.Jg.....-.e.....z....N!.... ...@...... ........")..N..z..ag.Pf...d.~E{..,.f..{..?. ...@...... ...4...V.lJ. p...[v.......Zc..K..N.lf......>.@...... ...@.....6..X.,B} ......?....o.p.=.....~:.?={.l.S.d...@...... ...@....F....J2.@z...j......Yfn.[#..zu0?.`...... ...@...... ....$....6eA ...G...:{hq~....#K.@...... ...@....@e..X.......(xDp.J.....v8.b.....R!...@...... ...@..{.@...@.F......Y.........M\|sq~..a...... ...@...... .2..X-38...o.k{..'.\|Tj....^..)...6{l.^..'yA...... ...@......\|.@..I.. .....g.o1fe.d.C.N{.z#+9>h....\|..?..?yB...... ...@......\|.@..A.< ...;"....o[k..[....lw..Z..7s[.r....... ...@...... P...V.z<....B....Y.....=4., ...@...... ...@.... `.CK...@.#..l0..g..?)..... ...@...... ....$....>e...?.........XG..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3
Category:	dropped
Size (bytes):	1340
Entropy (8bit):	7.349279447892241
Encrypted:	false
SSDEEP:	24:emozMLxLlyKb7kc13w40vOOPQTFUaMU+BF9SBkyKobnTwzZtH9C1oB9k6x:emoQLxLjb4gw40vVPQvD2jokGbnkvHMg
MD5:	304B5FFE70AF8C17AA4568EAFF536DA2
SHA1:	ACD7FF97EAB19ADB57C56BE6A641DE50A558E132
SHA-256:	9BD5B66561A6C590378EA8CC5BCB9CB61ECD76559A12348282A9543EBD437A53
SHA-512:	3154031982F06DA699EF706910D30F11A8C56597A612413A9B655B9ACBC5C13588BBF0051553179D21659A08AB50A7DCE3A4CC177FE5BA44CB1E69BA0AE05061
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......-.P.."...............................................=..A..E..\1.,..FZY.q.aF.OPi......%g..Mp.kXU..M.h....#.#.D?.....................................)..~U...Q8T....................................,.....].`...5..........................!1."A..a.$23Qqs...%BCRr..........?...aW.c.. .\|i.?....o.......$M.<....Mn......Ap.....j4E.F../qQ...j7+".x.~.V._ON.F..;2..W.f..y.....v.5q.\..\w.rx.....>}..>...O..}.T.........V.. .Vh.....?.R..`....O.j.....=.&.,.q\|..;...`..o.n}wJ.si...<.... .5DO..g<.....9..Ia.rI..V..)..:..:....u.B-..$..;&../............_.C.I.~.cV${......\|..;^.M>.II^..wD....Y.......5......`.K...=....2.D.)..$..D.......x.QC...dbIg.. .Z.f.^....K....R~@F....H...Y.....{d..my.....V.@...A.Mj.cgB.q......rb...n.8..(.m..u...Q.'&.K3.k=]Y..'..l+.....x.9..9...M.).#..*MY.p..V..m.R'].e.....r@.."....T..m...,../....xN.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3618
Entropy (8bit):	4.2475482910711495
Encrypted:	false
SSDEEP:	96:HHEnjM2/vk0KXqoCtdxbJfhQvDlXWv/JRPPE/GXqoJ4gToPf:nAjMa8Gn9uLl2RPc/ZYToPf
MD5:	954D2D84E6D0CA8D6656E462879B8AC2
SHA1:	F4B56794EF5E60D4979348275102205DC0845B0C
SHA-256:	E9D849C4330C1BDF38E8F2D1BDBD7F3DAAC25BE0D4CE557FDE9955C51B043764
SHA-512:	ED9854964FB39B5BE71D233033D4CDBEA1330A9775B2618F9BF916D6C439BFC4DDA03DA18A240FDC09BBBA17CA42BEB1AC28571946F9DF55F9E347BAEFB56073
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/01/sesamehr-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="136.839" height="28.774" viewBox="0 0 136.839 28.774"><g transform="translate(-355.713 -560.726)"><g transform="translate(443.552 577.063)"><path d="M-43.3-3.1h0c2.2.5,4.9,1.4,4.9,4.3A3.587,3.587,0,0,1-40,4.3a5.953,5.953,0,0,1-3.9,1.1c-2.7,0-4.6-1.1-5.6-3a.192.192,0,0,1,.1-.3L-47.3.9A.192.192,0,0,1-47,1h0a2.959,2.959,0,0,0,3,1.8c1.6,0,2.4-.5,2.4-1.6,0-.9-1.2-1.4-2.6-1.8C-46.2-1.1-49-2-49-4.9A4.1,4.1,0,0,1-47.6-8,6.127,6.127,0,0,1-39-6.6h0l.1.1a.192.192,0,0,1-.1.3h0L-41-5a.192.192,0,0,1-.3-.1h0a2.851,2.851,0,0,0-2.5-1.4c-1.1,0-2,.5-2,1.5-.1,1,1.1,1.5,2.5,1.9" fill="#1f2d52"></path><path d="M-33-.5a.215.215,0,0,0-.2.2h0v.1a4.208,4.208,0,0,0,4.4,3,4.354,4.354,0,0,0,3.5-1.5.367.367,0,0,1,.3-.1l2.1,1.2c.1.1.2.2.1.3h0a6.9,6.9,0,0,1-5.9,2.8,7.609,7.609,0,0,1-5.5-2.1A7.488,7.488,0,0,1-34.2-7a7.009,7.009,0,0,1,5.3-2.1,6.372,6.372,0,0,1,5,2.1,7.69,7.69,0,0,1,2,5.2,3.4,3.4,0,0,1-.1,1,.215.215,0,0,1-.2.2ZM-25.4-3

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2896), with no line terminators
Category:	dropped
Size (bytes):	2896
Entropy (8bit):	5.178732324766012
Encrypted:	false
SSDEEP:	48:STkpwlc0a1rudkpwD19pcdRMwmpk6dkpwM1rOkpwS11hIbph/5kpwyw1I:9ed+excdFI9+eeeQSpYeyL
MD5:	AD56E2C6F13E7658BD61BB21A4892E46
SHA1:	C78CEC1B1A008D3E87088AE68557E3F8131D89D7
SHA-256:	DACC45A55655CC56D1B5CF60BEE898F9BCC790C4DC3548C9348CB731486EF943
SHA-512:	7E922A8405028523D16504517812A0376BBD9173B3C6895AFACA0517E44857209B02730F32576493DBD750EE585EDCF46736A9F71F1793637E62C3DE0A5FA878
Malicious:	false
Reputation:	low
Preview:	!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hubspotfeedback.com/feedbackweb-new.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hs-feedback-web-8564339",0,{"crossorigin":"anonymous","data-hubspot-feedback-portal-id":8564339,"data-hubspot-feedback-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":8564339,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hubspot.com/web-interactives-embed.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hubspot-web-interactives-loader",0,{"crossorigin":"anonymous","data-loader":"hs-scriptloader","data-hsjs-portal":8564339,

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1103
Entropy (8bit):	7.267401190842727
Encrypted:	false
SSDEEP:	24:+cKYj6LR4bneJrcOZxwn6/HOBMP+EVRstYhq2PtTf:+cKYjwR4KJr/0nYKt72lTf
MD5:	2F52A516F8B48F37CEEA4BC56A2DABEC
SHA1:	8812B8FAAEC2DC1DA50EBB32CA7AE2D57B6C74EB
SHA-256:	EC27881CDD9021845318997F29F8BFF9E4D5651F2C007DF8391253929EA10429
SHA-512:	F89A5159899C07539ABCEB42CBB6D8343F1912482AC620176B73BF8133BEA8DF653DA70E05C3DB4ED886FDF9D599F6E785E1A95C31E7EC38F28F0558611972B2
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/1760416510-48ad8e7167934ac9ef9e2ffb0fc7a7ae0ce4d12b9a6108c2745f611d78a2d27d-d?mw=80&q=85
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................5...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......P...-....pixi............av1C........colrnclx...........ipma..................=mdat......g......2.......b......s...P..n)...6...?.B... %.X2...S.27.9X'bi..i.d../........G..<O.M..o.'.yT.I..j........8J.Jx...4..{.lh...XX2ym..........^O.......a.U...J.B.sqA[]..e.b...'.........Zz....[......_...oK.c.O.r..,.@.p.3..u..=..k.#T0.u.......IS.c..F.{./1.Kc...c.6..kM.T`.dD8..d.-....rw...X..u......d...,...(.0'..V.<G-Pv...C.&\|...S..$H..\...^.>.....7..t.<n.r./...LV..J._..>K.h........iA.{V.X.1l..".)....m........F-.2...k)I...#.y.AJ.s...%..Z..g...7q..M..,..f.H[..\=..-[V.o.N...L7.......Y....X.>.D..J.2,.....!Z..Nyd...@].t.I._.K..05SP)3..0.9....v.._R2.o[....n..n...\|..-....Qg.p.w...re.h ...t..0f.l..L8.T.,.>..9.k...f....T..\p..1.. R9........(.N1{..0.~.{.t.8.3.s.*..z...z.d..\O..fW.^..'..

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	downloaded
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1128
Entropy (8bit):	4.526655604111
Encrypted:	false
SSDEEP:	24:2diO44l/96jVe/2/7hCR1zUXC82JtOYMrJgPE6/aPnhllo/:c35sj2YhE1Q+IYMrJ9kn
MD5:	B06CE5BC7A4E613AF99840C29DCE5EBE
SHA1:	8D76463EA4B3ACB8E15EC44BB613A2F015140A4C
SHA-256:	6D372EA9BD81641C625D88A1060301DAFFEAD5F6983F03AED699275026B57AFE
SHA-512:	A0C9F96A252FB12E4C4D505C7B9A7EC52665719FE471873A90529133DA95D9FED798C59E22FBBCE5AB5FEEA1813D5438A8CCC94307CE0B62F66EBD2729D429D5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M24 14C24.7956 14 25.5587 14.3161 26.1213 14.8787C26.6839 15.4413 27 16.2044 27 17C27 17.7956 26.6839 18.5587 26.1213 19.1213C25.5587 19.6839 24.7956 20 24 20M16 14V25C16 25.2652 15.8946 25.5196 15.7071 25.7071C15.5196 25.8946 15.2652 26 15 26H14C13.7348 26 13.4804 25.8946 13.2929 25.7071C13.1054 25.5196 13 25.2652 13 25V20M18 14L22.524 10.23C22.6555 10.1205 22.8154 10.0508 22.9851 10.0289C23.1548 10.0071 23.3271 10.034 23.482 10.1067C23.6369 10.1793 23.7679 10.2946 23.8597 10.439C23.9514 10.5834 24.0001 10.7509 24 10.922V23.078C24.0001 23.2491 23.9514 23.4167 23.8597 23.5611C23.7679 23.7055 23.6369 23.8207 23.482 23.8934C23.3271 23.966 23.1548 23.9929 22.9851 23.9711C22.8154 23.9493 22.6555 23.8795 22.524 23.77L18 20H10C9.73478 20 9.48043 19.8947 9.29289 19.7071C9.10536 19.5196 9 19.2652 9 19V15C9 14.7348 9.10536 14.4804 9.29289 14.2929C9.48043

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	dropped
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	426
Entropy (8bit):	6.874993447500411
Encrypted:	false
SSDEEP:	6:6v/lhPknS0Dl55dKcbNfrPKsWsNGCkgnF+r9ik844RNc9RvD2NryzGdTLB1N/Jcz:6v/7gVvZBfsgFDHtYzyN1NBcMGz1
MD5:	339F7D38FDA90ED7D34A7A89D7F55B30
SHA1:	9CF62B3789168FEA9E82EBD1F879F98A4E2A9D54
SHA-256:	0769601DAC68490942B98A6F456207180932B645DB599CE2A3600B4D03DA70F2
SHA-512:	31295293430750C3C2DF7E1910156762E35C289BA501AC7BB9E12F530529CBB0035A6B556B5581B78456A3687179CB88961C52CEB193A3173CA88087C272485F
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/mexico.png
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE...r...JWs...JUt...KTs...KUs...KUs...KUs.............nu.Tb.dq.u~.....................................................KU.l.3....tRNS.&&]]................IDAT(...9.......... ..........\|.JR..yI...H?.j....,."2.U.=......._.h..C..C.....U?(.<c.<......Pl....y.:.lF.4.L{..yD.....a....].A........IEND.B`.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20252
Entropy (8bit):	3.7856982807253075
Encrypted:	false
SSDEEP:	384:jDQQIsdCkRSGkeYW+x2cJn+rDMXKalLjc/XoQRQArxYmIiJXo0cVoMsrp4f:XQQ9IGkbnkDT/zQUmm94087opK
MD5:	016FDE16B2A8870469E0FEE42A26329D
SHA1:	A612A0E8BBFF74F9AE18CC45601F1EBE787462EF
SHA-256:	7C6269EE3C51E68B528DCFA7518BF377AA176C4452B2D57E864C3919A5C38A33
SHA-512:	81AC966A8BFB3232C4FFE3FF3C783B2D43827CE1390EC5A019673B1F4B4986507F2596E762D086388CEAF346E8283A96FCD1721A4A248F9E0393DD21E3003191
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="179" height="48" viewBox="0 0 179 48" fill="none"><mask id="mask0_94_2569" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="179" height="48"><path d="M178.273 0.874725H0.828125V47.0295H178.273V0.874725Z" fill="white"></path></mask><g mask="url(#mask0_94_2569)"><path d="M178.273 24.7332C178.147 25.0419 177.988 25.336 177.799 25.6105C177.214 26.2977 176.594 26.9571 175.966 27.6077C175.678 27.9076 175.364 28.1811 175.028 28.425C174.8 28.6056 174.535 28.7345 174.252 28.803C173.969 28.8715 173.675 28.878 173.39 28.8219C173.104 28.7658 172.834 28.6486 172.598 28.4783C172.362 28.3079 172.166 28.0885 172.023 27.8351C171.888 27.6667 171.776 27.4811 171.691 27.2831C171.161 26.1724 170.515 25.1218 169.761 24.1491C169.514 23.7712 169.244 23.6754 168.891 23.9598C168.282 24.4503 167.705 24.9833 167.083 25.4511C166.23 26.1238 165.48 26.9159 164.854 27.8029C163.903 29.0837 162.775 30.2322 161

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	dropped
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10805)
Category:	dropped
Size (bytes):	340136
Entropy (8bit):	5.566270823647108
Encrypted:	false
SSDEEP:	6144:G4qwIGKlqjy21MvO5K1x72Dej76sKFVVl2pZ:vqwwUjy2Zl2
MD5:	B6B71DCF32F8A7F40A540395D34B08A9
SHA1:	E6C4AF34A2312FC4476CB256CDABA9E661D51A06
SHA-256:	47E40045D62AEC11F3DEF512424B3DE3FD1B9C0E0820EF1AF5F994E804F0D9F6
SHA-512:	6D53CBD75BF0969CEC47F63EE3B1434D2EC0077392C7E17FBF314A6ECBE23F48B28BC17F971462DECA19C012C35794411FE1EA6EEFEC0630B875851DA6E149D8
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"34",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":33,"vtp_rules":["list","www\\.sesametime\\.com","sesamehr\\.co","sesamehr\\.com","sesamehr\\.cl","sesamehr\\.pe","sesamehr\\.com\\.br","sesamehr\\.fr","sesamehr\\.it","sesamehr\\.co\\.uk","sesamehr\\.es","sesamehr\\.mx","sesamehr\\.de","sesamehr\\.cr","sesamehr\\.nl","sesamehr\\.pt","hrtalks\\.sesamehr\\.com","superrhheroes\\.sesametime\\.com","assets\\.sesamehr","help\\.sesamehr\\.com","try\\.sesamehr\\.","webinars\\.sesamehr\\.com","email\\.sesamehr\\.com","hub\\.sesamehr\\.com"],"tag_id":115},{"function":"__ogt_ip_mark","priority":23,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",2],"tag_id":117},{"function":"__ogt_ref

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	995
Entropy (8bit):	4.558710551088413
Encrypted:	false
SSDEEP:	24:2diO44l/BSwEj2t3/VzmfE/HomSt574Pnhllo/:c35JqO/JmfEfomStNF
MD5:	5EC0B3093A8590D596D0E5F8CF2D31FF
SHA1:	989E6717F27FF0D0CAF65D4AA55766539E49EB9A
SHA-256:	119CE575D27374D5CB271D6C16AAF39B5EADA12C1E019D8A6DD25877CCDF7C13
SHA-512:	4FD32BEBDB74A17ABCE107F38B70420F972D260220A22DD29CC8A6F370D9C74478554F12AB1B1AEE36F93EF7B873F4930AB950FD31C890A401E801604D394C40
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M15 11H13C12.4696 11 11.9609 11.2107 11.5858 11.5858C11.2107 11.9609 11 12.4696 11 13V25C11 25.5304 11.2107 26.0391 11.5858 26.4142C11.9609 26.7893 12.4696 27 13 27H18M15 11C15 10.4696 15.2107 9.96086 15.5858 9.58579C15.9609 9.21071 16.4696 9 17 9H19C19.5304 9 20.0391 9.21071 20.4142 9.58579C20.7893 9.96086 21 10.4696 21 11M15 11C15 11.5304 15.2107 12.0391 15.5858 12.4142C15.9609 12.7893 16.4696 13 17 13H19C19.5304 13 20.0391 12.7893 20.4142 12.4142C20.7893 12.0391 21 11.5304 21 11M25 17V13C25 12.4696 24.7893 11.9609 24.4142 11.5858C24.0391 11.2107 23.5304 11 23 11H21M24 22.4961V24.0001L25 25.0001M18 22H15M21 18H20.99M17 18H15M28 24C28 26.2091 26.2091 28 24 28C21.7909 28 20 26.2091 20 24C20 21.7909 21.7909 20 24 20C26.2091 20 28 21.7909 28 24Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	20187
Entropy (8bit):	5.004180814374261
Encrypted:	false
SSDEEP:	96:aTuvhtavcOKKAmihzq+p/WDLdbDgkSPfFfH5K89F9fCoJ4BwynZWvnzOyXUOmtW2:xvnavkKJWO+Mwku5ZDJ4Btonz4jtRMhy
MD5:	EECF0DA5068FA546A1DDD82928D461A5
SHA1:	00B9FD4742BBA6C5819042947D43AFEE7C36B58C
SHA-256:	F5CE8A096641A412B4783F1DD102900A531681C7D32E8645253396494CADD212
SHA-512:	4B2B41672177546D605096E6C15293D15E40F1128C1BB54609141594A80F2EA03101BE8987DF3BC416382332B3997212909DE8B345F0BC4D6C305F86F1892478
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/GVL-v2/cmp-list.json
Preview:	{"lastUpdated":"2024-10-03T17:03:07Z","cmps":{"2":{"id":2,"name":"AppConsent by SFBX\u00ae ","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"3":{"id":3,"name":"LiveRamp","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"5":{"id":5,"name":"Usercentrics.com","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"6":{"id":6,"name":"Sourcepoint Technologies, Inc.","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"7":{"id":7,"name":"Didomi","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"9":{"id":9,"name":"Admiral","isCommercial":true,"environments":["Web"]},"10":{"id":10,"name":"InMobi PTE Ltd","isCommercial":true,"environments":["Web","Native App (Mobile)"]},"14":{"id":14,"name":"Yahoo EMEA Limited","isCommercial":false,"environments":["Web"]},"18":{"id":18,"name":"Evidon, Inc.","deletedDate":"2024-06-11T00:00:00

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6484
Entropy (8bit):	4.227731499933373
Encrypted:	false
SSDEEP:	96:8WTvMhpcGqRI9RDXxYubZ6m0SyG9cQtGU7x85eNzcwOOYFPvsTw5SQUiJtWWoaqJ:8yKpISDXSubZqSKR65NNbykwkKWW3q
MD5:	25DCFD97555B00663149E1F60319FA24
SHA1:	BAEF92FEEDF147EE4415A93D281D776BEFAD26BE
SHA-256:	6657E6F0D5BB91BBBCE4F0CF8E00F5DB62CFA70CA797A175C197FBE57856AC17
SHA-512:	524194FC1AE460277E91CB9FCF57E24DA0E1C06D59826BC29B377052F53C81F72718A2AF555BAC1FDC05E5BF4344107BB2D23B246FBAC9AD724EC2A0974274F3
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/06/BLACKDECKER.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 595.41 113.04"><defs><style> .cls-1 { fill: #2b3352; } .cls-1, .cls-2 { stroke-width: 0px; } .cls-2 { fill: #b7b6c4; } </style></defs><g id="cD7QUc.tif"><g><path class="cls-1" d="M114.33,83.04c-4.48.11-7.43,0-11.1-.06-2.58-.04-6.4-.08-11.1,0V19.33c9.87.27,19.68-.75,29.39.65,7.65,1.11,11.59,5.81,11.95,14.43.24,5.75-.85,12.17-8.88,14.87-.19.06-.31.32-.66.72,4.86,1.43,8.53,3.97,9.78,9.14,1.15,4.73,1.31,9.42-.35,13.99-.43,1.18-1.09,2.65-2.43,4.25-2.86,3.4-6.64,4.47-8.61,5-1.86.5-3.93.56-8,.66ZM105.41,55.22c.05,3.67-.03,15.12.12,18.04,1.95,0,11.42,1.42,14.62-3.65,2.1-3.46,2.21-7.95-.24-11.23-3.48-4.68-12.83-3.24-14.5-3.15ZM105.12,45.26c3.06,0,5.96.1,8.84-.02,3.92-.16,6.38-2.85,6.7-7.07.32-4.29-2.15-8.24-5.81-8.67-3.19-.38-6.44-.37-9.73.08v15.69Z"></path><path class="cls-1" d="M370.19,83.05c-4.11.15-6.7-.07-10.36-.09-2.31-.01-5.62.14-10.36-.04V19.33c9.21-.0

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	282342
Entropy (8bit):	5.546011571709506
Encrypted:	false
SSDEEP:	3072:48Ip9SXNKW4s+3M9C0x0iC2uBcO9yyqo5/Aux9SEgpix72Dej7AFi:BIGKlj3112vO5gbcx72Dej7v
MD5:	688BD96ECFAE5CA3C33915A64C05A4F7
SHA1:	9E6B48A54707F4ABD5659FE79FD1A41C58C98F4D
SHA-256:	9BD239DBA916E4A8E261848787E37FC81F76CB1D510A3765FDA19E2F0CB0158B
SHA-512:	11AB0280734CE97CD7D383B8463D3A9B2DB869E46F085310D3D4440E35C3C987F63CC04F985D4A37EAE53C00729DD5EC8AE0D39F88145DA49637CB65B20D70A3
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-954051485","tag_id":113},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":105},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","v

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	622763
Entropy (8bit):	5.113761191073703
Encrypted:	false
SSDEEP:	3072:wsT023giUpr19sjvAELOzd2can2aWKvaLA:3T8gj6an/Fvh
MD5:	40577BEF732102027FA9241F6B9C68D3
SHA1:	63FCCF7511E8B989E77D4D3B0313954D874A31F2
SHA-256:	92B9B36279FF3818ED372E0F3A8126840D857007FA7DB6124B483CB9893C61D7
SHA-512:	8C187C1D9357667F6263CD653C539E13019E63353750F90C78485986DF0B69ADC94293FA907FD94E6ABCA593B39890CF3EC88BD768ABB46453966572570063C4
Malicious:	false
Reputation:	low
Preview:	{"gvlSpecificationVersion":3,"vendorListVersion":74,"tcfPolicyVersion":5,"lastUpdated":"2024-10-03T16:07:42Z","purposes":{"1":{"id":1,"name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here.","illustrations":["Most purposes explained in this notice rely on the storage or accessing of information from your device when you use an app or visit a website. For example, a vendor or publisher might need to store a cookie on your device during your first visit on a website, to be able to recognise your device during your next visits (by accessing this cookie each time)."]},"2":{"id"

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	318
Entropy (8bit):	4.573499158477497
Encrypted:	false
SSDEEP:	6:z8HpULECImZTgfMjvF3CCd8M7RV3Ci+vdlV7dC2Lp9cSoNE8igiiKd:zAMfjvFRCMVVyBzV7wutoNE8f8
MD5:	A5C25A74301C5C7527214EE04A36D8AF
SHA1:	1AD16CBDB8A2BBB4176AE6B489D53C20FBB1B60A
SHA-256:	74788C049EB53AD055DC4015C1CD2D66241918EE2528DD9B7F02252A643FBD9D
SHA-512:	5ED408E6673CA4677DFCA3951FFD2EBB7328793257A13B4DAEE6E067AB7B49F7141F402D70120C98E90B4C6FF2533B1B98ECCE0A1703815C90F67609EBD671C2
Malicious:	false
Reputation:	low
Preview:	jQuery(document).ready(function() {. const interval = setInterval(() => {. const $privacyLink = jQuery('.qc-cmp2-expandable-list li a');.. if ($privacyLink.length) {. $privacyLink.attr('rel', 'nofollow noopener noreferrer');. clearInterval(interval);. }. }, 100);.});.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1839)
Category:	downloaded
Size (bytes):	1862
Entropy (8bit):	5.378704584910478
Encrypted:	false
SSDEEP:	48:kq9vYpOXSCKt9Y67c8ouBCWs3cTPaLGqviMaE8FEbEfESEHZ:kq9vYQiCKt9Y6g8ZBCCra3viHEIEbEfc
MD5:	83583A4061DDC27E8B6EE0DC269519CD
SHA1:	8B1C0ACC28729208F640473EB5D8FB82C4BA3E15
SHA-256:	C051B8B5EB2A0AEF699780F15A449491868FAA6F8B39B684B5AE8F64F345B94A
SHA-512:	3652AB4345C138245677F415607E6447358DC064B8B3AD7820F34BF225A0D70B0820AFD87E5D2235919AFC703248DA54F126DF8F793DFDA529D1FA336FBA22C3
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
Preview:	(function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()(t-e+1))+e}function d(t){var e=(new Date).getTime()/1e3,n=parseInt(e,10);return t?e:Math.round((e-n)1e3)/1e3+" "+n}function v(t,e,n){var o,i,r,u;e\|=0;o=Math.pow(10,e);t=o;u=t>0\|-(t<0);r=t%1===.5u;i=Math.floor(t);if(r){t=i+(u>0)}return(r?t:Math.round(t))/o}function h(t){var e=t+"",n=e.charCodeAt(0),o,i;if(55296<=n&&n<=56319){o=n;if(e.length===1){return n}i=e.charCodeAt(1);return(o-55296)1024+(i-56320)+65536}if(56320<=n&&n<=57343){return n}return n}function g(){return v(c()/f()2147483647)}function l(t){var e=t.toString(),n=1,o,i,r;if(typeof e!=="undefined"&&e!==""){n=0;o=e.length-1;for(o;o>=0;o--){i=h(e.charAt(o));n=(n<<6&268435455)+i+(i<<14);r=n&266338304;if(r){n^=r>>21}}}return n}function s(t,e,n,o,i,r,u){var a,f;if(arguments.length>1){if(n){a=new Date;a.s

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10809)
Category:	dropped
Size (bytes):	301052
Entropy (8bit):	5.605806238484818
Encrypted:	false
SSDEEP:	6144:cUQIGKlqjJL1MvO5QEDF2Dej7GsUFVVl2bT+lBX:tQwUjJLSlgT+lV
MD5:	80F1D9CBCCCBF7EB8E805BAEA2114C3E
SHA1:	52878FD36E36387BF2E96152C51C148C3BF3EB80
SHA-256:	1E46027EDDB90E9E786EDE6F54AF80F45948CF8FF4A688DAD0225D6748D08E5E
SHA-512:	16DC2755F9A3ED6AE4271388271F5DBB639FB0E94017576152C66BA91408FA6DBC50BCF39911838A2189DD63A65291C72AF980C627890A9F6EC9B1B12062D45C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":30,"vtp_rules":["list","sesametime\\.com","sesamehr\\.es","sesamehr\\.mx","sesamehr\\.com","sesamehr\\.co","sesamehr\\.co\\.uk","sesamehr\\.cr","sesamehr\\.cl","sesamehr\\.pe","sesamehr\\.br","sesamehr\\.de","sesamehr\\.fr","sesamehr\\.it","sesamehr\\.nl","sesamehr\\.pt"],"tag_id":17},{"function":"__ogt_ga_send","priority":20,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":20,"vtp_includeConditions":["list","paypal\\.com","sesame\\-time\\.chargebee\\.com","seasmecontrol\\.com","googleads\\.g\\.doubleclick\\.net","sesametime\\.com","superrhheroes\\-sesametime\\-com\\.cdn\\.ampproject\\.org","sesamehr\\.com","sesamehr\\.es","sesamehr\\.mx","sesamehr\\.co",

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://api.cmp.inmobi.com/?log=%7B%22accountId%22%3A%22srUtCbgF3R7rD%22%2C%22domain%22%3A%22www.sesamehr.com%22%2C%22publisher%22%3A%22SesameHR%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.53%22%2C%22displayType%22%3A%22gbc%3Amandatory%22%2C%22configurationHashCode%22%3A%22ZaXh4z9yxA%2BQ4O5urX%2BYvg%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1728049150528%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GBC-o8kux8nnxg950ni5vt0c%22%7D
Preview:	OK

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	65577
Entropy (8bit):	5.353937566241126
Encrypted:	false
SSDEEP:	768:ezDY9eR7s83Hw4oUnaOGE477KKIY0MnZez7T7nM1En0wEJPddhMHKvOWISQS31F:0DDFs83Hw48ZO7T7nwEYFRQSFF
MD5:	70187A383ADB805DD9FA0F16588B48C8
SHA1:	E1ED844DB90FC16308EAB60276BD9679784D9F01
SHA-256:	30ADBC7E799238C336B56A1E20DB67910F2A114FC3BC6CED6C550B4C873318AA
SHA-512:	C860317CE2F70CF96C9A93F36C7FB608217601CC6E63B45A9F2E9571FDB7C6AA286AF566AE532F23AA054B1D83DAD6097BF5435CF6B8C9C2CAFE750273050B87
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.47/clarity.js
Preview:	/* clarity-js v0.7.47: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return jr},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return Ar}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.692158010551808
Encrypted:	false
SSDEEP:	3:AUwVkefm5pIzHQLF20WQAiMzlYfMIAcBMn:6Vkee5RFBWQAiMzlYfBMn
MD5:	52EC847C1764D6627EF74581DBFABEF9
SHA1:	9559D0F90AEE6BA5C128D2F2E19196178C2FB2B6
SHA-256:	A4B728B63C1E2AF882B3F0C73D3B18CC06F1DED721F0F2D196F3B9F5CCE7305B
SHA-512:	CCE79F1B54149F691BD549DE43128D3E3B5FA8159A3ECFD1F36FAC111FC45A947A9A65B0D6BD9339CA6DB322ECDC50B43AC3329E48C83763E91CCC7FF05D1BE6
Malicious:	false
Reputation:	low
Preview:	__neverbounce_862207({"status":"bad_referrer","message":"Unable to verify site origin.","execution_time":11})

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4112
Entropy (8bit):	4.695920519585393
Encrypted:	false
SSDEEP:	96:4ecVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOo+:4ecVWNXK3XuXW5i
MD5:	44B586013F63C7CE3F8F0284D98D2009
SHA1:	4AFD3B9D47BD532116F849784C5C9B015B587A6B
SHA-256:	F4B0F46D782F318FDEE620F094F08CCC4E06B13EDA75A6B986ADB0BE116D1ABB
SHA-512:	EC796CAAC7049676F96D178088EA15E1F738D71CF816342F229CD7285AE26CF31A2E83E16953CF9EE9D87F6EDCC85DB3C7BC6E244981C7BF786C7490CD4909AB
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/25055882.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {..

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	178630
Entropy (8bit):	7.997711184103492
Encrypted:	true
SSDEEP:	3072:PJOjEUZmd1PY0JAEz2sIZUxyFXpKFvYJWiz2q5daoLOD1ib79/W3:P+7SW0JAS2nUxyFXp7B2q+1wW
MD5:	EB8176FE35F9C4D8FB2558AD9D4D6DB8
SHA1:	E7866FABB4DA8D773E5F75A38ADF876F37A3A5CC
SHA-256:	6261F60014B548AD6D249E8CED6BF22A7D711AD32330058F25378ADE673E721F
SHA-512:	48726440EEFFA2168E50795EF31ABA25773D0A7A5D929CA5800C4E10555F149D3BE851DC5D480C4CE577D1C8A1DB9D3B225F413B5A435F087435930BCBCA6311
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/dashboard_sidebar_plegado.webp
Preview:	RIFF....WEBPVP8X....0......c..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHHS...$.m.0R...)S.....a...2^Zr.7.$.A:k.s...t.Rd@.:+..`"..m[A"g.0.s.s....m[.$I.$.@....k..a.....J1D....$IR.P......c...d..I.H...o.+.". ..........V...S#.\|...Vj.m[ .-..1....t..jQ (.F.l.V.Z.N.(..~..Y..........h0#:.."....6A`nl%0/.!....D."4./.....7.S..'.%......{.Q...u...t....%y.._..%mk..01G...p.....P.......\.n..V.o.......C38.ea...B.zHM...8^....u.?..Y0...a_..(7.&.N.^#R`.....U..L..G.#9./p.3L.P..8c..e..j...O.K...U..h....v...P..l.o.t.h....f...Q.ej.u!...S..4b..s........Z....L.....y...

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1255
Entropy (8bit):	5.044096558641246
Encrypted:	false
SSDEEP:	24:zVWLIhG1J+xQI1M54oKc1S5aRcsRvcJfVSc4BCnNT6UAKixr7hMpgNT5kwnLIfqO:J3G1gQWEWaRdRULJgFKYpXh6D
MD5:	07577FDBAC879E173191093861BB298B
SHA1:	44FBB0D133869EB96C8546CB118A9548A5DD6D71
SHA-256:	A2AB89C8C82E8E50D0C3EFC8A476C70128CEE2989A0C801968C555CC8187D87E
SHA-512:	EB5A0598FC4A918E39F057303F807D0D974EDF7C41A6AF88298F141C8AE6D998EC04A9343FDEB1241AEF47D4EA7AED84CDA23BCDCD19DC2058A1DB2072D07DDE
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/load-more-post.js?ver=6.6.1
Preview:	jQuery( document ).ready( function($){...var posts_per_page = 8; ...function cxc_load_more_posts( cxc_this, pageNumber ){...var page_count = 0;...var str = '&pageNumber=' + pageNumber + '&posts_per_page=' + posts_per_page + '&action=codex_load_more_post_ajax';....if( !cxc_this.hasClass('cxc-disabled') ) {.....jQuery.ajax({.....type: "POST",.....dataType: "html",.....url: ajax_posts.ajaxurl,.....data: str,.....success: function(response){......if( response ){.......cxc_this.removeClass('cxc-active');.......var json_html = JSON.parse(response); .......if( json_html.html.length ){........page_count = parseInt(pageNumber) + parseInt(1);........cxc_this.attr('data-page', page_count);........cxc_this.parents('.cxc-post-wrapper').find(".cxc-posts").append(json_html.html);.......} else {........cxc_this.attr("disabled",true);........cxc_this.addClass('cxc-disabled');.......}......}.....}....});...}...return false;..}...jQuery(document).on("click",".codex-load-more",function(){ ...var cxc_this

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4842), with no line terminators
Category:	downloaded
Size (bytes):	4842
Entropy (8bit):	5.237361087857328
Encrypted:	false
SSDEEP:	96:+AtyN0n7SUVPrB7PqN7ncXkl6g8sQh/nJPVEzXg1nRexv:+AtyN0n2UHPO7ncXkdVQhPJP1p8
MD5:	D53F26CE71A7333D477B01F52BDADE3E
SHA1:	524408BE370C364FC1EF156CF43434705D31CC42
SHA-256:	428FEFA036DE5A227B40945C94BE22B37A89516BC6B8A5C0DD09B88E17FD9DDF
SHA-512:	A68BD93DB533B2532954155FDF6CBE2CAB8A7453B6A005D4B9ECFBA214C9E95485F684075ABD67FB4EAF13DFF9BDB7995E2291F60FDD045F1E9EA4A9EBC3186D
Malicious:	false
Reputation:	low
URL:	https://cdn.firstpromoter.com/fpr.js
Preview:	var FPROM=function(){"use strict";var c={},r="https://t.firstpromoter.com/tr",n="https://t.firstpromoter.com/get_details",f=null,t="_fprom_details",i="_fprom_tid",o="_fprom_ref",e=86400,a=1440,u=["fp_ref","fpr","via","ref","a","_from","_by","deal","_go","_get"],d=!1;function l(){return window.fprom_loaded}function s(n){c=function(n,e){if(!e)return n;var t,i={};for(t in n)n.hasOwnProperty(t)&&(i[t]=n[t]);for(t in e)e.hasOwnProperty(t)&&(i[t]=e[t]);return i}(c,n)}function _(n,e){return(new RegExp("^(?:.*?\\.)?([a-zA-Z0-9\\-_]{"+e+",}\\.(?:\\w{2,8}\|\\w{2,5}\\.\\w{2,4}))$").exec(n)\|\|[])[1]\|\|""}function p(){var n,e;c.domain=(n=_(e=window.location.hostname,3),e=_(e,4),n.length>e.length?n:e),c.test_mode="1"===x("test_mode"),c.test_mode\|\|(c.cookie_tid=v(i),c.cookie_ref_id=v(o),c.details=g(v(t),!0)),c.referrer=document.referrer,c.url_ref_id=function(){var e;c.custom_param&&u.unshift(c.custom_param);return u.some(function(n){return e=x(n)}),e}(),c.ref_id=c.url_ref_id\|\|c.cookie_ref_id,c.url=windo

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	22713
Entropy (8bit):	3.9112578468485575
Encrypted:	false
SSDEEP:	384:EgIkH6dB54QN4cdCR7ERLryIyZFumzo35XfiPaJZxqm7cEdiPaT1/995yJ3sgVIX:yXUEFsI9JGMVTp99/gd3bChl
MD5:	D5366145BEBF18A8E072A3AED4AFA162
SHA1:	37CD238012B071772FA83B0E97F8E5053BD5DC16
SHA-256:	0969D93C98363D210D93C2C6F36C1B8D43C52EF89EDF1777D4F3C6EA54E0FCB1
SHA-512:	CE50800026EC57C4E9B21DDF15EBADBE3E23EA93F45C3AD5FC53D27AD2607A696E069CF21C63BA3FA94497A6AABFFA4C3675A628BA3622665D6A77B3D7C9EB0A
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63875.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="224" height="40" viewBox="0 0 224 40" fill="none"><path d="M57.9648 15.8726V29.9511H53.2719V15.8726H49.4172V11.8984H61.8195V15.8726H57.9648Z" fill="#1F2D52"></path><mask id="mask0_94_2669" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="224" height="40"><path d="M223.111 0.819778H0.111328V39.0845H223.111V0.819778Z" fill="white"></path></mask><g mask="url(#mask0_94_2669)"><path d="M62.9214 20.9247C62.8969 19.0266 63.4538 17.1664 64.5173 15.594C65.5807 14.0215 67.0999 12.8122 68.8707 12.1282C71.4678 11.1547 74.3297 11.1547 76.9269 12.1282C78.1084 12.5844 79.1869 13.2716 80.0995 14.1498C80.9864 15.0107 81.6918 16.0406 82.1741 17.1788C83.1637 19.5786 83.1637 22.2725 82.1741 24.6724C81.6919 25.8105 80.9864 26.8404 80.0995 27.7013C79.1872 28.5803 78.1086 29.2681 76.9269 29.7245C74.3298 30.6984 71.4678 30.6984 68.8707 29.7245C67.1026 29.0366 65.5861 27.8263 64.5232 26.2548C63.4604 2

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65469)
Category:	dropped
Size (bytes):	303599
Entropy (8bit):	5.3515178254617375
Encrypted:	false
SSDEEP:	3072:lG4kl1kZnDK2yhO5hyUNZ32ox3OW2wMSvmC:4/rkZne3U5AUn32TSvF
MD5:	AB9573D6AB1DC3230983376FFFE35E48
SHA1:	BA6DF295A7CED510D74025BCB0B4E083FC6523F2
SHA-256:	1D36878275FDEBCD10C4E7B031C09A5E76999AFEA375EFF8688BC6622B0B349B
SHA-512:	DA9FDA75E61D6443F31E146F3A29665759A3F202C526E9FCA220102F23B78C3D401E7CAF234AC45CFB37550809A125DA718EFAE9B8F311F86DDC76FFE4694CC9
Malicious:	false
Reputation:	low
Preview:	/! For license information please see cmp2ui-en.js.LICENSE.txt /.!function(e){var n={};function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"===typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var o in e)t.d(r,o,function(n){return e[n]}.bind(null,o));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="/",t(t.s=13)}([function(e,n,t){e

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38087)
Category:	dropped
Size (bytes):	38211
Entropy (8bit):	5.1575116029654815
Encrypted:	false
SSDEEP:	768:d5veG0+6ihBBT+MGGgCEYBEZ9yEfRSEVdYGQO2SlT6qFOTH2:d5veGsacGrEGEZ9yhnO2SeW
MD5:	98F48B986C117E04ED8FCDBAAEFB7945
SHA1:	7AEA7AD94F81C908679B83A1B09BFD9D60E3EADD
SHA-256:	794B9F4FA15362394D9913554121B956F2EE5F5DC368540A8CC761DC9C7668F1
SHA-512:	D46F8B6CB86E13D5ACC10F9B608D8480305615005C1DFD1C2A828F11AC5259012EE704090F9CE3CB9F86C67466D30C516D5263256D356556098A1BC8516A897C
Malicious:	false
Reputation:	low
Preview:	/! @vimeo/player v2.24.0 \| (c) 2024 Vimeo \| MIT License \| https://github.com/vimeo/player.js /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Vimeo=e.Vimeo\|\|{},e.Vimeo.Player=t())}(this,function(){"use strict";function r(t,e){var n,r=Object.keys(t);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(t),e&&(n=n.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),r.push.apply(r,n)),r}function u(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?r(Object(n),!0).forEach(function(e){s(t,e,n[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach(function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))})}return t}function j(){j=function(){return a};var a={},e=Object.prototype,s=e.hasOwnPrope

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://api.cmp.inmobi.com/?log=%7B%22accountId%22%3A%22srUtCbgF3R7rD%22%2C%22domain%22%3A%22www.sesamehr.com%22%2C%22publisher%22%3A%22SesameHR%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.53%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22ZaXh4z9yxA%2BQ4O5urX%2BYvg%22%2C%22tagVersion%22%3A%22V2%22%2C%22gvlVersion%22%3A3%2C%22clientTimestamp%22%3A1728049150528%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-xpx8fcezzsu9kxkuiq8k%22%7D
Preview:	OK

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	768
Entropy (8bit):	7.472542585856117
Encrypted:	false
SSDEEP:	12:6v/7gVvZpV/SxU638/aqnwlOv6IP662Gl7abEYDykqkYJfr+D1919ZErN:XdamCkaqnwlOiIP662y7EpFgJfr+x91+
MD5:	F96507DF8FA98DF72639A40D92541FD1
SHA1:	703457A7391403E5AD378447C815CF5BC2C4963B
SHA-256:	82CF5F6657CD3CEA7776D1127BB01A07ACE9D98FE2FC7336D5CB09605134E772
SHA-512:	76A1E5D1748961C9C5E066C60276990842FC1327777A8D73704852017F511EE10AA1AC5DF64A32D8BE64381ECEC36B2B90E37D29EDFB0207F2AB175131D1E8F6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....DPLTE...CJ..........BG.BF.AG............AF.dh.AG.....mw.ir.foAG.EK.GL.]b.fk.ko.pu....................................L\..................................................................................................................................u\|.\|...........em.iq.nv.qy.rz.s{.u}.KV.T].Zc.[d.\e.`h.bj.bk.KU.LV.MW.NX.Q[.h......tRNS.&HIKL].............Z.......IDAT(Sc```d.....7SOOW7.....`gd..6^..@H../...............(....&7..........k..Cp......BBLV.?#.A.#!..LY.&!...ac.. "....k.'.......1V..a...R...0.H.F.9.)I..3...X..... >==..cH..pK.4... .....A%..u.;WDZ..;3...A=K..U..T0sOKvA..3..[.....@].@....b.Nu..v37A..-l......=j.q'.\...OVnp.......IEND.B`.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11384)
Category:	downloaded
Size (bytes):	11494
Entropy (8bit):	5.367514672981606
Encrypted:	false
SSDEEP:	192:vhRrObj37i1bFFdKhSdb/1+n6LhnU4bq9R9Y59oLD9f+zAOWZ7BXSNem0K72Lgn6:DBvqhSS6LhU4wzLD92jWZ8NxrCLgv63/
MD5:	A47746AFE7C0FC992CE70B4594E3A5CF
SHA1:	442B7DA1D3035C4B35C0E4A7D0A108DB6A82DD08
SHA-256:	C3EC0896CA2D036C1B3A47618044D269344B676513690A63AFB8E1883875AA39
SHA-512:	AC627A8743F5DD3464E606C84EBD751D9E22D49C3405DD1CBCE4D071A1F0E2ACF36100CE6D28884000FEA936E924DAA1DBD2E6BF5A701BD157154414E5BFB30D
Malicious:	false
Reputation:	low
URL:	https://static.hsappstatic.net/feedback-web-renderer-ui/static-1.21796/bundles/fetcher.js
Preview:	!function(){"use strict";var t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function e(t,e){return t(e={exports:{}},e.exports),e.exports}var n=function(t){return t&&t.Math==Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|Function("return this")(),o=function(t){try{return!!t()}catch(t){return!0}},c=!o((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),i={}.propertyIsEnumerable,u=Object.getOwnPropertyDescriptor,a={f:u&&!i.call({1:2},1)?function(t){var e=u(this,t);return!!e&&e.enumerable}:i},s=function(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}},f={}.toString,l=function(t){return f.call(t).slice(8,-1)},p="".split,d=o((function(){return!Object("z").propertyIsEnumerable(0)}))?function(t){return"String"==l(t)?p.call(t,""):Object(t)}:Object,y=function(t){if(null==t)throw Type

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	109090
Entropy (8bit):	7.979421475557858
Encrypted:	false
SSDEEP:	1536:6+gjQeeLDO5K5yxIXMcKdlQrbXHs7cFe/PakQNs3nJXOUvGwVW+jxt8YgAKdvsCR:6VuK4PX0ojxyG63nMUfVW2KbAivboW/n
MD5:	473E5409FA8BA52A3304E954B690344D
SHA1:	C7852E0B4C57F96B1AC29C305F735BEADFFF73E7
SHA-256:	B1A839E5B1E71FFFAD5FFA8A9F2DFD6264966636F64B1AD8B7886ECC56288A16
SHA-512:	B97EA649DED885EEBF607A29D6B55E11474096EEDC8063C2098DF1985FA54E47717B0F07B0C3CEF58CF46A034B07472A058F8446ABCDCF9DCDC4A4F1B0F981B4
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/talento_y_cultura.webp
Preview:	RIFF....WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.....$.m.9.....B.....].m7....'o..7M33@.$..c.`...mk..Y....;.....zv.n.n.-3s.Nev.Niv..L.:..s.U<.....H.....m..Mim.}.7t..(..,.y ..$..2.d........a.z.{Vo.9...+..1.zk.vm[[Z.s.s..~T...@.*....&.p....U....W......8.......m..$.V.S.3.......cf~/.d.....s......O.m.mKQ.}..yO}_5..q.....@.4.$..O. .............%.`DL._.U...\.k_13........d..0..V.g.,.Lr....5G.........l..\|C....B.&.!....H2.2...LB2.L....2!!...!...}%.......$IB. d.@B.E....f."....J...0...$X8...........d...d..I..8./. 4..,.BHH .

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2871)
Category:	downloaded
Size (bytes):	418867
Entropy (8bit):	5.576084058326801
Encrypted:	false
SSDEEP:	12288:d0VvjcRgZR60YHacXctFCt4sIuRXdBm92lvFyoNOMtsYPYq/UFV38sltQ+aR9YQh:d0VvjcRgZR60YHacXctFS4sIuRXdBm9+
MD5:	87B8CA11556C066AADFF5D051F158BD7
SHA1:	B1AE27086D16655EDB0799BE356565E2A8BA50BF
SHA-256:	4F0C1C75ABAB267719743985EDC745AC22ADE7424E2A2845DAF4BF22D632EFE9
SHA-512:	560DA5BD1CCAF2E4BA9B63D11ADAB825E2D8CC755E719EA8BA629681EF885AE3230622A97F765C9B2C1534D49D367FAF8E5A46394A667B88D9F9090CE88759C7
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202410010101/show_ads_impl_fy2021.js
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6637)
Category:	downloaded
Size (bytes):	8567
Entropy (8bit):	5.399624836794841
Encrypted:	false
SSDEEP:	192:E+puk34qTG78JOKvSEldXm08VKF57PIJFY6OyJ0Jj9fKy:9ukdTG78vvSyBm086PIJF0Jj9yy
MD5:	8422F52CE2F09AB49D5C8E3C3CD38EA8
SHA1:	BC3987348D0C243AC5DA060949202B4BBDC28542
SHA-256:	9C1AAB94BAE0DAA405E1C4659EE2864909FFB110E8A62D62C8705DEE2E621799
SHA-512:	0517746C8050E0AEF62B0B905116E19FD809D1582E624D56183022D608DF51F6F512125BB47627FD3B6897121019EEB0745056FC1DE31B453F9C7D40A9F0A599
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/choice/srUtCbgF3R7rD/www.sesamehr.com/choice.js?tag_version=V2
Preview:	'use strict';(function(){var cmpFile='noModule'in HTMLScriptElement.prototype?'cmp2.js':'cmp2-polyfilled.js';(function(){var cmpScriptElement=document.createElement('script');var firstScript=document.getElementsByTagName('script')[0];cmpScriptElement.async=true;cmpScriptElement.type='text/javascript';var cmpUrl;var tagUrl=document.currentScript.src;cmpUrl='https://cmp.inmobi.com/tcfv2/53/CMP_FILE?referer=www.sesamehr.com'.replace('CMP_FILE',cmpFile);cmpScriptElement.src=cmpUrl;firstScript.parentNode.insertBefore(cmpScriptElement,firstScript);})();(function(){var css="".+" .qc-cmp-button { ".+" background-color: #6c63ff !important; ".+" border-color: #6c63ff !important; ".+" } ".+" .qc-cmp-button:hover { ".+" border-color: #6c63ff !important; ".+" } ".+" .qc-cmp-alt-action, ".+" .qc-cmp-link { ".+" color: #6c63ff !important; ".+" } ".+" .qc-cmp-button.qc-cmp-secondary-button:hover { ".+" background-color: #6c63ff !important; ".+" border-color: #6c63ff !important; ".+" } ".+"

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1054
Entropy (8bit):	4.766323529633411
Encrypted:	false
SSDEEP:	24:2diO44l/Xp1PnhllolTo0TMpqdWYiuzbfKk4ZbHkaeOJG4cPnhllo/:c35x8TEpuPKk4ZbH/eGGE
MD5:	36544ACE336C588225C29DD1182E2174
SHA1:	97456C34B61856C8BC6A5EC8DA4C2E5515F2C534
SHA-256:	EF6E3687251A3437998F91E51702D5DA8ECF34D21D60C29A35A6BDBA6A692784
SHA-512:	A7EFDE63098B8A0DC46AEFB2BE56FBDD4420822A0CC221C91594300154DE44A4FE35DA2180FC7A564D9EB92E6A3B39B1A12B6D36DE644AB65CB2B522F6220853
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M14 22L16 16L22 14L20 20L14 22Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path><path d="M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.6478 9 16.8181 9 18Z" stroke="#AEA9FF" stroke-width="1.5" stroke-

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6404
Entropy (8bit):	4.656086995017361
Encrypted:	false
SSDEEP:	96:96+IngQ1MLNMrt4DoAJvX3pv25GGR8cZCWNGM3LtSvBa2OEWgYpjbgE5LdHYLaks:I+InH1/S3BOpp51SHpqfgE5LLNf
MD5:	1019F965BC9786A98C1E33F32C8A562C
SHA1:	23E1CB58FC36C42FBF68E26CD716450954AC7802
SHA-256:	86043E7380ADE1CBA486F957F4D5D013DFA3E70DECEFF98EF1280B1A0049B6C2
SHA-512:	B26FDCBE6BBB3D4AE42161AB40547960EC81CA8D0FEA7FD13E97A387B0F86D25B98490BA5465AD7E339B8F4343A027275849F662003DB121AEA7FB032C1A5EE4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1216" height="401" viewBox="0 0 1216 401"><defs><clipPath id="clip-Logotipo_sesame_negro"><rect width="1216" height="401"></rect></clipPath></defs><g id="Logotipo_sesame_negro" data-name="Logotipo sesame negro" clip-path="url(#clip-Logotipo_sesame_negro)"><g id="Grupo_4056" data-name="Grupo 4056" transform="translate(-666.345 -665.491)"><g id="Grupo_1" data-name="Grupo 1" transform="translate(1030.126 813.277)"><g id="Grupo_1694" data-name="Grupo 1694" transform="translate(0)"><g id="Grupo_243" data-name="Grupo 243"><path id="Trazado_271" data-name="Trazado 271" d="M2149.893,139.579l.119.029c16.066,3.554,36.89,10.242,36.478,32.556a27.719,27.719,0,0,1-11.717,23.6,47.854,47.854,0,0,1-29.006,8.558c-19.974,0-34.881-8.58-41.885-22.912a1.822,1.822,0,0,1,.74-2.359l16.145-9.373a1.806,1.806,0,0,1,2.476.622c.026.055.061.111.088.171a22.084,22.084,0,0,0,22.442,13.176c11.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10632)
Category:	dropped
Size (bytes):	10633
Entropy (8bit):	5.07123632012594
Encrypted:	false
SSDEEP:	192:6QZOksRszLTQOlEOSYPPF9JPcxG8wJCXywg+qYQzWKwqctzhVHuAI3E:6GqC8sEjYPN0VwJCXyb+7XRgI
MD5:	92FB13FAE11F843F0133B4F34CC81D76
SHA1:	3541A6958447994121FA9E8AEB4DB43DAB0263C0
SHA-256:	702331D04A1C126B1F637478C3D1C70D5A16B833CCDAB72B369BA4A9FD2ACDD2
SHA-512:	5B68E97B47CEB0CE962BC485773E3E46B23493F668EEED7EE37415C8BF76D09F1924F8BD429C83D85461EB8464F84607FEA031180717DB3C511392BD2B5B1FE4
Malicious:	false
Reputation:	low
Preview:	var sesamehr=sesamehr\|\|{};function sesamehrDomReady(e){if("function"==typeof e){if("interactive"===document.readyState\|\|"complete"===document.readyState)return e();document.addEventListener("DOMContentLoaded",e,!1)}}function sesamehrToggleAttribute(e,t,o,a){var s;e.hasAttribute(t)&&(void 0===o&&(o=!0),void 0===a&&(a=!1),(s=document.querySelectorAll('[data-toggle-target="'+e.dataset.toggleTarget+'"]')).forEach(function(e){e.hasAttribute(t)&&(e.getAttribute(t)!==o?e.setAttribute(t,o):e.setAttribute(t,a))}))}function sesamehrMenuToggle(e,t){var o,a,s,n,i,r=[],l=[];e&&((n=(s=e.closest(".menu-wrapper")).querySelectorAll(".menu-item")).forEach(function(e,t){r[t]={x:e.offsetLeft,y:e.offsetTop}}),o=e.parentElement.offsetHeight,e.classList.add("toggling-target"),e.classList.toggle("active"),n.forEach(function(e,t){l[t]={x:e.offsetLeft,y:e.offsetTop}}),a=e.parentElement.offsetHeight,e.classList.toggle("active"),s.classList.add("is-toggling"),e.classList.toggle("active"),n.forEach(function(t,a){v

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	282332
Entropy (8bit):	5.545893001022812
Encrypted:	false
SSDEEP:	3072:48Ip9SXNKW4s+3M9C0x0iC2uBcO9yyqo5/Aux9SEgpix72Dej7A1i:BIGKlj3112vO5gbcx72Dej7b
MD5:	75D46323586965227AC015505CD3D648
SHA1:	D5CB1CA01425DF017A997D9BFE3469A8EEDD6E3A
SHA-256:	F52A1B726A59F414E5C4FBAF47C2CFF6EC6149F9A4F654755E8B3A9EF14D6864
SHA-512:	8732DF449C0A98641F6DE5ACD797999B320040E054486A27C36D097D333BF9C2EE92B153F6FEA252C5C6DC50ED7A9A9C9BD4077E2942BB99F79C9B43D6D53373
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-954051485&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-954051485","tag_id":113},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":105},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","v

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6637)
Category:	dropped
Size (bytes):	8567
Entropy (8bit):	5.399624836794841
Encrypted:	false
SSDEEP:	192:E+puk34qTG78JOKvSEldXm08VKF57PIJFY6OyJ0Jj9fKy:9ukdTG78vvSyBm086PIJF0Jj9yy
MD5:	8422F52CE2F09AB49D5C8E3C3CD38EA8
SHA1:	BC3987348D0C243AC5DA060949202B4BBDC28542
SHA-256:	9C1AAB94BAE0DAA405E1C4659EE2864909FFB110E8A62D62C8705DEE2E621799
SHA-512:	0517746C8050E0AEF62B0B905116E19FD809D1582E624D56183022D608DF51F6F512125BB47627FD3B6897121019EEB0745056FC1DE31B453F9C7D40A9F0A599
Malicious:	false
Reputation:	low
Preview:	'use strict';(function(){var cmpFile='noModule'in HTMLScriptElement.prototype?'cmp2.js':'cmp2-polyfilled.js';(function(){var cmpScriptElement=document.createElement('script');var firstScript=document.getElementsByTagName('script')[0];cmpScriptElement.async=true;cmpScriptElement.type='text/javascript';var cmpUrl;var tagUrl=document.currentScript.src;cmpUrl='https://cmp.inmobi.com/tcfv2/53/CMP_FILE?referer=www.sesamehr.com'.replace('CMP_FILE',cmpFile);cmpScriptElement.src=cmpUrl;firstScript.parentNode.insertBefore(cmpScriptElement,firstScript);})();(function(){var css="".+" .qc-cmp-button { ".+" background-color: #6c63ff !important; ".+" border-color: #6c63ff !important; ".+" } ".+" .qc-cmp-button:hover { ".+" border-color: #6c63ff !important; ".+" } ".+" .qc-cmp-alt-action, ".+" .qc-cmp-link { ".+" color: #6c63ff !important; ".+" } ".+" .qc-cmp-button.qc-cmp-secondary-button:hover { ".+" background-color: #6c63ff !important; ".+" border-color: #6c63ff !important; ".+" } ".+"

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	dropped
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60822)
Category:	downloaded
Size (bytes):	73825
Entropy (8bit):	5.336916242384151
Encrypted:	false
SSDEEP:	1536:q70PxPPPPPPPnzCfikTUWcgesAichUrXHSqjaEJwVonZXYNtWu2scVDXYRClzlIP:DND2LlzlIgQX28XsYce
MD5:	A7CF845FB8FAF8CB40C0C164987E630A
SHA1:	BFB418D3FE9FFA95DEC6F1D67FFA9542E745622C
SHA-256:	9251EEE5D3F9F7770FBBC2ED1EC5BC5519314901A33C79D007B1EA5C4A4FDFCA
SHA-512:	7E4F9F8F0965A1F47BBE7BA175D0C0303BB7B61383EFA660CDA9CF116CFB481AF574256B5471BF313F50A8B7A1777CBD172F1EBA1EE27E5395DEFF9B0B6F0C7D
Malicious:	false
Reputation:	low
URL:	https://js.hs-analytics.net/analytics/1728048900000/8564339.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.993. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 8564339]);._hsq.push(['trackPageView']);._hsq.push(["trackClick", "button#hs-cta-wrapper-aa3f584a-68bb-4804-8a3b-27f2ca90dfeb.hs-cta-wrapper.self-center.normal-case.flex.mx-auto.text-center.text-base.text-white.rounded-2xl.py-3.px-6.font-bold.btn-cta", "pe8564339_blog_register_button", {"url":null,"trackingConfigId":15548470}]);.try {..} catch (e) { _hsq.push(['log', 'customJsError', e]); }.try {..} catch (e) { _hsq.push(['log', 'customJsError', e]); }.try {.// Replace 'false' with your custom logic that returns 'true' when the event should be tracked..if (false) {. _hsq.push([. 'trackCustomBehavioralEvent',. {. name: "pe8564339_app___application_installed",. properties: {. // give each property a value so we know what they mean. customer_uuid: null,. item_name: null,. sesame_

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2741
Entropy (8bit):	4.200371994700101
Encrypted:	false
SSDEEP:	48:AFMpskFhJBTvB/SkfAf3Ss3XRDMS0lpTPlp/SRsTMSjv8SxwWj88:4kFhJpFSdSsHNMS0ltldSRWMSoSu8
MD5:	63EB241F2EFF549C61A71FCD388A6D3B
SHA1:	33DCF8E880D40F0C496863159F948191843CD0CF
SHA-256:	3A5DAAA6AD4414CE23CF44631D6BD0FB55138EEF51E5B89C9AC4FC4D18EF8F09
SHA-512:	64989D177C8BC41196851483AA760BBEFB63C0E7CA60A20AAD96397AB1E9B99D7579C68ADB3E87B461EB814C6650A1E7987F225362071E81703EBDCF8568DE53
Malicious:	false
Reputation:	low
Preview:	{. "version": "v1",. "language": "en",. "portal": {. "defaultValues": [. "GRANTED",. "DENIED". ]. },. "banner": {. "title": "We value your privacy",. "sectionTitle": "Google consents",. "description": "Please note that this website/app uses one or more Google services and may gather and store information including but not limited to your visit or usage behaviour. You may click to grant or deny consent to Google and its third-party tags to use your data for below specified purposes in below Google consent section.",. "confirm": "Confirm". },. "purposes": [. {. "id": 1,. "portal": {. "title": "Consent for storage related to advertising like cookies on web or device identifiers in apps by Google.". },. "banner": {. "title": "I want to allow Google to enable storage related to advertising like cookies on web or device identifiers in apps.". }. },. {. "id": 2,. "portal": {. "title": "Consen

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	303
Entropy (8bit):	6.224990606701667
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKcicdx44RNcwlBdWYORvXb17yT+Wp:6v/7A/0vZ3HBlvkXbdy9
MD5:	74B27D6D9AC2EEA20AB82149CBA0B9A9
SHA1:	A52EA541FDC93FC91BC67CDEEE26A512273670D1
SHA-256:	793EEACCAAB3FDD55725A9E8204DE503F382DCFD63CCA3CF0C57BDEEE8B0CAC0
SHA-512:	90F38EDFD62FA36E7CD458A8CEEA03C3638DE623C6B7ECEFE04805839EC69A37175DF924BF649A5F4F66587401F688D104A5BF4711949055FEE4925A8A7562B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....0PLTE....JW..W.JU..Z.KT..[.KU..Z.KU..Z.KU..ZAG..KU..ZE%ig....tRNS.&&]]...............XIDAT.WcdPK+f.....1...`...n.ZW.``1c..8.;c.........?..P.KU.>d..!{!..s...f....wF.QxP.....$..PP.....IEND.B`.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20252
Entropy (8bit):	3.7856982807253075
Encrypted:	false
SSDEEP:	384:jDQQIsdCkRSGkeYW+x2cJn+rDMXKalLjc/XoQRQArxYmIiJXo0cVoMsrp4f:XQQ9IGkbnkDT/zQUmm94087opK
MD5:	016FDE16B2A8870469E0FEE42A26329D
SHA1:	A612A0E8BBFF74F9AE18CC45601F1EBE787462EF
SHA-256:	7C6269EE3C51E68B528DCFA7518BF377AA176C4452B2D57E864C3919A5C38A33
SHA-512:	81AC966A8BFB3232C4FFE3FF3C783B2D43827CE1390EC5A019673B1F4B4986507F2596E762D086388CEAF346E8283A96FCD1721A4A248F9E0393DD21E3003191
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63782.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="179" height="48" viewBox="0 0 179 48" fill="none"><mask id="mask0_94_2569" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="179" height="48"><path d="M178.273 0.874725H0.828125V47.0295H178.273V0.874725Z" fill="white"></path></mask><g mask="url(#mask0_94_2569)"><path d="M178.273 24.7332C178.147 25.0419 177.988 25.336 177.799 25.6105C177.214 26.2977 176.594 26.9571 175.966 27.6077C175.678 27.9076 175.364 28.1811 175.028 28.425C174.8 28.6056 174.535 28.7345 174.252 28.803C173.969 28.8715 173.675 28.878 173.39 28.8219C173.104 28.7658 172.834 28.6486 172.598 28.4783C172.362 28.3079 172.166 28.0885 172.023 27.8351C171.888 27.6667 171.776 27.4811 171.691 27.2831C171.161 26.1724 170.515 25.1218 169.761 24.1491C169.514 23.7712 169.244 23.6754 168.891 23.9598C168.282 24.4503 167.705 24.9833 167.083 25.4511C166.23 26.1238 165.48 26.9159 164.854 27.8029C163.903 29.0837 162.775 30.2322 161

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	16738
Entropy (8bit):	7.878869949225586
Encrypted:	false
SSDEEP:	384:gwJcZYze5hhhaFrVoXl1xFGYVuUHa4Gdg3m0AEr:gucZIe5ha5VoXlBBVt1ei
MD5:	39CCF12B2BF099E909387F7AF006D85B
SHA1:	A9C91805591A6F35A9FCB5620CE2CAC7D5CE32E3
SHA-256:	85361A90C89B0785E8F9928BEDBDFFBD4AA006FEF1D74A6AACC15AA718911C9D
SHA-512:	DFE37E1B5F11EFF4CCA2C9AA9CF33AE0048F1C195AE6E96F724EBEFF098C663FA57483C8220DD1C284B25F42FE77D8D718A5AF86C4B247B76D4C27A292DCF98F
Malicious:	false
Reputation:	low
Preview:	PK...............'............manifest.json%.A.. ....ZL[,.=.+o`\..h.f@.izw..g......0......<..F......F...S.")...:2..)....L8.....U0..y...(E.c..~.T.''..B(.+....J1.Z.}.......,iM.....PK..............M,....\!..4...animations/6393c56a-5036-4fb2-bbad-32e3bd1cd6ae.json.]n.6..b.&D....m..@.Xl...A..r...In..9.e/......8.$..F.S....qD.8.9g..!w..l."v.n.K.....:.i.I......\.....+.,lR.).e.2s.t...;gHR$......sVH#...5>d.a?....bB...(D.8."w.f7..Xo...w....`.@3U!..]"'A.[V...........Z.Bcq.Sk...t....S..e.qR...P.>..i...h.A..l..R.B..o.h(.C.....v.2.;sy.y..5.3.F.T....3..i.z...e}..H?.B....E.=.]W.i..F...Q._.&...J.0....Z....l.@(.~_.5y..zn.Q...-J....N...O...9..~.xY.s]/.MD...~..k..V..h R/....W.i....i...e..(.q..U.O.%.ds..kW[..y....$....5).k.\....._...x.N..$K.../...&....;.......o......L'.....6..M....p..i.....z0...0.l..&..Y...y2.IM..5.K!...a.j7..{#0...\{....e....9Z....1.\|E.j..n...3;../.\.&.3.*.G....w?....&.)..aX.."...D...VH_..i.J...fRp........g4h.h@.L.ys5.y@.az..E.E

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11384)
Category:	dropped
Size (bytes):	11494
Entropy (8bit):	5.367514672981606
Encrypted:	false
SSDEEP:	192:vhRrObj37i1bFFdKhSdb/1+n6LhnU4bq9R9Y59oLD9f+zAOWZ7BXSNem0K72Lgn6:DBvqhSS6LhU4wzLD92jWZ8NxrCLgv63/
MD5:	A47746AFE7C0FC992CE70B4594E3A5CF
SHA1:	442B7DA1D3035C4B35C0E4A7D0A108DB6A82DD08
SHA-256:	C3EC0896CA2D036C1B3A47618044D269344B676513690A63AFB8E1883875AA39
SHA-512:	AC627A8743F5DD3464E606C84EBD751D9E22D49C3405DD1CBCE4D071A1F0E2ACF36100CE6D28884000FEA936E924DAA1DBD2E6BF5A701BD157154414E5BFB30D
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function e(t,e){return t(e={exports:{}},e.exports),e.exports}var n=function(t){return t&&t.Math==Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|Function("return this")(),o=function(t){try{return!!t()}catch(t){return!0}},c=!o((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),i={}.propertyIsEnumerable,u=Object.getOwnPropertyDescriptor,a={f:u&&!i.call({1:2},1)?function(t){var e=u(this,t);return!!e&&e.enumerable}:i},s=function(t,e){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:e}},f={}.toString,l=function(t){return f.call(t).slice(8,-1)},p="".split,d=o((function(){return!Object("z").propertyIsEnumerable(0)}))?function(t){return"String"==l(t)?p.call(t,""):Object(t)}:Object,y=function(t){if(null==t)throw Type

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.87421571115308
Encrypted:	false
SSDEEP:	3:YGKeMfwDpHXAYHfIp14aMO4:YGKe9t3Ip14Y4
MD5:	0CCAA865D4AE59A32EAB9788297C1ABE
SHA1:	BA6FCAFD0EE3218782D5DCFAD5D6E09B6B90AD33
SHA-256:	1EA50329B826918B0B803777E2F5AC48A3570AA1F9C06BC92B6A1731AE37654A
SHA-512:	8406BF28C4E51CD83C8E43F0D856DB98423687EB6527472C39F72A116729A560B5F326666E2C471215BC14C2A3BA7039A9242D2CD9CA87E538F77E80B7E4C077
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/geoip
Preview:	{"country":"usa","region":"ny","city":"new york"}

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (314), with no line terminators
Category:	dropped
Size (bytes):	314
Entropy (8bit):	5.015960659804554
Encrypted:	false
SSDEEP:	6:AAjYWW4XIbDRWPiI8mgO9lVhnqpmCJ3sdBD0Wb0E+FbMIVnXlsRBGEE4ye:AFlDRWqfuHnOmC6Z0EObPlCwB4ye
MD5:	630911C3ABEFFBBBCB2A96435EBFA79E
SHA1:	C9F33427CBB1362814474620BA73E1F794E5BDCA
SHA-256:	D8B1C973DAF0B559F8F77EDF6CBAD91A2B0BF496FEB54D1BC40D9F0795D1A5A7
SHA-512:	D935D03490213AA231BC8DD437DA56B7A91DF685A9A4084FA203519060DD38BF0525C02B0196DDF4DCFF50C2221670BE7142F4F8C9ACC86A4395F3A10EA7FE09
Malicious:	false
Reputation:	low
Preview:	function loadScript(a){var b=document.getElementsByTagName("head")[0],c=document.createElement("script");c.type="text/javascript",c.src="https://tracker.metricool.com/resources/be.js",c.onreadystatechange=a,c.onload=a,b.appendChild(c)}loadScript(function(){beTracker.t({hash:"9c8e9a86903cadee8f71cc30ca9a6bdd"})});

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	8278
Entropy (8bit):	4.74042267076561
Encrypted:	false
SSDEEP:	192:J7M/2+pJrsirVrjxyDkBMtMqhVj0RMM0iFZrTLek0WL1yfi:JwD/hRFHb
MD5:	D634579DE5E9D5888DF9C4AF64AE3A03
SHA1:	5C5335E51DD5AE069958F9A2D980FC7F2C484DC2
SHA-256:	B4A1A6F5415629E3C78427F3E13AA8750222B9FAE47D8A400CBA25ADFB110A51
SHA-512:	21A50A50B023BA563E01B5BCA27CF41A604B1EC1B35F84F6F1F9896B129CFC1ED7D7EDFDF0DCF8FF8A66FE6BB6BFBC127337A3CB7EC8E694578C5CE56DDA4F00
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/css/templates.css
Preview:	./* Header */..#brand-kit-header .grid-2 {. display: grid;. grid-template-columns: 40% 1fr;. align-items: center;. max-width: 1280px;. margin: auto;. height: 100%;. gap: 30px;. padding: 1rem;.}..#brand-kit-header {. padding-top: 0px;. padding-bottom: 0px;. position: relative;.}..#brand-kit-header .bg-linear {. background-image: url('https://dev.sesamehr.es/wp-content/uploads/2024/08/bg-linear.svg');. height: 700px;.}..#brand-kit-header h1 {. font-size: 5rem;. color: white;. font-weight: bold;.}..#brand-kit-header p {. font-size: 20px;. text-align: left;. color: white;.}..#brand-kit-header img {. position: absolute;. top: 50%;. right: 0px;. max-width: 900px;. transform: translateY(-50%);.}..@media only screen and (max-width: 1535px) {. #brand-kit-header img {. max-width: 700px;. }.}..@media only screen and (max-width: 1155px) {. #brand-kit-header img {. max-width: 600px;. }.}..@media only s

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10805)
Category:	downloaded
Size (bytes):	340136
Entropy (8bit):	5.566270823647108
Encrypted:	false
SSDEEP:	6144:G4qwIGKlqjy21MvO5K1x72Dej76sKFVVl2pZ:vqwwUjy2Zl2
MD5:	B6B71DCF32F8A7F40A540395D34B08A9
SHA1:	E6C4AF34A2312FC4476CB256CDABA9E661D51A06
SHA-256:	47E40045D62AEC11F3DEF512424B3DE3FD1B9C0E0820EF1AF5F994E804F0D9F6
SHA-512:	6D53CBD75BF0969CEC47F63EE3B1434D2EC0077392C7E17FBF314A6ECBE23F48B28BC17F971462DECA19C012C35794411FE1EA6EEFEC0630B875851DA6E149D8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-EW2RETWFK6&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"34",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":33,"vtp_rules":["list","www\\.sesametime\\.com","sesamehr\\.co","sesamehr\\.com","sesamehr\\.cl","sesamehr\\.pe","sesamehr\\.com\\.br","sesamehr\\.fr","sesamehr\\.it","sesamehr\\.co\\.uk","sesamehr\\.es","sesamehr\\.mx","sesamehr\\.de","sesamehr\\.cr","sesamehr\\.nl","sesamehr\\.pt","hrtalks\\.sesamehr\\.com","superrhheroes\\.sesametime\\.com","assets\\.sesamehr","help\\.sesamehr\\.com","try\\.sesamehr\\.","webinars\\.sesamehr\\.com","email\\.sesamehr\\.com","hub\\.sesamehr\\.com"],"tag_id":115},{"function":"__ogt_ip_mark","priority":23,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",2],"tag_id":117},{"function":"__ogt_ref

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	876
Entropy (8bit):	4.79256166999261
Encrypted:	false
SSDEEP:	24:2diO44l/FwCYZkX7QPjJIFfUK0vko1KalWQnhllo/:c35VDUPjSFfUK0sokh
MD5:	FD7A6C871DED0EBF2D56CD7CDC1EE979
SHA1:	F626B841431B792F81EE39C15B833CFE3047AB4B
SHA-256:	C7EAEEFA4CC79F618907E544E40C570955D8E69E522707C68EECB5C0B37914F6
SHA-512:	4F25C99B2C369E9DBDF7FFDEF22B20254DDF6F0B867919F775D33502E8DBB16DD40CF7FD1CE1F07E416302401A51D5D5E8F87AED8D8D628593655CDF298E37C2
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-14.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M23 23V25C23 25.5304 22.7893 26.0391 22.4142 26.4142C22.0391 26.7893 21.5304 27 21 27H11C10.4696 27 9.96086 26.7893 9.58579 26.4142C9.21071 26.0391 9 25.5304 9 25V16C9 15.4696 9.21071 14.9609 9.58579 14.5858C9.96086 14.2107 10.4696 14 11 14H13M15 10H18L20 12H25C25.5304 12 26.0391 12.2107 26.4142 12.5858C26.7893 12.9609 27 13.4696 27 14V21C27 21.5304 26.7893 22.0391 26.4142 22.4142C26.0391 22.7893 25.5304 23 25 23H15C14.4696 23 13.9609 22.7893 13.5858 22.4142C13.2107 22.0391 13 21.5304 13 21V12C13 11.4696 13.2107 10.9609 13.5858 10.5858C13.9609 10.2107 14.4696 10 15 10Z" stroke="#6C63FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (20909)
Category:	dropped
Size (bytes):	339861
Entropy (8bit):	5.372246800196103
Encrypted:	false
SSDEEP:	6144:ODXsboPRYENaGFFR7KbGEpMGDa/sx8LCqQ:E8cPDaGFL4
MD5:	71D365DD74E584B7439FC62CB445B638
SHA1:	6B9A2BB55A5571A0D574DD9F3BEE68163E896CD1
SHA-256:	19AA295521F5FE3828D378798CE690FF429956271AFAB0AC12883F188BCF95BE
SHA-512:	3AC66B497D75088634FE3BC29FBF8CE251BE15D20034162105CB94F0DC71C4891ED8E309A47DC54A4454FF5A4DA1AB1E5F7681B3FFF0BAB81A7B0CB9DEAF815E
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["dotlottie-player"]={})}(this,(function(exports){"use strict";function _taggedTemplateLiteral(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.defineProperties(t,{raw:{value:Object.freeze(e)}}))}./! ****************************************************************************. Copyright (c) Microsoft Corporation... Permission to use, copy, modify, and/or distribute this software for any. purpose with or without fee is hereby granted... THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH. REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY. AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,. INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM. LOSS OF USE, DATA OR PROFITS, WHETHER IN AN

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	259
Entropy (8bit):	6.138368842882266
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKcB1ICa+qlN4/naXY4dwEB1RHoZL6+vsup:6v/7A/0vZB1DrqlN4/aXY4dwgHoZLh
MD5:	7ECEBDA95F0491BB476B83BAC70F2358
SHA1:	815A773D24D65B4FCD9FCA64C86EF904BC86D3EB
SHA-256:	3F488CED685DD25632E6B9E8628349A6C9C023E8FCC7D7172C75777DC69D21EF
SHA-512:	A87E970CBE3FC099536CC6B98C46705AB732D82944AE006B65DB84CA21C447DC52042157F8862AB4AB9D790F0AFBA957905FDAADFD71305C6B2B1580D4184866
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE....JW.JU.KT.KU.KU.KU....KU..!.....tRNS.&].....w&}...GIDAT..c`.v.(....C........U.A.....d.@p..<.............l....x..s(.F.....}k...J3j....IEND.B`.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	55208
Entropy (8bit):	7.9931298828385735
Encrypted:	true
SSDEEP:	768:/PRG5so0XsjfDdX5rdKQG/QBsmWM5BtTWxe5lhQc9HkxjXMIvAk1NuQgp0m7JB/8:hysL8j55rdKQGnx4Ox8zHMjMI+d6mdN8
MD5:	938D0B2261E03F5A8748AC5019C66A75
SHA1:	8E2275B55D85852A8C4B78FAB45CC4D53F21DC6E
SHA-256:	7FC135FA477B6287339542261C63B21A5352277FDA919B10EA8C8DE9DD4D95A4
SHA-512:	A89AFE8CB94EC33589B2D0A2CDA90C2F44A9EA8152D574586F4CAE37447883B50CE654DF436C195A87D6C3D9D79301BBDD88C86794D7638FF8D28A41D30CCE5F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../>.d.....m..."O.;\|....w.+.yz...I...,+Tff..{ ....`+1...6_.(......~.1$.Q5l[."... ..K..4Y$R.....@..........c.(....u..T@..n..+.H.31...mSF.TZ._.........Q.....h....fN....J7......S.:&.^B..<.. M....P../n....h.T-.6.r....WSM..V..FH.G.M....IWh..h..oQn.....;T...... ....k.[...%..0..6.R. bO.. ...V..mSP..D5U%5....BJYN...... %...[A.c..(P.P..Q..-.R...(..C(.k.N..n%.r...&.3Y...I..l.`.9..j.2....b` .f.8;y.......v...-Y0.....l..?..6.!uL .r..5rq....L.2.DZ.....;.KWR.....[.9S..7 8.....2.z........cIf=.0..j........&1M.T)..a....@.H.=((,...P:..&...S.+=I..,.......R.(....w...:.)..,.#!.-...r....o.SID..V.z..o.........x.9.2.+_f.Mp.d}..+..Q.9g..+).>.C.?.E..nH.u."...a..f.N.t.o:.K.gG9..Fr4u..C..!".&il..Pv..8..qJ..7A.......q6..$..N..e......Y...m..6....^..[..:..>..e.eW..e)M.....e3.1bJ......~S .UAfbI P.y..k.OAD(.}...>.w..,....7H.......i../...q..*.D...A'F.2i..h.Q.....p...[o.1K.v...RT.Kh.....K...pa.........1{.\|...G.......?,..6o.1$]..A....-.z.6R?.'.slO.{...4jQ.4

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	178630
Entropy (8bit):	7.997711184103492
Encrypted:	true
SSDEEP:	3072:PJOjEUZmd1PY0JAEz2sIZUxyFXpKFvYJWiz2q5daoLOD1ib79/W3:P+7SW0JAS2nUxyFXp7B2q+1wW
MD5:	EB8176FE35F9C4D8FB2558AD9D4D6DB8
SHA1:	E7866FABB4DA8D773E5F75A38ADF876F37A3A5CC
SHA-256:	6261F60014B548AD6D249E8CED6BF22A7D711AD32330058F25378ADE673E721F
SHA-512:	48726440EEFFA2168E50795EF31ABA25773D0A7A5D929CA5800C4E10555F149D3BE851DC5D480C4CE577D1C8A1DB9D3B225F413B5A435F087435930BCBCA6311
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....0......c..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHHS...$.m.0R...)S.....a...2^Zr.7.$.A:k.s...t.Rd@.:+..`"..m[A"g.0.s.s....m[.$I.$.@....k..a.....J1D....$IR.P......c...d..I.H...o.+.". ..........V...S#.\|...Vj.m[ .-..1....t..jQ (.F.l.V.Z.N.(..~..Y..........h0#:.."....6A`nl%0/.!....D."4./.....7.S..'.%......{.Q...u...t....%y.._..%mk..01G...p.....P.......\.n..V.o.......C38.ea...B.zHM...8^....u.?..Y0...a_..(7.&.N.^#R`.....U..L..G.#9./p.3L.P..8c..e..j...O.K...U..h....v...P..l.o.t.h....f...Q.ej.u!...S..4b..s........Z....L.....y...

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	82
Entropy (8bit):	4.943973919273756
Encrypted:	false
SSDEEP:	3:6Z6hmHRWWXaDEIhJOXriWfSC54:6THRxaDROhr4
MD5:	6112A3361BAEA672D786EF851318EBFB
SHA1:	11A2A7E7D1B610500EE389B406B601E0D256201E
SHA-256:	E05A3EC02CE95CEDB79B350DCF105A8EA71DEB33F3157D53D0396C62AF434C20
SHA-512:	A8E97C36403EF92450F03E0A1E21C1F716CE4A060ADD430B112CF45CFB7C1C0347AEBF6C1C729E4623B7787530B3977036A62D38EA09666F93BD7C8284CF94BA
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/fonts/albert.css?ver=1.0
Preview:	@import url('https://fonts.googleapis.com/css2?family=Albert+Sans:wght@100..900');

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.592519368188936
Encrypted:	false
SSDEEP:	24:2diO44l/7tzITo0TMpqdWYiuzbfKk4ZbHkaeOJG4cPnhllo/:c35ztzITEpuPKk4ZbH/eGGE
MD5:	A07D45672BBAC0167027C12397DBB0B1
SHA1:	00E2DF5533E88826C0F993B47731D234C36EE85F
SHA-256:	88A941E511F80F8AC1EA678B4DF2AE37603E664D618E1326E2AE73B67FDA13FC
SHA-512:	5EEECC2F7A3DA108333CF4A5D367F2316B8F79DC6110AF8BB2BCDB42CB36866A40E398F05AB35BB124FE8E9E7DA68B2B96C5A6D89E556BCB093676E9D9E9C384
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M21 20L18 18V13M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.6478 9 16.8181 9 18Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 277, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39319
Entropy (8bit):	7.927478880016368
Encrypted:	false
SSDEEP:	768:Ckqml45r0fbkNoOqUUi+7q/Vhpu00RWF60XqVTDMbdobEYVHg:Ckqm4rwOUi+70Vh56VvQdob1Zg
MD5:	25DA7CB65EEFF6292ECEF06A89EDEDD9
SHA1:	3C3AA0C5CA9D4F728F40DAAF1B4F2C6C55617297
SHA-256:	A346A7E56D3E362D7CEF00650FB14B2361E1004E82356EDC30D2EAC2B596952B
SHA-512:	44E972B2F424E00A63DCE912A426DB9F4DAF8C03934FF06D2176D67ED4B9285B5D6D01E5A44C47E5D9984BEF54C9EEF09441EEE81C3F40AE402E3783ACE71DF6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................5....sBIT....\|.d... .IDATx^.}.\|..............{.....p.`H.Dc...{?E..U.i[......7.j......%....Ep...... $@...&..b.{g..33....U.s..9gf.y...Gc.#...B.. ...B.. ...B.. ...B.. ..F@S.62.. ...B.. ...B.. ...B.. ...B..`D`.$ ...B.. ...B.. ...B.. ...B..P.."....2.. ...B.. ...B.. ...B.. ...B..,....!@.....!@.....!@.....!@...J#@....C.....!@.....!@.....!@.....!@...Es.. ...B.. ...B.. ...B.. ...B@i...Rzx.8B.. ...B.. ...B.. ...B.. ...".h.....!@.....!@.....!@.....!@.(...XJ...G.....!@.....!@.....!@.....!@....B.. ...B.. ...B.. ...B.. ..... .K..!...B.. ...B.. ...B.. ...B.. ....9@.....!@.....!@.....!@.....!.4.D`)=<d.!@.....!@.....!@.....!@......X4...B.. ...B.. ...B.. ...B.. ..F..,....#...B.. ...B.. ...B.. ...B.. ....!@.....!@.....!@.....!@............q..!@.....!@.....!@.....!@...D`.. ...B.. ...B.. ...B.. ...B..P.."....2.. ...B.. ...B.. ...B.. ...B..,....!@.....!@.....!@.....!@...J#@....C.....!@.....!@.....!@.....!@...Es.. ...B.. ...B.. ...B.. ...B@i...Rzx.8B.. ...B.. ...B.. ...B

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1750
Entropy (8bit):	6.042950035667117
Encrypted:	false
SSDEEP:	48:o44knA9WITjGNtcLJqab3eYGSHF39HtW/m2kQ:2knmWIT6NWLJZSjSHbHtW9kQ
MD5:	A2A85B1B5456D31720ACD9B31284BDD0
SHA1:	D51DFFA3FDC3EAD9A2A2042637B1D6FF35E97B30
SHA-256:	44CA26445BBF7612CE296D09D6B15FCA7D9B5BC2FBB9CCEDAE1C3EB5D34D83F3
SHA-512:	1E039821D368997C7B32094550BA3301EC46C66FFF596A7B3094E953BEE5E016FC3C84AEB6B837F59CD6A247D02852B8F72E4573DA623A7E6F0CACD01D1CFD50
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....pHYs..........r.n....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.5 (Macintosh)" xmp:CreateDate="2022-10-18T13:20:39+02:00" xmp:ModifyDate="2022-10-18T13:24:32+02:00" xmp:MetadataDate="2022-10-18T13:24:32+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:b8c745eb-a2ac-4363-92ae-f7ca85a2bc9c" xmpMM:DocumentID="adobe:docid:photoshop:7745cb83-aa43-c941-86d1-9ff0e9878353" xmpMM:OriginalDocumentID="xmp.did:f3

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	515
Entropy (8bit):	7.089198709884326
Encrypted:	false
SSDEEP:	12:6v/7gVvZiFtCCNWUxT0125XYDIJOJnq5XN:XQk3UuqIDIEJi9
MD5:	9D245EE08FFDA6EB9003D1DA746368C2
SHA1:	BEBA9DBCDC80B89AC68DD9388D75C537500E0892
SHA-256:	5A2324B04BF9EEC32B58575F28585CE1A5700C8F6C0CCD3018CA6BDCD1FDCFAB
SHA-512:	61C155ADF191A222DD990A0C4389DF85DAF3AB2AD4D30BD9EF05CD140C384F539E2F84EAE02FB9CB391467DB3D7A29915E80C5B94B7828A4A34EC8C3E3581FB6
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/espana.png
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE....CJ.BJ.BK.AK.AK.AK.vn....o.AK.nY.~R.lI.wc.w_.{c...c.`.R.~H..H.....^.H..T.u.K._.W..\.....a...q...Z..g.q.....\......].....r..Q.....R..P..P..s..r....j..l..P..O..P..Q..P..Q4.C.....tRNS.&].....w&}....IDAT(..E..0...q...M.......>...u..+I..q..x.3.p\.....2..e....a..E.W....$...0..~.=}./...bb...Lx..Ht>(.L(mk.XaX9.p.[.Lr...0.s.vWU...m@..\|..Z..T}>..WpI.......IEND.B`.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34284)
Category:	downloaded
Size (bytes):	34285
Entropy (8bit):	5.079911379835169
Encrypted:	false
SSDEEP:	384:hL5c4JX3CBwwG0ehYw/tZNtoomA9TuVdQRXyI:p5zX39ZNYdcCI
MD5:	799F662E3ED68FB673D2F936A0AE9386
SHA1:	257178797980304519607D397C8CC01E8322AC43
SHA-256:	C789AC5886DFC6FF3CAE51E264F7D80D33BFCA1071A41997D499806D7B50AEA0
SHA-512:	75C13487DDA00792943C72084713D22E521F682154488F92C2FCA8EEBF6B3D317A4533FC7C820274EC87A0C679EABD57E169552F710036600260FDB43D8F2789
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/css/themecss.css?ver=1.0
Preview:	/! tailwindcss v3.3.2 \| MIT License \| https://tailwindcss.com/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;font-feature-settings:normal;font-family:Albert Sans;font-variation-settings:normal;line-height:1.5;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:Albert Sans;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-collapse:collapse;border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{color:inherit;font-family:inherit;font-size:100%;font-weight:inherit;line-heig

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	downloaded
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 277, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	39319
Entropy (8bit):	7.927478880016368
Encrypted:	false
SSDEEP:	768:Ckqml45r0fbkNoOqUUi+7q/Vhpu00RWF60XqVTDMbdobEYVHg:Ckqm4rwOUi+70Vh56VvQdob1Zg
MD5:	25DA7CB65EEFF6292ECEF06A89EDEDD9
SHA1:	3C3AA0C5CA9D4F728F40DAAF1B4F2C6C55617297
SHA-256:	A346A7E56D3E362D7CEF00650FB14B2361E1004E82356EDC30D2EAC2B596952B
SHA-512:	44E972B2F424E00A63DCE912A426DB9F4DAF8C03934FF06D2176D67ED4B9285B5D6D01E5A44C47E5D9984BEF54C9EEF09441EEE81C3F40AE402E3783ACE71DF6
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/resenas/getapp_01.png
Preview:	.PNG........IHDR................5....sBIT....\|.d... .IDATx^.}.\|..............{.....p.`H.Dc...{?E..U.i[......7.j......%....Ep...... $@...&..b.{g..33....U.s..9gf.y...Gc.#...B.. ...B.. ...B.. ...B.. ..F@S.62.. ...B.. ...B.. ...B.. ...B..`D`.$ ...B.. ...B.. ...B.. ...B..P.."....2.. ...B.. ...B.. ...B.. ...B..,....!@.....!@.....!@.....!@...J#@....C.....!@.....!@.....!@.....!@...Es.. ...B.. ...B.. ...B.. ...B@i...Rzx.8B.. ...B.. ...B.. ...B.. ...".h.....!@.....!@.....!@.....!@.(...XJ...G.....!@.....!@.....!@.....!@....B.. ...B.. ...B.. ...B.. ..... .K..!...B.. ...B.. ...B.. ...B.. ....9@.....!@.....!@.....!@.....!.4.D`)=<d.!@.....!@.....!@.....!@......X4...B.. ...B.. ...B.. ...B.. ..F..,....#...B.. ...B.. ...B.. ...B.. ....!@.....!@.....!@.....!@............q..!@.....!@.....!@.....!@...D`.. ...B.. ...B.. ...B.. ...B..P.."....2.. ...B.. ...B.. ...B.. ...B..,....!@.....!@.....!@.....!@...J#@....C.....!@.....!@.....!@.....!@...Es.. ...B.. ...B.. ...B.. ...B@i...Rzx.8B.. ...B.. ...B.. ...B

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.87421571115308
Encrypted:	false
SSDEEP:	3:YGKeMfwDpHXAYHfIp14aMO4:YGKe9t3Ip14Y4
MD5:	0CCAA865D4AE59A32EAB9788297C1ABE
SHA1:	BA6FCAFD0EE3218782D5DCFAD5D6E09B6B90AD33
SHA-256:	1EA50329B826918B0B803777E2F5AC48A3570AA1F9C06BC92B6A1731AE37654A
SHA-512:	8406BF28C4E51CD83C8E43F0D856DB98423687EB6527472C39F72A116729A560B5F326666E2C471215BC14C2A3BA7039A9242D2CD9CA87E538F77E80B7E4C077
Malicious:	false
Reputation:	low
Preview:	{"country":"usa","region":"ny","city":"new york"}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (20909)
Category:	downloaded
Size (bytes):	339861
Entropy (8bit):	5.372246800196103
Encrypted:	false
SSDEEP:	6144:ODXsboPRYENaGFFR7KbGEpMGDa/sx8LCqQ:E8cPDaGFL4
MD5:	71D365DD74E584B7439FC62CB445B638
SHA1:	6B9A2BB55A5571A0D574DD9F3BEE68163E896CD1
SHA-256:	19AA295521F5FE3828D378798CE690FF429956271AFAB0AC12883F188BCF95BE
SHA-512:	3AC66B497D75088634FE3BC29FBF8CE251BE15D20034162105CB94F0DC71C4891ED8E309A47DC54A4454FF5A4DA1AB1E5F7681B3FFF0BAB81A7B0CB9DEAF815E
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/@dotlottie/player-component@1.0.0/dist/dotlottie-player.js
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["dotlottie-player"]={})}(this,(function(exports){"use strict";function _taggedTemplateLiteral(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.defineProperties(t,{raw:{value:Object.freeze(e)}}))}./! ****************************************************************************. Copyright (c) Microsoft Corporation... Permission to use, copy, modify, and/or distribute this software for any. purpose with or without fee is hereby granted... THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH. REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY. AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,. INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM. LOSS OF USE, DATA OR PROFITS, WHETHER IN AN

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	downloaded
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-includes/js/wp-emoji-release.min.js?ver=6.6.1
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	298841
Entropy (8bit):	5.5690873763130115
Encrypted:	false
SSDEEP:	6144:z+NIGKlqkmo1MvO5K1x72Dej7gsfFVVl2pX:z+NwUkmomlU
MD5:	3C0FEB7577D7D09EE80083EEB986A0D9
SHA1:	80096B5A50D5CB1A11F3753021428760A072C3AF
SHA-256:	D0D49C8E9D243B0FB3B6C7D28290ABAC87B38A928BB52C8C412B85942436F155
SHA-512:	F82761325D56F5758591B88725CE647971C45BB95B3A983D80FCE8FA789137E0ABD4AC3AACD24862CB1EB4DA0C44B9CE3E9D1188C826BA4B314A566A116ED001
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-QVWQXQY92L&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":12,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1102
Entropy (8bit):	4.537901635629674
Encrypted:	false
SSDEEP:	24:2diO44l/eKVBsLj2DqqLbn+M5qw9U8qUyKXNt+UP8Pnhllo/:c35vBsLxqLb+KU8qUFay
MD5:	52D8451695F8B3873828AF4C39F3BF5B
SHA1:	26BD4DD91EC2A9C429ED85D26B992F010A85F470
SHA-256:	56B2ABE90D162CD62CBBE768253E92A5973C540CD783D22D6802172472C303CC
SHA-512:	DC1566D2D4C4C0C8E58F00BED158AD8A665468575F2ADED8088F122674F646C2FE4BE0664F2A991F729534BFDF4CF3DA4CEABE02EE00ADAD72C7E7A8B920E373
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-10.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M27 17V14C27 13.4696 26.7893 12.9609 26.4142 12.5858C26.0391 12.2107 25.5304 12 25 12H19M19 12L22 15M19 12L22 9M9 19V22C9 22.5304 9.21071 23.0391 9.58579 23.4142C9.96086 23.7893 10.4696 24 11 24H17M17 24L14 21M17 24L14 27M9 10C9 9.73478 9.10536 9.48043 9.29289 9.29289C9.48043 9.10536 9.73478 9 10 9H14C14.2652 9 14.5196 9.10536 14.7071 9.29289C14.8946 9.48043 15 9.73478 15 10V14C15 14.2652 14.8946 14.5196 14.7071 14.7071C14.5196 14.8946 14.2652 15 14 15H10C9.73478 15 9.48043 14.8946 9.29289 14.7071C9.10536 14.5196 9 14.2652 9 14V10ZM21 22C21 21.7348 21.1054 21.4804 21.2929 21.2929C21.4804 21.1054 21.7348 21 22 21H26C26.2652 21 26.5196 21.1054 26.7071 21.2929C26.8946 21.4804 27 21.7348 27 22V26C27 26.2652 26.8946 26.5196 26.7071 26.7071C26.5196 26.8946 26.2652 27 26 27H22C21.7348 27 21.4804 26.8946 21.2929 26.7071C21.1054 26.5196 21 26.2652 21 26V

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53369)
Category:	downloaded
Size (bytes):	263425
Entropy (8bit):	5.380834703622434
Encrypted:	false
SSDEEP:	6144:RIT7sZwuglhdkIu0JKE8Y8bjq7+sD8UIjyKbC0qWuvL54WAcl/u:dgl/5oZYapsDXSzqK
MD5:	D87E64781D3423155A8C9B4ED9262E6D
SHA1:	5A21C805245D2A7D0FD8FFC01F81EE17674CDB8D
SHA-256:	8ABEA8470C21A077B1B9FDFE3B997A942432CB410525A251F7EB6B79437BE2D9
SHA-512:	7CA9DE1AE773F784BB1F4FAB31B0C3EB3BC92214F33DDF5700272F857E81DCAA151C2D21B22CFC6A4CE3D3955BAEBC612B48F239034D611C09285415563A33E0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/378668614805602?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	412014
Entropy (8bit):	5.373766870100786
Encrypted:	false
SSDEEP:	6144:+jS0/MJYSHDNJwzcDnKDYVY2qpMThN7qF7lgm0Tt63mN6GLPY7:JnKNpMTDqf6Tt63mNVLg7
MD5:	C5DE4C83B8A80B23BD28E277B1A02FC7
SHA1:	5155B18C655BCC531E961762E431C849A49AC76E
SHA-256:	3F52C72AC822F5149DBBB3816F9825774A34387C194A435A4173AA976B5D7730
SHA-512:	E8BB5FBEB38B26BDFDAF14C5ADCA50EEED5F51A5459FC37673EC2FCFD135DF15329BF22B2989099673E5DF02E97F90A918B2CFF6863EA5D5A92ED6F1CD5E8E56
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.37.7/js/vendor.module.js
Preview:	/* VimeoPlayer - v4.37.7 - 2024-10-02 - https://player.vimeo.com/NOTICE.txt */.var e=Object.prototype;function t(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)}function n(e,t){return function(n){return e(t(n))}}var r=n(Object.keys,Object),i=Object.prototype.hasOwnProperty;function o(e){if(!t(e))return r(e);var n=[];for(var o in Object(e))i.call(e,o)&&"constructor"!=o&&n.push(o);return n}var s="object"==typeof global&&global&&global.Object===Object&&global,a="object"==typeof self&&self&&self.Object===Object&&self,u=s\|\|a\|\|Function("return this")(),c=u.Symbol,l=Object.prototype,d=l.hasOwnProperty,h=l.toString,f=c?c.toStringTag:void 0,_=Object.prototype.toString,p=c?c.toStringTag:void 0;function m(e){return null==e?void 0===e?"[object Undefined]":"[object Null]":p&&p in Object(e)?function(e){var t=d.call(e,f),n=e[f];try{e[f]=void 0;var r=!0}catch(Fl){}var i=h.call(e);return r&&(t?e[f]=n:delete e[f]),i}(e):function(e){return _.call(e)}(e)}function v(e){var t=typ

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	288
Entropy (8bit):	6.201238979587032
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKcHa1kro+lVERq44RNcfwlP/+mtV0vXkdld8up:6v/7A/0vZ66rjIkHTlX+mtVWXkdF
MD5:	033F673250929FB7D3D7AB057D876D4E
SHA1:	B9B959A21ED8CFD5C911EE2A28DB4FECEC2D4618
SHA-256:	E1D85C123B4273C317E1263EC92E623FFFDC5293B81F3E48905BE86BBDE9E46C
SHA-512:	6857AAD604E0AF7BD1BCAD0FE572720E175A9D6BB994AF03BCCF2FAA540333A67AB7ED2365DDF4DC5522380E8F78E749AB34EECE0F9D804AB584F9CC01CE5B7A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....0PLTE...CJ..JWBG..JUBF..KTAG..KUAF..KUAG..KUAG.....KU.8......tRNS.&&]]...............IIDAT..c`........Hb``.{.....A......C,...........p...?.8(.E....P... .A..E}..z.6t....IEND.B`.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1255
Entropy (8bit):	5.044096558641246
Encrypted:	false
SSDEEP:	24:zVWLIhG1J+xQI1M54oKc1S5aRcsRvcJfVSc4BCnNT6UAKixr7hMpgNT5kwnLIfqO:J3G1gQWEWaRdRULJgFKYpXh6D
MD5:	07577FDBAC879E173191093861BB298B
SHA1:	44FBB0D133869EB96C8546CB118A9548A5DD6D71
SHA-256:	A2AB89C8C82E8E50D0C3EFC8A476C70128CEE2989A0C801968C555CC8187D87E
SHA-512:	EB5A0598FC4A918E39F057303F807D0D974EDF7C41A6AF88298F141C8AE6D998EC04A9343FDEB1241AEF47D4EA7AED84CDA23BCDCD19DC2058A1DB2072D07DDE
Malicious:	false
Reputation:	low
Preview:	jQuery( document ).ready( function($){...var posts_per_page = 8; ...function cxc_load_more_posts( cxc_this, pageNumber ){...var page_count = 0;...var str = '&pageNumber=' + pageNumber + '&posts_per_page=' + posts_per_page + '&action=codex_load_more_post_ajax';....if( !cxc_this.hasClass('cxc-disabled') ) {.....jQuery.ajax({.....type: "POST",.....dataType: "html",.....url: ajax_posts.ajaxurl,.....data: str,.....success: function(response){......if( response ){.......cxc_this.removeClass('cxc-active');.......var json_html = JSON.parse(response); .......if( json_html.html.length ){........page_count = parseInt(pageNumber) + parseInt(1);........cxc_this.attr('data-page', page_count);........cxc_this.parents('.cxc-post-wrapper').find(".cxc-posts").append(json_html.html);.......} else {........cxc_this.attr("disabled",true);........cxc_this.addClass('cxc-disabled');.......}......}.....}....});...}...return false;..}...jQuery(document).on("click",".codex-load-more",function(){ ...var cxc_this

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	25674
Entropy (8bit):	5.293975510042379
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYcFaFoJP5GpZqKYTQUmk:RIT7sZwuvL54WAcl/v
MD5:	8D58FD645982D98DC480E89D3A5117B9
SHA1:	35AB71F5A7112480B671B20FEB42C55C678536B6
SHA-256:	D5291E5523F3442DA50DD48D936F3260DEBC711FA2ECFA706F2BA678B9E8F593
SHA-512:	9FB264FF879272175BF73AA0B509671D981C0C314C967586D3A935B06B5780B06E463346D3B8ED046F89B36ADEE3A20E301FE3DD2C59C4E0D68AB83AE6268C1F
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1916122565318891?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127%2C157%2C223%2C224%2C222%2C178%2C137%2C133%2C125
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	333
Entropy (8bit):	5.2692285785442605
Encrypted:	false
SSDEEP:	6:TMVBd/qOI9mc4slz2lWejZ0cldUbqdjrWXvJiVthw49dVQ6mqZlloqo:TMHdiO44lWejZ01bqdQvJiVthw4PVQ6U
MD5:	FA0FD36E8C2CFFB3E4FB0DC8AF397F02
SHA1:	9555AC2465477941B928C0EF28AA3CEB1DE07B99
SHA-256:	B6CC2393DFEF8BA44857C6F6639A065B8A34193C6DCA3590B0FB8AD46017F845
SHA-512:	4914F715764B50C7E1EF7F4EE5E1E48D1F7A5EA49AEC728E24CE77989CB979F8BD89FB8E1A346FEC018D8E39283AD6A2AF60AA9BD976E2D420198375D70F209C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M18 27V23M18 19V15M18 11V9M16 27H20M14 11V15H25L27 13L25 11H14ZM20 19V23H12L10 21L12 19H20Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65469)
Category:	downloaded
Size (bytes):	303599
Entropy (8bit):	5.3515178254617375
Encrypted:	false
SSDEEP:	3072:lG4kl1kZnDK2yhO5hyUNZ32ox3OW2wMSvmC:4/rkZne3U5AUn32TSvF
MD5:	AB9573D6AB1DC3230983376FFFE35E48
SHA1:	BA6DF295A7CED510D74025BCB0B4E083FC6523F2
SHA-256:	1D36878275FDEBCD10C4E7B031C09A5E76999AFEA375EFF8688BC6622B0B349B
SHA-512:	DA9FDA75E61D6443F31E146F3A29665759A3F202C526E9FCA220102F23B78C3D401E7CAF234AC45CFB37550809A125DA718EFAE9B8F311F86DDC76FFE4694CC9
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/tcfv2/53/cmp2ui-en.js
Preview:	/! For license information please see cmp2ui-en.js.LICENSE.txt /.!function(e){var n={};function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"===typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var o in e)t.d(r,o,function(n){return e[n]}.bind(null,o));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="/",t(t.s=13)}([function(e,n,t){e

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (64100)
Category:	downloaded
Size (bytes):	94616
Entropy (8bit):	5.159841937591789
Encrypted:	false
SSDEEP:	768:FlHyXhZUE2uIQd4R0pv0cE0tr9ocMQYSZBGD3cd5fwEW5IKxSLix5CKSGKv46nUF:FlauEE0tr9oF5EcqiIm/LcVG
MD5:	40FD9EF7EF103E531EA5324252B9BF89
SHA1:	0DFFDD2F81A8978E47AFD1CE05871AAD7E03ACA3
SHA-256:	DC166017D37BDBA6F4D9A7D594E8E0FD8F35E54F738039AEA2894484B2E3E8C2
SHA-512:	2B7A43BB4245E44FA7B0208C49106A0FC069B91526A72F180EAD1E6EE18D695A9B83868BC8C3B34FE79FAB53679364947262BAA1D8BDE225E7FDA4CCDEF0DA90
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/style.css?ver=3.0
Preview:	./.Theme Name: SesameHR.Text Domain: sesamehr.Version: 3.0.Tested up to: 6.2.Requires at least: 4.7.Requires PHP: 7.4.Description: Sesame HR custom template.Author: c.esteve & f.perez.Author URI: https://www.sesamehr.es.Theme URI: https://www.sesamehr.es.License: GNU General Public License v2 or later.License URI: http://www.gnu.org/licenses/gpl-2.0.html..All files, unless otherwise stated, are released under the GNU General Public.License version 2.0 (http://www.gnu.org/licenses/gpl-2.0.html)..This theme, like WordPress, is licensed under the GPL..Use it to make something cool, have fun, and share what you've learned.with others../../*--------------------------------------------------------------.>>> TABLE OF CONTENTS:.----------------------------------------------------------------...0. .CSS Reset..1. .Document Setup..2. .Element Base..3. .Helper Classes..4. .Site Header..5. .Menu Modal..6. .Search Modal..7. .Page Templates...a. .Template: Cover Template...c. .Template: Full Widt

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	426
Entropy (8bit):	6.874993447500411
Encrypted:	false
SSDEEP:	6:6v/lhPknS0Dl55dKcbNfrPKsWsNGCkgnF+r9ik844RNc9RvD2NryzGdTLB1N/Jcz:6v/7gVvZBfsgFDHtYzyN1NBcMGz1
MD5:	339F7D38FDA90ED7D34A7A89D7F55B30
SHA1:	9CF62B3789168FEA9E82EBD1F879F98A4E2A9D54
SHA-256:	0769601DAC68490942B98A6F456207180932B645DB599CE2A3600B4D03DA70F2
SHA-512:	31295293430750C3C2DF7E1910156762E35C289BA501AC7BB9E12F530529CBB0035A6B556B5581B78456A3687179CB88961C52CEB193A3173CA88087C272485F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE...r...JWs...JUt...KTs...KUs...KUs...KUs.............nu.Tb.dq.u~.....................................................KU.l.3....tRNS.&&]]................IDAT(...9.......... ..........\|.JR..yI...H?.j....,."2.U.=......._.h..C..C.....U?(.<c.<......Pl....y.:.lF.4.L{..yD.....a....].A........IEND.B`.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	288
Entropy (8bit):	6.201238979587032
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKcHa1kro+lVERq44RNcfwlP/+mtV0vXkdld8up:6v/7A/0vZ66rjIkHTlX+mtVWXkdF
MD5:	033F673250929FB7D3D7AB057D876D4E
SHA1:	B9B959A21ED8CFD5C911EE2A28DB4FECEC2D4618
SHA-256:	E1D85C123B4273C317E1263EC92E623FFFDC5293B81F3E48905BE86BBDE9E46C
SHA-512:	6857AAD604E0AF7BD1BCAD0FE572720E175A9D6BB994AF03BCCF2FAA540333A67AB7ED2365DDF4DC5522380E8F78E749AB34EECE0F9D804AB584F9CC01CE5B7A
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/france.png
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....0PLTE...CJ..JWBG..JUBF..KTAG..KUAF..KUAG..KUAG.....KU.8......tRNS.&&]]...............IIDAT..c`........Hb``.{.....A......C,...........p...?.8(.E....P... .A..E}..z.6t....IEND.B`.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	76148
Entropy (8bit):	7.990505720714859
Encrypted:	true
SSDEEP:	1536:fUlFPhbJGgMC46veXlgSeg1zj/K5X6Rw5fb9f2sXnnz64qviN:f4MC4geHeCub9uQn1qKN
MD5:	02EA1DA547CBA9150A518634B76A34D1
SHA1:	9633981EF768B32EA5C16448197A897AC9CCA4AA
SHA-256:	12679677773DE7D3BD3C749E70263718710236B2C4EE41AC0B0E868DAC2406E1
SHA-512:	AC01F2FBA217F8035E7D8E967977DE67E803E6A6B0B6C5D53AF271B664E62D4743AE5102BB8236973B13AAFD803866A634DB73548E08A78CB24DDD8B333EE507
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/gesti_n_del_tiempo.webp
Preview:	RIFFl)..WEBPVP8X....0......Q..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH P...!.m.F..;..............l.....2#(`...B...Xb...^I..Fr.i.A.}.....`.qvb...u..9m.W.G...l...G.-..m$G....Q...0.~k.m....F...3.i..L.....Z.<..s...n.-..:....8.....N.L..g4.zXn.,...(.3......'..4./.&nt...........Wy...WDL...U........%+.....\..2..x....Afff}..>..g..1....)"&..d.m..R...........o.#....F.k...Z2..-Je.1...m........-.A0.`.`.@`30.... d.r..=....#...... ..O(=.#...y..5....A...H'...><#.A..q..[$.^...v..}hE....;w6N..zHE3..4aH'...s..F.'.=.\|..a.Z...i.o.. Hv.S.....a.8J...q..:U y.....

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.141691710389104
Encrypted:	false
SSDEEP:	12:6v/7gVvZ6R5x1r+srvNYYu8WXYxzvr6CpW4onqP6CZohRfz:XQPxvXuxItPpW4onBR1
MD5:	B009BE2B7379525C382E1328403F5102
SHA1:	EC5892BBDD4F9AC90F84EC0DFD4899F30C8275EF
SHA-256:	9C0082DDB8939DD310EFC1AE71E2611C22D9C72F3D23DFF5E1C342F4BF81E9E3
SHA-512:	FF7273F694A7D7727C6B9D0046AF4E40D15B3CC9D9DBE32D5FC5709A774D56EEFC81CDB170E1E972C8B588D41CEAD7A77FEEACC4EF68D30A12EBA638B6734B37
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/brazil.png
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE...r..s..t..s..s..s..AG.EJ.HL.IN.IO.LQ.NS.PU.QU.QV.RX.U[.V[.X^.Y_.Z_.Z`.hm.im.s..tq.\|................................................d..f.....X..Y..[..Z.......tRNS.&].....w&}....IDAT(.u....0.E......R.]Q...o.P.8...9.....,.%1.q..Dl/..g...?.......N.p..y.y.w...qd..CV.&e.....u-M...E..I.M#..o....NH.....W........<.je..O.!.//$Z.,.\|C.=zUk...g.....t..p..4.~:o...bk4'f..h..n..J...j....}....)A;........IEND.B`.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2871)
Category:	dropped
Size (bytes):	418867
Entropy (8bit):	5.576084058326801
Encrypted:	false
SSDEEP:	12288:d0VvjcRgZR60YHacXctFCt4sIuRXdBm92lvFyoNOMtsYPYq/UFV38sltQ+aR9YQh:d0VvjcRgZR60YHacXctFS4sIuRXdBm9+
MD5:	87B8CA11556C066AADFF5D051F158BD7
SHA1:	B1AE27086D16655EDB0799BE356565E2A8BA50BF
SHA-256:	4F0C1C75ABAB267719743985EDC745AC22ADE7424E2A2845DAF4BF22D632EFE9
SHA-512:	560DA5BD1CCAF2E4BA9B63D11ADAB825E2D8CC755E719EA8BA629681EF885AE3230622A97F765C9B2C1534D49D367FAF8E5A46394A667B88D9F9090CE88759C7
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ia={};function ja(a,b,c){if(!c\|\|a!=null){c=ia[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ia[d]===void 0&&(a=Math.random()*1E9>>>0,ia[d]=ea?da.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45302)
Category:	downloaded
Size (bytes):	403882
Entropy (8bit):	5.568284501323081
Encrypted:	false
SSDEEP:	3072:4GQvSDGp2IIp9SXNmW4L/MM9C0x2KC2uBcO9yyqo5/Aux9wEgpnDF2Dej7nDBv1X:4GY2IIGmlrMdd2vO56bZDF2Dej7FvR
MD5:	F4458B5BEB9ABEEE9A19E73D21A19D2A
SHA1:	29CD67E3364CCDA9DDE15616789940AFF3600480
SHA-256:	BA41A206D093E3285AEF719F4C0683B29E79883A7DD2FF2DE4293AEF09E80EC0
SHA-512:	4148E0212629BA263C10BCA83EDC38B46A348355B8FF8C528AF7419309AD7600D93E56C31043649C8B31B4D1E3E44DE90E7B5CDAE99C1F7931CBBD88681B68DC
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WWBXHVT
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"201",. . "macros":[{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"hs-form-guid"},{"function":"__smm","vtp_setDefaultValue":true,"vtp_input":["macro",2],"vtp_defaultValue":"none","vtp_map":["list",["map","key","6121a2db-f72c-49c5-ab7b-3288183966a0","value","lead-sales"],["map","key","5db62db9-493c-4efc-a245-c3705f00d800","value","lead-sales"],["map","key","9f3e989f-b8e7-4e0c-a352-a3cd018271b5","value","lead-sales"],["map","key","da6ac13e-349a-43cb-9b42-d56318672d43","value","lead-sales"],["map","key","e48c5b4a-495e-4656-9115-59d1026e2756","value","lead-sales"],["map","key","3fdd81e4-c84e-4cd2-96b0-ff8163cd4f6e"

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	408
Entropy (8bit):	6.838024346646856
Encrypted:	false
SSDEEP:	12:6v/7gVvZ51bRUklBZ5BbyjahvcKGm8YhN:XdSkvZwq0KGyhN
MD5:	242EF61AB1144A630250E314895BF305
SHA1:	DC51014BE8B91F5E4314C8F09AA48CE97F207034
SHA-256:	A23B031CA756E2835B7976FD9ED4D460F3FFE1C38CF295CF4F759A7AFB401810
SHA-512:	FDE9F91AF067F511E4C7F92FB2CFA3A9E2399DDABEDAF11875A90EA36417324D0728A2F6A5E0F57101CAD387938412227CE5638230BC208C346A1CE342EE89CD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....cPLTE.......JW.......JU.......KT....KUqu.....KUX].....KUAG.BH.GM.IO.X].mr.........................KU"\|.L....tRNS.&&F]]............\|{T....IDAT(S..9..0.D.F.#....p.S:.(.q..?.4.8...$EDD.,....... .......d..@RT$9Mw......B..."..!.Hr....]7..y.'8.._....tp.:X.R.K.$........Y.....;_..i.....IEND.B`.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	13030
Entropy (8bit):	3.9839680775929454
Encrypted:	false
SSDEEP:	192:G46hk7wXCBNKY2UJv8PBvU8aeZS2/MkqvWiJjucWyk2UaGGbAt11r:G46QNgWCZS2EkAo5yzbaX
MD5:	BCF0AD618E30E6DF4A3F249B66BD4CAF
SHA1:	47A4FEDCAE9E787D2B0DA5A799C50D8305E4F11B
SHA-256:	1D9C0B3AC78244A4028C4C83BEF120BBD36F2350484F8FFD66A68100109353F7
SHA-512:	2D667C415C755BBC103224AEE2704D5EEA0E0124A4231EA794C7ED0E54DF246BC680AE0477E322AC1FDBC8DACB7F67E962426F77C6363686A9D5ECB3E3E72592
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 352.09 186.19"><defs><style> .cls-1 { fill: #27304f; stroke-width: 0px; } </style></defs><g id="bcgitg"><g><path class="cls-1" d="M2.33,157.15c-.24-1.04.31-1.62,1.07-2.22,7.74-6.31,16.45-11.09,25.28-15.65,2.99-1.54,5.99-3.05,8.98-4.59.42-.22,1.27-.38.91-1.1-.27-.53-.88-.06-1.31.05-7.38,1.9-14.61,4.28-21.67,7.17-1.51.61-2.8.17-4.18-.11-.5-.11-.63-.53-.75-.98-1.1-3.59-1.67-7.27-1.89-11.01-.05-.72.25-1.23.69-1.76,1.79-2.23,4.12-3.71,6.68-4.97,22.13-10.98,44.17-22.13,66.6-32.51,3.4-1.57,6.91-2.91,10.46-4.12.36-.13.85-.61,1.16-.03.24.44.49.9.17,1.53-5.88,12.05-10.13,24.79-15.59,37.03-2.85,6.39-5.88,12.71-8.34,19.27-.5,1.34-1.37,2.08-2.67,2.64-15.84,6.86-31.68,13.68-47.28,21.08-1.59.75-3.22,1.51-4.67,2.49-1.75,1.18-3.65,1.42-5.65,1.53-1.37.08-2.31-.66-3.16-1.54-3.29-3.4-4.26-7.71-4.83-12.14l-.02-.03Z"></path><path class="cls-1" d="M169.42,33.16h.17c3.52.02,

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	653516
Entropy (8bit):	5.114255140317247
Encrypted:	false
SSDEEP:	3072:wKT02ngi2ir19PjpATLf3d2H/7PaqqvQtO0:dTV7jx/7iDvQ9
MD5:	5FA0A7531DE121F3E0D7981F89991F5E
SHA1:	58F68C07988238A4CAC4F71CE6B17E292960B32B
SHA-256:	32F8D4E589755F184FBCCBD76A32EC12180534B48FA2C470A3CE87CABA24FEB3
SHA-512:	9F50FDDB7FF48DE680AB639F666E2EEC8A462ED4FC8024997E986D7D7D3ECC3D253C289AA5581400707923D1D4A011C664F46B582C295FFC5D79057F1D2C00AA
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/GVL-v3/vendor-list.json
Preview:	{"gvlSpecificationVersion":3,"vendorListVersion":74,"tcfPolicyVersion":5,"lastUpdated":"2024-10-03T16:07:42Z","purposes":{"1":{"id":1,"name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here.","illustrations":["Most purposes explained in this notice rely on the storage or accessing of information from your device when you use an app or visit a website. For example, a vendor or publisher might need to store a cookie on your device during your first visit on a website, to be able to recognise your device during your next visits (by accessing this cookie each time)."]},"2":{"id"

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13030
Entropy (8bit):	3.9839680775929454
Encrypted:	false
SSDEEP:	192:G46hk7wXCBNKY2UJv8PBvU8aeZS2/MkqvWiJjucWyk2UaGGbAt11r:G46QNgWCZS2EkAo5yzbaX
MD5:	BCF0AD618E30E6DF4A3F249B66BD4CAF
SHA1:	47A4FEDCAE9E787D2B0DA5A799C50D8305E4F11B
SHA-256:	1D9C0B3AC78244A4028C4C83BEF120BBD36F2350484F8FFD66A68100109353F7
SHA-512:	2D667C415C755BBC103224AEE2704D5EEA0E0124A4231EA794C7ED0E54DF246BC680AE0477E322AC1FDBC8DACB7F67E962426F77C6363686A9D5ECB3E3E72592
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/06/MEDICOS-SIN-FRONTERAS.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 352.09 186.19"><defs><style> .cls-1 { fill: #27304f; stroke-width: 0px; } </style></defs><g id="bcgitg"><g><path class="cls-1" d="M2.33,157.15c-.24-1.04.31-1.62,1.07-2.22,7.74-6.31,16.45-11.09,25.28-15.65,2.99-1.54,5.99-3.05,8.98-4.59.42-.22,1.27-.38.91-1.1-.27-.53-.88-.06-1.31.05-7.38,1.9-14.61,4.28-21.67,7.17-1.51.61-2.8.17-4.18-.11-.5-.11-.63-.53-.75-.98-1.1-3.59-1.67-7.27-1.89-11.01-.05-.72.25-1.23.69-1.76,1.79-2.23,4.12-3.71,6.68-4.97,22.13-10.98,44.17-22.13,66.6-32.51,3.4-1.57,6.91-2.91,10.46-4.12.36-.13.85-.61,1.16-.03.24.44.49.9.17,1.53-5.88,12.05-10.13,24.79-15.59,37.03-2.85,6.39-5.88,12.71-8.34,19.27-.5,1.34-1.37,2.08-2.67,2.64-15.84,6.86-31.68,13.68-47.28,21.08-1.59.75-3.22,1.51-4.67,2.49-1.75,1.18-3.65,1.42-5.65,1.53-1.37.08-2.31-.66-3.16-1.54-3.29-3.4-4.26-7.71-4.83-12.14l-.02-.03Z"></path><path class="cls-1" d="M169.42,33.16h.17c3.52.02,

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	18764
Entropy (8bit):	7.9853814261722675
Encrypted:	false
SSDEEP:	384:Z0P130MAZp3TbWwjG3qV7yMM7l0k8pQDblIn2meUjX+AolfHieNZ:Z2+5JfomyZ7l0k8wR/UjJgaGZ
MD5:	E3A0D2DEDACFE2D3DBB5FFF13640A496
SHA1:	5C4B12109C4E26C866E9E8A7B79EDEB1662CAE58
SHA-256:	49A0EDF09CB636547F9CFA640626ECA76632EAD7DACE209D934D11F02368941C
SHA-512:	BED445DEBBEB87CEE6C82D7EA99EAECA2ECD00B7A15D43ED5F57339E9B62DA1C9EC975EF138A2402AE4085444C5F890C08FB81F10F284523187A38C9B0BCB211
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/summerParty-447.webp
Preview:	RIFFDI..WEBPVP8L7I../../......{..w.J[.?if......%y.i@.l[.r.?..........H.\......I..DJR.]........;...X..T..t.....lCp.....kw.....<}......$.....<......Q..q.F....{...Nr...E.2G+.....<.....X9...........,.q}.p...._..4...b....z.on..Ms..e...,zT.d,.e...b.]..y......3.Cf.>.....g_4$..L.h]h..u...h.L.L....L..?WC2..O)..dD..W....g.....b..uc.ck....X&b...E...&.U...\|Hm..j>...(.r.....eVQ4%.3..)P1..9.X^\|...YO...I..g.....-yn&...R.a....(_l.$N....ODz/.^\TW....rF..Y..a.Wc@c.....J`m..~x...U..w..`9..9........{C..,...lR...A..)..-*.p..........N........n....f.d......jR.`Cl.`....u...c....n.<.pf...5..v.)......U.".I....w!......;?..s..a..'^.7e.&f....Y.Ua7.m..A.Yv}..w.)wZ?vq{.<..l........T.....K.Q....._.&""&.$.Ch}b...m{...`9.R......Y..).` .._G..1.$.1.{."..%"...>..p....#2...{b......:...O8.c..?.I..6.^@4."P._@Y..m3....N4a8.2.q..[C...j.....e(..9.2.b.]@3?....'.~......$...D.q........:m=.l~$.q.[.jd...s..:.. ..........9.l..o....^.qK&r....A.....H.{...3....s.a.9.g.......D..9x..

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1054
Entropy (8bit):	4.766323529633411
Encrypted:	false
SSDEEP:	24:2diO44l/Xp1PnhllolTo0TMpqdWYiuzbfKk4ZbHkaeOJG4cPnhllo/:c35x8TEpuPKk4ZbH/eGGE
MD5:	36544ACE336C588225C29DD1182E2174
SHA1:	97456C34B61856C8BC6A5EC8DA4C2E5515F2C534
SHA-256:	EF6E3687251A3437998F91E51702D5DA8ECF34D21D60C29A35A6BDBA6A692784
SHA-512:	A7EFDE63098B8A0DC46AEFB2BE56FBDD4420822A0CC221C91594300154DE44A4FE35DA2180FC7A564D9EB92E6A3B39B1A12B6D36DE644AB65CB2B522F6220853
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-3.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M14 22L16 16L22 14L20 20L14 22Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path><path d="M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.6478 9 16.8181 9 18Z" stroke="#AEA9FF" stroke-width="1.5" stroke-

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48449)
Category:	dropped
Size (bytes):	73160
Entropy (8bit):	5.288404468319956
Encrypted:	false
SSDEEP:	768:hrDTClRYf9tFz5XKuaJuZMpDaIi0oO3vYCRuB+MJ534ywu9uqkjwxRXCKVNTeccy:hbCzItFzdZIBj3AvB+MJ5ocC3WsRw9
MD5:	78F9ABF2D03F7EE6A755E0178D41F2F8
SHA1:	9368DE7D2E8B0D335ADBAAB171143E307ED5FB54
SHA-256:	2D5FA531E30AC3DEBAD673003128F1CA9AD3C964EF17B547377E7ED09BD4504F
SHA-512:	C138CDBCC824524CBD5CBFA8EDF966ACF66462916349A5D9539723C6F5F10F44357059CC28DDBB95D50D3E17710E9F533BEBB658D82527D980804B8A3A31F9D1
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t=t\|\|self).Sweetalert2=e()}(this,function(){"use strict";function r(t){return(r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function a(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o(t,e){for(var n=0;n<e.length;n++){var o=e[n];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),Object.defineProperty(t,o.key,o)}}function u(t,e,n){return e&&o(t.prototype,e),n&&o(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n,o=arguments[e];for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(t[n]=o[n])}return t}).apply(this,arguments)}function c(t){return(c=Object.setPrototypeOf?Object.getP

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29400)
Category:	dropped
Size (bytes):	29803
Entropy (8bit):	5.246061204030198
Encrypted:	false
SSDEEP:	768:xveaVfq2uGhc6eIRE2yNQ4iyHuqpp0L0pvj8vCwF3Cv:x5VfqpGvPqZWyNf0L0pvjWCwF3I
MD5:	0758BE5332E68750471D7862FE1A6942
SHA1:	BE2BB3E06D111E4EE8FBD0353D9455B408D47F14
SHA-256:	FD62E97CE1EFEC8F038643C0FA0A54CFF911926B8EAB345BB14B1514C68E5C3D
SHA-512:	9A93CADE9BD16EB1D7B94A15825DC4BB81A421459A1D986EF1B0E8984EDFC10544BF1B0508D480AA9F72A16E32889E724FFC6B775892104E27731549C2953218
Malicious:	false
Reputation:	low
Preview:	function r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype",{writable:!1})}./!. Splide.js. * Version : 4.1.2. * License : MIT. * Copyright: 2022 Naotoshi Fujita. */.var n,t;n=this,t=function(){"use strict";var v="(prefers-reduced-motion: reduce)",G=4,rn=5,r={CREATED:1,MOUNTED:2,IDLE:3,MOVING:G,SCROLLING:rn,DRAGGING:6,DESTROYED:7};function D(n){n.length=0}function o(n,t,i){return Array.prototype.slice.call(n,t,i)}function R(n){return n.bind.apply(n,[null].concat(o(arguments,1)))}function on(){}var p=setTimeout;function h(n){return requestAnimationFrame(n)}function u(n,t){return typeof t===n}function un(n){return!c(n)&&u("object",n)}var e=Array.isArray,x=R(u,"function"),C=R(u,"string"),en=R(u,"undefined");function c(n){return null===n}function m(n){try{return n instanceof(n.ownerDocument.default

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	5.0047613493532355
Encrypted:	false
SSDEEP:	12:TMHdiO44lWejunDxQMbYzi8eSDYSXFeamUA5PVQ6hllo/:2diO44l/OWMbEeqYMoPnhllo/
MD5:	2724668F927C12A575E89918DB3ECFA5
SHA1:	8AC91E625F05FCE710C3603500C2BB5B015F5ED7
SHA-256:	007FFE391F0D72AD3B72CDECF55B4D5125F532D63D933A7FA46EE69F087CC32E
SHA-512:	370CB4A39FAE5E3506692BC4A40BF445DBFFE5B7C79B841B15F89B4928425F1C8BB1D6DAD1761F9F0BE98AD7695C08458B01B3C7ACE842162F855EF7E792E11A
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-4.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M18.5 27H12C11.4696 27 10.9609 26.7893 10.5858 26.4142C10.2107 26.0391 10 25.5304 10 25V13C10 12.4696 10.2107 11.9609 10.5858 11.5858C10.9609 11.2107 11.4696 11 12 11H24C24.5304 11 25.0391 11.2107 25.4142 11.5858C25.7893 11.9609 26 12.4696 26 13V18M22 9V13M14 9V13M10 17H26M22 25H28M25 22V28" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	758
Entropy (8bit):	5.0960692022447605
Encrypted:	false
SSDEEP:	12:TMHdiO4xT8uCTJgMtjfCqVNMT5jVDf3KyDMKsRTc3pMjfCqhlllVrqC2jfCqhlla:2diO4xT8uQhtjfl0T5xDf3KyDRx3pMj9
MD5:	B6BAE234DD5B6DF89D12CE53C28BA827
SHA1:	DCD1DEBAAA3CC5EFF03FAEE6C7213BA8A23E3C15
SHA-256:	4282339E4666D14B2342DD797A1755397566EE263145370D239D470639757E22
SHA-512:	B500C7BAE9A949B0F62AA446B8D59619EBA84E2E5E85A260EE907555EFAFC56C4A644A90F40BC8FF473F7E9870D07E2B9F17A32A18D99A44F26378DFB613FFD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g transform="translate(-320 -188)"><g transform="translate(320 188)" fill="none" stroke="#50e1b5" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75" width="38.5" height="38.5" rx="15.25" fill="none"></rect></g><g transform="translate(328 196)"><path d="M0,0H24V24H0Z" fill="none"></path><circle cx="9" cy="9" r="9" transform="translate(3 3)" fill="none" stroke="#50e1b5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></circle><path d="M12,7v5l3,3" fill="none" stroke="#50e1b5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></path></g></g></svg>

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.782287307315429
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQosLc:VKEctKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	E7F4945A3458503BDEE0AD9476537604
SHA1:	CD049E2F8F9D05ABC087BBEF7EFEDA01EFB0F3A6
SHA-256:	8AB3BC08E25F6A7E24EF75EE66ED06360BCEEACE487D22822D7724B3F2BBED50
SHA-512:	BD30B50396E0015B723FFD185972E37094A5CFF4A42CB5AE5D439AE3B85F2735F33145B363E2657AC174D66ED2E3F97FC0C2BFC9FDEE6B06C61E5A01FD1CFF34
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	298838
Entropy (8bit):	5.5689838956895725
Encrypted:	false
SSDEEP:	6144:z+NIGKlqk1o1MvO5K1x72Dej7gsfFVVl2ps:z+NwUk1omlP
MD5:	AA51092989980261FC6526DD77DB8568
SHA1:	49BBDC2ED588569B917187C32190D8C318DB3062
SHA-256:	7645134AB3DAC43CA7535E7AF8786436E887AE42AFA3C740A3B5928A17F94C1C
SHA-512:	95D28F55EA57A897F27318352FB2EF8297902BFCF7142BB33F3A20ECE03B945EBB4E69EA0C1E7E8B53C5F208DD6B7A0FCA9C4AFE21D19F4E75280E5DD34419FE
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":12,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	25555
Entropy (8bit):	5.291121785958594
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSY6Q8EJJ2fq3fBxn+OUvz:RIT7sZwuvL54WAcl/X
MD5:	693E38B101D18D74FA19CAB00BD626E5
SHA1:	63AC4C334E4B33EA0B76A56708750198668A1359
SHA-256:	0B17C0BBD3EB9135F06FDADAB95CCB76572DC0FE9E60558FEB13A741E350A44E
SHA-512:	B17826EB2556F22DBA7738257E6A0E98D327B1450EC7518B19C3349389BB7730A004FA72B192C601ACF5C010585AAD935DF62C48A9E5FF5D508D7A5DC63B4BCE
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/746567544052736?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127%2C157%2C223%2C224%2C222%2C178%2C137
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53369)
Category:	dropped
Size (bytes):	263425
Entropy (8bit):	5.380834703622434
Encrypted:	false
SSDEEP:	6144:RIT7sZwuglhdkIu0JKE8Y8bjq7+sD8UIjyKbC0qWuvL54WAcl/u:dgl/5oZYapsDXSzqK
MD5:	D87E64781D3423155A8C9B4ED9262E6D
SHA1:	5A21C805245D2A7D0FD8FFC01F81EE17674CDB8D
SHA-256:	8ABEA8470C21A077B1B9FDFE3B997A942432CB410525A251F7EB6B79437BE2D9
SHA-512:	7CA9DE1AE773F784BB1F4FAB31B0C3EB3BC92214F33DDF5700272F857E81DCAA151C2D21B22CFC6A4CE3D3955BAEBC612B48F239034D611C09285415563A33E0
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	69765
Entropy (8bit):	5.322394107144159
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwNFHM9ZK0BK01QYTZ02LKVsdmpyKcicy6:RIT7ss9ZKAKBYj8wKcHy6
MD5:	650E7DC42F64549005F7002DF0A92846
SHA1:	5F27948224C1A6C52749A8DF4650FEA537CCEAED
SHA-256:	1B93FE9D5AC874682CA52FC8758CCCB611CFD4DFEA2D9428C2893A7B71F22B4F
SHA-512:	36AB27A8B06C9B5CD2ED9F36321192AC9BF77C77372D4337888CEB478FCB12FAFFC2262B4A522611C793F018609B77F7353B463F02DB60E62419FE8B5DACEAE6
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1100471544585903?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6187)
Category:	downloaded
Size (bytes):	6298
Entropy (8bit):	5.3850652696715375
Encrypted:	false
SSDEEP:	96:u8nME4+xIW/ksk6n15/AgxUaV4Xi4cLAUd9qi0n8gXsdBt4xjDEYrLm:pxr6W/kL6L/AOUk4GLMV8IsqEYr6
MD5:	DF55045BC18928673797EC8F36531CE2
SHA1:	79B464E7E4E72389AA94918CDE3F36876508A847
SHA-256:	86687F3E5F5AFDCF3625C8DDE9300BB27A5715AE747F119A1A4C8F89064C254C
SHA-512:	8AA2A2B9668A62536297CDB50816226541884ED5BC2C44C8B0A9326A013A3360573A9AA4DDA21FE7B6B8E61160B91D95DD73E97FC97C7AF595D74ABED1902BC1
Malicious:	false
Reputation:	low
URL:	https://js.hsadspixel.net/fb.js
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,t);i.l=!0;return i.exports}var o=[{name:"head-dlb/bundle.production.js",path:"head-dlb/static-1.1137/bundle.production.js",ids:{}}];t.dlbpr=function(e,n){var i=o[e];if(!i.r){i.r=window["__webpack_require_"+i.name+"__"];if(!i.r)throw new Error("dlb "+i.name+" not loaded");i.r.linkDlb(t,i.ids)}return i.r(n)};t.m=e;t.c=n;t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})};t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};t.t=function(e,n){1&n&&(e=t(e));if(8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);t.r(o);Object.defineProperty(o,"default",{enumerable:!0,value:e});if(2&n&&"string"!=typeof e)for(var i in e)t.d(o,i,function(n){return e[n]}.bind(null,i));return o};t.n=

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2741
Entropy (8bit):	4.200371994700101
Encrypted:	false
SSDEEP:	48:AFMpskFhJBTvB/SkfAf3Ss3XRDMS0lpTPlp/SRsTMSjv8SxwWj88:4kFhJpFSdSsHNMS0ltldSRWMSoSu8
MD5:	63EB241F2EFF549C61A71FCD388A6D3B
SHA1:	33DCF8E880D40F0C496863159F948191843CD0CF
SHA-256:	3A5DAAA6AD4414CE23CF44631D6BD0FB55138EEF51E5B89C9AC4FC4D18EF8F09
SHA-512:	64989D177C8BC41196851483AA760BBEFB63C0E7CA60A20AAD96397AB1E9B99D7579C68ADB3E87B461EB814C6650A1E7987F225362071E81703EBDCF8568DE53
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/google-basic-consent/v1/purposes-en.json
Preview:	{. "version": "v1",. "language": "en",. "portal": {. "defaultValues": [. "GRANTED",. "DENIED". ]. },. "banner": {. "title": "We value your privacy",. "sectionTitle": "Google consents",. "description": "Please note that this website/app uses one or more Google services and may gather and store information including but not limited to your visit or usage behaviour. You may click to grant or deny consent to Google and its third-party tags to use your data for below specified purposes in below Google consent section.",. "confirm": "Confirm". },. "purposes": [. {. "id": 1,. "portal": {. "title": "Consent for storage related to advertising like cookies on web or device identifiers in apps by Google.". },. "banner": {. "title": "I want to allow Google to enable storage related to advertising like cookies on web or device identifiers in apps.". }. },. {. "id": 2,. "portal": {. "title": "Consen

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	65577
Entropy (8bit):	5.353937566241126
Encrypted:	false
SSDEEP:	768:ezDY9eR7s83Hw4oUnaOGE477KKIY0MnZez7T7nM1En0wEJPddhMHKvOWISQS31F:0DDFs83Hw48ZO7T7nwEYFRQSFF
MD5:	70187A383ADB805DD9FA0F16588B48C8
SHA1:	E1ED844DB90FC16308EAB60276BD9679784D9F01
SHA-256:	30ADBC7E799238C336B56A1E20DB67910F2A114FC3BC6CED6C550B4C873318AA
SHA-512:	C860317CE2F70CF96C9A93F36C7FB608217601CC6E63B45A9F2E9571FDB7C6AA286AF566AE532F23AA054B1D83DAD6097BF5435CF6B8C9C2CAFE750273050B87
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.47: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return jr},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return Ar}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1147
Entropy (8bit):	4.431384166829831
Encrypted:	false
SSDEEP:	24:2diO44l/zWs3kwsOqWgMMPeZyLW57f5Pnhllo/:c35r7Tl7f+
MD5:	C228E8A3809D2C6E09F214E7B86925D0
SHA1:	ABFB1CF58A9197187760552E37526FC721A0BCC0
SHA-256:	9CF910E849BE1F8BD60190F3BE6E622A8B890B518298D7F4758B3C7145B10A39
SHA-512:	7B3ECCD9E9EE1662A4712B70F8877259E03B43DA836B30C21F78BCA6BA85555EBA559A048BBF1A71113007523A13DFB087DB9B9857FC0367E207B361D411BB54
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M8 26C8.22717 26.3165 8.52797 26.5729 8.87642 26.7471C9.22488 26.9214 9.6105 27.0081 10 27C10.3895 27.0081 10.7751 26.9214 11.1236 26.7471C11.472 26.5729 11.7728 26.3165 12 26C12.2272 25.6835 12.528 25.4271 12.8764 25.2528C13.2249 25.0786 13.6105 24.9918 14 25C14.3895 24.9918 14.7751 25.0786 15.1236 25.2528C15.472 25.4271 15.7728 25.6835 16 26C16.2272 26.3165 16.528 26.5729 16.8764 26.7471C17.2249 26.9214 17.6105 27.0081 18 27C18.3895 27.0081 18.7751 26.9214 19.1236 26.7471C19.472 26.5729 19.7728 26.3165 20 26C20.2272 25.6835 20.528 25.4271 20.8764 25.2528C21.2249 25.0786 21.6105 24.9918 22 25C22.3895 24.9918 22.7751 25.0786 23.1236 25.2528C23.472 25.4271 23.7728 25.6835 24 26C24.2272 26.3165 24.528 26.5729 24.8764 26.7471C25.2249 26.9214 25.6105 27.0081 26 27C26.3895 27.0081 26.7751 26.9214 27.1236 26.7471C27.472 26.5729 27.7728 26.3165 28 26M1

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	44294
Entropy (8bit):	7.986046048509156
Encrypted:	false
SSDEEP:	768:0TPNx7eSIRgll2WiSr1zZ4c7x6Nr+qsKfptDBmFKvMbvguMoj7cNxSYEDMEUnh:GX69Rgll2fS5zZ57x6bsiLmFKyvrfObh
MD5:	7D0A5B5B93717EBDE612127FBD47BDD6
SHA1:	814632620A137207B4130D15434E39CF74709CFA
SHA-256:	DB98C6A7140F258554A49BD9F2F512C2DD1C5827574E23BADF2415FC0EBFC068
SHA-512:	F65BA202FF19338E373279DCB998AA5795DDC18DA5671CD110B9C18D072587B0C08D1E51AA77F89B5DA0AF005AC016E5CD491D04E0074E7775852CFD2B2545A2
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/mockup_tel_fono.webp
Preview:	RIFF....WEBPVP8X....0...e.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHS...............n...Hp..n..^\Z...E.]....K..R.[..!@..$.w.{..\H..y.f.$"&.J._.........%./....K4...GU..e.V..E8.....k.yu...7R32...o..m..A.D.......7...I.3.E...a.r..oMr...}`J,........-.6O.....}.w>..$.2..........x..54..-....G..0....h..k^.x....D0G.....c..D.:0{.!.]...q.^.A/......Q...a>....o.v=.....>...R.....LQ.z.......<u..Eo..........C...u\|..5....w=.(.=@.1kh..V]..w...R.F~u:...0....*.{.P.).K.GM.1..]..L5D...Z.....G...-..Qk..D.(..M.._.g......7...W..;...xO....RM_..GH.tu...[}.+

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://api.cmp.inmobi.com/?log=%7B%22accountId%22%3A%22srUtCbgF3R7rD%22%2C%22domain%22%3A%22www.sesamehr.com%22%2C%22publisher%22%3A%22SesameHR%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.53%22%2C%22displayType%22%3A%22gbc%3Amandatory%22%2C%22configurationHashCode%22%3A%22ZaXh4z9yxA%2BQ4O5urX%2BYvg%22%2C%22tagVersion%22%3A%22V2%22%2C%22clientTimestamp%22%3A1728049115731%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GBC-w0fah4kg8u6ks3u6jexu%22%7D
Preview:	OK

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	21348
Entropy (8bit):	3.6085156677070547
Encrypted:	false
SSDEEP:	384:Q4pvr4alzqyScQyptc98s5TZshC+kPx5f3SRbPtbeC+TLqli7k7itJ9cHBq9Z+qu:Q4Zr7zqynQmajZDf3KViBTLqw7yw7cHr
MD5:	0F0C9F870DCF843CEA4E570AA814377A
SHA1:	A0A77D26037ACD005CD78693B2D6C63E36EC433C
SHA-256:	C3582BD10CB4E9125981D1C89DC583BFB9210C484D2619783267EEFF4E5353C9
SHA-512:	E1621F5C2F5959C42608D251F097E156022E24ED6D9D4BE0A787949769F735E5DDD0B838CE289E6394AD9A5C0D7E97E704226657CA60FC49286EA485FC1F1523
Malicious:	false
Reputation:	low
Preview:	<svg enable-background="new 0 0 278 91" viewBox="0 0 278 91" xmlns="http://www.w3.org/2000/svg"><g fill="#002e47"><path d="m263.3.7h-228c-7.6 0-14 5.9-14.6 13.4l-17.2 6.5c-2.5.9-3.8 3.8-2.9 6.3.5 1.4 1.6 2.5 3 2.9l17 5.7v40.1c0 8.1 6.6 14.7 14.7 14.7h228c8.1 0 14.7-6.6 14.7-14.7v-60.2c0-8.1-6.6-14.7-14.7-14.7z"/><path d="m56.5 24.4c1.1-1.8 3.2-2.9 5.3-2.8.7 0 1.3.1 2 .2.5.1 1.1.3 1.6.6.5.2.9.5 1.3.8.3.3.7.6 1 .9.5-.4.9-.9 1.2-1.4.4-.4.6-1 .6-1.5 0-.3-.1-.6-.2-.9-.2-.3-.4-.5-.6-.7-.3-.2-.6-.5-.9-.7-.5-.3-1-.6-1.5-.8-.7-.3-1.4-.5-2.1-.6-.9-.2-1.8-.3-2.7-.3-1.8 0-3.6.3-5.2 1-1.4.6-2.7 1.6-3.7 2.8s-1.8 2.7-2.2 4.2c-.5 1.7-.8 3.5-.7 5.3 0 1.8.2 3.6.7 5.3.4 1.5 1.1 2.9 2.1 4.2 1 1.2 2.3 2.1 3.7 2.7 1.7.7 3.5 1 5.3 1 .9 0 1.9-.1 2.8-.2.7-.2 1.4-.4 2.1-.7.5-.2 1-.4 1.4-.7.3-.2.5-.4.8-.6.2-.2.4-.5.6-.8.1-.3.2-.5.2-.8s-.1-.5-.2-.8-.3-.5-.4-.8c-.2-.3-.4-.5-.6-.8l-.5-.7c-.2.2-.5.4-.9.7s-.8.6-1.2.8c-.5.3-1 .5-1.5.7-.6.2-1.3.3-2 .3-1.2 0-2.3-.2-3.4-.8-.9-.5-1.6-1.2-2.2-2-.6-.9-1-1.9-1.2-2.9-.2-1.1-.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	22713
Entropy (8bit):	3.9112578468485575
Encrypted:	false
SSDEEP:	384:EgIkH6dB54QN4cdCR7ERLryIyZFumzo35XfiPaJZxqm7cEdiPaT1/995yJ3sgVIX:yXUEFsI9JGMVTp99/gd3bChl
MD5:	D5366145BEBF18A8E072A3AED4AFA162
SHA1:	37CD238012B071772FA83B0E97F8E5053BD5DC16
SHA-256:	0969D93C98363D210D93C2C6F36C1B8D43C52EF89EDF1777D4F3C6EA54E0FCB1
SHA-512:	CE50800026EC57C4E9B21DDF15EBADBE3E23EA93F45C3AD5FC53D27AD2607A696E069CF21C63BA3FA94497A6AABFFA4C3675A628BA3622665D6A77B3D7C9EB0A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="224" height="40" viewBox="0 0 224 40" fill="none"><path d="M57.9648 15.8726V29.9511H53.2719V15.8726H49.4172V11.8984H61.8195V15.8726H57.9648Z" fill="#1F2D52"></path><mask id="mask0_94_2669" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="224" height="40"><path d="M223.111 0.819778H0.111328V39.0845H223.111V0.819778Z" fill="white"></path></mask><g mask="url(#mask0_94_2669)"><path d="M62.9214 20.9247C62.8969 19.0266 63.4538 17.1664 64.5173 15.594C65.5807 14.0215 67.0999 12.8122 68.8707 12.1282C71.4678 11.1547 74.3297 11.1547 76.9269 12.1282C78.1084 12.5844 79.1869 13.2716 80.0995 14.1498C80.9864 15.0107 81.6918 16.0406 82.1741 17.1788C83.1637 19.5786 83.1637 22.2725 82.1741 24.6724C81.6919 25.8105 80.9864 26.8404 80.0995 27.7013C79.1872 28.5803 78.1086 29.2681 76.9269 29.7245C74.3298 30.6984 71.4678 30.6984 68.8707 29.7245C67.1026 29.0366 65.5861 27.8263 64.5232 26.2548C63.4604 2

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=511697&time=1728049101229&url=https%3A%2F%2Fwww.sesamehr.com%2F
Preview:	{}

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65495)
Category:	downloaded
Size (bytes):	216508
Entropy (8bit):	5.120649237697676
Encrypted:	false
SSDEEP:	1536:eAMoOYWxuY++npUEJAWSnnJqerKz9EQ/biTvvtuQ2Rg7lDgQaP3W+EFsKdDikKcx:Xr68tuyDgQaP3WCi
MD5:	3CA1709C55B95F5CB230BFCF90BBC2A5
SHA1:	EAE6EA18107ED0A194F0A17F2F151A026D57E561
SHA-256:	A845121D886EAC3CCA571D5242585CF74848E982125D81807DA034CC48009BC2
SHA-512:	E2D83614EE4E8AC14655C644245F3245024F8561F3BF7030033BE0BC6A680D9310A1C8C73B1CDF556D66DE8A79953F30F7CB2775F354DF654BB47BB76AFB596F
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.37.7/css/player.css
Preview:	/* VimeoPlayer - v4.37.7 - 2024-10-02 */.@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:translateY(10px)}20%{transform:translateY(0)}40%,80%{transform:translateX(8px)}60%{transform:translateX(-8px)}100%{transform:translateX(0)}}@keyframes pulse{50%{transform:scale(.9)}}@keyframes dash{0%{stroke-dasharray:1,200;stroke-dashoffset:0}50%{stroke-dasharray:89,200;stroke-dashoffset:-35px}100%{stroke-dasharray:89,200;stroke-dashoffset:-135px}}@keyframes rotate{100%{transform:rotate(360deg)}}:fullscreen-ancestor>:not(:fullscreen-ancestor):not(:fullscreen){display:none!important}body:not(.showfocus) .player a,body:not(.showfocus) .player button,body:not(.showfocus) .player li,body:not(.showfocus) .player span,body:not(.showfocus) .player svg{outline:0!important}body:not(.showfocus) .player input{outline:0}.vp-center{display:flex;align

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	786
Entropy (8bit):	7.370243142337166
Encrypted:	false
SSDEEP:	12:6v/7gVvZp4Lp8J2tIriPh62t/TAcZC0OuP7chc8XQ6Veb2HvtcIdOojtXN/wBINo:X0sTAv/TpZC097aQ60ylcNojtXNXIhN
MD5:	C73DE655D287ECE6CAE7831D3CF3E504
SHA1:	CDD531C3A446165685550EAC316E464FA1C83025
SHA-256:	99105E30673117F420DAA221ACB772DFDBB9F903F9E0AA56A1C2839B3407AA70
SHA-512:	78EB7402FBC21A47B6732D439BEF3FB266996B2B68D80B4050EA1E1D2376423714E36C9EE7D8A2FE3EA24F55E0CB1EDA65AAA10A208BBF968BCF42BBCA89640E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....DPLTE.......KW....Iz.......KU....}..}..ir...l^.....R[.KUrH..OZ.KU.KVYH....II.ZG.JI.JL.JN.KH.KL.WH.KG.NJ.OK.PL.RO.SO..KUAG.BG.BH.BH.CI.DJ.EJ.EK.EK.HN.IO.JP.JP.KQ.KQ.LG.LQ.LQ.LR.MG.MR.MS.NS.NT.OU.PU.QV.QW.RW.SX.SY.TY.V[.V[.W\.X].Y^.Z`.[`.]b.^c.bg.ej.fk.gl.hm.jo.ns.os.pt.pu.rv.rw.sw.uy.vz.w\|.x\|.{..\|..\|..~........................KU~.}....&tRNS.!)BIO...................................+....IDAT..u..7.`......JK....U.\.(!ED)...%......9...0<6.L.v./Q.hC..\.I]..Yo6..g...'k....^=..B.F.;.G.L.....80.X.^S.J...0.$...c....~....t.$...V.t.t...jAMi......y.......08.....U.7..@t.......s..rP.W.X[.r.#rxQ...ayi>.A............SNH.)...)...n"$.v_....}6..5...E.....\|...G....IEND.B`.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	582
Entropy (8bit):	6.910549381630345
Encrypted:	false
SSDEEP:	12:6v/7gVvZh+4WVr6Ueeaotc+gjFMAlEJs41Jzu+LqYz:XOBVmUeeYBxOfk+LqYz
MD5:	F51630022AFD40C583D00E1951F44D73
SHA1:	BBA437915FBCFBED1868DA9BD24E365826299D2E
SHA-256:	DE0E858E544D3B31EB2F88E7950AEDBE1EF8EA03D1BD00917B731960DE7974DA
SHA-512:	1027304FD8B5462E90EF78F4B0191D7507D54F1F10850C565B849163D3E687E6B8654C073A2AC3F15B2F7ED1AE7145807F3A05EE6D0D5A8728417854811E502E
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/portugal.png
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE...r...JWs...JUt...KT.........s...KUs...KUs...KUs..w..x..............................@.......K....Y..U.....X..Y..d..o.KU.QU.SU.TU.ZU.[V.\U.]U._U.bV.jV.lV.oV.rW.\|W.}W..W..W..W..W..X..X..X..X..X..Y..Y..Y..Y..Y..Y..Z..Z..Z.\|BP....tRNS.&&]].............S.....IDAT(Su....0.E#.HS...`.],......3..y.I6w.!..YA.....c(..MI....>...~.....0.1.........tr.7..T...& .-.p..Z+}.O.../.0..J{..._.............b....Y/.0n.U..Wc1..........K.`h$......E.-q.H...P.K.D?\#....IEND.B`.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21410)
Category:	downloaded
Size (bytes):	21526
Entropy (8bit):	5.370104983763485
Encrypted:	false
SSDEEP:	384:wpZNGinIIl19VWpA21BR/XR4P/01ezThhnxORR92mfQbZzd0yTvWNkiBDKV:QMwD9VWpAUfXWP/01Ghhn8fQbZz+uONS
MD5:	71020E406AE1476FD34C864FDDF987D3
SHA1:	6C89BD9B5654927F6D5C42FEE40EFED6A15E19C7
SHA-256:	AEF5D822FB9C3AE69F16ADFA41CAD9F8C1B9BDFD61165CC2D967B3DB7E56B731
SHA-512:	81F4A9EF3E3E55F82503A1BF60DFE006C1DEC24C071F834C8B9F349B0389A3F216D58E438FD6021EF109C326AFB593FE8DBE075992925C10B6FAE3B9D01D49D6
Malicious:	false
Reputation:	low
URL:	https://js.hubspotfeedback.com/feedbackweb-new.js
Preview:	!function(){"use strict";var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e,t){return e(t={exports:{}},t.exports),t.exports}var n=function(e){return e&&e.Math==Math&&e},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof e&&e)\|\|Function("return this")(),o=function(e){try{return!!e()}catch(e){return!0}},i=!o((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),s={}.propertyIsEnumerable,a=Object.getOwnPropertyDescriptor,c={f:a&&!s.call({1:2},1)?function(e){var t=a(this,e);return!!t&&t.enumerable}:s},u=function(e,t){return{enumerable:!(1&e),configurable:!(2&e),writable:!(4&e),value:t}},d={}.toString,h=function(e){return d.call(e).slice(8,-1)},l="".split,f=o((function(){return!Object("z").propertyIsEnumerable(0)}))?function(e){return"String"==h(e)?l.call(e,""):Object(e)}:Object,p=function(e){if(null==e)throw Type

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1831)
Category:	downloaded
Size (bytes):	64238
Entropy (8bit):	5.538710039832236
Encrypted:	false
SSDEEP:	1536:kjtJFM10VTBaEs6cTXeGN/2OIznLhjyyBA:D102E2RNchjyn
MD5:	5022CF8109B37622FC9DF99A5F0296CB
SHA1:	76D4ECB8EFFF5FCB585A1D41BC1422BD33D083A2
SHA-256:	8D8EC62630FBEE93207363E7074BC48D497DB1CB2495D670358BFAF962B58163
SHA-512:	3C29C1CA7830ADF25CE0ADA6840CB01787695604E60DA2545772A82261BE029128A5D35791393F31FCF2467C7A7701FAA4AAAE291274B9158EF7380528F8FA5C
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/platform.js?onload=renderButton
Preview:	(function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ca(this),u=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.xa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.xa};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	69765
Entropy (8bit):	5.322394107144159
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwNFHM9ZK0BK01QYTZ02LKVsdmpyKcicy6:RIT7ss9ZKAKBYj8wKcHy6
MD5:	650E7DC42F64549005F7002DF0A92846
SHA1:	5F27948224C1A6C52749A8DF4650FEA537CCEAED
SHA-256:	1B93FE9D5AC874682CA52FC8758CCCB611CFD4DFEA2D9428C2893A7B71F22B4F
SHA-512:	36AB27A8B06C9B5CD2ED9F36321192AC9BF77C77372D4337888CEB478FCB12FAFFC2262B4A522611C793F018609B77F7353B463F02DB60E62419FE8B5DACEAE6
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14037
Entropy (8bit):	3.8312628358332574
Encrypted:	false
SSDEEP:	384:nnofWZr9kS6W92abJhZGqJOhnrbATRWaPrT/:06a0RbRORbA8s
MD5:	2F30FE456AD8271393AED398808032FB
SHA1:	833B5BCD37F597581F488CA9FA696C3A141E8D93
SHA-256:	9F13E1351D6D5316972F17FBB3E1697D1A2687A1A1FE3EC32907A035759F6C57
SHA-512:	9A8E2AE8FFC35AE222CE7DDECFEBD3334857670E9695DE14174723747A548CBCDB18218C693646161711001DF49333E67B5F64C11533A810103FDA6A48EE5792
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="189" height="24" viewBox="0 0 189 24" fill="none"><path d="M63.222 7.27605C63.2127 7.43048 63.1965 7.5849 63.1965 7.73392C63.1965 12.3936 63.1952 17.0522 63.1927 21.7098C63.1927 22.7908 63.1865 22.7908 62.0831 22.7908C61.2885 22.7908 60.494 22.7955 59.6995 22.7908C59.0045 22.7854 58.9397 22.7182 58.9219 22.0187C58.9219 21.8573 58.9219 21.6952 58.9219 21.5338C58.9219 15.1589 58.9201 8.78405 58.9165 2.40919C58.9165 1.08958 58.9065 1.09654 60.2145 1.10503C61.5441 1.11352 62.8745 1.10503 64.2042 1.10503C65.0427 1.10503 65.1169 1.15135 65.4149 1.92581C67.1311 6.3842 68.8484 10.8423 70.5667 15.3002C70.6213 15.4731 70.7261 15.6257 70.8678 15.7388V2.00612C70.8678 1.12896 70.8678 1.12202 71.7628 1.11815C72.6893 1.11429 73.612 1.13746 74.5355 1.11815C74.9911 1.11043 75.1533 1.2726 75.1471 1.74206C75.1316 5.59277 75.1394 9.44347 75.1401 13.2942C75.1275 13.481 75.1604 13.668 75.2359 13.8393C75.3071 13.7497 75.372

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1133
Entropy (8bit):	4.473612246192072
Encrypted:	false
SSDEEP:	24:2diO44l/uBWhBSGTo0TMpqdWYiuzbfKk4ZbHkaeOJG4cPnhllo/:c35GBzGTEpuPKk4ZbH/eGGE
MD5:	26C71696E0748679CEDA50ABF6B36191
SHA1:	84DF8F5C850BBCABBD46A157B52D85BF1D5877DD
SHA-256:	3258556C9D0BC42A5B90EE1343F66BE842918007AD34100C38CB6F763895DF97
SHA-512:	808ADE1AE23BCECAEB9F5536577FDC47841707F8479D9880EF296FDB42C128FF3C93081E85B1102CC4EA8F98872742493D3CED4664A9D690960ABD98AB341AB3
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-11.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M15 16H15.01M21 16H21.01M15.5 21C15.8259 21.3326 16.2148 21.5968 16.6441 21.7772C17.0734 21.9576 17.5344 22.0505 18 22.0505C18.4656 22.0505 18.9266 21.9576 19.3559 21.7772C19.7852 21.5968 20.1741 21.3326 20.5 21M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.55

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	97984
Entropy (8bit):	5.333709360579286
Encrypted:	false
SSDEEP:	1536:6yc41gIJpNs23jp2LvLaRheeUPZ4lzGrZDII/lNOJanrOb:z1s23jp2L+RheeUPqlzIZEE/8
MD5:	C1E06621030DFCBA15B88ABBCAA546EB
SHA1:	F7B7AE2B4466464D37D362E4B3662CC0CF29241C
SHA-256:	C99D11CB4960D6E1918ED55D5BCBB316D38B51098E2EFC1201904D7274D3273E
SHA-512:	2BE1B89002CB9884C57E51645292B89061FE1A375CF277B504F0221A74C05F6AA6B214354280A30AF7A3580A0F37F8C8138311721CA0557B47BE1164BD8468E9
Malicious:	false
Reputation:	low
URL:	https://cdn.neverbounce.com/widget/dist/NeverBounce.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/static/",n(n.s=43)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	171372
Entropy (8bit):	5.376028916008218
Encrypted:	false
SSDEEP:	3072:IOd8N9KK4wbDtZkYGDusJEg3P1sibzmsJTYg9CHSMnGW8ZBMPk6:I5nK8DtZkYGDusJf/1sibzmsJTv9CHSm
MD5:	94ECD40669C01B7176FA0A4FFCF3FE8E
SHA1:	E166D7521AB67367AD786E8CCC17AA48E5F6E20C
SHA-256:	2DD1B4E7E2C6EBFD815D4CDF497A829B83E9D30089E9F2CC35830594B78FFD39
SHA-512:	743D5823B13F4FC6637E2EC98FB6C54AF88890516F398844F105833788FD2CD3748A2010A89FD3B92684115CB2B4CCB5AEA8974A32F3F1495DCC21181BFC9D50
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/tcfv2/53/cmp2.js?referer=www.sesamehr.com
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=126)}([function(e,t,n){e.exports=n(57)},,,,,function(e,t,n){"use strict";var r=n(30),o=Obj

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	768
Entropy (8bit):	7.472542585856117
Encrypted:	false
SSDEEP:	12:6v/7gVvZpV/SxU638/aqnwlOv6IP662Gl7abEYDykqkYJfr+D1919ZErN:XdamCkaqnwlOiIP662y7EpFgJfr+x91+
MD5:	F96507DF8FA98DF72639A40D92541FD1
SHA1:	703457A7391403E5AD378447C815CF5BC2C4963B
SHA-256:	82CF5F6657CD3CEA7776D1127BB01A07ACE9D98FE2FC7336D5CB09605134E772
SHA-512:	76A1E5D1748961C9C5E066C60276990842FC1327777A8D73704852017F511EE10AA1AC5DF64A32D8BE64381ECEC36B2B90E37D29EDFB0207F2AB175131D1E8F6
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/uk.png
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....DPLTE...CJ..........BG.BF.AG............AF.dh.AG.....mw.ir.foAG.EK.GL.]b.fk.ko.pu....................................L\..................................................................................................................................u\|.\|...........em.iq.nv.qy.rz.s{.u}.KV.T].Zc.[d.\e.`h.bj.bk.KU.LV.MW.NX.Q[.h......tRNS.&HIKL].............Z.......IDAT(Sc```d.....7SOOW7.....`gd..6^..@H../...............(....&7..........k..Cp......BBLV.?#.A.#!..LY.&!...ac.. "....k.'.......1V..a...R...0.H.F.9.)I..3...X..... >==..cH..pK.4... .....A%..u.;WDZ..;3...A=K..U..T0sOKvA..3..[.....@].@....b.Nu..v37A..-l......=j.q'.\...OVnp.......IEND.B`.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	18081
Entropy (8bit):	4.193095505552643
Encrypted:	false
SSDEEP:	384:d3kpjEQhvWRdO/k14ygO03NeN45jyV8D7rAE3uULBLMgysJTGAUHXs9uggcOduej:KEaWUO0W45jyVV2gsVN9ut30dxi
MD5:	0DA49DFE0B88BC804177F5A8072ABDB3
SHA1:	ACEECAB554F7219E60C4FD78840E4298D2B6670B
SHA-256:	7D31701A3BE824531002A9276E7F48EDD59DC4D98712B9C77E292F96942CF742
SHA-512:	31735078BE633A14FEB6E3E1F0E3E94E0BDFAA1B76CE5C429E89090CFC9172D86146A4F616B518F9437AFE46291F1CDE3021C266A7F814F743C858076D316B2D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: $$$/GeneralStr/196=Adobe Illustrator 27.6.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 156.2 151.2" style="enable-background:new 0 0 156.2 151.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#757675;}...st1{fill:#F37021;}...st2{fill:#E1B18B;}.</style>.<g>..<path class="st0" d="M77.7,2.1C91,2.8,103.1,7,114,14.6c13.6,9.5,22.8,22.2,27.6,38.1c1.2,4,2.1,8.1,2.4,12.4...c0.2,2.7,0.4,5.5,0.4,8.2c0,11.2,0,22.3,0,33.5c0,0.4,0,0.9,0,1.4c-4.7,0-9.4,0-14.1,0c0-0.4,0-0.8,0-1.2c0-11.7,0.1-23.4,0-35.2...c-0.1-10.2-2.8-19.6-8.1-28.3c-8-13.1-19.5-21.6-34.4-25.6c-3.2-0.9-6.5-1.4-9.9-1.6c-3.4-0.3-6.8-0.3-10.2,0.1...c-10,1.1-19.2,4.5-27.4,10.5c-9.5,6.9-16.3,16-20.3,27c-1.3,3.6-2.2,7.3-2.7,11.1c-0.4,2.6-0.4,5.2-0.7,7.9c-0.3,0-0.8,0-1.2,0...c-3.8,0-7.7,0-11.5,0c-0.4,0-0.9,0-1.3,0.1c0-1,0-2.1,0

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	299
Entropy (8bit):	5.0999304086595165
Encrypted:	false
SSDEEP:	6:tI9mc4slzPDN9j4sacRdHn1oVaafT4hg7ptVaa2rdGoScQHnDp2:t4JDQCnHafT4hWX27QHnA
MD5:	9B0E557745BD84BDACDDA58817A58CBB
SHA1:	F9E11D51679C95E1056831B99BBE09008D999D9E
SHA-256:	DC148FA8B264165AEB7418A450B25EEF969ED9206F48032E28A93D0C7F56983C
SHA-512:	C6D33CAA49933192999BF1CE078FEACA39255F31BC08ABC94FC4C1D5F4EC7E01D45B8CD64CE8B196572CD183F8A480C55418EEF1E202EDA28AB27DCE7A139E9E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="8.277" height="4.695" viewBox="0 0 8.277 4.695">. <path id="caret-down" d="M11.852,192h7.163a.556.556,0,0,1,.393.949l-3.58,3.583a.558.558,0,0,1-.788,0l-3.58-3.583A.556.556,0,0,1,11.852,192Z" transform="translate(-11.295 -192)" fill="#1f2d52"/>.</svg>.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4150)
Category:	dropped
Size (bytes):	37649
Entropy (8bit):	5.334744572507943
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwxAHXUpxbY/Y3YOgQxzbnYeYZYHYZYVY+YSYMdxPJlvKXuloFdINAO:RIT76HXsZwuvLJn54WAcl/75
MD5:	921CFB01DE13EEC5FFA3C31E4CD2EC72
SHA1:	0291093ACDBB39E4FC5048B3087CECA94464BE2A
SHA-256:	8B2A748DD04AF607FBD22763CC634E38E6253CF43579D215FD918457B3BCC4F6
SHA-512:	A67CC1D6BB142DD63A1A19CC18B0CBD34478C308C3F98E0F5A0EC02D71D572B3FFD6EEC5538B93CBE6548F2788113D7FF1AE9B3AF45F4EDCAB14895671A85B4D
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.782287307315429
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQosLc:VKEctKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	E7F4945A3458503BDEE0AD9476537604
SHA1:	CD049E2F8F9D05ABC087BBEF7EFEDA01EFB0F3A6
SHA-256:	8AB3BC08E25F6A7E24EF75EE66ED06360BCEEACE487D22822D7724B3F2BBED50
SHA-512:	BD30B50396E0015B723FFD185972E37094A5CFF4A42CB5AE5D439AE3B85F2735F33145B363E2657AC174D66ED2E3F97FC0C2BFC9FDEE6B06C61E5A01FD1CFF34
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57765)
Category:	downloaded
Size (bytes):	112419
Entropy (8bit):	4.925253605526406
Encrypted:	false
SSDEEP:	1536:pZeJWfZglWQg5MG7+qehN2pUkxWLPQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LIU3Pq
MD5:	6C5989E44633F1E3F08AD845F9D9CE0B
SHA1:	2B24009FD37E79D4A601E6D53D615FD2CD0A606B
SHA-256:	885C89E82436CFA3D0A0A5A9B2F6BE6E1503457C810CC88ED2C09B4570AE9FD6
SHA-512:	1607A3F2AB27D377D5522BC5B7D0EBC5047E0B9352C7A49978D82D3128EBE13713AF4738D05AD1D32C5A3C54CE0EC787F94BFE25073FEAAF3D5D3BFF8B4DA2E5
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10809)
Category:	downloaded
Size (bytes):	301042
Entropy (8bit):	5.605691857106352
Encrypted:	false
SSDEEP:	6144:cUQIGKlqjJL1MvO5QEDF2Dej7GsUFVVl2bT+lB5:tQwUjJLSlgT+lj
MD5:	D52B8AC3FB35F1FD6AF93CEBE4E46C1C
SHA1:	8C740A80339AF1D979B33F94AAB766BF3364D1B5
SHA-256:	B89083C55A2A0A79A1D9D690E9FEAA15CAD1F5564252A4DA35AEB4A76121C740
SHA-512:	0E5E6997734018939136A8C92A879BCB33CDE603386A36DCC632584B0571E296E4CCEF36A5E672A760463AF73D704EDFF31DE5267FDE81C2CAC96C0787CF2B77
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-1PTDWQJCPC&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":30,"vtp_rules":["list","sesametime\\.com","sesamehr\\.es","sesamehr\\.mx","sesamehr\\.com","sesamehr\\.co","sesamehr\\.co\\.uk","sesamehr\\.cr","sesamehr\\.cl","sesamehr\\.pe","sesamehr\\.br","sesamehr\\.de","sesamehr\\.fr","sesamehr\\.it","sesamehr\\.nl","sesamehr\\.pt"],"tag_id":17},{"function":"__ogt_ga_send","priority":20,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":20,"vtp_includeConditions":["list","paypal\\.com","sesame\\-time\\.chargebee\\.com","seasmecontrol\\.com","googleads\\.g\\.doubleclick\\.net","sesametime\\.com","superrhheroes\\-sesametime\\-com\\.cdn\\.ampproject\\.org","sesamehr\\.com","sesamehr\\.es","sesamehr\\.mx","sesamehr\\.co",

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1402
Entropy (8bit):	7.794041175461214
Encrypted:	false
SSDEEP:	24:7KPYK6WVsN1neq0Sl3apmcRqCeSbdRRKErE9pp4u:7KPYzWVUneq0S4p3TL1ELyu
MD5:	63FD1712F7CC6446DDDD5D64DD5B0115
SHA1:	FEAAC329542064E54FCF6063353780A54A35D3F4
SHA-256:	16300D443AF4AB535247010DE7D26BD4ABC979A4923EA2A8F3FA0D76AE3EFC06
SHA-512:	D7AD0D24F64099FF71E50630EC45C35EBEC9AF40055ABF48CAC242909908A7C6B39765899AA9A77A933739731BD6CC369FACD72A1EA72948B60041C7A5F4985C
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2021/03/cropped-favicon-ses-hr--32x32.png
Preview:	.PNG........IHDR... ... .....szz....AIDATX...oTU..?.s.SP.".......-..A....j.A:.&......;\|E..u.caL..Q...!...<li.....`.Y -3..s1g.2.Z.~...s.~~.s~....(.0.P#...4p70.8....d......A........G..."...2.<0..?.........m..d..-....v..g....60.".z...p(......=...l?(c!#G.o.......@...P.i....@....~..l..`..5..V..{....].f.....U.8.....ND.A.uuM'N.....h-.\E.+....`.....E..P.../.`P.."T.l;=..]....6@.L.y.A.F..w..&ZR ..,D.`1..X...\.#Q._.=ea.5..E."..u.....:...H...u.s.j.:.Y.....Tz.z....n...m..-xe...:.Hg{...0.9../S.l.X...%@.o......N9...^.^,.j%.;.K.~..Lo..w`...%5.....8..A/T...t......H.....;K..4#..=../....iF.d9.Lg....=.....&..X...+;...x..._I..u.h?V...h}....s./.Q.4./...U./f...{..A....'..(..)Ua.c.0.y8Kh.......q.../...x..4`.....V.\..Ds....;...IC..r....z...#>.x.....N...9..1......,u...}_...z4..\....S...7.s.p4.<...w...7r.o.h.J.n].`.......Q(..9\...q......../\.s.w.U].'.~.!....k.C.P/...L..-..X..)..1..o..>..p...e.6`.a..lT[R......."...yCd.0.0p...N....W........ea\.6.o,...o.2.@M].$........!....k..9'9V3....

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6187)
Category:	dropped
Size (bytes):	6298
Entropy (8bit):	5.3850652696715375
Encrypted:	false
SSDEEP:	96:u8nME4+xIW/ksk6n15/AgxUaV4Xi4cLAUd9qi0n8gXsdBt4xjDEYrLm:pxr6W/kL6L/AOUk4GLMV8IsqEYr6
MD5:	DF55045BC18928673797EC8F36531CE2
SHA1:	79B464E7E4E72389AA94918CDE3F36876508A847
SHA-256:	86687F3E5F5AFDCF3625C8DDE9300BB27A5715AE747F119A1A4C8F89064C254C
SHA-512:	8AA2A2B9668A62536297CDB50816226541884ED5BC2C44C8B0A9326A013A3360573A9AA4DDA21FE7B6B8E61160B91D95DD73E97FC97C7AF595D74ABED1902BC1
Malicious:	false
Reputation:	low
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};e[o].call(i.exports,i,i.exports,t);i.l=!0;return i.exports}var o=[{name:"head-dlb/bundle.production.js",path:"head-dlb/static-1.1137/bundle.production.js",ids:{}}];t.dlbpr=function(e,n){var i=o[e];if(!i.r){i.r=window["__webpack_require_"+i.name+"__"];if(!i.r)throw new Error("dlb "+i.name+" not loaded");i.r.linkDlb(t,i.ids)}return i.r(n)};t.m=e;t.c=n;t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})};t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};t.t=function(e,n){1&n&&(e=t(e));if(8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);t.r(o);Object.defineProperty(o,"default",{enumerable:!0,value:e});if(2&n&&"string"!=typeof e)for(var i in e)t.d(o,i,function(n){return e[n]}.bind(null,i));return o};t.n=

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	989
Entropy (8bit):	5.102438214614776
Encrypted:	false
SSDEEP:	24:2diO4xT8utjU0T5xDf3KyDRVU3pTjUhlll2jUhlll7bjUhlll7lyXltjUhlll7E:c3c8uTvfxMyXll
MD5:	FABF24D79F9E61E44D367A7705C52608
SHA1:	F58B5CD495C1FBBBE001A585D7A8B643F69B1868
SHA-256:	0FE426DF369E63408A0CC5CFF185177BE25CCCEC0692DCA92804EDC67AB70F7D
SHA-512:	E0185FCC812E9CB5422E02BAD311AD1F2967AAD90339D34F5E60FC4DFFF01381D5690937FF873E5AB07B73F1D461DFFAD4B5D9E367639ED2F80985107BCC8915
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/01/gestion-de-equipos.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g fill="none" stroke="#a160f5" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75" width="38.5" height="38.5" rx="15.25" fill="none"></rect></g><g transform="translate(8 8)"><path d="M0,0H24V24H0Z" fill="none"></path><circle cx="4" cy="4" r="4" transform="translate(5 3)" fill="none" stroke="#a160f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></circle><path d="M3,21V19a4,4,0,0,1,4-4h4a4,4,0,0,1,4,4v2" fill="none" stroke="#a160f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></path><path d="M16,3.13a4,4,0,0,1,0,7.75" fill="none" stroke="#a160f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></path><path d="M21,21V19a4,4,0,0,0-3-3.85" fill="none" stroke="#a160f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></path></g></svg>

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1133
Entropy (8bit):	4.473612246192072
Encrypted:	false
SSDEEP:	24:2diO44l/uBWhBSGTo0TMpqdWYiuzbfKk4ZbHkaeOJG4cPnhllo/:c35GBzGTEpuPKk4ZbH/eGGE
MD5:	26C71696E0748679CEDA50ABF6B36191
SHA1:	84DF8F5C850BBCABBD46A157B52D85BF1D5877DD
SHA-256:	3258556C9D0BC42A5B90EE1343F66BE842918007AD34100C38CB6F763895DF97
SHA-512:	808ADE1AE23BCECAEB9F5536577FDC47841707F8479D9880EF296FDB42C128FF3C93081E85B1102CC4EA8F98872742493D3CED4664A9D690960ABD98AB341AB3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M15 16H15.01M21 16H21.01M15.5 21C15.8259 21.3326 16.2148 21.5968 16.6441 21.7772C17.0734 21.9576 17.5344 22.0505 18 22.0505C18.4656 22.0505 18.9266 21.9576 19.3559 21.7772C19.7852 21.5968 20.1741 21.3326 20.5 21M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.55

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13638
Entropy (8bit):	7.986903393263918
Encrypted:	false
SSDEEP:	192:hvdW91cFVfnGib6uQxxDELu6I7SIkr1ilVd2jXU+mHkUIHIxgH3jOSkQZL0XbXWH:djFFGiexxxsu6KkkVd9MTH3LkVrXWU5M
MD5:	F60415784A4096947D9B1CBCB39DEB52
SHA1:	5E34D39FC72DE45354626714BCCAEAEB147692A6
SHA-256:	236889AF68780277B919DA3F135707CD45FCED062DD06B0AA02DE3F57FA98EAC
SHA-512:	702B013A5ED3775AD99F4C620575253051F8320C87A759CD2F0CEA749B0374267E211E554E6F81813A07D39385EF0C09EAD5ED1B350ED6FE58DB0069C266D225
Malicious:	false
Reputation:	low
Preview:	RIFF>5..WEBPVP8X........>.....ALPH/.....b....$..a.4..8.....ZW.ve.d....O!y......Kz.O/.4V~]...."...7.C...S...X.[.H.b.1.X.B......<._=EId{5...mk..N0..v4N..6.....e......c.....@...v.<.J..N...yD.<_..........................y..y..<v.<.B...<.....2u...?q.....3..y_...`.6..?M.i$.pP.,#.J...ds....G#T.."... MB.mHk..."...H......O...g..)..VP8 .3.......?...>.6.G.#"!2.<...f......N.........~I...W.:.....O..o?/3^l?.=}.h.......7....g.&.o.?K.../....7.~..#.........?...~i....n....}W<=....O............+C_......O...r..8...EJ....>....Q.5J.&.c6-.R.....fE.a.By....V...&....Y.&..[.X.JYT..r..Y.x^...(....g.5..,J....I...."...nK.O.L.E.SK..ZP;m.y9\|...g....x.o....G....C.h^7O..$XL..M...E.....s.6,YQ.{Sf..L,.Bd.w2.l.h....,2......].w..z..#L..$w.R.8}.u.et..QFq.@...^.x"....E..VB.A..}...N....*...L.../..f.H...... T..]...:G...[../T.CK$.3pu.(.p...[.`y1.......qb............Nz....P.8x.6O.]Ep$bR..?TX.\J.m.&e...r8>&.'..\|U...c.O.!.F@&..p..5....]..H.U...b.i..R.!'-...z....!....Jx...

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1427
Entropy (8bit):	4.330925734854305
Encrypted:	false
SSDEEP:	24:2diO44l/B7FltXcb1YcdTo0TMpqdWYiuzbfKk4ZbHkaeOJG4LpQtw346Pnhllo/:c35PS1YcdTEpuPKk4ZbH/eGGMd34H
MD5:	18FEC8AB9B3C56EB74092F4F71694CB2
SHA1:	635EFF9032A01C55D44440A4DD2E6696165D98AB
SHA-256:	2AF58D3C8FEC4D5723BD0E52DF693175F9BFCF0524FA0462FE5AAB0C051637EF
SHA-512:	A023F267550BB67FEC1262347201EC7EB67E900CC08503746EB382813B4954A71EC3C0991AB8D543DD57693B08D19ED3047433ABBB12B622D9E2D6AA15CB7A3C
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-9.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M12.168 24.849C12.4155 24.0252 12.922 23.3032 13.6122 22.79C14.3025 22.2768 15.1398 21.9997 16 22H20C20.8613 21.9997 21.6996 22.2774 22.3904 22.7918C23.0812 23.3062 23.5875 24.0298 23.834 24.855M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.647

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38087)
Category:	downloaded
Size (bytes):	38211
Entropy (8bit):	5.1575116029654815
Encrypted:	false
SSDEEP:	768:d5veG0+6ihBBT+MGGgCEYBEZ9yEfRSEVdYGQO2SlT6qFOTH2:d5veGsacGrEGEZ9yhnO2SeW
MD5:	98F48B986C117E04ED8FCDBAAEFB7945
SHA1:	7AEA7AD94F81C908679B83A1B09BFD9D60E3EADD
SHA-256:	794B9F4FA15362394D9913554121B956F2EE5F5DC368540A8CC761DC9C7668F1
SHA-512:	D46F8B6CB86E13D5ACC10F9B608D8480305615005C1DFD1C2A828F11AC5259012EE704090F9CE3CB9F86C67466D30C516D5263256D356556098A1BC8516A897C
Malicious:	false
Reputation:	low
URL:	https://player.vimeo.com/api/player.js
Preview:	/! @vimeo/player v2.24.0 \| (c) 2024 Vimeo \| MIT License \| https://github.com/vimeo/player.js /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Vimeo=e.Vimeo\|\|{},e.Vimeo.Player=t())}(this,function(){"use strict";function r(t,e){var n,r=Object.keys(t);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(t),e&&(n=n.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),r.push.apply(r,n)),r}function u(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?r(Object(n),!0).forEach(function(e){s(t,e,n[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach(function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))})}return t}function j(){j=function(){return a};var a={},e=Object.prototype,s=e.hasOwnPrope

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	133550
Entropy (8bit):	7.9781177382376445
Encrypted:	false
SSDEEP:	3072:/zlYmn2K3Kc+kdRQoadQX6rjxA1sTcAgk6ue:umn2K3v+cR0do6zcrk5
MD5:	D1C01C4A40A6A77960E4EDAFA8BA1784
SHA1:	651E527D977CB56ACA2B920C4FEE9837D536DECB
SHA-256:	E64B2F7E237B723424FA53773C68148931B4D3379A1AA6AF3C7CC77109AEE765
SHA-512:	7E5A28D172FA6BC0D668AA0959FC423F08D391602D6D46C1893F68D0D977635A80E49C7CA6070FDB5820979641EDECE8F43E12EE590C7B3B7F550B971BED6132
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.....$.m#9......g.1..~g......a......]..n..Ss.P.Q.m #.k.A..if....!"$i..#.n.J.s..?s...4`Q.......(.6.\|.....Fr$....H.....?P .......$I.lK.Z..3..s.@....s.<.p#..+I..... ..{g..H+..$Ir$....Y.q....n..9..X.......AD@B$[h.!........w.m.n$..FT..AR....W....W>...k....J..@Dxbm[.$I....\|R.D.\..%f.B2.-I.j.m.2&..'...}03..g.".n.u<.,E$"(A.$....i`sD.b.`0.{...I.m......F....9u......@..=..p.Ij..`.`...zY.m.ms.?P5W......H./......0..D$I/..O.O...................................................

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	995
Entropy (8bit):	4.558710551088413
Encrypted:	false
SSDEEP:	24:2diO44l/BSwEj2t3/VzmfE/HomSt574Pnhllo/:c35JqO/JmfEfomStNF
MD5:	5EC0B3093A8590D596D0E5F8CF2D31FF
SHA1:	989E6717F27FF0D0CAF65D4AA55766539E49EB9A
SHA-256:	119CE575D27374D5CB271D6C16AAF39B5EADA12C1E019D8A6DD25877CCDF7C13
SHA-512:	4FD32BEBDB74A17ABCE107F38B70420F972D260220A22DD29CC8A6F370D9C74478554F12AB1B1AEE36F93EF7B873F4930AB950FD31C890A401E801604D394C40
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-5.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M15 11H13C12.4696 11 11.9609 11.2107 11.5858 11.5858C11.2107 11.9609 11 12.4696 11 13V25C11 25.5304 11.2107 26.0391 11.5858 26.4142C11.9609 26.7893 12.4696 27 13 27H18M15 11C15 10.4696 15.2107 9.96086 15.5858 9.58579C15.9609 9.21071 16.4696 9 17 9H19C19.5304 9 20.0391 9.21071 20.4142 9.58579C20.7893 9.96086 21 10.4696 21 11M15 11C15 11.5304 15.2107 12.0391 15.5858 12.4142C15.9609 12.7893 16.4696 13 17 13H19C19.5304 13 20.0391 12.7893 20.4142 12.4142C20.7893 12.0391 21 11.5304 21 11M25 17V13C25 12.4696 24.7893 11.9609 24.4142 11.5858C24.0391 11.2107 23.5304 11 23 11H21M24 22.4961V24.0001L25 25.0001M18 22H15M21 18H20.99M17 18H15M28 24C28 26.2091 26.2091 28 24 28C21.7909 28 20 26.2091 20 24C20 21.7909 21.7909 20 24 20C26.2091 20 28 21.7909 28 24Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84671
Entropy (8bit):	5.280749760123156
Encrypted:	false
SSDEEP:	1536:8HyXWWcWdcBNieNO8DDejT5UKxfIzbFWX7Qp64Ai1n4aBgcl8705eZGXm:u8jWKxfI3+7v
MD5:	6B513BAAF4C77CDDC702F596C3DD62D9
SHA1:	3419650A06EE0A9BF9398EB3CF6792B202E6432C
SHA-256:	6B0FDAA32FEFFBDBD15BDA3619624E0AA8E1D647FD720E31B7645654E7FB551E
SHA-512:	F690B93FFF5D046F5EDBB806C7D09EF3EF89713F972AE613AFCC66A20A1CCBF0B520FA87AF973984D98B539CFC6E5AFA3A99F237D60B2DB155D8C359858FBF21
Malicious:	false
Reputation:	low
URL:	https://js.hubspot.com/web-interactives-embed.js
Preview:	!function(){"use strict";const e={RECEIVED_ANALYTICS:"HS_CTA_PARENT_RECEIVED_ANALYTICS",DEVICE_TYPE:"HS_CTA_PARENT_DEVICE_TYPE",PROXY_ANALYTICS_FN_CALLBACK:"HS_CTA_PARENT_PROXY_ANALYTICS_FN",INIT:"HS_CTA_PARENT_INIT",SHOWING_CTA:"HS_CTA_SHOWING_CTA",SEND_EXTRACTED_STYLES:"HS_SEND_EXTRACTED_STYLES",STARTED:"HS_CTA_STARTED",NAVIGATE_PAGE:"HS_CTA_NAVIGATE_PAGE",CLICK_EVENT:"HS_CTA_CLICK_EVENT",CLOSE_INTERACTIVE:"HS_CTA_CLOSE_INTERACTIVE",HAS_CLOSED:"HS_CTA_HAS_CLOSED",NEW_HEIGHT:"HS_CTA_NEW_HEIGHT",DISPLAY_CALL_TO_ACTION:"HS_DISPLAY_CALL_TO_ACTION",PROXY_ANALYTICS:"HS_CTA_PROXY_ANALYTICS",PROXY_ANALYTICS_FN:"HS_CTA_PROXY_ANALYTICS_FN",SEND_FORM_DEFINITION:"HS_SEND_FORM_DEFINITION",SEND_CTA_CONFIG:"HS_SEND_CTA_CONFIG",SEND_EMBED_CONTEXT:"HS_SEND_EMBED_CONTEXT",RECEIVE_FILTERED_STYLESHEETS:"RECEIVE_FILTERED_STYLESHEETS",SEND_STYLESHEETS:"SEND_STYLESHEETS",RENDER_RECAPTCHA:"RENDER_RECAPTCHA",EXECUTE_RECAPTCHA:"EXECUTE_RECAPTCHA",RESET_RECAPTCHA:"RESET_RECAPTCHA",RECAPTCHA_SUCCESS:"RECAPTCHA_

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	76027
Entropy (8bit):	7.9613184487597275
Encrypted:	false
SSDEEP:	1536:8/a/e14Yu0TWu9U+57CaYBirTWFMHe3QFT5MoOiTp3rFIB0W:8/JKYu0TWuy+EaPWw55vHt7aB0W
MD5:	D34C3811BA02C7B5A587CBF204C181C8
SHA1:	1166E17798C906042793F7A3912A066DB141BDB2
SHA-256:	4B576183209BE98AEB4F9EA926BCE8E62CE42AAD695041621D93A547310F647C
SHA-512:	B5844CD23E90393B1F72AFCF1A092FAD6AD514F8E5F96D3EE96259027B003EB72D65BFD800D7986971CA2F485E5B2FD9532FAE82CBE1C8816AA3B6C6FEFF79FD
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......8...."...................................................eV...a..7\|..%1....c....{z....q1...@......(.......A...%QQ.U.....U`....O.o./2S......?M.^.V..$..~}..p!....,....D.T...P...!..A.............Eu..E.........=~.d.@J./...6. .T.P...T...P.P.D%.............`...2.O.....y..HL.Vm...'..}.hJP%^o.2.!..........V..P.P.D%.................`y?..$..W.9.2.......S....!T.c....P..Q)T.....J..RJ......E@T..?.......`y....3b...tL....g....;d....K..J..%.......IP.@.........R..P,.....-._..Z.e...3+..E..Y..A'/....R............,MH...VT..Q......T........,.G....V..ja..fV. .!....$S...... L.....!aQ.X...Y...... .TT.D..C.......`Xy_._.i.&...3+.$..~....B~k..2...H.PYP..TXJ....@.U...J............X.._..^VM9.L...$......@YS..c.aPBD.......T.T.....H..T.A.._. ....,....r..Y%y.]2...d.E....a.... .T.HTUa...@..U.D@...*....P,.......?..2.I^\|.L..aY

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3618
Entropy (8bit):	4.2475482910711495
Encrypted:	false
SSDEEP:	96:HHEnjM2/vk0KXqoCtdxbJfhQvDlXWv/JRPPE/GXqoJ4gToPf:nAjMa8Gn9uLl2RPc/ZYToPf
MD5:	954D2D84E6D0CA8D6656E462879B8AC2
SHA1:	F4B56794EF5E60D4979348275102205DC0845B0C
SHA-256:	E9D849C4330C1BDF38E8F2D1BDBD7F3DAAC25BE0D4CE557FDE9955C51B043764
SHA-512:	ED9854964FB39B5BE71D233033D4CDBEA1330A9775B2618F9BF916D6C439BFC4DDA03DA18A240FDC09BBBA17CA42BEB1AC28571946F9DF55F9E347BAEFB56073
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="136.839" height="28.774" viewBox="0 0 136.839 28.774"><g transform="translate(-355.713 -560.726)"><g transform="translate(443.552 577.063)"><path d="M-43.3-3.1h0c2.2.5,4.9,1.4,4.9,4.3A3.587,3.587,0,0,1-40,4.3a5.953,5.953,0,0,1-3.9,1.1c-2.7,0-4.6-1.1-5.6-3a.192.192,0,0,1,.1-.3L-47.3.9A.192.192,0,0,1-47,1h0a2.959,2.959,0,0,0,3,1.8c1.6,0,2.4-.5,2.4-1.6,0-.9-1.2-1.4-2.6-1.8C-46.2-1.1-49-2-49-4.9A4.1,4.1,0,0,1-47.6-8,6.127,6.127,0,0,1-39-6.6h0l.1.1a.192.192,0,0,1-.1.3h0L-41-5a.192.192,0,0,1-.3-.1h0a2.851,2.851,0,0,0-2.5-1.4c-1.1,0-2,.5-2,1.5-.1,1,1.1,1.5,2.5,1.9" fill="#1f2d52"></path><path d="M-33-.5a.215.215,0,0,0-.2.2h0v.1a4.208,4.208,0,0,0,4.4,3,4.354,4.354,0,0,0,3.5-1.5.367.367,0,0,1,.3-.1l2.1,1.2c.1.1.2.2.1.3h0a6.9,6.9,0,0,1-5.9,2.8,7.609,7.609,0,0,1-5.5-2.1A7.488,7.488,0,0,1-34.2-7a7.009,7.009,0,0,1,5.3-2.1,6.372,6.372,0,0,1,5,2.1,7.69,7.69,0,0,1,2,5.2,3.4,3.4,0,0,1-.1,1,.215.215,0,0,1-.2.2ZM-25.4-3

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45302)
Category:	dropped
Size (bytes):	403865
Entropy (8bit):	5.568205237014674
Encrypted:	false
SSDEEP:	3072:4GQvSDGp2IIp9SXNmW4L+1M9C0x2KC2uBcO9yyqo5/Aux9wEgpnDF2Dej7nDBv1G:4GY2IIGmla1dd2vO56bZDF2Dej7Fvc
MD5:	5831A2A099F56D717F98226671C9A58C
SHA1:	184CF74890819E2C32BE12E57790C75BB0F5116D
SHA-256:	6B72FDA435864636090AF6187EC127813C3E5896F4F76CB778678489FC6D5092
SHA-512:	6F8583D67B719ED6CF41C77053F2B0C26364511141655EB9E9FB51EF95D92076C21A8839F8255B81A24D20B275F24281A6AA04946A7342E4954F406B0F463B9C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"201",. . "macros":[{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"hs-form-guid"},{"function":"__smm","vtp_setDefaultValue":true,"vtp_input":["macro",2],"vtp_defaultValue":"none","vtp_map":["list",["map","key","6121a2db-f72c-49c5-ab7b-3288183966a0","value","lead-sales"],["map","key","5db62db9-493c-4efc-a245-c3705f00d800","value","lead-sales"],["map","key","9f3e989f-b8e7-4e0c-a352-a3cd018271b5","value","lead-sales"],["map","key","da6ac13e-349a-43cb-9b42-d56318672d43","value","lead-sales"],["map","key","e48c5b4a-495e-4656-9115-59d1026e2756","value","lead-sales"],["map","key","3fdd81e4-c84e-4cd2-96b0-ff8163cd4f6e"

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 277, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29267
Entropy (8bit):	7.8670320510063325
Encrypted:	false
SSDEEP:	768:iL53lvsR0GiShNfLqEsJeuv48wQDCYM0WDBhFTDcWNs:iLbvFsNfLqaG1BDC90C5a
MD5:	006550619BF1B0FC5846C5BCE54196F7
SHA1:	7FE02E54DB5C1D766877335C31E65E03C8B8824A
SHA-256:	BDDE876CB39C7B34F8AF950EBD37496BEE7255E186E7DC62C93325D6E8066C51
SHA-512:	1C30A964A4A919335D78FF9DC6C9C464678FC5AC27CAFF7DC85F842239E82CFCD2FCC477C4CB09526516FCCDEDA33E854367F05C67454463CA7556294134966B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................5....sBIT....\|.d... .IDATx^.m.eEz...jz,!OSU(...(...x.....]wM31...-.[3.....{......Xp.o.....E@...4.v.>.,=..'...w..l.ca.Xz..[!....PU7..{...z..%_.s."zz../.'O...>.df....ZM.om....o.k....?:s....j 4...... ...@............A..Q...w?.Jg.....-.e.....z....N!.... ...@...... ........")..N..z..ag.Pf...d.~E{..,.f..{..?. ...@...... ...4...V.lJ. p...[v.......Zc..K..N.lf......>.@...... ...@.....6..X.,B} ......?....o.p.=.....~:.?={.l.S.d...@...... ...@....F....J2.@z...j......Yfn.[#..zu0?.`...... ...@...... ....$....6eA ...G...:{hq~....#K.@...... ...@....@e..X.......(xDp.J.....v8.b.....R!...@...... ...@..{.@...@.F......Y.........M\|sq~..a...... ...@...... .2..X-38...o.k{..'.\|Tj....^..)...6{l.^..'yA...... ...@......\|.@..I.. .....g.o1fe.d.C.N{.z#+9>h....\|..?..?yB...... ...@......\|.@..A.< ...;"....o[k..[....lw..Z..7s[.r....... ...@...... P...V.z<....B....Y.....=4., ...@...... ...@.... `.CK...@.#..l0..g..?)..... ...@...... ....$....>e...?.........XG..

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2896), with no line terminators
Category:	downloaded
Size (bytes):	2896
Entropy (8bit):	5.178732324766012
Encrypted:	false
SSDEEP:	48:STkpwlc0a1rudkpwD19pcdRMwmpk6dkpwM1rOkpwS11hIbph/5kpwyw1I:9ed+excdFI9+eeeQSpYeyL
MD5:	AD56E2C6F13E7658BD61BB21A4892E46
SHA1:	C78CEC1B1A008D3E87088AE68557E3F8131D89D7
SHA-256:	DACC45A55655CC56D1B5CF60BEE898F9BCC790C4DC3548C9348CB731486EF943
SHA-512:	7E922A8405028523D16504517812A0376BBD9173B3C6895AFACA0517E44857209B02730F32576493DBD750EE585EDCF46736A9F71F1793637E62C3DE0A5FA878
Malicious:	false
Reputation:	low
URL:	https://js.hs-scripts.com/8564339.js
Preview:	!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hubspotfeedback.com/feedbackweb-new.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hs-feedback-web-8564339",0,{"crossorigin":"anonymous","data-hubspot-feedback-portal-id":8564339,"data-hubspot-feedback-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":8564339,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hubspot.com/web-interactives-embed.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hubspot-web-interactives-loader",0,{"crossorigin":"anonymous","data-loader":"hs-scriptloader","data-hsjs-portal":8564339,

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Fri Aug 13 22:37:33 2021, from Unix, original size modulo 2^32 69465
Category:	dropped
Size (bytes):	22154
Entropy (8bit):	7.991444543849672
Encrypted:	true
SSDEEP:	384:B7XSc1KJzb5syBFBxTUQsHJfnUjNK2OjuwjswgDGY2FcfDN8LsXfw3qaN:B7Xneb5sMFHsHJfD2UuwWG3LsXfw3q2
MD5:	660C3B546F2A131DE50B69B91F26C636
SHA1:	70F80E7F10E1DD9180EFE191CE92D28296EC9035
SHA-256:	FD91362B7111A0DCC85EF6BD9BC776881C7428F8631D5A32725711DCE678BFF9
SHA-512:	6BE1E881FBB4A112440883AECB232C1AFC28D0F247276EF3285B17B925EA0A5D3BAC8EAC6DB906FC6AC64A4192DD740F5743BA62BA36D8204FF3E8669B123DB2
Malicious:	false
Reputation:	low
Preview:	....-..a...;.s.....v.]..H.....I.+m....]9..B...rr4.]I..#.N....fn..Z.V........o...".2z......._.8bF$B.".j.7....8.,A..nRVK...jq........,...k.T)ACc..{`....c...m<....~.<;........tB.&...-F..r.C.....R5....3.P..E...>..`T.....X.....z}T&>2v..b5~T".7....<...;./..M.w...p....X'.K.....;.lE\|{.q.".$.g.IV{.. /rb7 ........~.yc.l(F.>...[9.0Z.../...@D..X"....\|~DS.!.../...T3.k.....P..1.~..e).F(F.=..%L ...s.A....E.._.YY .;..m...E.<l...a$....{.((.a~..w..U.Co.....X&kAK....=..mW.E.\. ..u....)...(..;S.lI..%..l..\|...F..DU.nr...f...a=.Z.}......_.C..\L..4...i6.0Q.jxB..R....2d...xp".........3....fH8..Gb2.Z..ll...S....0\|..[W..i...__...N.K..h.......64..H...m.....?1..l.......p.@...Fx$..AK1.....F.;....p2g^X..MbE.S.^.........5..$....h.`.I....V.....w<b..............?...Ib...0......."....u=.n.....,.......o5.....lzF......9..K...O...{..s..^.....U....X^.\|..vT.T.../..i.T.$,.g.....@R......T..T4..w....;ID..z...9...L..2....S.\(<q0...*.}%p...k5..j..Uo.O.T;`I.`..

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (314), with no line terminators
Category:	downloaded
Size (bytes):	314
Entropy (8bit):	5.015960659804554
Encrypted:	false
SSDEEP:	6:AAjYWW4XIbDRWPiI8mgO9lVhnqpmCJ3sdBD0Wb0E+FbMIVnXlsRBGEE4ye:AFlDRWqfuHnOmC6Z0EObPlCwB4ye
MD5:	630911C3ABEFFBBBCB2A96435EBFA79E
SHA1:	C9F33427CBB1362814474620BA73E1F794E5BDCA
SHA-256:	D8B1C973DAF0B559F8F77EDF6CBAD91A2B0BF496FEB54D1BC40D9F0795D1A5A7
SHA-512:	D935D03490213AA231BC8DD437DA56B7A91DF685A9A4084FA203519060DD38BF0525C02B0196DDF4DCFF50C2221670BE7142F4F8C9ACC86A4395F3A10EA7FE09
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/metricool.js?ver=1.0
Preview:	function loadScript(a){var b=document.getElementsByTagName("head")[0],c=document.createElement("script");c.type="text/javascript",c.src="https://tracker.metricool.com/resources/be.js",c.onreadystatechange=a,c.onload=a,b.appendChild(c)}loadScript(function(){beTracker.t({hash:"9c8e9a86903cadee8f71cc30ca9a6bdd"})});

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	758
Entropy (8bit):	5.0960692022447605
Encrypted:	false
SSDEEP:	12:TMHdiO4xT8uCTJgMtjfCqVNMT5jVDf3KyDMKsRTc3pMjfCqhlllVrqC2jfCqhlla:2diO4xT8uQhtjfl0T5xDf3KyDRx3pMj9
MD5:	B6BAE234DD5B6DF89D12CE53C28BA827
SHA1:	DCD1DEBAAA3CC5EFF03FAEE6C7213BA8A23E3C15
SHA-256:	4282339E4666D14B2342DD797A1755397566EE263145370D239D470639757E22
SHA-512:	B500C7BAE9A949B0F62AA446B8D59619EBA84E2E5E85A260EE907555EFAFC56C4A644A90F40BC8FF473F7E9870D07E2B9F17A32A18D99A44F26378DFB613FFD6
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/01/gestion-de-tiempo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g transform="translate(-320 -188)"><g transform="translate(320 188)" fill="none" stroke="#50e1b5" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75" width="38.5" height="38.5" rx="15.25" fill="none"></rect></g><g transform="translate(328 196)"><path d="M0,0H24V24H0Z" fill="none"></path><circle cx="9" cy="9" r="9" transform="translate(3 3)" fill="none" stroke="#50e1b5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></circle><path d="M12,7v5l3,3" fill="none" stroke="#50e1b5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></path></g></g></svg>

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	25938
Entropy (8bit):	5.295349879140903
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYMlfq0cBhnuLev7ZZ/WyYHL:RIT7sZwuvL54WAcl/7ew
MD5:	FB5D9E3D7AEC61E99ECB9632269EDFE1
SHA1:	61D21139FBEE565E3C4F3846E656AA0D5B4B81C1
SHA-256:	0F30D3AB099A7709E01AD74762979206C62ECAE2F6CAAB3E8474305B6B5CBE14
SHA-512:	8DBD6028CEAD30EA634331BD2203B2076806D617AAE7D3B835E8079ABEE8C7317A85B515D5F7DB464C05D2995840FF7E3F7165B4DAE85D22213DC2ED5E37F3D2
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	25674
Entropy (8bit):	5.293975510042379
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYcFaFoJP5GpZqKYTQUmk:RIT7sZwuvL54WAcl/v
MD5:	8D58FD645982D98DC480E89D3A5117B9
SHA1:	35AB71F5A7112480B671B20FEB42C55C678536B6
SHA-256:	D5291E5523F3442DA50DD48D936F3260DEBC711FA2ECFA706F2BA678B9E8F593
SHA-512:	9FB264FF879272175BF73AA0B509671D981C0C314C967586D3A935B06B5780B06E463346D3B8ED046F89B36ADEE3A20E301FE3DD2C59C4E0D68AB83AE6268C1F
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	29478
Entropy (8bit):	7.979188367856902
Encrypted:	false
SSDEEP:	384:TwTApWeUswgttXVKiTwNkyAJjitTH7GW1zfNQSQEJGzoo73v/gpz4sZ6Zlnzf0RG:UTApWcXkJM9Q+YzfNQSQ+GT733szE
MD5:	0FFE98F2F4663C8536900AA4580D00A1
SHA1:	9A57A3FABFCA1062C05533594D270D08A8F92EFF
SHA-256:	F18C07BEC4C748E5A048DC5A023FAF2AED8AB86E85514DE18ABB8BEF6D42BC12
SHA-512:	74120AAB4DD641AC4151BAFC78762B84BD4BE7F5CB63855CAE3A4ADF440A9401ED5E72FE0D94C7F70F33B3FA862CB3B9DABE7F671530BAD7912A41C3B54377D7
Malicious:	false
Reputation:	low
Preview:	RIFF.s..WEBPVP8X....0... .....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.3...$.m.05..."b...@..K.;.f..m.ZP..d...n.H.DZ...`....,.. ...YP.........Q.Q"...z...e[........,...[m..'..V..N..AN..tp... ........"..'.p.......8....m..F.(...kz......._.K.;_.....~j....4.........P.MeP.M..#..:..u...._......MqUL....R.I....@....f......T^..N.=.............Q.J.-..L.T?._}?.<..=L7D..R...a..WI.&$lw.j-bpC.H.X..V....LE.jG f....=...v.t.{94.5..d...Z......j.......1h.i1.3u.pS{.....-]z...^..l.o/..n....9l0.[$....W8?...`a'Qd......H....H........YKT.....2{.a..(.XHG) .-...b.m.Z._.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	25938
Entropy (8bit):	5.295349879140903
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYMlfq0cBhnuLev7ZZ/WyYHL:RIT7sZwuvL54WAcl/7ew
MD5:	FB5D9E3D7AEC61E99ECB9632269EDFE1
SHA1:	61D21139FBEE565E3C4F3846E656AA0D5B4B81C1
SHA-256:	0F30D3AB099A7709E01AD74762979206C62ECAE2F6CAAB3E8474305B6B5CBE14
SHA-512:	8DBD6028CEAD30EA634331BD2203B2076806D617AAE7D3B835E8079ABEE8C7317A85B515D5F7DB464C05D2995840FF7E3F7165B4DAE85D22213DC2ED5E37F3D2
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/829891824052519?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127%2C157%2C223%2C224%2C222%2C178%2C137
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65348)
Category:	downloaded
Size (bytes):	71750
Entropy (8bit):	5.119130414843615
Encrypted:	false
SSDEEP:	1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo
MD5:	C0BE8E53226AC34833FD9B5DBC01EBC5
SHA1:	B81EF1B22DE26AF8A7A4656F565FBC91A69D7518
SHA-256:	5FBAEB9F8E25D7E0143BAE61D4B1802C16CE7390B96CEB2D498B0D96FF4C853F
SHA-512:	738DAA4D2C3FC0F677FF92C1CC3F81C397FB6D2176A31A2EEB011BF88FE5A9E68A57914321F32FBD1A7BEF6CB88DC24B2AE1943A96C931D83F053979D1F25803
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/css/animate.min.css?ver=1.0
Preview:	@charset "UTF-8";/!. animate.css - https://animate.style/. * Version - 4.1.1. * Licensed under the MIT license - http://opensource.org/licenses/MIT. . Copyright (c) 2020 Animate.css. /:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:1}.animate__animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-duration:var(--animate-duration);animation-duration:var(--animate-duration);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;animation-iteration-count:1;-webkit-animation-iteration-count:var(--animate-repeat);animation-iteration-count:var(--animate-repeat)}.animate__animated.animate__repeat-2{-webkit-animation-iteration-count:2;animation-iteration-count:2;-webkit-animation-iteration-count:calc(var(--animate-repeat)2);animation-iteration-count:calc(var(

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62794)
Category:	downloaded
Size (bytes):	75331
Entropy (8bit):	5.418017137406179
Encrypted:	false
SSDEEP:	1536:zfeebkbR3g0L7rQiG3EhCoVqF17QRA3yPv5uxL5lH757YMiLpGTD2dX7c4MYECgM:uuxVlV7VT6Bw4zK4
MD5:	496F65F7E4116CBBA9D2347C44A1F5AC
SHA1:	65EC28B1BD3A5CD5DBAFEFE289D758A7A9785507
SHA-256:	A349D89CFCEB05F93214FB7A4461BFBB23444C5E67A6CEECBBE0AD0245B2FA9A
SHA-512:	F035C6B77A03D6D1E3CE8E588A48207A24C544A30CD4367D4A7A39DE43A8167CBD193AE6CA459608F80D4E900A2407DF326495A9C8139FB23C8A4264BBA34579
Malicious:	false
Reputation:	low
URL:	https://js.hs-banner.com/v2/8564339/banner.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {"try.sesamehr.co":[{"id":249824,"portalId":8564339,"label":"test","enabled":true,"configuration":{"allUrlsAndLocations":false,"path":null,"targetedCountries":["CO"],"targetedRegions":[]},"policy":{"type":0,"text":{"notification":"","acceptLabel":"","declineLabel":"","disclaimer":"","modalText":null}},"legacyCustomization":{"position":0,"accentColor":"#ffffff","showCloseButton":false},"gpcSettings":{"enabled":false,"notificationText":""}}]}]);._hsp.push(['setCustomizationSettings', {"dev.sesamehr.es":{"bannerColor":"#ffffff","bannerTextColor":"#15295a","bannerSettingsButtonTextColor":"#15295a","bannerWidth":{"number":67,"units":"em"},"bannerPadding":{"number":2,"units":"em"},"bannerCorners":0,"bannerButtonCorners":2,"bannerAcceptButtonStyle":{"color":"#425b76","textColor":"#ffffff","borderColor":"#425b76"},"bannerDeclineButtonStyle":{"color":"#425b76","textColor":"#ffffff","borderColor":"#425b76"},"positi

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1862
Category:	dropped
Size (bytes):	985
Entropy (8bit):	7.7603235900814145
Encrypted:	false
SSDEEP:	24:XZBxjKqQWJeVkw+aaY+h3RDV7MzcWNLhGVN0WN:XQ5lWma99Rp4zc+I30WN
MD5:	0541E0FF8702ADADFD34EE8C298AFBDF
SHA1:	C10DA432FDB8736622C8C1FB7708B2599CAE882C
SHA-256:	967903BE4F14E85FE685577417CF83D53B5363E5F02BAA3B2242C19A7030B652
SHA-512:	3892FCE6456735D8C11BA93EC292019AC990CA040A5D5F2C1579E856A607769E3E956163B51E00982A785990D220D27DE60CC4F684648CC5326FF1FBEC2678CE
Malicious:	false
Reputation:	low
Preview:	..........mUQo.6.~.p9. -Y.,.I#.F..E.e.].T..+.mv6)P..A...Q.$g..u....(..Tf.V..$...V.J.}..n.-@oG6P.$w.j...._AdZq.I.@.....Ey7....t...L\|;H....._.].hKYm.VF....fq./.7..:...V.-.fW.A.28...=..Y.<L-G....A.}.=hmhs4B..H..)x.c....@.x..&,.`....N.,..W....{e).Q..K"...6..TN)L..`@.......h..M...Rx..5o@..D....v.uZq.....\Bn...n.L.T.+......j.G.u.......26.C9.....A..d{a....Y.27w..$...W.Z.d.GoY..rW0.!.G...%T....i..=.....)..C.-.$^.].......l..9...h..B.L.....p.6..Ok..hd...vt...7.f..l.......Z5..HO.t...^;.t...{.RG..T..V..x..].."I..C..U.p3Ux....8\\...r.^.....e. .".....+.....A....:.....p.oN.S...M...F..x..............G..#....J..........a.<..O..C...3.....([.q.....i-Uc.G(..t..._8SA...W...K...aAY..m..f.K.........GvV.nc.JJ.w..]w....N....Q....hN.c.+.]..#..x.~V%.w;,.]._..8.GY.j.:.N..^.Va.....<......3(.rk.I.x.].~.L&s......w-U..T>..{.".x..QS........}...\l..X.VC.^...Tx.+X_..kph..+.#"....A..Q,..N.W....)........Z.....;...p.......R..&...2.$.W...f..G..L...(pp.?..G?..;&oF...

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	653516
Entropy (8bit):	5.114255140317247
Encrypted:	false
SSDEEP:	3072:wKT02ngi2ir19PjpATLf3d2H/7PaqqvQtO0:dTV7jx/7iDvQ9
MD5:	5FA0A7531DE121F3E0D7981F89991F5E
SHA1:	58F68C07988238A4CAC4F71CE6B17E292960B32B
SHA-256:	32F8D4E589755F184FBCCBD76A32EC12180534B48FA2C470A3CE87CABA24FEB3
SHA-512:	9F50FDDB7FF48DE680AB639F666E2EEC8A462ED4FC8024997E986D7D7D3ECC3D253C289AA5581400707923D1D4A011C664F46B582C295FFC5D79057F1D2C00AA
Malicious:	false
Reputation:	low
Preview:	{"gvlSpecificationVersion":3,"vendorListVersion":74,"tcfPolicyVersion":5,"lastUpdated":"2024-10-03T16:07:42Z","purposes":{"1":{"id":1,"name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here.","illustrations":["Most purposes explained in this notice rely on the storage or accessing of information from your device when you use an app or visit a website. For example, a vendor or publisher might need to store a cookie on your device during your first visit on a website, to be able to recognise your device during your next visits (by accessing this cookie each time)."]},"2":{"id"

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	dropped
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	4.592519368188936
Encrypted:	false
SSDEEP:	24:2diO44l/7tzITo0TMpqdWYiuzbfKk4ZbHkaeOJG4cPnhllo/:c35ztzITEpuPKk4ZbH/eGGE
MD5:	A07D45672BBAC0167027C12397DBB0B1
SHA1:	00E2DF5533E88826C0F993B47731D234C36EE85F
SHA-256:	88A941E511F80F8AC1EA678B4DF2AE37603E664D618E1326E2AE73B67FDA13FC
SHA-512:	5EEECC2F7A3DA108333CF4A5D367F2316B8F79DC6110AF8BB2BCDB42CB36866A40E398F05AB35BB124FE8E9E7DA68B2B96C5A6D89E556BCB093676E9D9E9C384
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M21 20L18 18V13M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.6478 9 16.8181 9 18Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	25555
Entropy (8bit):	5.291121785958594
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSY6Q8EJJ2fq3fBxn+OUvz:RIT7sZwuvL54WAcl/X
MD5:	693E38B101D18D74FA19CAB00BD626E5
SHA1:	63AC4C334E4B33EA0B76A56708750198668A1359
SHA-256:	0B17C0BBD3EB9135F06FDADAB95CCB76572DC0FE9E60558FEB13A741E350A44E
SHA-512:	B17826EB2556F22DBA7738257E6A0E98D327B1450EC7518B19C3349389BB7730A004FA72B192C601ACF5C010585AAD935DF62C48A9E5FF5D508D7A5DC63B4BCE
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	84671
Entropy (8bit):	5.280749760123156
Encrypted:	false
SSDEEP:	1536:8HyXWWcWdcBNieNO8DDejT5UKxfIzbFWX7Qp64Ai1n4aBgcl8705eZGXm:u8jWKxfI3+7v
MD5:	6B513BAAF4C77CDDC702F596C3DD62D9
SHA1:	3419650A06EE0A9BF9398EB3CF6792B202E6432C
SHA-256:	6B0FDAA32FEFFBDBD15BDA3619624E0AA8E1D647FD720E31B7645654E7FB551E
SHA-512:	F690B93FFF5D046F5EDBB806C7D09EF3EF89713F972AE613AFCC66A20A1CCBF0B520FA87AF973984D98B539CFC6E5AFA3A99F237D60B2DB155D8C359858FBF21
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";const e={RECEIVED_ANALYTICS:"HS_CTA_PARENT_RECEIVED_ANALYTICS",DEVICE_TYPE:"HS_CTA_PARENT_DEVICE_TYPE",PROXY_ANALYTICS_FN_CALLBACK:"HS_CTA_PARENT_PROXY_ANALYTICS_FN",INIT:"HS_CTA_PARENT_INIT",SHOWING_CTA:"HS_CTA_SHOWING_CTA",SEND_EXTRACTED_STYLES:"HS_SEND_EXTRACTED_STYLES",STARTED:"HS_CTA_STARTED",NAVIGATE_PAGE:"HS_CTA_NAVIGATE_PAGE",CLICK_EVENT:"HS_CTA_CLICK_EVENT",CLOSE_INTERACTIVE:"HS_CTA_CLOSE_INTERACTIVE",HAS_CLOSED:"HS_CTA_HAS_CLOSED",NEW_HEIGHT:"HS_CTA_NEW_HEIGHT",DISPLAY_CALL_TO_ACTION:"HS_DISPLAY_CALL_TO_ACTION",PROXY_ANALYTICS:"HS_CTA_PROXY_ANALYTICS",PROXY_ANALYTICS_FN:"HS_CTA_PROXY_ANALYTICS_FN",SEND_FORM_DEFINITION:"HS_SEND_FORM_DEFINITION",SEND_CTA_CONFIG:"HS_SEND_CTA_CONFIG",SEND_EMBED_CONTEXT:"HS_SEND_EMBED_CONTEXT",RECEIVE_FILTERED_STYLESHEETS:"RECEIVE_FILTERED_STYLESHEETS",SEND_STYLESHEETS:"SEND_STYLESHEETS",RENDER_RECAPTCHA:"RENDER_RECAPTCHA",EXECUTE_RECAPTCHA:"EXECUTE_RECAPTCHA",RESET_RECAPTCHA:"RESET_RECAPTCHA",RECAPTCHA_SUCCESS:"RECAPTCHA_

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (353)
Category:	dropped
Size (bytes):	1823
Entropy (8bit):	5.309320673200618
Encrypted:	false
SSDEEP:	48:fPB/KiQwJ439Jzlq9O62FJahtppCQdBSib9V5pt:f5/DA9uAqpg2BBb9V5n
MD5:	6C7A4968D1D6A8A676EC0E3A27918D49
SHA1:	6561EE980210563169A9D1EBBBAFCC75AAD3F210
SHA-256:	5C322EDAC8F24BAB980CAF90A5E8E7D9EDB2497DD2D2DF21C403DF5D79FADD09
SHA-512:	D07B36AE50B8B91422C2E9D57EF7E73D0B78E9B8244CFCC8BF844F0CA2BFCB312B230480E7BC15254E6F3E8F0F8EDC031EB06CBBBCCDA98AB24105296058BDAC
Malicious:	false
Reputation:	low
Preview:	(function(e,t){var n=e.amplitude\|\|{_q:[],_iq:{}};var r=t.createElement("script"). ;r.type="text/javascript". ;r.integrity="sha384-tzcaaCH5+KXD4sGaDozev6oElQhsVfbJvdi3//c2YvbY02LrNlbpGdt3Wq4rWonS". ;r.crossOrigin="anonymous";r.async=true. ;r.src="https://cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js". ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){. console.log("[Amplitude] Error: could not load SDK")}}. ;var i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i). ;function s(e,t){e.prototype[t]=function(){. this._q.push([t].concat(Array.prototype.slice.call(arguments,0)));return this}}. var o=function(){this._q=[];return this}. ;var a=["add","append","clearAll","prepend","set","setOnce","unset","preInsert","postInsert","remove"]. ;for(var c=0;c<a.length;c++){s(o,a[c])}n.Identify=o;var u=function(){this._q=[]. ;return this}. ;var l=["setProductId","setQuantity","setPrice","setRevenueType","setEventProperties"]. ;for(var p=0;p<l.length;p++){s(u

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	768
Entropy (8bit):	5.347065699520557
Encrypted:	false
SSDEEP:	12:UNmFH43O6ZWFh6pSKa+WRzxcb65wCgDrqAFH43O6ZWFh6pAAKayVVey90H1BGuLA:3H43OYQ3RVc+u/rH43OYQBRwy96DGSSD
MD5:	0E86397A0489591D6A4CFA0812CA006C
SHA1:	45FF24A6542786B6082CC39FECFCF88BC8DC8BE1
SHA-256:	5CAE861CE808DBC880C74C0FC1B34073E424AA856477DDED4FECD583A34210B4
SHA-512:	2687A1716685E35706FDBFCAE58684EC8E71085FFAB305B25647067A379A425B6E38F2131D682315CAB04B883C71C3DAFA558F242E07FE3E9CE367A3B8C9EB33
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Albert+Sans:wght@100..900
Preview:	/* latin-ext /.@font-face {. font-family: 'Albert Sans';. font-style: normal;. font-weight: 100 900;. src: url(https://fonts.gstatic.com/s/albertsans/v1/i7dOIFdwYjGaAMFtZd_QA1ZVYFeCGg.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Albert Sans';. font-style: normal;. font-weight: 100 900;. src: url(https://fonts.gstatic.com/s/albertsans/v1/i7dOIFdwYjGaAMFtZd_QA1ZbYFc.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60822)
Category:	dropped
Size (bytes):	73825
Entropy (8bit):	5.336916242384151
Encrypted:	false
SSDEEP:	1536:q70PxPPPPPPPnzCfikTUWcgesAichUrXHSqjaEJwVonZXYNtWu2scVDXYRClzlIP:DND2LlzlIgQX28XsYce
MD5:	A7CF845FB8FAF8CB40C0C164987E630A
SHA1:	BFB418D3FE9FFA95DEC6F1D67FFA9542E745622C
SHA-256:	9251EEE5D3F9F7770FBBC2ED1EC5BC5519314901A33C79D007B1EA5C4A4FDFCA
SHA-512:	7E4F9F8F0965A1F47BBE7BA175D0C0303BB7B61383EFA660CDA9CF116CFB481AF574256B5471BF313F50A8B7A1777CBD172F1EBA1EE27E5395DEFF9B0B6F0C7D
Malicious:	false
Reputation:	low
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.993. * Copyright 2024 HubSpot, Inc. http://www.hubspot.com. */.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 8564339]);._hsq.push(['trackPageView']);._hsq.push(["trackClick", "button#hs-cta-wrapper-aa3f584a-68bb-4804-8a3b-27f2ca90dfeb.hs-cta-wrapper.self-center.normal-case.flex.mx-auto.text-center.text-base.text-white.rounded-2xl.py-3.px-6.font-bold.btn-cta", "pe8564339_blog_register_button", {"url":null,"trackingConfigId":15548470}]);.try {..} catch (e) { _hsq.push(['log', 'customJsError', e]); }.try {..} catch (e) { _hsq.push(['log', 'customJsError', e]); }.try {.// Replace 'false' with your custom logic that returns 'true' when the event should be tracked..if (false) {. _hsq.push([. 'trackCustomBehavioralEvent',. {. name: "pe8564339_app___application_installed",. properties: {. // give each property a value so we know what they mean. customer_uuid: null,. item_name: null,. sesame_

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	4.699480498185638
Encrypted:	false
SSDEEP:	24:2diO44l/OeH7POVrWBQ880hNXJMbxhD+78Pnhllo/:c35XyL0nXmthD+t
MD5:	D6FE620D4E43DF62A1CAB502BE68AF51
SHA1:	49DF6FE0F6556357D865D8405E75449459D272CF
SHA-256:	B16A462583A2548AAC6D2630D85C4A4D114B44D399943912916CA0206183AB27
SHA-512:	09E584365478795B856913150B390AF9A3A60802C9692A21EAAFBD2F5E25458502AFFCD4453D05F42DBC8AE7CEAB0FD2783352DB0AB511F98917F8DBF664247A
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-12.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M18 15V19M18 22H18.01M16.363 9.59101L8.25699 23.125C8.08988 23.4144 8.00145 23.7425 8.0005 24.0766C7.99954 24.4108 8.08609 24.7394 8.25153 25.0297C8.41698 25.3201 8.65555 25.562 8.94353 25.7316C9.2315 25.9011 9.55884 25.9923 9.89299 25.996H26.107C26.441 25.9922 26.7682 25.901 27.056 25.7315C27.3438 25.562 27.5823 25.3202 27.7477 25.03C27.9131 24.7398 27.9997 24.4114 27.9989 24.0774C27.9981 23.7434 27.9098 23.4154 27.743 23.126L19.637 9.59001C19.4664 9.30851 19.2262 9.07575 18.9394 8.9142C18.6527 8.75266 18.3291 8.66779 18 8.66779C17.6709 8.66779 17.3473 8.75266 17.0605 8.9142C16.7738 9.07575 16.5335 9.30851 16.363 9.59001V9.59101Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9136), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	238675
Entropy (8bit):	5.105152113422078
Encrypted:	false
SSDEEP:	3072:A0q7Qyz62RiNaK49WDVAcnbVu29RJsuVaUnRYaDWeF0:BU29nsuVaUnRYaDWC0
MD5:	45885187C7547C85DE324F895AB20422
SHA1:	927BC953C7F151BE50AAFE18B89F5ADCA900235E
SHA-256:	5920D4A3A142A5C388A7A63EED3025C220F041A02749E29215AAFA9B7F87EA47
SHA-512:	17D1861CC2777801A80F4949E81037296D082B9E66D0B43DAF1F7FA2B9825E6324C457CCC3D675E14C35A423FC612CD2DF98DA0333FBCF99B72109C1CFF8BADE
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/
Preview:	<!DOCTYPE html>.<html class="no-js" lang="en-US">.<head>. Google Tag Manager -->. <script async>. function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[];var savedConsent=localStorage.getItem("consentMode"),defaultConsent={ad_storage:"denied",analytics_storage:"denied",functionality_storage:"denied",ad_user_data:"denied",ad_personalization:"denied"},consentMode=savedConsent?function(){try{var e=JSON.parse(savedConsent);return e.ad_storage&&e.analytics_storage&&e.functionality_storage?e:defaultConsent}catch(t){return defaultConsent}}():defaultConsent;gtag("consent","default",consentMode),function(e,t,a,n,s){e[n]=e[n]\|\|[],e[n].push({"gtm.start":new Date().getTime(),event:"gtm.js"});var d=t.getElementsByTagName(a)[0],o=t.createElement(a);o.async=!0,o.src="https://www.googletagmanager.com/gtm.js?id="+s+("dataLayer"!=n?"&l="+n:""),d.parentNode.insertBefore(o,d)}(window,document,"script","dataLayer","GTM-WWBXHVT");. </script>.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	7.370243142337166
Encrypted:	false
SSDEEP:	12:6v/7gVvZp4Lp8J2tIriPh62t/TAcZC0OuP7chc8XQ6Veb2HvtcIdOojtXN/wBINo:X0sTAv/TpZC097aQ60ylcNojtXNXIhN
MD5:	C73DE655D287ECE6CAE7831D3CF3E504
SHA1:	CDD531C3A446165685550EAC316E464FA1C83025
SHA-256:	99105E30673117F420DAA221ACB772DFDBB9F903F9E0AA56A1C2839B3407AA70
SHA-512:	78EB7402FBC21A47B6732D439BEF3FB266996B2B68D80B4050EA1E1D2376423714E36C9EE7D8A2FE3EA24F55E0CB1EDA65AAA10A208BBF968BCF42BBCA89640E
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/united-states.png
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....DPLTE.......KW....Iz.......KU....}..}..ir...l^.....R[.KUrH..OZ.KU.KVYH....II.ZG.JI.JL.JN.KH.KL.WH.KG.NJ.OK.PL.RO.SO..KUAG.BG.BH.BH.CI.DJ.EJ.EK.EK.HN.IO.JP.JP.KQ.KQ.LG.LQ.LQ.LR.MG.MR.MS.NS.NT.OU.PU.QV.QW.RW.SX.SY.TY.V[.V[.W\.X].Y^.Z`.[`.]b.^c.bg.ej.fk.gl.hm.jo.ns.os.pt.pu.rv.rw.sw.uy.vz.w\|.x\|.{..\|..\|..~........................KU~.}....&tRNS.!)BIO...................................+....IDAT..u..7.`......JK....U.\.(!ED)...%......9...0<6.L.v./Q.hC..\.I]..Yo6..g...'k....^=..B.F.;.G.L.....80.X.^S.J...0.$...c....~....t.$...V.t.t...jAMi......y.......08.....U.7..@t.......s..rP.W.X[.r.#rxQ...ayi>.A............SNH.)...)...n"$.v_....}6..5...E.....\|...G....IEND.B`.

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	288
Entropy (8bit):	6.089234388823977
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKccPKs6tt44RNcfwlP/+mtV0vXkdld8up:6v/7A/0vZcijHTlX+mtVWXkdF
MD5:	468970F001D3AAE0263508BAE18E41E3
SHA1:	DD5205A1B815275E0DD609FBE9623D2B54DB4B91
SHA-256:	FE5E5C6EBBF52F1B1475087C584A415836C2C084B2CF45E7E883CF4070ACD523
SHA-512:	151AA42E89E7B2C2C5A6D6E151DDC782B6C8E2A55B5A7FE92E71B0B39F5458EB1941BA7413744B6C2DCE36A72F8E02CC97546AA576BE667A9080343C6619D151
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....0PLTE...r...JWs...JUt...KTs...KUs...KUs...KUs......KU.=......tRNS.&&]]...............IIDAT..c`........Hb``.{.....A......C,...........p...?.8(.E....P... .A..E}..z.6t....IEND.B`.

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	408
Entropy (8bit):	6.838024346646856
Encrypted:	false
SSDEEP:	12:6v/7gVvZ51bRUklBZ5BbyjahvcKGm8YhN:XdSkvZwq0KGyhN
MD5:	242EF61AB1144A630250E314895BF305
SHA1:	DC51014BE8B91F5E4314C8F09AA48CE97F207034
SHA-256:	A23B031CA756E2835B7976FD9ED4D460F3FFE1C38CF295CF4F759A7AFB401810
SHA-512:	FDE9F91AF067F511E4C7F92FB2CFA3A9E2399DDABEDAF11875A90EA36417324D0728A2F6A5E0F57101CAD387938412227CE5638230BC208C346A1CE342EE89CD
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/chile.png
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....cPLTE.......JW.......JU.......KT....KUqu.....KUX].....KUAG.BH.GM.IO.X].mr.........................KU"\|.L....tRNS.&&F]]............\|{T....IDAT(S..9..0.D.F.#....p.S:.(.q..?.4.8...$EDD.,....... .......d..@RT$9Mw......B..."..!.Hr....]7..y.'8.._....tp.:X.R.K.$........Y.....;_..i.....IEND.B`.

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	133550
Entropy (8bit):	7.9781177382376445
Encrypted:	false
SSDEEP:	3072:/zlYmn2K3Kc+kdRQoadQX6rjxA1sTcAgk6ue:umn2K3v+cR0do6zcrk5
MD5:	D1C01C4A40A6A77960E4EDAFA8BA1784
SHA1:	651E527D977CB56ACA2B920C4FEE9837D536DECB
SHA-256:	E64B2F7E237B723424FA53773C68148931B4D3379A1AA6AF3C7CC77109AEE765
SHA-512:	7E5A28D172FA6BC0D668AA0959FC423F08D391602D6D46C1893F68D0D977635A80E49C7CA6070FDB5820979641EDECE8F43E12EE590C7B3B7F550B971BED6132
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/elipse_4853.webp
Preview:	RIFF....WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.....$.m#9......g.1..~g......a......]..n..Ss.P.Q.m #.k.A..if....!"$i..#.n.J.s..?s...4`Q.......(.6.\|.....Fr$....H.....?P .......$I.lK.Z..3..s.@....s.<.p#..+I..... ..{g..H+..$Ir$....Y.q....n..9..X.......AD@B$[h.!........w.m.n$..FT..AR....W....W>...k....J..@Dxbm[.$I....\|R.D.\..%f.B2.-I.j.m.2&..'...}03..g.".n.u<.,E$"(A.$....i`sD.b.`0.{...I.m......F....9u......@..=..p.Ij..`.`...zY.m.ms.?P5W......H./......0..D$I/..O.O...................................................

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	533
Entropy (8bit):	5.0047613493532355
Encrypted:	false
SSDEEP:	12:TMHdiO44lWejunDxQMbYzi8eSDYSXFeamUA5PVQ6hllo/:2diO44l/OWMbEeqYMoPnhllo/
MD5:	2724668F927C12A575E89918DB3ECFA5
SHA1:	8AC91E625F05FCE710C3603500C2BB5B015F5ED7
SHA-256:	007FFE391F0D72AD3B72CDECF55B4D5125F532D63D933A7FA46EE69F087CC32E
SHA-512:	370CB4A39FAE5E3506692BC4A40BF445DBFFE5B7C79B841B15F89B4928425F1C8BB1D6DAD1761F9F0BE98AD7695C08458B01B3C7ACE842162F855EF7E792E11A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M18.5 27H12C11.4696 27 10.9609 26.7893 10.5858 26.4142C10.2107 26.0391 10 25.5304 10 25V13C10 12.4696 10.2107 11.9609 10.5858 11.5858C10.9609 11.2107 11.4696 11 12 11H24C24.5304 11 25.0391 11.2107 25.4142 11.5858C25.7893 11.9609 26 12.4696 26 13V18M22 9V13M14 9V13M10 17H26M22 25H28M25 22V28" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14037
Entropy (8bit):	3.8312628358332574
Encrypted:	false
SSDEEP:	384:nnofWZr9kS6W92abJhZGqJOhnrbATRWaPrT/:06a0RbRORbA8s
MD5:	2F30FE456AD8271393AED398808032FB
SHA1:	833B5BCD37F597581F488CA9FA696C3A141E8D93
SHA-256:	9F13E1351D6D5316972F17FBB3E1697D1A2687A1A1FE3EC32907A035759F6C57
SHA-512:	9A8E2AE8FFC35AE222CE7DDECFEBD3334857670E9695DE14174723747A548CBCDB18218C693646161711001DF49333E67B5F64C11533A810103FDA6A48EE5792
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63781.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="189" height="24" viewBox="0 0 189 24" fill="none"><path d="M63.222 7.27605C63.2127 7.43048 63.1965 7.5849 63.1965 7.73392C63.1965 12.3936 63.1952 17.0522 63.1927 21.7098C63.1927 22.7908 63.1865 22.7908 62.0831 22.7908C61.2885 22.7908 60.494 22.7955 59.6995 22.7908C59.0045 22.7854 58.9397 22.7182 58.9219 22.0187C58.9219 21.8573 58.9219 21.6952 58.9219 21.5338C58.9219 15.1589 58.9201 8.78405 58.9165 2.40919C58.9165 1.08958 58.9065 1.09654 60.2145 1.10503C61.5441 1.11352 62.8745 1.10503 64.2042 1.10503C65.0427 1.10503 65.1169 1.15135 65.4149 1.92581C67.1311 6.3842 68.8484 10.8423 70.5667 15.3002C70.6213 15.4731 70.7261 15.6257 70.8678 15.7388V2.00612C70.8678 1.12896 70.8678 1.12202 71.7628 1.11815C72.6893 1.11429 73.612 1.13746 74.5355 1.11815C74.9911 1.11043 75.1533 1.2726 75.1471 1.74206C75.1316 5.59277 75.1394 9.44347 75.1401 13.2942C75.1275 13.481 75.1604 13.668 75.2359 13.8393C75.3071 13.7497 75.372

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.141691710389104
Encrypted:	false
SSDEEP:	12:6v/7gVvZ6R5x1r+srvNYYu8WXYxzvr6CpW4onqP6CZohRfz:XQPxvXuxItPpW4onBR1
MD5:	B009BE2B7379525C382E1328403F5102
SHA1:	EC5892BBDD4F9AC90F84EC0DFD4899F30C8275EF
SHA-256:	9C0082DDB8939DD310EFC1AE71E2611C22D9C72F3D23DFF5E1C342F4BF81E9E3
SHA-512:	FF7273F694A7D7727C6B9D0046AF4E40D15B3CC9D9DBE32D5FC5709A774D56EEFC81CDB170E1E972C8B588D41CEAD7A77FEEACC4EF68D30A12EBA638B6734B37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE...r..s..t..s..s..s..AG.EJ.HL.IN.IO.LQ.NS.PU.QU.QV.RX.U[.V[.X^.Y_.Z_.Z`.hm.im.s..tq.\|................................................d..f.....X..Y..[..Z.......tRNS.&].....w&}....IDAT(.u....0.E......R.]Q...o.P.8...9.....,.%1.q..Dl/..g...?.......N.p..y.y.w...qd..CV.&e.....u-M...E..I.M#..o....NH.....W........<.je..O.!.//$Z.,.\|C.=zUk...g.....t..p..4.~:o...bk4'f..h..n..J...j....}....)A;........IEND.B`.

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Fri Aug 13 22:37:33 2021, from Unix, original size modulo 2^32 69465
Category:	downloaded
Size (bytes):	22154
Entropy (8bit):	7.991444543849672
Encrypted:	true
SSDEEP:	384:B7XSc1KJzb5syBFBxTUQsHJfnUjNK2OjuwjswgDGY2FcfDN8LsXfw3qaN:B7Xneb5sMFHsHJfD2UuwWG3LsXfw3q2
MD5:	660C3B546F2A131DE50B69B91F26C636
SHA1:	70F80E7F10E1DD9180EFE191CE92D28296EC9035
SHA-256:	FD91362B7111A0DCC85EF6BD9BC776881C7428F8631D5A32725711DCE678BFF9
SHA-512:	6BE1E881FBB4A112440883AECB232C1AFC28D0F247276EF3285B17B925EA0A5D3BAC8EAC6DB906FC6AC64A4192DD740F5743BA62BA36D8204FF3E8669B123DB2
Malicious:	false
Reputation:	low
URL:	https://cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js
Preview:	....-..a...;.s.....v.]..H.....I.+m....]9..B...rr4.]I..#.N....fn..Z.V........o...".2z......._.8bF$B.".j.7....8.,A..nRVK...jq........,...k.T)ACc..{`....c...m<....~.<;........tB.&...-F..r.C.....R5....3.P..E...>..`T.....X.....z}T&>2v..b5~T".7....<...;./..M.w...p....X'.K.....;.lE\|{.q.".$.g.IV{.. /rb7 ........~.yc.l(F.>...[9.0Z.../...@D..X"....\|~DS.!.../...T3.k.....P..1.~..e).F(F.=..%L ...s.A....E.._.YY .;..m...E.<l...a$....{.((.a~..w..U.Co.....X&kAK....=..mW.E.\. ..u....)...(..;S.lI..%..l..\|...F..DU.nr...f...a=.Z.}......_.C..\L..4...i6.0Q.jxB..R....2d...xp".........3....fH8..Gb2.Z..ll...S....0\|..[W..i...__...N.K..h.......64..H...m.....?1..l.......p.@...Fx$..AK1.....F.;....p2g^X..MbE.S.^.........5..$....h.`.I....V.....w<b..............?...Ib...0......."....u=.n.....,.......o5.....lzF......9..K...O...{..s..^.....U....X^.\|..vT.T.../..i.T.$,.g.....@R......T..T4..w....;ID..z...9...L..2....S.\(<q0...*.}%p...k5..j..Uo.O.T;`I.`..

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	318
Entropy (8bit):	4.573499158477497
Encrypted:	false
SSDEEP:	6:z8HpULECImZTgfMjvF3CCd8M7RV3Ci+vdlV7dC2Lp9cSoNE8igiiKd:zAMfjvFRCMVVyBzV7wutoNE8f8
MD5:	A5C25A74301C5C7527214EE04A36D8AF
SHA1:	1AD16CBDB8A2BBB4176AE6B489D53C20FBB1B60A
SHA-256:	74788C049EB53AD055DC4015C1CD2D66241918EE2528DD9B7F02252A643FBD9D
SHA-512:	5ED408E6673CA4677DFCA3951FFD2EBB7328793257A13B4DAEE6E067AB7B49F7141F402D70120C98E90B4C6FF2533B1B98ECCE0A1703815C90F67609EBD671C2
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/custom-privacy-link.js
Preview:	jQuery(document).ready(function() {. const interval = setInterval(() => {. const $privacyLink = jQuery('.qc-cmp2-expandable-list li a');.. if ($privacyLink.length) {. $privacyLink.attr('rel', 'nofollow noopener noreferrer');. clearInterval(interval);. }. }, 100);.});.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	16652
Entropy (8bit):	7.988306051450174
Encrypted:	false
SSDEEP:	384:o4EvObPscMh4Zl2S8yJ8r92SYvomK9dCydZfvGu/73gmm:lD4mZwSPJ8sSYTK9drZfvhG
MD5:	8C4552FDE9841A69389D7C2F6D69969B
SHA1:	D2F71F551B19DB4FB751C9721721CC9B827A068D
SHA-256:	3A5B6C32397A67D0EC52AF0AAE2AD8FC626D1206FC68A495FAA9DB8385D7EF99
SHA-512:	D22F9ED31BA11A98367436D111D9C4A3E44C7EF6530F436AD20EC9E150185372442A396579F2EEF0E8835FCD0088A6D5B6518EB16F107834C1BD04064C541EE5
Malicious:	false
Reputation:	low
Preview:	RIFF.A..WEBPVP8X........>.....ALPH/.....b....$..a.4..8.....ZW.ve.d....O!y......Kz.O/.4V~]...."...7.C...S...X.[.H.b.1.X.B......<._=EId{5...mk..N0..v4N..6.....e......c.....@...v.<.J..N...yD.<_..........................y..y..<v.<.B...<.....2u...?q.....3..y_...`.6..?M.i$.pP.,#.J...ds....G#T.."... MB.mHk..."...H......O...g..)..VP8 .?..p....?...>...G."!........l..k..wn...w.=.}....U.s.Y............<.}hy..p...S.O...?......./..ml.e....$.'.?......._.~.>..#........k.w..".......g...n........~.........G._./...=,...].?........=.../.>..-="\.....f.+.......ax..?}....p...F..D+...Q..%.).-=.......\|z...o.X.3.<......d..o..i.4..r..@..{...P).(F#....z.5..j.x.O*?.i.[..%ND+b...'.<wIA...!.A....j.G...!......ao\|..?D.>.....".-..?9.;n...x~..b.h..+.........;'.#1A..M.._..S(]....cu.Iz.....Xx..j.F.w.M.tr....!p.@).....q...)..<..@.oob."wR...>.>E.7.O...G?...........B.. .U.....Y....o........f..X.33..$....'.M.U9..D.~>....M:...:./7....r:.a.....SC...K..)...D<........T~.h....

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1427
Entropy (8bit):	4.330925734854305
Encrypted:	false
SSDEEP:	24:2diO44l/B7FltXcb1YcdTo0TMpqdWYiuzbfKk4ZbHkaeOJG4LpQtw346Pnhllo/:c35PS1YcdTEpuPKk4ZbH/eGGMd34H
MD5:	18FEC8AB9B3C56EB74092F4F71694CB2
SHA1:	635EFF9032A01C55D44440A4DD2E6696165D98AB
SHA-256:	2AF58D3C8FEC4D5723BD0E52DF693175F9BFCF0524FA0462FE5AAB0C051637EF
SHA-512:	A023F267550BB67FEC1262347201EC7EB67E900CC08503746EB382813B4954A71EC3C0991AB8D543DD57693B08D19ED3047433ABBB12B622D9E2D6AA15CB7A3C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M12.168 24.849C12.4155 24.0252 12.922 23.3032 13.6122 22.79C14.3025 22.2768 15.1398 21.9997 16 22H20C20.8613 21.9997 21.6996 22.2774 22.3904 22.7918C23.0812 23.3062 23.5875 24.0298 23.834 24.855M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.647

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1541
Entropy (8bit):	4.4748128794032125
Encrypted:	false
SSDEEP:	48:c35VVfIUZDZmUWupqnGUwE5rQmtd7J2pBG:IFJgGhWrQmtFEpBG
MD5:	FE0E798E1499121727306002D29FCAE6
SHA1:	D4E62A62523BD846754179BC010CBA192CC5CDBF
SHA-256:	8412763457FA476615E881AD4B5FB462F1D3224B967E3C98D5906B408B2E9E72
SHA-512:	5818FC05F8E15665C0B6CA216437CCED6811172CABBBD28DFAD251F12EB7B4146748EA0C92A4879AAD9E10390D0966CA09655C629DFE63DFBD769FD0F14D5EB9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M27 26V18.5C27 17.6716 26.3284 17 25.5 17H24.5C23.6716 17 23 17.6716 23 18.5V26M20 26V22.5C20 21.6716 19.3284 21 18.5 21H17.5C16.6716 21 16 21.6716 16 22.5V26M13 26V20.5C13 19.6716 12.3284 19 11.5 19H10.5C9.67157 19 9 19.6716 9 20.5V26M16 15.5L12.5 14.5M23.5 13L20 15M9 14C9 14.5304 9.21071 15.0391 9.58579 15.4142C9.96086 15.7893 10.4696 16 11 16C11.5304 16 12.0391 15.7893 12.4142 15.4142C12.7893 15.0391 13 14.5304 13 14C13 13.4696 12.7893 12.9609 12.4142 12.5858C12.0391 12.2107 11.5304 12 11 12C10.4696 12 9.96086 12.2107 9.58579 12.5858C9.21071 12.9609 9 13.4696 9 14ZM16 16C16 16.5304 16.2107 17.0391 16.5858 17.4142C16.9609 17.7893 17.4696 18 18 18C18.5304 18 19.0391 17.7893 19.4142 17.4142C19.7893 17.0391 20 16.5304 20 16C20 15.4696 19.7893 14.9609 19.4142 14.5858C19.0391 14.2107 18.530

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	6.138368842882266
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKcB1ICa+qlN4/naXY4dwEB1RHoZL6+vsup:6v/7A/0vZB1DrqlN4/aXY4dwgHoZLh
MD5:	7ECEBDA95F0491BB476B83BAC70F2358
SHA1:	815A773D24D65B4FCD9FCA64C86EF904BC86D3EB
SHA-256:	3F488CED685DD25632E6B9E8628349A6C9C023E8FCC7D7172C75777DC69D21EF
SHA-512:	A87E970CBE3FC099536CC6B98C46705AB732D82944AE006B65DB84CA21C447DC52042157F8862AB4AB9D790F0AFBA957905FDAADFD71305C6B2B1580D4184866
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/peru.png
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<.....PLTE....JW.JU.KT.KU.KU.KU....KU..!.....tRNS.&].....w&}...GIDAT..c`.v.(....C........U.A.....d.@p..<.............l....x..s(.F.....}k...J3j....IEND.B`.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	996
Entropy (8bit):	4.6713707059371945
Encrypted:	false
SSDEEP:	24:2diO44l/FwCHtzITo0TMpqdWYiuzbfKk4ZbHkaeOJG4cWQnhllo/:c35VHtzITEpuPKk4ZbH/eGGg
MD5:	F36F9131A287CB116293BDA6CB350893
SHA1:	2A82E00EF7EE0697FC0E00BE1AE6E4FB97F6940B
SHA-256:	E4AC8D81A9DD2157B46783EC64EF49991285760D5698ED18BBAA38762B9A4AE7
SHA-512:	82B24600C8CBD4825ABF95C3AA18D60DFB0BF814B6CD94B489BCD53A0254939389E3C1F035F36F8AE67BAD0C163DDF6FBE6212F05C6D416AD84188D56E2EC4C3
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M21 20L18 18V13M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.6478 9 16.8181 9 18Z" stroke="#6C63FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6484
Entropy (8bit):	4.227731499933373
Encrypted:	false
SSDEEP:	96:8WTvMhpcGqRI9RDXxYubZ6m0SyG9cQtGU7x85eNzcwOOYFPvsTw5SQUiJtWWoaqJ:8yKpISDXSubZqSKR65NNbykwkKWW3q
MD5:	25DCFD97555B00663149E1F60319FA24
SHA1:	BAEF92FEEDF147EE4415A93D281D776BEFAD26BE
SHA-256:	6657E6F0D5BB91BBBCE4F0CF8E00F5DB62CFA70CA797A175C197FBE57856AC17
SHA-512:	524194FC1AE460277E91CB9FCF57E24DA0E1C06D59826BC29B377052F53C81F72718A2AF555BAC1FDC05E5BF4344107BB2D23B246FBAC9AD724EC2A0974274F3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 595.41 113.04"><defs><style> .cls-1 { fill: #2b3352; } .cls-1, .cls-2 { stroke-width: 0px; } .cls-2 { fill: #b7b6c4; } </style></defs><g id="cD7QUc.tif"><g><path class="cls-1" d="M114.33,83.04c-4.48.11-7.43,0-11.1-.06-2.58-.04-6.4-.08-11.1,0V19.33c9.87.27,19.68-.75,29.39.65,7.65,1.11,11.59,5.81,11.95,14.43.24,5.75-.85,12.17-8.88,14.87-.19.06-.31.32-.66.72,4.86,1.43,8.53,3.97,9.78,9.14,1.15,4.73,1.31,9.42-.35,13.99-.43,1.18-1.09,2.65-2.43,4.25-2.86,3.4-6.64,4.47-8.61,5-1.86.5-3.93.56-8,.66ZM105.41,55.22c.05,3.67-.03,15.12.12,18.04,1.95,0,11.42,1.42,14.62-3.65,2.1-3.46,2.21-7.95-.24-11.23-3.48-4.68-12.83-3.24-14.5-3.15ZM105.12,45.26c3.06,0,5.96.1,8.84-.02,3.92-.16,6.38-2.85,6.7-7.07.32-4.29-2.15-8.24-5.81-8.67-3.19-.38-6.44-.37-9.73.08v15.69Z"></path><path class="cls-1" d="M370.19,83.05c-4.11.15-6.7-.07-10.36-.09-2.31-.01-5.62.14-10.36-.04V19.33c9.21-.0

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	20187
Entropy (8bit):	5.004180814374261
Encrypted:	false
SSDEEP:	96:aTuvhtavcOKKAmihzq+p/WDLdbDgkSPfFfH5K89F9fCoJ4BwynZWvnzOyXUOmtW2:xvnavkKJWO+Mwku5ZDJ4Btonz4jtRMhy
MD5:	EECF0DA5068FA546A1DDD82928D461A5
SHA1:	00B9FD4742BBA6C5819042947D43AFEE7C36B58C
SHA-256:	F5CE8A096641A412B4783F1DD102900A531681C7D32E8645253396494CADD212
SHA-512:	4B2B41672177546D605096E6C15293D15E40F1128C1BB54609141594A80F2EA03101BE8987DF3BC416382332B3997212909DE8B345F0BC4D6C305F86F1892478
Malicious:	false
Reputation:	low
Preview:	{"lastUpdated":"2024-10-03T17:03:07Z","cmps":{"2":{"id":2,"name":"AppConsent by SFBX\u00ae ","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"3":{"id":3,"name":"LiveRamp","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"5":{"id":5,"name":"Usercentrics.com","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"6":{"id":6,"name":"Sourcepoint Technologies, Inc.","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"7":{"id":7,"name":"Didomi","isCommercial":true,"environments":["Web","Native App (Mobile)","Native App (CTV)"]},"9":{"id":9,"name":"Admiral","isCommercial":true,"environments":["Web"]},"10":{"id":10,"name":"InMobi PTE Ltd","isCommercial":true,"environments":["Web","Native App (Mobile)"]},"14":{"id":14,"name":"Yahoo EMEA Limited","isCommercial":false,"environments":["Web"]},"18":{"id":18,"name":"Evidon, Inc.","deletedDate":"2024-06-11T00:00:00

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	940
Entropy (8bit):	4.587934806274091
Encrypted:	false
SSDEEP:	24:2diO44l/BnmpTo0TMpqdWYiuzbfKk4ZbHkaeOJG4cPnhllo/:c358TEpuPKk4ZbH/eGGE
MD5:	85C4D9ED57D6AA3E8D304EAFE24DFECF
SHA1:	2CA627200BFE2ADBE2DAE2893E50847D42341F3D
SHA-256:	B91B34C67AC902111B3731B59647A30BD25F349DB88FC0D487BA8110893897D0
SHA-512:	2C17B9120717870645F343941F31A5EA53C7C259E0C5531AD42C2F7C6294E181B57DC76F4D64C51A69EBC075E09788F9BB01FB85CA4B47306133D78F75BC2851
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-8.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M15 18L17 20L21 16M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.6478 9 16.8181 9 18Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (353)
Category:	downloaded
Size (bytes):	1823
Entropy (8bit):	5.309320673200618
Encrypted:	false
SSDEEP:	48:fPB/KiQwJ439Jzlq9O62FJahtppCQdBSib9V5pt:f5/DA9uAqpg2BBb9V5n
MD5:	6C7A4968D1D6A8A676EC0E3A27918D49
SHA1:	6561EE980210563169A9D1EBBBAFCC75AAD3F210
SHA-256:	5C322EDAC8F24BAB980CAF90A5E8E7D9EDB2497DD2D2DF21C403DF5D79FADD09
SHA-512:	D07B36AE50B8B91422C2E9D57EF7E73D0B78E9B8244CFCC8BF844F0CA2BFCB312B230480E7BC15254E6F3E8F0F8EDC031EB06CBBBCCDA98AB24105296058BDAC
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/amplitude.js?ver=1.0
Preview:	(function(e,t){var n=e.amplitude\|\|{_q:[],_iq:{}};var r=t.createElement("script"). ;r.type="text/javascript". ;r.integrity="sha384-tzcaaCH5+KXD4sGaDozev6oElQhsVfbJvdi3//c2YvbY02LrNlbpGdt3Wq4rWonS". ;r.crossOrigin="anonymous";r.async=true. ;r.src="https://cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js". ;r.onload=function(){if(!e.amplitude.runQueuedFunctions){. console.log("[Amplitude] Error: could not load SDK")}}. ;var i=t.getElementsByTagName("script")[0];i.parentNode.insertBefore(r,i). ;function s(e,t){e.prototype[t]=function(){. this._q.push([t].concat(Array.prototype.slice.call(arguments,0)));return this}}. var o=function(){this._q=[];return this}. ;var a=["add","append","clearAll","prepend","set","setOnce","unset","preInsert","postInsert","remove"]. ;for(var c=0;c<a.length;c++){s(o,a[c])}n.Identify=o;var u=function(){this._q=[]. ;return this}. ;var l=["setProductId","setQuantity","setPrice","setRevenueType","setEventProperties"]. ;for(var p=0;p<l.length;p++){s(u

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9136), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	196642
Entropy (8bit):	5.420352842713929
Encrypted:	false
SSDEEP:	3072:gmq7QyzznRiNaK49WDVAcnKk1K6zxEZcYaDWw4:I2xEZcYaDWw4
MD5:	8477EF4CB6E79557468A49ED57A3075D
SHA1:	D6074591202C286DE231EF38C6C8A757A9AA3250
SHA-256:	029530AB3DD6874A4E2657FF853C09376B6C20417E4F4CA79E1A2F524926745B
SHA-512:	DB028015C94E4C0C1584AC6C5C7A578256273D1486FB2BB5EE2E5C724DBC02FCA47796B1E4765152239DCD5A400AE293D677C5CD4C4A588E5DDF693C4005281A
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/signup/
Preview:	<!DOCTYPE html>.<html class="no-js" lang="en-US">.<head>. Google Tag Manager -->. <script async>. function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[];var savedConsent=localStorage.getItem("consentMode"),defaultConsent={ad_storage:"denied",analytics_storage:"denied",functionality_storage:"denied",ad_user_data:"denied",ad_personalization:"denied"},consentMode=savedConsent?function(){try{var e=JSON.parse(savedConsent);return e.ad_storage&&e.analytics_storage&&e.functionality_storage?e:defaultConsent}catch(t){return defaultConsent}}():defaultConsent;gtag("consent","default",consentMode),function(e,t,a,n,s){e[n]=e[n]\|\|[],e[n].push({"gtm.start":new Date().getTime(),event:"gtm.js"});var d=t.getElementsByTagName(a)[0],o=t.createElement(a);o.async=!0,o.src="https://www.googletagmanager.com/gtm.js?id="+s+("dataLayer"!=n?"&l="+n:""),d.parentNode.insertBefore(o,d)}(window,document,"script","dataLayer","GTM-WWBXHVT");. </script>.

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11186
Entropy (8bit):	4.0042504408879225
Encrypted:	false
SSDEEP:	192:h7cHMmkxI86RIIW/RcxGF6U/8IpEdAd88qYkEDuoeB8iy1Wv8j/:hYoxI8OTkcx43/85mC83kEyoa8d1WEj/
MD5:	3012CB799A53603E03B6B92FFC5E0416
SHA1:	10ADCA112E8F5485636805DB7B9B61338A042DCC
SHA-256:	EB64F0AAB1BEF09AA25FD470B3FAAC0C63C0DC4C0D63B41B9B996D43845F3144
SHA-512:	D0D910649C910EB192CC5B41E2ABEC504928D5CC8009629D8C04C76EE77B7E80E7777CCCEA05EE585B874BDC5E66DB480E757E44A5562B318E9EBFD8EAD4F0A1
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/06/LATAM-AIRLINES.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 352.09 113.04"><defs><style> .cls-1 { fill: #27304f; stroke-width: 0px; } </style></defs><g id="RAm8iY.tif"><g><path class="cls-1" d="M52.44,26.48c-4.4-1.58-8.81-3.16-13.21-4.74-6.14-2.2-12.28-4.4-18.42-6.61-.65-.23-1.27-.55-1.86-.92-1.9-1.19-2.84-2.92-2.85-5.15,0-2.02,0-4.05,0-6.07,0-.42.06-.81.43-1.09.21,0,.43,0,.64,0,2.65.95,5.29,1.91,7.95,2.86,12.55,4.48,25.11,8.96,37.66,13.44.97.35,1.94.68,2.9,1.06.97.39,1.05,1.04.23,1.7-.87.71-1.9,1.08-2.94,1.47-.37.14-.74.29-1.01.59,0,0,0-.01,0-.01-.11-.03-.21-.05-.22.11h.01c-.16-.06-.28.01-.39.11-2.93,1.2-5.95,2.17-8.92,3.26Z"></path><path class="cls-1" d="M352.2,102.92c-.19.27-.16.6-.26.89-.65,2.09-2.13,3.38-4.07,4.23-1.95.85-4.03,1.13-6.13,1.14-3.3.03-6.5-.54-9.52-1.91q-.84-.38-.54-1.25c.21-.62.42-1.24.63-1.86,0-.01.02-.02.03-.02,2.02,1.3,4.31,1.78,6.64,2.06,2.12.26,4.25.31,6.36-.19.85-.2,1.66-.52,2.37-1.04.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	dropped
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	44294
Entropy (8bit):	7.986046048509156
Encrypted:	false
SSDEEP:	768:0TPNx7eSIRgll2WiSr1zZ4c7x6Nr+qsKfptDBmFKvMbvguMoj7cNxSYEDMEUnh:GX69Rgll2fS5zZ57x6bsiLmFKyvrfObh
MD5:	7D0A5B5B93717EBDE612127FBD47BDD6
SHA1:	814632620A137207B4130D15434E39CF74709CFA
SHA-256:	DB98C6A7140F258554A49BD9F2F512C2DD1C5827574E23BADF2415FC0EBFC068
SHA-512:	F65BA202FF19338E373279DCB998AA5795DDC18DA5671CD110B9C18D072587B0C08D1E51AA77F89B5DA0AF005AC016E5CD491D04E0074E7775852CFD2B2545A2
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....0...e.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHS...............n...Hp..n..^\Z...E.]....K..R.[..!@..$.w.{..\H..y.f.$"&.J._.........%./....K4...GU..e.V..E8.....k.yu...7R32...o..m..A.D.......7...I.3.E...a.r..oMr...}`J,........-.6O.....}.w>..$.2..........x..54..-....G..0....h..k^.x....D0G.....c..D.:0{.!.]...q.^.A/......Q...a>....o.v=.....>...R.....LQ.z.......<u..Eo..........C...u\|..5....w=.(.=@.1kh..V]..w...R.F~u:...0....*.{.P.).K.GM.1..]..L5D...Z.....G...-..Qk..D.(..M.._.g......7...W..;...xO....RM_..GH.tu...[}.+

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11912
Entropy (8bit):	4.0647578913167735
Encrypted:	false
SSDEEP:	192:vCwa4eQ8Vcgk8qhGCfxrvtH4dGYrZpEj2TQ1llW3UYN2O6eJ/LYm7oPSBPmf:avpm5xbtHA62TulW3UY0QJ/LYm7oPSBA
MD5:	06CAB33FC575ECED1075EB741F1E602B
SHA1:	1896652F2C45797D5490230626916D0B51462175
SHA-256:	1562AAD02BA72511C4A8432DEF77C0CBD882BEFF15FE13B1B2922D93D73EB146
SHA-512:	63F48F43C01AA43C2AEBE417584C9A58E455251CFF2B707254C3EE79A3BF5EAD1A68EC896454F510EFF4CA3A0BAD14D6F2BD19A0B317825E7CAD3A9252BD17A5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="142" height="48" viewBox="0 0 142 48" fill="none"><mask id="mask0_94_2579" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="142" height="48"><path d="M141.943 0.540543H0.272949V47.3637H141.943V0.540543Z" fill="white"></path></mask><g mask="url(#mask0_94_2579)"><path d="M0.560791 28.1962H141.942V47.3632H0.560791V28.1962ZM16.3717 42.6257V32.9383H12.6931L10.8708 39.3874L9.15374 32.9403H5.36743V42.6162H7.6871V35.7994L7.7968 35.7954L9.65965 42.6257H11.9538L13.9544 35.6807L14.0681 35.6907V42.6257H16.3717ZM128.105 32.9443H125.878V39.2511L125.767 39.2601L122.967 32.9368H119.77V42.6217H121.985V35.9677C122.129 36.0842 122.241 36.2372 122.307 36.411C122.989 37.9934 123.779 39.5406 124.316 41.1696C124.737 42.4494 125.437 42.8901 126.703 42.6903C127.17 42.6517 127.638 42.648 128.106 42.6793L128.105 32.9443ZM90.1679 32.9323V42.6081H92.3939V35.9497C92.9804 37.0547 93.4623 38.1707 93.9432 39.

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	76148
Entropy (8bit):	7.990505720714859
Encrypted:	true
SSDEEP:	1536:fUlFPhbJGgMC46veXlgSeg1zj/K5X6Rw5fb9f2sXnnz64qviN:f4MC4geHeCub9uQn1qKN
MD5:	02EA1DA547CBA9150A518634B76A34D1
SHA1:	9633981EF768B32EA5C16448197A897AC9CCA4AA
SHA-256:	12679677773DE7D3BD3C749E70263718710236B2C4EE41AC0B0E868DAC2406E1
SHA-512:	AC01F2FBA217F8035E7D8E967977DE67E803E6A6B0B6C5D53AF271B664E62D4743AE5102BB8236973B13AAFD803866A634DB73548E08A78CB24DDD8B333EE507
Malicious:	false
Reputation:	low
Preview:	RIFFl)..WEBPVP8X....0......Q..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH P...!.m.F..;..............l.....2#(`...B...Xb...^I..Fr.i.A.}.....`.qvb...u..9m.W.G...l...G.-..m$G....Q...0.~k.m....F...3.i..L.....Z.<..s...n.-..:....8.....N.L..g4.zXn.,...(.3......'..4./.&nt...........Wy...WDL...U........%+.....\..2..x....Afff}..>..g..1....)"&..d.m..R...........o.#....F.k...Z2..-Je.1...m........-.A0.`.`.@`30.... d.r..=....#...... ..O(=.#...y..5....A...H'...><#.A..q..[$.^...v..}hE....;w6N..zHE3..4aH'...s..F.'.=.\|..a.Z...i.o.. Hv.S.....a.8J...q..:U y.....

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1192
Entropy (8bit):	4.555141017493368
Encrypted:	false
SSDEEP:	24:2diO44l/FwCSBWhBSGTo0TMpqdWYiuzbfKk4ZbHkaeOJG4cWQnhllo/:c35VSBzGTEpuPKk4ZbH/eGGg
MD5:	33F4F6B85978A47E43DEFFD425AE8744
SHA1:	E3D66EB9DF631706647445785B189EB22A332B6B
SHA-256:	8BD50BEAAAA05384AA393B089E8680C4BE05EEC7750AA8A582622920CAB21915
SHA-512:	FCC638D9384666A076B0E75ED43EE09294531B53AE9A1EFB19129BD8326479E98CC69A07D7553E66BE4BC4D1F3F10C7E3ECF36ECF1A9BFAF1E44AFE79CCD923B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M15 16H15.01M21 16H21.01M15.5 21C15.8259 21.3326 16.2148 21.5968 16.6441 21.7772C17.0734 21.9576 17.5344 22.0505 18 22.0505C18.4656 22.0505 18.9266 21.9576 19.3559 21.7772C19.7852 21.5968 20.1741 21.3326 20.5 21M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	303
Entropy (8bit):	6.224990606701667
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKcicdx44RNcwlBdWYORvXb17yT+Wp:6v/7A/0vZ3HBlvkXbdy9
MD5:	74B27D6D9AC2EEA20AB82149CBA0B9A9
SHA1:	A52EA541FDC93FC91BC67CDEEE26A512273670D1
SHA-256:	793EEACCAAB3FDD55725A9E8204DE503F382DCFD63CCA3CF0C57BDEEE8B0CAC0
SHA-512:	90F38EDFD62FA36E7CD458A8CEEA03C3638DE623C6B7ECEFE04805839EC69A37175DF924BF649A5F4F66587401F688D104A5BF4711949055FEE4925A8A7562B7
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/colombia.png
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....0PLTE....JW..W.JU..Z.KT..[.KU..Z.KU..Z.KU..ZAG..KU..ZE%ig....tRNS.&&]]...............XIDAT.WcdPK+f.....1...`...n.ZW.``1c..8.;c.........?..P.KU.>d..!{!..s...f....wF.QxP.....$..PP.....IEND.B`.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	109090
Entropy (8bit):	7.979421475557858
Encrypted:	false
SSDEEP:	1536:6+gjQeeLDO5K5yxIXMcKdlQrbXHs7cFe/PakQNs3nJXOUvGwVW+jxt8YgAKdvsCR:6VuK4PX0ojxyG63nMUfVW2KbAivboW/n
MD5:	473E5409FA8BA52A3304E954B690344D
SHA1:	C7852E0B4C57F96B1AC29C305F735BEADFFF73E7
SHA-256:	B1A839E5B1E71FFFAD5FFA8A9F2DFD6264966636F64B1AD8B7886ECC56288A16
SHA-512:	B97EA649DED885EEBF607A29D6B55E11474096EEDC8063C2098DF1985FA54E47717B0F07B0C3CEF58CF46A034B07472A058F8446ABCDCF9DCDC4A4F1B0F981B4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.....$.m.9.....B.....].m7....'o..7M33@.$..c.`...mk..Y....;.....zv.n.n.-3s.Nev.Niv..L.:..s.U<.....H.....m..Mim.}.7t..(..,.y ..$..2.d........a.z.{Vo.9...+..1.zk.vm[[Z.s.s..~T...@.*....&.p....U....W......8.......m..$.V.S.3.......cf~/.d.....s......O.m.mKQ.}..yO}_5..q.....@.4.$..O. .............%.`DL._.U...\.k_13........d..0..V.g.,.Lr....5G.........l..\|C....B.&.!....H2.2...LB2.L....2!!...!...}%.......$IB. d.@B.E....f."....J...0...$X8...........d...d..I..8./. 4..,.BHH .

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	622763
Entropy (8bit):	5.113761191073703
Encrypted:	false
SSDEEP:	3072:wsT023giUpr19sjvAELOzd2can2aWKvaLA:3T8gj6an/Fvh
MD5:	40577BEF732102027FA9241F6B9C68D3
SHA1:	63FCCF7511E8B989E77D4D3B0313954D874A31F2
SHA-256:	92B9B36279FF3818ED372E0F3A8126840D857007FA7DB6124B483CB9893C61D7
SHA-512:	8C187C1D9357667F6263CD653C539E13019E63353750F90C78485986DF0B69ADC94293FA907FD94E6ABCA593B39890CF3EC88BD768ABB46453966572570063C4
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/GVL-v3/vendor-list-trimmed-v1.json
Preview:	{"gvlSpecificationVersion":3,"vendorListVersion":74,"tcfPolicyVersion":5,"lastUpdated":"2024-10-03T16:07:42Z","purposes":{"1":{"id":1,"name":"Store and/or access information on a device","description":"Cookies, device or similar online identifiers (e.g. login-based identifiers, randomly assigned identifiers, network based identifiers) together with other information (e.g. browser type and information, language, screen size, supported technologies etc.) can be stored or read on your device to recognise it each time it connects to an app or to a website, for one or several of the purposes presented here.","illustrations":["Most purposes explained in this notice rely on the storage or accessing of information from your device when you use an app or visit a website. For example, a vendor or publisher might need to store a cookie on your device during your first visit on a website, to be able to recognise your device during your next visits (by accessing this cookie each time)."]},"2":{"id"

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	790
Entropy (8bit):	5.213996972703562
Encrypted:	false
SSDEEP:	24:2diO4xT8utje0T5xDf3KyDRVU3z8vlNW3AISTDZmS+:c3c8u9vfxeYXWymd
MD5:	4BC87C99E258712CC0341C0246ECFC89
SHA1:	CA27C4EE6E8C9A1372B1440FA1F1A04CE635582B
SHA-256:	8584183559FD82B317B49F663F98EC91962234FA628DACE59BA051427C895BBB
SHA-512:	0B0142F04E27CE65223ED486386AE283AA72F217FF84866E900A4C01945CC01028BAFB3A4FD00B7F7B27AB51586A14BE02ADF73B1743F6F8C7E41A8613B24B49
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/01/gestion-de-talento.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g fill="none" stroke="#f6bc62" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75" width="38.5" height="38.5" rx="15.25" fill="none"></rect></g><g transform="translate(8 8)"><path d="M0,0H24V24H0Z" fill="none"></path><path d="M8,16.75a.75.75,0,0,1-.712-.987l2-6a.75.75,0,0,1,.474-.474l6-2a.75.75,0,0,1,.949.949l-2,6a.75.75,0,0,1-.474.474l-6,2A.749.749,0,0,1,8,16.75Zm2.593-6.157L9.186,14.814l4.221-1.407,1.407-4.221Z" fill="#f6bc62"></path><path d="M9-.75A9.75,9.75,0,1,1-.75,9,9.761,9.761,0,0,1,9-.75Zm0,18A8.25,8.25,0,1,0,.75,9,8.259,8.259,0,0,0,9,17.25Z" transform="translate(3 3)" fill="#f6bc62"></path></g></svg>

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	21348
Entropy (8bit):	3.6085156677070547
Encrypted:	false
SSDEEP:	384:Q4pvr4alzqyScQyptc98s5TZshC+kPx5f3SRbPtbeC+TLqli7k7itJ9cHBq9Z+qu:Q4Zr7zqynQmajZDf3KViBTLqw7yw7cHr
MD5:	0F0C9F870DCF843CEA4E570AA814377A
SHA1:	A0A77D26037ACD005CD78693B2D6C63E36EC433C
SHA-256:	C3582BD10CB4E9125981D1C89DC583BFB9210C484D2619783267EEFF4E5353C9
SHA-512:	E1621F5C2F5959C42608D251F097E156022E24ED6D9D4BE0A787949769F735E5DDD0B838CE289E6394AD9A5C0D7E97E704226657CA60FC49286EA485FC1F1523
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/images/capterra47.svg
Preview:	<svg enable-background="new 0 0 278 91" viewBox="0 0 278 91" xmlns="http://www.w3.org/2000/svg"><g fill="#002e47"><path d="m263.3.7h-228c-7.6 0-14 5.9-14.6 13.4l-17.2 6.5c-2.5.9-3.8 3.8-2.9 6.3.5 1.4 1.6 2.5 3 2.9l17 5.7v40.1c0 8.1 6.6 14.7 14.7 14.7h228c8.1 0 14.7-6.6 14.7-14.7v-60.2c0-8.1-6.6-14.7-14.7-14.7z"/><path d="m56.5 24.4c1.1-1.8 3.2-2.9 5.3-2.8.7 0 1.3.1 2 .2.5.1 1.1.3 1.6.6.5.2.9.5 1.3.8.3.3.7.6 1 .9.5-.4.9-.9 1.2-1.4.4-.4.6-1 .6-1.5 0-.3-.1-.6-.2-.9-.2-.3-.4-.5-.6-.7-.3-.2-.6-.5-.9-.7-.5-.3-1-.6-1.5-.8-.7-.3-1.4-.5-2.1-.6-.9-.2-1.8-.3-2.7-.3-1.8 0-3.6.3-5.2 1-1.4.6-2.7 1.6-3.7 2.8s-1.8 2.7-2.2 4.2c-.5 1.7-.8 3.5-.7 5.3 0 1.8.2 3.6.7 5.3.4 1.5 1.1 2.9 2.1 4.2 1 1.2 2.3 2.1 3.7 2.7 1.7.7 3.5 1 5.3 1 .9 0 1.9-.1 2.8-.2.7-.2 1.4-.4 2.1-.7.5-.2 1-.4 1.4-.7.3-.2.5-.4.8-.6.2-.2.4-.5.6-.8.1-.3.2-.5.2-.8s-.1-.5-.2-.8-.3-.5-.4-.8c-.2-.3-.4-.5-.6-.8l-.5-.7c-.2.2-.5.4-.9.7s-.8.6-1.2.8c-.5.3-1 .5-1.5.7-.6.2-1.3.3-2 .3-1.2 0-2.3-.2-3.4-.8-.9-.5-1.6-1.2-2.2-2-.6-.9-1-1.9-1.2-2.9-.2-1.1-.

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1102
Entropy (8bit):	4.537901635629674
Encrypted:	false
SSDEEP:	24:2diO44l/eKVBsLj2DqqLbn+M5qw9U8qUyKXNt+UP8Pnhllo/:c35vBsLxqLb+KU8qUFay
MD5:	52D8451695F8B3873828AF4C39F3BF5B
SHA1:	26BD4DD91EC2A9C429ED85D26B992F010A85F470
SHA-256:	56B2ABE90D162CD62CBBE768253E92A5973C540CD783D22D6802172472C303CC
SHA-512:	DC1566D2D4C4C0C8E58F00BED158AD8A665468575F2ADED8088F122674F646C2FE4BE0664F2A991F729534BFDF4CF3DA4CEABE02EE00ADAD72C7E7A8B920E373
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M27 17V14C27 13.4696 26.7893 12.9609 26.4142 12.5858C26.0391 12.2107 25.5304 12 25 12H19M19 12L22 15M19 12L22 9M9 19V22C9 22.5304 9.21071 23.0391 9.58579 23.4142C9.96086 23.7893 10.4696 24 11 24H17M17 24L14 21M17 24L14 27M9 10C9 9.73478 9.10536 9.48043 9.29289 9.29289C9.48043 9.10536 9.73478 9 10 9H14C14.2652 9 14.5196 9.10536 14.7071 9.29289C14.8946 9.48043 15 9.73478 15 10V14C15 14.2652 14.8946 14.5196 14.7071 14.7071C14.5196 14.8946 14.2652 15 14 15H10C9.73478 15 9.48043 14.8946 9.29289 14.7071C9.10536 14.5196 9 14.2652 9 14V10ZM21 22C21 21.7348 21.1054 21.4804 21.2929 21.2929C21.4804 21.1054 21.7348 21 22 21H26C26.2652 21 26.5196 21.1054 26.7071 21.2929C26.8946 21.4804 27 21.7348 27 22V26C27 26.2652 26.8946 26.5196 26.7071 26.7071C26.5196 26.8946 26.2652 27 26 27H22C21.7348 27 21.4804 26.8946 21.2929 26.7071C21.1054 26.5196 21 26.2652 21 26V

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	35902
Entropy (8bit):	7.993101548138287
Encrypted:	true
SSDEEP:	768:EsrSq4SYqHEiHtO2uLwChwjsNteVNSra2GjxhFtdWF:EM4yEiNZ6oz/xbtdWF
MD5:	D9772F3F0995F78BA6273E6AA831C7F7
SHA1:	C9C198A1EC12779BB69E07830FA96EEB4C936956
SHA-256:	A4DADF810CFFB8E42444155F9E49CF9ACC299A1F29CCD6DC16281C80EFCE4C9F
SHA-512:	DDCE21E5348C8E6C1F01836ABBDABDE83BC908F7104F51EC4888F6D59895403479C7F04ED7110D5EB28B5012C9555FD781E4DEB009999E68919D3B1EE13FFADA
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/1760416510-48ad8e7167934ac9ef9e2ffb0fc7a7ae0ce4d12b9a6108c2745f611d78a2d27d-d
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................$...(iinf..........infe........av01Color....jiprp...Kipco....ispe...........8....pixi............av1C........colrnclx...........ipma..................,mdat.......7....R2...GE<.0..P. ....V..x;....c..Qlmy..a.....I...#....o....`e....o..2...h.{.:..`:+..F...s..P.Eo..h....E.G..c\{....k.1.W....l..Y.k.... ....k.b.)O3.gBc6u#...4...^50E..XFI.....O....9c.....M..,...k?.z.....Ej.....}.-.`..D.=..g................N.R..=.B.=.Wi.. ;......b....~.9.8...:..tk.-...9w...h....h..8u..^8H.....P..p....i....[:x...p..m.41...#..G%.........D.?g......4.....7kS.....G..ZA..b.fT/..39...D............\..e.;.......b......e..j..0.m..^.w.#...x.N..u....9..f...4p...s../..Z@:...i0.dO..-GSf..:....wA.../K...c7..KB...k.+.%Q..c...'.....VU..f.~QR.....J7..^..}..m.Yl?{.....e..6s..J......Gd..3.........Ru.k...~9.S.}!\ra.C.....U...2...t.E...G,y....\.2f.Q...g{..^%j?..

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	989
Entropy (8bit):	5.102438214614776
Encrypted:	false
SSDEEP:	24:2diO4xT8utjU0T5xDf3KyDRVU3pTjUhlll2jUhlll7bjUhlll7lyXltjUhlll7E:c3c8uTvfxMyXll
MD5:	FABF24D79F9E61E44D367A7705C52608
SHA1:	F58B5CD495C1FBBBE001A585D7A8B643F69B1868
SHA-256:	0FE426DF369E63408A0CC5CFF185177BE25CCCEC0692DCA92804EDC67AB70F7D
SHA-512:	E0185FCC812E9CB5422E02BAD311AD1F2967AAD90339D34F5E60FC4DFFF01381D5690937FF873E5AB07B73F1D461DFFAD4B5D9E367639ED2F80985107BCC8915
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g fill="none" stroke="#a160f5" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75" width="38.5" height="38.5" rx="15.25" fill="none"></rect></g><g transform="translate(8 8)"><path d="M0,0H24V24H0Z" fill="none"></path><circle cx="4" cy="4" r="4" transform="translate(5 3)" fill="none" stroke="#a160f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></circle><path d="M3,21V19a4,4,0,0,1,4-4h4a4,4,0,0,1,4,4v2" fill="none" stroke="#a160f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></path><path d="M16,3.13a4,4,0,0,1,0,7.75" fill="none" stroke="#a160f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></path><path d="M21,21V19a4,4,0,0,0-3-3.85" fill="none" stroke="#a160f5" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"></path></g></svg>

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	880
Entropy (8bit):	4.699480498185638
Encrypted:	false
SSDEEP:	24:2diO44l/OeH7POVrWBQ880hNXJMbxhD+78Pnhllo/:c35XyL0nXmthD+t
MD5:	D6FE620D4E43DF62A1CAB502BE68AF51
SHA1:	49DF6FE0F6556357D865D8405E75449459D272CF
SHA-256:	B16A462583A2548AAC6D2630D85C4A4D114B44D399943912916CA0206183AB27
SHA-512:	09E584365478795B856913150B390AF9A3A60802C9692A21EAAFBD2F5E25458502AFFCD4453D05F42DBC8AE7CEAB0FD2783352DB0AB511F98917F8DBF664247A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M18 15V19M18 22H18.01M16.363 9.59101L8.25699 23.125C8.08988 23.4144 8.00145 23.7425 8.0005 24.0766C7.99954 24.4108 8.08609 24.7394 8.25153 25.0297C8.41698 25.3201 8.65555 25.562 8.94353 25.7316C9.2315 25.9011 9.55884 25.9923 9.89299 25.996H26.107C26.441 25.9922 26.7682 25.901 27.056 25.7315C27.3438 25.562 27.5823 25.3202 27.7477 25.03C27.9131 24.7398 27.9997 24.4114 27.9989 24.0774C27.9981 23.7434 27.9098 23.4154 27.743 23.126L19.637 9.59001C19.4664 9.30851 19.2262 9.07575 18.9394 8.9142C18.6527 8.75266 18.3291 8.66779 18 8.66779C17.6709 8.66779 17.3473 8.75266 17.0605 8.9142C16.7738 9.07575 16.5335 9.30851 16.363 9.59001V9.59101Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
URL:	https://api.cmp.inmobi.com/?log=%7B%22accountId%22%3A%22srUtCbgF3R7rD%22%2C%22domain%22%3A%22www.sesamehr.com%22%2C%22publisher%22%3A%22SesameHR%22%2C%22cmpId%22%3A10%2C%22cmpVersion%22%3A%222.53%22%2C%22displayType%22%3A%22tcfui%3Amandatory%22%2C%22configurationHashCode%22%3A%22ZaXh4z9yxA%2BQ4O5urX%2BYvg%22%2C%22tagVersion%22%3A%22V2%22%2C%22gvlVersion%22%3A3%2C%22clientTimestamp%22%3A1728049115731%2C%22operationType%22%3A%22init%22%2C%22sessionId%22%3A%22GDPR-m8qe5016k9ako4z0octv%22%7D
Preview:	OK

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.050177972279754
Encrypted:	false
SSDEEP:	3:9ukhUinkIdictCncYzcffVHgpmkRnmB1gjk0pKfikze/knun5NUCbfCRn:9uoUyngtvAVHgpmkRa1g5kKcun5NI
MD5:	E7113EB0450B482E9B75338AF79873BD
SHA1:	EE09DF1D5A9592FA537F37251CC61654710D75C3
SHA-256:	2C430DC1447C5615373048305875CB01C8BB4DFFF70E6DF22FC5A125E7C96B7F
SHA-512:	17CFD895C2CC47C2C84D9BB0A861416D74E590180FDFB9F5403E1307DF3237A903F8B0A85AEA97F514E35542873CE912BEE0DD40A9CE686616D99C31ADB3A966
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwmzx0xtVwpLUhIFDYOoWz0SBQ3aCZcoEgUNoHnZphIFDZRU-s8SBQ0AoAvKEgUNXR6pChIFDVPydWESBQ22ZC0wEgUNr1oYnhIFDd0xOS4=?alt=proto
Preview:	CnIKBw2DqFs9GgAKCw3aCZcoGgQIPBgBCgsNoHnZphoECCQYAQoLDZRU+s8aBAgDGAEKCw0AoAvKGgQIBRgBCgsNXR6pChoECAwYAQoLDVPydWEaBAgNGAEKBw22ZC0wGgAKBw2vWhieGgAKBw3dMTkuGgA=

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	630
Entropy (8bit):	5.44215075185929
Encrypted:	false
SSDEEP:	12:TMHdAs0Ii/nzVV/KYf3n/gNKoxHDAvAXTZ49uH:2dAsAjLf3/AKoxjTcuH
MD5:	01A182AEFAB788DB11B2A0BF327D8DA1
SHA1:	53D815D570EA9B332DFFFA0610C2089436BA1E13
SHA-256:	9B9DC61268ACDBC45AF56E0A9863E047DFE157FF0AE4E7D19E50FE73B211DE92
SHA-512:	50A8D64B6F82AE48E8E3C0D7105289D200A51B77AE8BB259546FC0B0F5F0ED2EABCF6F088FFFD2C1C23A28D0A974165C96EA654186F95DF73B6EF2EC3D9C9249
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/images/triangle-down.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: $$$/GeneralStr/196=Adobe Illustrator 27.6.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 10.1 8" style="enable-background:new 0 0 10.1 8;" xml:space="preserve">.<style type="text/css">...st0{fill:none;}...st1{fill:none;stroke:#1F2D52;stroke-width:1.5;stroke-linecap:round;stroke-linejoin:round;}.</style>.<g transform="translate(1.061)">..<path class="st0" d="M0,0h8v8H0V0z"/>..<path class="st1" d="M0,2l4,4l4-4"/>.</g>.</svg>

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13638
Entropy (8bit):	7.986903393263918
Encrypted:	false
SSDEEP:	192:hvdW91cFVfnGib6uQxxDELu6I7SIkr1ilVd2jXU+mHkUIHIxgH3jOSkQZL0XbXWH:djFFGiexxxsu6KkkVd9MTH3LkVrXWU5M
MD5:	F60415784A4096947D9B1CBCB39DEB52
SHA1:	5E34D39FC72DE45354626714BCCAEAEB147692A6
SHA-256:	236889AF68780277B919DA3F135707CD45FCED062DD06B0AA02DE3F57FA98EAC
SHA-512:	702B013A5ED3775AD99F4C620575253051F8320C87A759CD2F0CEA749B0374267E211E554E6F81813A07D39385EF0C09EAD5ED1B350ED6FE58DB0069C266D225
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/familyday-205.webp
Preview:	RIFF>5..WEBPVP8X........>.....ALPH/.....b....$..a.4..8.....ZW.ve.d....O!y......Kz.O/.4V~]...."...7.C...S...X.[.H.b.1.X.B......<._=EId{5...mk..N0..v4N..6.....e......c.....@...v.<.J..N...yD.<_..........................y..y..<v.<.B...<.....2u...?q.....3..y_...`.6..?M.i$.pP.,#.J...ds....G#T.."... MB.mHk..."...H......O...g..)..VP8 .3.......?...>.6.G.#"!2.<...f......N.........~I...W.:.....O..o?/3^l?.=}.h.......7....g.&.o.?K.../....7.~..#.........?...~i....n....}W<=....O............+C_......O...r..8...EJ....>....Q.5J.&.c6-.R.....fE.a.By....V...&....Y.&..[.X.JYT..r..Y.x^...(....g.5..,J....I...."...nK.O.L.E.SK..ZP;m.y9\|...g....x.o....G....C.h^7O..$XL..M...E.....s.6,YQ.{Sf..L,.Bd.w2.l.h....,2......].w..z..#L..$w.R.8}.u.et..QFq.@...^.x"....E..VB.A..}...N....*...L.../..f.H...... T..]...:G...[../T.CK$.3pu.(.p...[.`y1.......qb............Nz....P.8x.6O.]Ep$bR..?TX.\J.m.&e...r8>&.'..\|U...c.O.!.F@&..p..5....]..H.U...b.i..R.!'-...z....!....Jx...

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	790
Entropy (8bit):	5.213996972703562
Encrypted:	false
SSDEEP:	24:2diO4xT8utje0T5xDf3KyDRVU3z8vlNW3AISTDZmS+:c3c8u9vfxeYXWymd
MD5:	4BC87C99E258712CC0341C0246ECFC89
SHA1:	CA27C4EE6E8C9A1372B1440FA1F1A04CE635582B
SHA-256:	8584183559FD82B317B49F663F98EC91962234FA628DACE59BA051427C895BBB
SHA-512:	0B0142F04E27CE65223ED486386AE283AA72F217FF84866E900A4C01945CC01028BAFB3A4FD00B7F7B27AB51586A14BE02ADF73B1743F6F8C7E41A8613B24B49
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g fill="none" stroke="#f6bc62" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75" width="38.5" height="38.5" rx="15.25" fill="none"></rect></g><g transform="translate(8 8)"><path d="M0,0H24V24H0Z" fill="none"></path><path d="M8,16.75a.75.75,0,0,1-.712-.987l2-6a.75.75,0,0,1,.474-.474l6-2a.75.75,0,0,1,.949.949l-2,6a.75.75,0,0,1-.474.474l-6,2A.749.749,0,0,1,8,16.75Zm2.593-6.157L9.186,14.814l4.221-1.407,1.407-4.221Z" fill="#f6bc62"></path><path d="M9-.75A9.75,9.75,0,1,1-.75,9,9.761,9.761,0,0,1,9-.75Zm0,18A8.25,8.25,0,1,0,.75,9,8.259,8.259,0,0,0,9,17.25Z" transform="translate(3 3)" fill="#f6bc62"></path></g></svg>

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6404
Entropy (8bit):	4.656086995017361
Encrypted:	false
SSDEEP:	96:96+IngQ1MLNMrt4DoAJvX3pv25GGR8cZCWNGM3LtSvBa2OEWgYpjbgE5LdHYLaks:I+InH1/S3BOpp51SHpqfgE5LLNf
MD5:	1019F965BC9786A98C1E33F32C8A562C
SHA1:	23E1CB58FC36C42FBF68E26CD716450954AC7802
SHA-256:	86043E7380ADE1CBA486F957F4D5D013DFA3E70DECEFF98EF1280B1A0049B6C2
SHA-512:	B26FDCBE6BBB3D4AE42161AB40547960EC81CA8D0FEA7FD13E97A387B0F86D25B98490BA5465AD7E339B8F4343A027275849F662003DB121AEA7FB032C1A5EE4
Malicious:	false
Reputation:	low
URL:	"https://www.sesamehr.es/wp-content/uploads/2021/07/logohr.svg?qc-size=1216,401"
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1216" height="401" viewBox="0 0 1216 401"><defs><clipPath id="clip-Logotipo_sesame_negro"><rect width="1216" height="401"></rect></clipPath></defs><g id="Logotipo_sesame_negro" data-name="Logotipo sesame negro" clip-path="url(#clip-Logotipo_sesame_negro)"><g id="Grupo_4056" data-name="Grupo 4056" transform="translate(-666.345 -665.491)"><g id="Grupo_1" data-name="Grupo 1" transform="translate(1030.126 813.277)"><g id="Grupo_1694" data-name="Grupo 1694" transform="translate(0)"><g id="Grupo_243" data-name="Grupo 243"><path id="Trazado_271" data-name="Trazado 271" d="M2149.893,139.579l.119.029c16.066,3.554,36.89,10.242,36.478,32.556a27.719,27.719,0,0,1-11.717,23.6,47.854,47.854,0,0,1-29.006,8.558c-19.974,0-34.881-8.58-41.885-22.912a1.822,1.822,0,0,1,.74-2.359l16.145-9.373a1.806,1.806,0,0,1,2.476.622c.026.055.061.111.088.171a22.084,22.084,0,0,0,22.442,13.176c11.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	55208
Entropy (8bit):	7.9931298828385735
Encrypted:	true
SSDEEP:	768:/PRG5so0XsjfDdX5rdKQG/QBsmWM5BtTWxe5lhQc9HkxjXMIvAk1NuQgp0m7JB/8:hysL8j55rdKQGnx4Ox8zHMjMI+d6mdN8
MD5:	938D0B2261E03F5A8748AC5019C66A75
SHA1:	8E2275B55D85852A8C4B78FAB45CC4D53F21DC6E
SHA-256:	7FC135FA477B6287339542261C63B21A5352277FDA919B10EA8C8DE9DD4D95A4
SHA-512:	A89AFE8CB94EC33589B2D0A2CDA90C2F44A9EA8152D574586F4CAE37447883B50CE654DF436C195A87D6C3D9D79301BBDD88C86794D7638FF8D28A41D30CCE5F
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/podcast_kleta-05.webp
Preview:	RIFF....WEBPVP8L..../>.d.....m..."O.;\|....w.+.yz...I...,+Tff..{ ....`+1...6_.(......~.1$.Q5l[."... ..K..4Y$R.....@..........c.(....u..T@..n..+.H.31...mSF.TZ._.........Q.....h....fN....J7......S.:&.^B..<.. M....P../n....h.T-.6.r....WSM..V..FH.G.M....IWh..h..oQn.....;T...... ....k.[...%..0..6.R. bO.. ...V..mSP..D5U%5....BJYN...... %...[A.c..(P.P..Q..-.R...(..C(.k.N..n%.r...&.3Y...I..l.`.9..j.2....b` .f.8;y.......v...-Y0.....l..?..6.!uL .r..5rq....L.2.DZ.....;.KWR.....[.9S..7 8.....2.z........cIf=.0..j........&1M.T)..a....@.H.=((,...P:..&...S.+=I..,.......R.(....w...:.)..,.#!.-...r....o.SID..V.z..o.........x.9.2.+_f.Mp.d}..+..Q.9g..+).>.C.?.E..nH.u."...a..f.N.t.o:.K.gG9..Fr4u..C..!".&il..Pv..8..qJ..7A.......q6..$..N..e......Y...m..6....^..[..:..>..e.eW..e)M.....e3.1bJ......~S .UAfbI P.y..k.OAD(.}...>.w..,....7H.......i../...q..*.D...A'F.2i..h.Q.....p...[o.1K.v...RT.Kh.....K...pa.........1{.\|...G.......?,..6o.1$]..A....-.z.6R?.'.slO.{...4jQ.4

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11912
Entropy (8bit):	4.0647578913167735
Encrypted:	false
SSDEEP:	192:vCwa4eQ8Vcgk8qhGCfxrvtH4dGYrZpEj2TQ1llW3UYN2O6eJ/LYm7oPSBPmf:avpm5xbtHA62TulW3UY0QJ/LYm7oPSBA
MD5:	06CAB33FC575ECED1075EB741F1E602B
SHA1:	1896652F2C45797D5490230626916D0B51462175
SHA-256:	1562AAD02BA72511C4A8432DEF77C0CBD882BEFF15FE13B1B2922D93D73EB146
SHA-512:	63F48F43C01AA43C2AEBE417584C9A58E455251CFF2B707254C3EE79A3BF5EAD1A68EC896454F510EFF4CA3A0BAD14D6F2BD19A0B317825E7CAD3A9252BD17A5
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/Grupo-63790.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="142" height="48" viewBox="0 0 142 48" fill="none"><mask id="mask0_94_2579" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="142" height="48"><path d="M141.943 0.540543H0.272949V47.3637H141.943V0.540543Z" fill="white"></path></mask><g mask="url(#mask0_94_2579)"><path d="M0.560791 28.1962H141.942V47.3632H0.560791V28.1962ZM16.3717 42.6257V32.9383H12.6931L10.8708 39.3874L9.15374 32.9403H5.36743V42.6162H7.6871V35.7994L7.7968 35.7954L9.65965 42.6257H11.9538L13.9544 35.6807L14.0681 35.6907V42.6257H16.3717ZM128.105 32.9443H125.878V39.2511L125.767 39.2601L122.967 32.9368H119.77V42.6217H121.985V35.9677C122.129 36.0842 122.241 36.2372 122.307 36.411C122.989 37.9934 123.779 39.5406 124.316 41.1696C124.737 42.4494 125.437 42.8901 126.703 42.6903C127.17 42.6517 127.638 42.648 128.106 42.6793L128.105 32.9443ZM90.1679 32.9323V42.6081H92.3939V35.9497C92.9804 37.0547 93.4623 38.1707 93.9432 39.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	25555
Entropy (8bit):	5.2943372126006185
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSY+GcCPxyzODXnnpIKwNp:RIT7sZwuvL54WAcl/d
MD5:	44D3E21F048BD10CA26259496636D3A7
SHA1:	F8391C2A53DC5BE0EED848D22E8903C194C595F6
SHA-256:	01D26CAB424468C1D8ADD47FAA7ABCE1A98B6312CC068E9D79C2479C88A55E35
SHA-512:	D81413C1166630542A16C39DD437149A7CA668634B0E3F463FD7CB4A54B594F340A03AD27615840CAB0B3C8785FFF332E0178F01AEDA0C7CEF6CF2CAD2A0E0F3
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/424873573760210?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127%2C157%2C223%2C224%2C222%2C178%2C137
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	683
Entropy (8bit):	5.2867929689472675
Encrypted:	false
SSDEEP:	12:TMHdiO4/KYtoZ+TfsKcXs+dQDjxA4SQHFR4ZXxfPzqLQLSupDKpOqfiYn:2diO4LpQKc8xDjx5SKReNb6QL5gprfl
MD5:	6EB1B168756A0758720CD21E4B711AE8
SHA1:	9723D8587DEA3DCFCD5ADD8AB75BC72DE36A2FD9
SHA-256:	E79EF5AFB7F839E3259EE6B3288AC03C39297A150D0586EC2D35864551E1BC61
SHA-512:	2A000DA25ABA95358D09A5929E5608418D7ACBCC36FEDD58C7B76055197329720ABE6F7F78D917970A0A6EC6CC80F0AB4DD8B38AECAF2085A121C98651C747EA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="margin: auto; background: none; display: block; shape-rendering: auto;" width="44px" height="44px" viewBox="0 0 100 100" preserveAspectRatio="xMidYMid"><circle cx="50" cy="50" fill="none" stroke="#ffffff" stroke-width="10" r="35" stroke-dasharray="164.93361431346415 56.97787143782138" transform="rotate(171.548 50 50)"><animateTransform attributeName="transform" type="rotate" repeatCount="indefinite" dur="1.9607843137254901s" values="0 50 50;360 50 50" keyTimes="0;1"></animateTransform></circle> [ldio] generated by https://loading.io/ --></svg>

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	dropped
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	dropped
Size (bytes):	608152
Entropy (8bit):	5.631998840329971
Encrypted:	false
SSDEEP:	6144:aGTi6EDhsaYgzEKkVIqBIq80EaSHgdejUmxBjou/GqnCl5LM5cmJ:Xt+XYnqq6HLjUABjou/GqnCl5I
MD5:	4E6CF1DED150C0A4D1B507CD8CA289E6
SHA1:	0C6A21497DE4107470DCA0140687A086580D931A
SHA-256:	97474205288B6D54C9A55B1A8614F92B87082505C1D465E91BCF9B11784E1CC8
SHA-512:	15FA8D725D0AD5E2E11899723EF3295F43A2E9C36685B2FCC7C2BCC3D9F60679605BDA61980608497F0C4D8D8D919C85DDB427051F645524284BD0196E31492C
Malicious:	false
Reputation:	low
Preview:	/* VimeoPlayer - v4.37.7 - 2024-10-02 - https://player.vimeo.com/NOTICE.txt */.import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,t as f,k as h,l as g,m as b,r as E,n as y,p as C,P as T,T as L,o as w,q as A,u as S,v as I,w as P,G as O,y as k,z as R,F as N,A as D,Q as M,S as x,B as V,D as B,H as U,R as F,E as H,I as G,J as W,K as Y,M as q,N as $,O as K,U as j,W as z,X,Y as Z,Z as J,$ as Q,a0 as ee,a1 as te,a2 as ne,a3 as ie,a4 as oe,a5 as re,a6 as ae,a7 as se,a8 as le,a9 as ce,aa as de,ab as ue,ac as pe,ad as _e,ae as ve,af as me,ag as fe,ah as he,ai as ge,aj as be,ak as Ee,al as ye,am as Ce,an as Te,ao as Le,ap as we,aq as Ae,ar as Se,as as Ie,at as Pe,au as Oe,av as ke,aw as Re,ax as Ne,ay as De,az as Me,aA as xe,aB as Ve,aC as Be,aD as Ue,aE as Fe,aF as He,aG as Ge,aH as We,aI as Ye,aJ as qe,aK as $e,aL as Ke,aM as je,aN as ze,aO as Xe,aP as Ze,aQ as Je,aR as Qe,aS as et,aT as tt,aU as nt}from"./vendor.module.js";export{a

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	downloaded
Size (bytes):	25856
Entropy (8bit):	5.301826254785076
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSYmd28AN5AxyXf9N76WczZ:RIT7sZwuvL54WAcl/n
MD5:	6B982EA0A6A079881650E5606790A567
SHA1:	29D4BE972F3FAC6319DAE9C5646173CD557FF0E0
SHA-256:	6D4BE80CD2E845D02066269B52DA5710F4687D18D9812510C589FAA3AD40B8E1
SHA-512:	B7062FC7A1322264EE994997F6153DD7BF19C1AE660E70EE9312E0358AEB2FB44414A149A186BCA1E474C65C667FD9939310A43634DC9B5DA9B5124160FE05D9
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/3852657628303348?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127%2C157%2C223%2C224%2C222%2C178%2C137%2C133%2C125
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=511697&time=1728049148864&url=https%3A%2F%2Fwww.sesamehr.com%2Fsignup%2F
Preview:	{}

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	383
Entropy (8bit):	7.227484051738584
Encrypted:	false
SSDEEP:	6:6v/lhPZslH8+oxcgTBl2tUdWH7HD2KC/H7lm1/cw5ycjaYYCASGYrolVp:6v/7CB8+oxjqVH7HDi4UGja518ol7
MD5:	A1256E782A892D0173D1D6B8FCECCB26
SHA1:	2AA8B6CC7CDAB8C1C44879DAEA432290B4BC4AE4
SHA-256:	0B1E464DCD7C1621FF42D9F74219F44A9C445ED0CF130A876097FBB6E131FC7B
SHA-512:	532BDCD01E7F3EA948C0118646E69F518511F30136DA304E2D574F0D6E4DF42E45A58CFD08AEF19307BDD4117063D3B63F42F7E77C66B20A8FDBFE27063F12BD
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/costarica.png
Preview:	.PNG........IHDR..............w=.....pHYs..........r.n...1IDATH...J.Q..grfW!76..(.".-$uZ.-.........J..Y.......A.......9;6....3.~......?..p..Q..j..~..1,...CF......b.g.S.nV..'Ew..o.+M........y. [f>.q.....]...rKM........Q"...........W.G..\|h..t4...B"Q......XkY..UE..G..?..]..s...yWF..y.).He&x..}..zm5 .V..Y9J..R..S....:.....:k...k....H.t.D].r...I....q)%.T.....IEND.B`.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1831)
Category:	dropped
Size (bytes):	64238
Entropy (8bit):	5.538710039832236
Encrypted:	false
SSDEEP:	1536:kjtJFM10VTBaEs6cTXeGN/2OIznLhjyyBA:D102E2RNchjyn
MD5:	5022CF8109B37622FC9DF99A5F0296CB
SHA1:	76D4ECB8EFFF5FCB585A1D41BC1422BD33D083A2
SHA-256:	8D8EC62630FBEE93207363E7074BC48D497DB1CB2495D670358BFAF962B58163
SHA-512:	3C29C1CA7830ADF25CE0ADA6840CB01787695604E60DA2545772A82261BE029128A5D35791393F31FCF2467C7A7701FAA4AAAE291274B9158EF7380528F8FA5C
Malicious:	false
Reputation:	low
Preview:	(function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ca(this),u=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.xa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.xa};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	331528
Entropy (8bit):	5.598169386821033
Encrypted:	false
SSDEEP:	6144:24pAIGKlqj/31MvO5K1x72Dej7MsEFVVl2bT+lBl:fpAwUj/3ZlgT+l3
MD5:	BDF1F9E220FBCDDA1DF65DA3889E7C39
SHA1:	1A5E61BBFA9B5AA2AEF84144579713A91A411D1E
SHA-256:	C587AB2739F12599F6B1F342651E650F09635ABA030B7C5FB45F4443C696B2BB
SHA-512:	96D7D23132F16C7A9F91718EA66E4709B3055D99B067C766CAE9D1C05EB679F25F29BF0C1672E3F47E8818C4F8F4790F5967B9174373AA62998DDEB2B27E71DE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-C1G7T2YG10&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"27",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","sesamehr\\.es","sesamehr\\.com","sesamehr\\.mx","sesamehr\\.co","sesamehr\\.cl","sesamehr\\.pe","sesamehr\\.com\\.br","sesamehr\\.fr","sesamehr\\.it","sesamehr\\.co\\.uk","sesametime\\.com","sesamehr\\.de","sesamehr\\.cr","sesamehr\\.nl","sesamehr\\.pt","www\\.sesametime\\.com","app\\.sesametime\\.com","try\\.sesamehr\\.","assets\\.sesamehr\\.","hrtalks\\.sesamehr\\.com","superrhheroes\\.sesametime\\.com","help\\.sesamehr\\.com","webinars\\.sesamehr\\.com","email\\.sesamehr\\.com","hub\\.sesamehr\\.com"],"tag_id":109},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","sesametime\\.com","sesamehr"],"tag_id":111},{"function":"__

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	876
Entropy (8bit):	4.79256166999261
Encrypted:	false
SSDEEP:	24:2diO44l/FwCYZkX7QPjJIFfUK0vko1KalWQnhllo/:c35VDUPjSFfUK0sokh
MD5:	FD7A6C871DED0EBF2D56CD7CDC1EE979
SHA1:	F626B841431B792F81EE39C15B833CFE3047AB4B
SHA-256:	C7EAEEFA4CC79F618907E544E40C570955D8E69E522707C68EECB5C0B37914F6
SHA-512:	4F25C99B2C369E9DBDF7FFDEF22B20254DDF6F0B867919F775D33502E8DBB16DD40CF7FD1CE1F07E416302401A51D5D5E8F87AED8D8D628593655CDF298E37C2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M23 23V25C23 25.5304 22.7893 26.0391 22.4142 26.4142C22.0391 26.7893 21.5304 27 21 27H11C10.4696 27 9.96086 26.7893 9.58579 26.4142C9.21071 26.0391 9 25.5304 9 25V16C9 15.4696 9.21071 14.9609 9.58579 14.5858C9.96086 14.2107 10.4696 14 11 14H13M15 10H18L20 12H25C25.5304 12 26.0391 12.2107 26.4142 12.5858C26.7893 12.9609 27 13.4696 27 14V21C27 21.5304 26.7893 22.0391 26.4142 22.4142C26.0391 22.7893 25.5304 23 25 23H15C14.4696 23 13.9609 22.7893 13.5858 22.4142C13.2107 22.0391 13 21.5304 13 21V12C13 11.4696 13.2107 10.9609 13.5858 10.5858C13.9609 10.2107 14.4696 10 15 10Z" stroke="#6C63FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1750
Entropy (8bit):	6.042950035667117
Encrypted:	false
SSDEEP:	48:o44knA9WITjGNtcLJqab3eYGSHF39HtW/m2kQ:2knmWIT6NWLJZSjSHbHtW9kQ
MD5:	A2A85B1B5456D31720ACD9B31284BDD0
SHA1:	D51DFFA3FDC3EAD9A2A2042637B1D6FF35E97B30
SHA-256:	44CA26445BBF7612CE296D09D6B15FCA7D9B5BC2FBB9CCEDAE1C3EB5D34D83F3
SHA-512:	1E039821D368997C7B32094550BA3301EC46C66FFF596A7B3094E953BEE5E016FC3C84AEB6B837F59CD6A247D02852B8F72E4573DA623A7E6F0CACD01D1CFD50
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/netherlands.png
Preview:	.PNG........IHDR..............w=.....pHYs..........r.n....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.5 (Macintosh)" xmp:CreateDate="2022-10-18T13:20:39+02:00" xmp:ModifyDate="2022-10-18T13:24:32+02:00" xmp:MetadataDate="2022-10-18T13:24:32+02:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:b8c745eb-a2ac-4363-92ae-f7ca85a2bc9c" xmpMM:DocumentID="adobe:docid:photoshop:7745cb83-aa43-c941-86d1-9ff0e9878353" xmpMM:OriginalDocumentID="xmp.did:f3

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3683
Entropy (8bit):	4.743317853785646
Encrypted:	false
SSDEEP:	96:uaC8BB+J0kOFPe0YkupPjoyKlPzK3hATqkQ7BPBPPBO0AtFGPxjM7lPNjTPN2:u6BgJ5OFPtGPsFPxqkQ7BPBPPBOdtFGN
MD5:	C9AA0B6EDFBFBBDF1E65F67A873E2703
SHA1:	9AEFFB1E8DF3644EEF568FBE7515A6C4EC260004
SHA-256:	3FA4D7F548A73259C1C57522BD3D0AA34FD43E940335D8C9568B975FD8157D02
SHA-512:	1B68D4311CC7F95CBDE6441BF21239734138A68612D2C768A409759CEA8D044462378AA018E0B54ABFFE581A14A7084488D4A388BECFF46AD9B095FF9B67329C
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/plugins/review-post-plugin-sesame-main/assets/css/style.css?ver=1728049145
Preview:	/* ===========================. General Styles for Post Rating. =========================== /../ Container for the rating section /.#post-rating {. background-color: #ffffff;. border-radius: 1.5rem;. padding-bottom: 1px;. margin: 3rem auto;. padding: 1.3rem 1rem;.}../ Centered heading within the rating section /.#post-rating h2 span , #post-rating .post-rating-tite {. text-align: center;. padding-bottom: 15px;. margin: 0px !important;. margin-top: 0px !important;. padding-top: 0px !important;. font-size: 22px !important;. font-weight: 700;.}.../ ===========================. Star Rating Styles. =========================== /../ Star rating container styling /..star-rating {. direction: rtl; / Reverses the order for right-to-left star display /. unicode-bidi: bidi-override; / Ensures the stars are displayed in reverse order /. display: flex;. justify-content: center;. font-size: 2rem; / Size of the stars /.}../ Hi

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	383
Entropy (8bit):	7.227484051738584
Encrypted:	false
SSDEEP:	6:6v/lhPZslH8+oxcgTBl2tUdWH7HD2KC/H7lm1/cw5ycjaYYCASGYrolVp:6v/7CB8+oxjqVH7HDi4UGja518ol7
MD5:	A1256E782A892D0173D1D6B8FCECCB26
SHA1:	2AA8B6CC7CDAB8C1C44879DAEA432290B4BC4AE4
SHA-256:	0B1E464DCD7C1621FF42D9F74219F44A9C445ED0CF130A876097FBB6E131FC7B
SHA-512:	532BDCD01E7F3EA948C0118646E69F518511F30136DA304E2D574F0D6E4DF42E45A58CFD08AEF19307BDD4117063D3B63F42F7E77C66B20A8FDBFE27063F12BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....pHYs..........r.n...1IDATH...J.Q..grfW!76..(.".-$uZ.-.........J..Y.......A.......9;6....3.~......?..p..Q..j..~..1,...CF......b.g.S.nV..'Ew..o.+M........y. [f>.q.....]...rKM........Q"...........W.G..\|h..t4...B"Q......XkY..UE..G..?..]..s...yWF..y.).He&x..}..zm5 .V..Y9J..R..S....:.....:k...k....H.t.D].r...I....q)%.T.....IEND.B`.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	downloaded
Size (bytes):	608152
Entropy (8bit):	5.631998840329971
Encrypted:	false
SSDEEP:	6144:aGTi6EDhsaYgzEKkVIqBIq80EaSHgdejUmxBjou/GqnCl5LM5cmJ:Xt+XYnqq6HLjUABjou/GqnCl5I
MD5:	4E6CF1DED150C0A4D1B507CD8CA289E6
SHA1:	0C6A21497DE4107470DCA0140687A086580D931A
SHA-256:	97474205288B6D54C9A55B1A8614F92B87082505C1D465E91BCF9B11784E1CC8
SHA-512:	15FA8D725D0AD5E2E11899723EF3295F43A2E9C36685B2FCC7C2BCC3D9F60679605BDA61980608497F0C4D8D8D919C85DDB427051F645524284BD0196E31492C
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.37.7/js/player.module.js
Preview:	/* VimeoPlayer - v4.37.7 - 2024-10-02 - https://player.vimeo.com/NOTICE.txt */.import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,t as f,k as h,l as g,m as b,r as E,n as y,p as C,P as T,T as L,o as w,q as A,u as S,v as I,w as P,G as O,y as k,z as R,F as N,A as D,Q as M,S as x,B as V,D as B,H as U,R as F,E as H,I as G,J as W,K as Y,M as q,N as $,O as K,U as j,W as z,X,Y as Z,Z as J,$ as Q,a0 as ee,a1 as te,a2 as ne,a3 as ie,a4 as oe,a5 as re,a6 as ae,a7 as se,a8 as le,a9 as ce,aa as de,ab as ue,ac as pe,ad as _e,ae as ve,af as me,ag as fe,ah as he,ai as ge,aj as be,ak as Ee,al as ye,am as Ce,an as Te,ao as Le,ap as we,aq as Ae,ar as Se,as as Ie,at as Pe,au as Oe,av as ke,aw as Re,ax as Ne,ay as De,az as Me,aA as xe,aB as Ve,aC as Be,aD as Ue,aE as Fe,aF as He,aG as Ge,aH as We,aI as Ye,aJ as qe,aK as $e,aL as Ke,aM as je,aN as ze,aO as Xe,aP as Ze,aQ as Je,aR as Qe,aS as et,aT as tt,aU as nt}from"./vendor.module.js";export{a

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9548
Entropy (8bit):	7.978538014767999
Encrypted:	false
SSDEEP:	192:bfFBfcTo5hFn2kJaEpgDppytXvtZWfGo+xd4K3RxmMj4ney:bfsOjJlIqBvUR3u4T
MD5:	05DDEED0A6389404149B29C4F285402E
SHA1:	C2B9EBAF074C633947A15CCD80C8DE6DB850BA3F
SHA-256:	94F2F0E5DCC4BF21B46C2B0D87D4D79849D0670FD420313CD1209C7C6B23A808
SHA-512:	AE82006E7C7671F1743780FD0EC19A9AF09EA3FA6E32E68094A423BA653AFB52DB50FDBB718846BBCA219C13A4FFB95971221BFD5CCC9D3A98F04B7D38DEE760
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/familyday-130.webp
Preview:	RIFFD%..WEBPVP8X........>.....ALPH/.....b....$..a.4..8.....ZW.ve.d....O!y......Kz.O/.4V~]...."...7.C...S...X.[.H.b.1.X.B......<._=EId{5...mk..N0..v4N..6.....e......c.....@...v.<.J..N...yD.<_..........................y..y..<v.<.B...<.....2u...?q.....3..y_...`.6..?M.i$.pP.,#.J...ds....G#T.."... MB.mHk..."...H......O...g..)..VP8 .#.......?...>.>.I%."").L....Ma..-....ym....O.<.}.....[...y.z...m.g....]<..O..i.U0{..k...<I........_..i...v..0.....<....:......^#.U.....b.S.^.%].\|..*.5d...b..!Ka...@+.M.b...X.=5Wh...^........8S.3................9...h.)Xq..l...C...j?.l.`.h{&N.].o^..7 P..].."O..g>.(]......Ea.&.#...R..EXj..7.W[.?..Q..x9t........Q._.MS.5..>...P....yh .o.^.....g.2..Sv7....WG.].x..g}.~....o..]h.;.....K@..n.m.)V..m...6....]k...j.P.n[...GZ.v...c\&..2..-1/igW.M.}......Xj.~..+x.........../P....r.cQ....xu#@..,.....`....@....M_..n.6..J.....k...y.E;.l.......=.2=5.#.=.k.Ax....P...8o.-z...v.[@~....1....$.........[...^..\|.X%......\|W.....'.t

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	dropped
Size (bytes):	97984
Entropy (8bit):	5.333709360579286
Encrypted:	false
SSDEEP:	1536:6yc41gIJpNs23jp2LvLaRheeUPZ4lzGrZDII/lNOJanrOb:z1s23jp2L+RheeUPqlzIZEE/8
MD5:	C1E06621030DFCBA15B88ABBCAA546EB
SHA1:	F7B7AE2B4466464D37D362E4B3662CC0CF29241C
SHA-256:	C99D11CB4960D6E1918ED55D5BCBB316D38B51098E2EFC1201904D7274D3273E
SHA-512:	2BE1B89002CB9884C57E51645292B89061FE1A375CF277B504F0221A74C05F6AA6B214354280A30AF7A3580A0F37F8C8138311721CA0557B47BE1164BD8468E9
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/static/",n(n.s=43)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:v:v
MD5:	41C068B2F6D1CCFE3F227223FF489C1E
SHA1:	4CB89C07CAC98EBDBF521BBC4C3F6544B63368AA
SHA-256:	21152971983AB0F08638F7BC1619A54EFD4D9F3115FFDEF92C151B9B9D1A109D
SHA-512:	7911A56666A48A12D0B08145F7FF80650C42A96AD29EB0F7D113C86EE5FA7EFF72C541CA592D43A561EC9A1AD03F3F3EFD5631FAE86F80ECD427A92EAA1C7B72
Malicious:	false
Reputation:	low
URL:	https://js.hs-banner.com/v2/cf-location
Preview:	US-NY

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40808), with no line terminators
Category:	downloaded
Size (bytes):	40808
Entropy (8bit):	5.373477028185836
Encrypted:	false
SSDEEP:	384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj
MD5:	F3B8CE97FF6CE324DA6232DA353ADF40
SHA1:	2A3DAABC70232C6350AB48D32605DC4A6AC1F1FA
SHA-256:	2AC46EBEE46D515BE86DEEBA385B4E41F8CFF160364B362C9A6E153DF327C66B
SHA-512:	000D41CE9E50D0AD4A6A728A9AF37FE1DDC844A565BFD3D883014FBE6DF69CF3BA412F321F51CEECB6E0075A6088EC4FB5F7A0E73127D9B6BAE0C51CA89C7A08
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/sweetalert@2.1.2/dist/sweetalert.min.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.swal=e():t.swal=e()}(this,function(){return function(t){function e(o){if(n[o])return n[o].exports;var r=n[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};return e.m=t,e.c=n,e.d=function(t,n,o){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:o})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=8)}([function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o="swal-button";e.CLASS_NAMES={MODAL:"swal-modal",OVERLAY:"swal-overlay",SHOW_MODAL:"swal-overlay--show-modal",MODAL_TITLE:"swal-title",MODAL_TEXT:"swal-text",ICON:"swal-icon",ICON_CUSTOM:"swal-icon--custom",CONTENT:"swal-content",FOOTER:"

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	29478
Entropy (8bit):	7.979188367856902
Encrypted:	false
SSDEEP:	384:TwTApWeUswgttXVKiTwNkyAJjitTH7GW1zfNQSQEJGzoo73v/gpz4sZ6Zlnzf0RG:UTApWcXkJM9Q+YzfNQSQ+GT733szE
MD5:	0FFE98F2F4663C8536900AA4580D00A1
SHA1:	9A57A3FABFCA1062C05533594D270D08A8F92EFF
SHA-256:	F18C07BEC4C748E5A048DC5A023FAF2AED8AB86E85514DE18ABB8BEF6D42BC12
SHA-512:	74120AAB4DD641AC4151BAFC78762B84BD4BE7F5CB63855CAE3A4ADF440A9401ED5E72FE0D94C7F70F33B3FA862CB3B9DABE7F671530BAD7912A41C3B54377D7
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/v2/ilustracion.webp
Preview:	RIFF.s..WEBPVP8X....0... .....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.3...$.m.05..."b...@..K.;.f..m.ZP..d...n.H.DZ...`....,.. ...YP.........Q.Q"...z...e[........,...[m..'..V..N..AN..tp... ........"..'.p.......8....m..F.(...kz......._.K.;_.....~j....4.........P.MeP.M..#..:..u...._......MqUL....R.I....@....f......T^..N.=.............Q.J.-..L.T?._}?.<..=L7D..R...a..WI.&$lw.j-bpC.H.X..V....LE.jG f....=...v.t.{94.5..d...Z......j.......1h.i1.3u.pS{.....-]z...^..l.o/..n....9l0.[$....W8?...`a'Qd......H....H........YKT.....2{.a..(.XHG) .-...b.m.Z._.

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.32057997949745
Encrypted:	false
SSDEEP:	3:AUwVlGXW62bWstsMIAUh:6Vw41Qh
MD5:	66F71FD47D116DB86B4E8DF35BBC7C64
SHA1:	F4981FDDF53869F53BBEEBE6F6CE76953738AD5F
SHA-256:	08E1109D90A093CFE02FB7E00089CCFA76E16E0999930A85D317815D92DC030A
SHA-512:	B1C12E93DBB9A956A9202AA7631EB77562E7A2FFD84DF0B391D5F7C0EEF558949D96FB173AAC89B5BA6D12D156C717B3D4EFBDCE879EC06AD61E17BD7CF6A8D2
Malicious:	false
Reputation:	low
URL:	https://api.neverbounce.com/v4/poe/notify?key=public_728640ca83230e4192bf4c0af61ea1a1&event=form.load&callback=__neverbounce_862207
Preview:	__neverbounce_862207({"success":"success","execution_time":9})

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	downloaded
Size (bytes):	17245
Entropy (8bit):	7.865436692381872
Encrypted:	false
SSDEEP:	384:SRFrdU3/KAEVP0kbmKDC7ys0jV1U8VQD1KWMRMIJAa:E6/IVck6KDCh0jA11KMa
MD5:	B64B2C26AACB484CC7EB5F0D69F1DFD3
SHA1:	615E2D0DB7B88BE2FA15DBE778F4C9C99BF819F0
SHA-256:	FA0C49A1D25F8D5357DE31CA0507B2BB49EDE75FAC89F2BB723B9342E1045CBF
SHA-512:	4E076EADC6113B6080346E22214C3DB1F0BE6BFE4E4BB3244978314601B369A4C129EFB116C8D859B935FF9F352DD1BDAB219A6BF396575988AF4880730B93DD
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/Corazon.lottie
Preview:	PK...............K............manifest.json%.A.. ....ZLA...p.....&....Pc..].....'..F.c..<A.........Y..F+..Fu..lg..-.`dOEG...r. .j..z..._..R.s.t....(9...By\).`.S.y..^..._.U.&IKJ....PK..............`D....n...4...animations/2dcaaa75-3eeb-4b21-bc50-8126b82c9815.json.VKn.0....5-...~.@..M.a..-..[2(.mj.0=C.......%....a..<.<...<..l..#0L....#69...>.y...m.q6zu5..........Bw....gK.&.29....]...0..y..l.>.8KvX.&...?../.P.d.eq.....6.~..V..b..q..a....d......m..K...I..0~....'......\,.h.. ..YJ.....0I.O....\CVJLH..!.......&(...D......].<.K..P..">.#4...4<'.U..X.-M..o....F..L..H..G.\. 7..Q6.^..hY5C...V]S...~....,.F.......K.hf..~aGX.e.....G.t{y{...j...^i.7B.....s......-p..C4m....(.U.g7./........8...?l.>..>.....[I...4.Q.J...dk.PU(+SU;...u........1\..i..Oa......@..^........1.=..0h..4.UA.J.;.j...yA%.iQ.l.P...4..v(.!}i.k.!..e..i..U.UZ`..Q..1<]..V..t.%.x.....s<.S9..`..k.......e....O.c..[......-.eZ....D...".....l..7....+ .....2.7sP..ez..r^n.9...8..6.1..a...x...')..@.....

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4150)
Category:	downloaded
Size (bytes):	37649
Entropy (8bit):	5.334744572507943
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwxAHXUpxbY/Y3YOgQxzbnYeYZYHYZYVY+YSYMdxPJlvKXuloFdINAO:RIT76HXsZwuvLJn54WAcl/75
MD5:	921CFB01DE13EEC5FFA3C31E4CD2EC72
SHA1:	0291093ACDBB39E4FC5048B3087CECA94464BE2A
SHA-256:	8B2A748DD04AF607FBD22763CC634E38E6253CF43579D215FD918457B3BCC4F6
SHA-512:	A67CC1D6BB142DD63A1A19CC18B0CBD34478C308C3F98E0F5A0EC02D71D572B3FFD6EEC5538B93CBE6548F2788113D7FF1AE9B3AF45F4EDCAB14895671A85B4D
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/885752078714622?v=2.9.170&r=stable&domain=www.sesamehr.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112%2C199%2C198%2C200%2C205%2C206%2C207%2C203%2C195%2C131%2C162%2C194%2C196%2C121%2C156%2C144%2C150%2C188%2C189%2C128%2C231%2C115%2C126%2C232%2C164%2C118%2C234%2C165%2C135%2C122%2C153%2C147%2C113%2C127%2C157%2C223%2C224%2C222%2C178%2C137
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	311
Entropy (8bit):	6.27946819487808
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKcHqlyg44RNczHG8J96AItXHte0qmHT8p:6v/7A/0vZwHIGqIt8kHa
MD5:	B43E597619471193508AD3C099650AD6
SHA1:	5561C180E0D027FCEC2C09E2D0975783245087D8
SHA-256:	278F6CA2DEC0A74579477865AF688CD39F96F7B4B151B0F76BC4FA112B415844
SHA-512:	D4F3E98F7729F1D7232E7EA6FD8AD8D7118083BD839263070181C825591CAF6A123833D620EBB50377C3F24BF5000A868B915CFB019F974627E5A5FF526B01FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....0PLTE...CCW..WGGU..ZFFT..[GGU..ZFFU..ZFFU..ZFFU.KU..Z.m.Q....tRNS.&&]]...............`IDAT.Wc`.................w.`"C,.s..........p...r.!.Zr.#.T.y...C?..!......,b`Y.c.r``P.O$1...A..Q=......IEND.B`.

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5002), with no line terminators
Category:	downloaded
Size (bytes):	5002
Entropy (8bit):	4.875690095889108
Encrypted:	false
SSDEEP:	48:rnF+gynUstetUM4CqYR24ZKOVebUilVtggB5D8IGZxeTyMg5fy5g5N9t3+GIjbM/:rnbsi4mBVYUqt1gt6OH56C5TjV
MD5:	F6A86E8018FC1F6AE254B339ACBD1CDD
SHA1:	9C256AC79696564334355F8C4B848590677FD583
SHA-256:	E6E2A25C4C1B69087D720776FF9569E9698C9EC52BDD5659C346BCACA9CE28D5
SHA-512:	2A1157A5EF95244BB91D86C9C8A42CF55BF0181FA341EA6A6F8667961505FE3406C5825C8DDC4E4DFE9CAF8E3984E73BF751452ECD7C0CA5697EB42738D381D6
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/css/splide.min.css?ver=4.1.3
Preview:	.splide__container{box-sizing:border-box;position:relative}.splide__list{backface-visibility:hidden;display:-ms-flexbox;display:flex;height:100%;margin:0!important;padding:0!important}.splide.is-initialized:not(.is-active) .splide__list{display:block}.splide__pagination{-ms-flex-align:center;align-items:center;display:-ms-flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;-ms-flex-pack:center;justify-content:center;margin:0;pointer-events:none}.splide__pagination li{display:inline-block;line-height:1;list-style-type:none;margin:0;pointer-events:auto}.splide:not(.is-overflow) .splide__pagination{display:none}.splide__progress__bar{width:0}.splide{position:relative;visibility:hidden}.splide.is-initialized,.splide.is-rendered{visibility:visible}.splide__slide{backface-visibility:hidden;box-sizing:border-box;-ms-flex-negative:0;flex-shrink:0;list-style-type:none!important;margin:0;position:relative}.splide__slide img{vertical-align:bottom}.splide__spinner{animation:splide-loading 1s li

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15194
Entropy (8bit):	7.983375841727474
Encrypted:	false
SSDEEP:	384:K2WWno4JHFhuNbbCIfGCaAA7GV0KxopxRTwqrdJ9Jlprngj:K2WWoKSt/OCHuKkxZwqpzpm
MD5:	4604AE3AEC2EF8E9494321D521D09E96
SHA1:	FC40F5C576F2EFE5A9BB11FFFA6253DDDD36F6C5
SHA-256:	E1ED5DD8CAC45583AF97099799144EA3A58D517F7649980B8BA8B50DF5BA53DC
SHA-512:	85AC501353C5793C675648EA0A6F7EB2EED3F7EC83088EA619758923474661FBB7C1F8503FB1B80C300FD36E9D984577DE2647939A4039DF19C3C2469A47A443
Malicious:	false
Reputation:	low
Preview:	RIFFR;..WEBPVP8LE;../../..'1..D..q$u...t.......X..m.i...W.....h....)1Hz..l..../..f...YAj'Uz3.......h.,$....!.AMK..F..s..p...C.r"....y..q...TEz...@Hn..1...Qa..U..QeX....i....9j.d...H...H...M.(;(!....\.EG.Y..X.......J...m....SB..f......#.3.I0..S.i9F.<j.S...".m.q3MO.x+...m..............ye._#...JK..._40....w...z.g....43.\.....b../.S.t..R..1.....>J..~.2]..W.Z....@.B....-.d.j.r....E.t."..t.Jp..EEK%....(Qb(.j!...s.CrV.=....}/...6...;..c...P ....+..V...;...w.../........2v..W.)...:1..H.F.a...$.@a.w.dA+..v.H...,.-...f.....K@..?Dn.I.0/..M...Zt....LZ..%.( V.nJ.4..T(C...(21Y.I.$A...Q.^...9..k....m.ev.}......?Y_.....l.....;`..~..'.H...G...=....>.P...m..Q..... n.v.k....m.8"..m!.X \....IO..3v.m ...Sm28[m#S..K.oHN.>s.&E..{..S.oy..}.?..~....D.v.y..A...iq...<K....m[...(.by_...r.F.D.sxoeP.P.A:.....m..?h"...hi$}.A.{..........g"..@..8...9............{..HVsIS....K...Pm.E....T.bk.'.Yme...".&Rr.G.e.<.\.......O.W"./Q..m......H..d.....-{...>w..S..!.ba....0h.&].E..

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	143361
Entropy (8bit):	4.9467474575791925
Encrypted:	false
SSDEEP:	3072:IIZV4WKzPniGSdDznXHMCPaLtjCMRXaIe:pKqdDIRXab
MD5:	A29D7BE306FFE775320654DE25145405
SHA1:	50F9A82F46D82A0E1012264D180B6A222FCB18DA
SHA-256:	19FEC16AA62CD87222C215014D0B62EDEBD1932A87290092F4E1D7B5A05477FE
SHA-512:	C08E5184C905B354B838EE01BAF0AF04E925FE559860D096DAA925BC56B94FF9517FFE94F32F2767F95D19A343EEF1EC8E48E1E4A6B7C52175911C6AA78D4673
Malicious:	false
Reputation:	low
URL:	https://cmp.inmobi.com/tcfv2/google-atp-list.json
Preview:	[{"provider_id":"43","provider_name":"AdPredictive","policy_url":"https://adpredictive.com/privacy","domains":"adpredictive.com adpredictive.io adpredictive.net platform.adpredictive.com platform.adpredictive.io"},{"provider_id":"46","provider_name":"Adriver","policy_url":"https://www.adriver.ru/about/privacy-en/","domains":"ad.adriver.ru adriver.ru boom-stage.adriver.ru boom1.adriver.ru cgi.adriver.ru content.adriver.ru datariver.ru dsp-moderation.adriver.ru dsp.adriver.ru dsp.soloway.ru dsp2.adriver.ru ead.adriver.ru edp2.adriver.ru exposure.adriver.ru foo.datariver.ru fp-content.adriver.ru fp.adriver.ru fp.fap1.adriver.ru gb.adriver.ru gz.adriver.ru js.adriver.ru kz.kaztel1.adriver.ru kz1.adriver.ru lb.adriver.ru log3.adriver.ru lw1.adriver.ru masterh.adriver.ru media.soloway.ru mh6.adriver.ru mh8.adriver.ru mirror.adriver.ru pb.soloway.ru rad*.adriver.ru rdg1.adriver.ru rosst.adriver.ru rsport.adriver.ru servers1.adriver.ru servers2.adriver.ru servers3.adriver.ru servers5.adriv

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	940
Entropy (8bit):	4.587934806274091
Encrypted:	false
SSDEEP:	24:2diO44l/BnmpTo0TMpqdWYiuzbfKk4ZbHkaeOJG4cPnhllo/:c358TEpuPKk4ZbH/eGGE
MD5:	85C4D9ED57D6AA3E8D304EAFE24DFECF
SHA1:	2CA627200BFE2ADBE2DAE2893E50847D42341F3D
SHA-256:	B91B34C67AC902111B3731B59647A30BD25F349DB88FC0D487BA8110893897D0
SHA-512:	2C17B9120717870645F343941F31A5EA53C7C259E0C5531AD42C2F7C6294E181B57DC76F4D64C51A69EBC075E09788F9BB01FB85CA4B47306133D78F75BC2851
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M15 18L17 20L21 16M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.6478 9 16.8181 9 18Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	49712
Entropy (8bit):	7.958790313946667
Encrypted:	false
SSDEEP:	768:FToMcVocQYxKj/1aKaHW+qkSI8d9rXDtuL30fNHbmWWC5QEF0U3zNQMGy51M6x:ATxK5aKaHWDH93PNrWCpF02KMGy513x
MD5:	C15F7A40E29B9358ADA641A9AB8BFC44
SHA1:	91E172DB0270BB4C00A2C80BF5F36842C0C71347
SHA-256:	C65DB8B1FFF235151D1F27C0A8D8AEB55043646CA71C89DE9FA5082F7A1A2EC5
SHA-512:	540D5CC01C5B9E38E2F17982D1D0385B977F94CC9FADE8AD48848A20FBAD1C4D627195281B235905A817ACC341004F530E1EAC9834B5D62B90E1BC15B8AFCA81
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/administraci_n.webp
Preview:	RIFF(...WEBPVP8X....0......F..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.H...$.m.H..g......4C...w..SO.m..%I..k./....d.....L......L.QKf.fffvf..0.0...^..g{b.]~kY....-I.%I.m.......o\.........q[.mMDL..6..I.yDf....v.+3....."b..w..................~.~.E............. '..A.......... ." ...rX@.D.. ...."..... .....z.....0...aA@. "............{......\|.{...O..;....3......$.`b.......H..{........8$..M.@H ..'@.L !!..=..\..!.(....lJ... L...................^.w.......^.dB..]......@.u303q....!AJ...].a.i.&.....2IH.H.!.^....$.B.....2!.\|........@.....0.I.?.W..../.

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3683
Entropy (8bit):	4.743317853785646
Encrypted:	false
SSDEEP:	96:uaC8BB+J0kOFPe0YkupPjoyKlPzK3hATqkQ7BPBPPBO0AtFGPxjM7lPNjTPN2:u6BgJ5OFPtGPsFPxqkQ7BPBPPBOdtFGN
MD5:	C9AA0B6EDFBFBBDF1E65F67A873E2703
SHA1:	9AEFFB1E8DF3644EEF568FBE7515A6C4EC260004
SHA-256:	3FA4D7F548A73259C1C57522BD3D0AA34FD43E940335D8C9568B975FD8157D02
SHA-512:	1B68D4311CC7F95CBDE6441BF21239734138A68612D2C768A409759CEA8D044462378AA018E0B54ABFFE581A14A7084488D4A388BECFF46AD9B095FF9B67329C
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/plugins/review-post-plugin-sesame-main/assets/css/style.css?ver=1728049095
Preview:	/* ===========================. General Styles for Post Rating. =========================== /../ Container for the rating section /.#post-rating {. background-color: #ffffff;. border-radius: 1.5rem;. padding-bottom: 1px;. margin: 3rem auto;. padding: 1.3rem 1rem;.}../ Centered heading within the rating section /.#post-rating h2 span , #post-rating .post-rating-tite {. text-align: center;. padding-bottom: 15px;. margin: 0px !important;. margin-top: 0px !important;. padding-top: 0px !important;. font-size: 22px !important;. font-weight: 700;.}.../ ===========================. Star Rating Styles. =========================== /../ Star rating container styling /..star-rating {. direction: rtl; / Reverses the order for right-to-left star display /. unicode-bidi: bidi-override; / Ensures the stars are displayed in reverse order /. display: flex;. justify-content: center;. font-size: 2rem; / Size of the stars /.}../ Hi

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	downloaded
Size (bytes):	16738
Entropy (8bit):	7.878869949225586
Encrypted:	false
SSDEEP:	384:gwJcZYze5hhhaFrVoXl1xFGYVuUHa4Gdg3m0AEr:gucZIe5ha5VoXlBBVt1ei
MD5:	39CCF12B2BF099E909387F7AF006D85B
SHA1:	A9C91805591A6F35A9FCB5620CE2CAC7D5CE32E3
SHA-256:	85361A90C89B0785E8F9928BEDBDFFBD4AA006FEF1D74A6AACC15AA718911C9D
SHA-512:	DFE37E1B5F11EFF4CCA2C9AA9CF33AE0048F1C195AE6E96F724EBEFF098C663FA57483C8220DD1C284B25F42FE77D8D718A5AF86C4B247B76D4C27A292DCF98F
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/Rocket.lottie
Preview:	PK...............'............manifest.json%.A.. ....ZL[,.=.+o`\..h.f@.izw..g......0......<..F......F...S.")...:2..)....L8.....U0..y...(E.c..~.T.''..B(.+....J1.Z.}.......,iM.....PK..............M,....\!..4...animations/6393c56a-5036-4fb2-bbad-32e3bd1cd6ae.json.]n.6..b.&D....m..@.Xl...A..r...In..9.e/......8.$..F.S....qD.8.9g..!w..l."v.n.K.....:.i.I......\.....+.,lR.).e.2s.t...;gHR$......sVH#...5>d.a?....bB...(D.8."w.f7..Xo...w....`.@3U!..]"'A.[V...........Z.Bcq.Sk...t....S..e.qR...P.>..i...h.A..l..R.B..o.h(.C.....v.2.;sy.y..5.3.F.T....3..i.z...e}..H?.B....E.=.]W.i..F...Q._.&...J.0....Z....l.@(.~_.5y..zn.Q...-J....N...O...9..~.xY.s]/.MD...~..k..V..h R/....W.i....i...e..(.q..U.O.%.ds..kW[..y....$....5).k.\....._...x.N..$K.../...&....;.......o......L'.....6..M....p..i.....z0...0.l..&..Y...y2.IM..5.K!...a.j7..{#0...\{....e....9Z....1.\|E.j..n...3;../.\.&.3.*.G....w?....&.)..aX.."...D...VH_..i.J...fRp........g4h.h@.L.ys5.y@.az..E.E

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4006)
Category:	dropped
Size (bytes):	154787
Entropy (8bit):	5.599319762284057
Encrypted:	false
SSDEEP:	3072:02UApAJOtXxgSMaY4j4pG3I3diG9aDNqBBCEc7lMrKcmCBPd/OUBPSRUqDHm:02UAphtXxgSMaY4j4pEIdiG9axqBwEc0
MD5:	C5B86D5618A1626AC745801CB49F18C0
SHA1:	69050E80541F39C48912C7BA7BC4BDEF666D7D63
SHA-256:	26FBD296971B8FE3255AC2F53BCB5BB089A79FEFE82FB177E47FE372C919D942
SHA-512:	D2B7BFCA8AACBACD61E721C85B033E185E2D81707B0559EB615F54BA7783F3140ADE0C6C98174A9B5FB5C1B5C7F395A543E387C81863065551A4DDFA925719A9
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15194
Entropy (8bit):	7.983375841727474
Encrypted:	false
SSDEEP:	384:K2WWno4JHFhuNbbCIfGCaAA7GV0KxopxRTwqrdJ9Jlprngj:K2WWoKSt/OCHuKkxZwqpzpm
MD5:	4604AE3AEC2EF8E9494321D521D09E96
SHA1:	FC40F5C576F2EFE5A9BB11FFFA6253DDDD36F6C5
SHA-256:	E1ED5DD8CAC45583AF97099799144EA3A58D517F7649980B8BA8B50DF5BA53DC
SHA-512:	85AC501353C5793C675648EA0A6F7EB2EED3F7EC83088EA619758923474661FBB7C1F8503FB1B80C300FD36E9D984577DE2647939A4039DF19C3C2469A47A443
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/oficina-inside.webp
Preview:	RIFFR;..WEBPVP8LE;../../..'1..D..q$u...t.......X..m.i...W.....h....)1Hz..l..../..f...YAj'Uz3.......h.,$....!.AMK..F..s..p...C.r"....y..q...TEz...@Hn..1...Qa..U..QeX....i....9j.d...H...H...M.(;(!....\.EG.Y..X.......J...m....SB..f......#.3.I0..S.i9F.<j.S...".m.q3MO.x+...m..............ye._#...JK..._40....w...z.g....43.\.....b../.S.t..R..1.....>J..~.2]..W.Z....@.B....-.d.j.r....E.t."..t.Jp..EEK%....(Qb(.j!...s.CrV.=....}/...6...;..c...P ....+..V...;...w.../........2v..W.)...:1..H.F.a...$.@a.w.dA+..v.H...,.-...f.....K@..?Dn.I.0/..M...Zt....LZ..%.( V.nJ.4..T(C...(21Y.I.$A...Q.^...9..k....m.ev.}......?Y_.....l.....;`..~..'.H...G...=....>.P...m..Q..... n.v.k....m.8"..m!.X \....IO..3v.m ...Sm28[m#S..K.oHN.>s.&E..{..S.oy..}.?..~....D.v.y..A...iq...<K....m[...(.by_...r.F.D.sxoeP.P.A:.....m..?h"...hi$}.A.{..........g"..@..8...9............{..HVsIS....K...Pm.E....T.bk.'.Yme...".&Rr.G.e.<.\.......O.W"./Q..m......H..d.....-{...>w..S..!.ba....0h.&].E..

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	331562
Entropy (8bit):	5.598405787141068
Encrypted:	false
SSDEEP:	6144:24pAIGKlqu/31MvO5K1x72Dej7MsEFVVl2bT+lBe:fpAwUu/3ZlgT+lw
MD5:	C767107B86843E875439C23EF8590F89
SHA1:	F94C1A81040B118A7DEE002C7D091BBAE6A17113
SHA-256:	6B392E1F8AEC0E361AE9C35662706090A071622B42F493EB306E3535720D82C4
SHA-512:	B085708AA5744AB94F62840524ACCCC5D130FF50E6D2AFFDE3894D08B7095D16243EFCA747610B60C333E0E6E147D3750B071FB0476D3893C4573768576D4963
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"27",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","sesamehr\\.es","sesamehr\\.com","sesamehr\\.mx","sesamehr\\.co","sesamehr\\.cl","sesamehr\\.pe","sesamehr\\.com\\.br","sesamehr\\.fr","sesamehr\\.it","sesamehr\\.co\\.uk","sesametime\\.com","sesamehr\\.de","sesamehr\\.cr","sesamehr\\.nl","sesamehr\\.pt","www\\.sesametime\\.com","app\\.sesametime\\.com","try\\.sesamehr\\.","assets\\.sesamehr\\.","hrtalks\\.sesamehr\\.com","superrhheroes\\.sesametime\\.com","help\\.sesamehr\\.com","webinars\\.sesamehr\\.com","email\\.sesamehr\\.com","hub\\.sesamehr\\.com"],"tag_id":109},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","sesametime\\.com","sesamehr"],"tag_id":111},{"function":"__

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16652
Entropy (8bit):	7.988306051450174
Encrypted:	false
SSDEEP:	384:o4EvObPscMh4Zl2S8yJ8r92SYvomK9dCydZfvGu/73gmm:lD4mZwSPJ8sSYTK9drZfvhG
MD5:	8C4552FDE9841A69389D7C2F6D69969B
SHA1:	D2F71F551B19DB4FB751C9721721CC9B827A068D
SHA-256:	3A5B6C32397A67D0EC52AF0AAE2AD8FC626D1206FC68A495FAA9DB8385D7EF99
SHA-512:	D22F9ED31BA11A98367436D111D9C4A3E44C7EF6530F436AD20EC9E150185372442A396579F2EEF0E8835FCD0088A6D5B6518EB16F107834C1BD04064C541EE5
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/familyday-297.webp
Preview:	RIFF.A..WEBPVP8X........>.....ALPH/.....b....$..a.4..8.....ZW.ve.d....O!y......Kz.O/.4V~]...."...7.C...S...X.[.H.b.1.X.B......<._=EId{5...mk..N0..v4N..6.....e......c.....@...v.<.J..N...yD.<_..........................y..y..<v.<.B...<.....2u...?q.....3..y_...`.6..?M.i$.pP.,#.J...ds....G#T.."... MB.mHk..."...H......O...g..)..VP8 .?..p....?...>...G."!........l..k..wn...w.=.}....U.s.Y............<.}hy..p...S.O...?......./..ml.e....$.'.?......._.~.>..#........k.w..".......g...n........~.........G._./...=,...].?........=.../.>..-="\.....f.+.......ax..?}....p...F..D+...Q..%.).-=.......\|z...o.X.3.<......d..o..i.4..r..@..{...P).(F#....z.5..j.x.O*?.i.[..%ND+b...'.<wIA...!.A....j.G...!......ao\|..?D.>.....".-..?9.;n...x~..b.h..+.........;'.#1A..M.._..S(]....cu.Iz.....Xx..j.F.w.M.tr....!p.@).....q...)..<..@.oob."wR...>.>E.7.O...G?...........B.. .U.....Y....o........f..X.33..$....'.M.U9..D.~>....M:...:./7....r:.a.....SC...K..)...D<........T~.h....

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1128
Entropy (8bit):	4.526655604111
Encrypted:	false
SSDEEP:	24:2diO44l/96jVe/2/7hCR1zUXC82JtOYMrJgPE6/aPnhllo/:c35sj2YhE1Q+IYMrJ9kn
MD5:	B06CE5BC7A4E613AF99840C29DCE5EBE
SHA1:	8D76463EA4B3ACB8E15EC44BB613A2F015140A4C
SHA-256:	6D372EA9BD81641C625D88A1060301DAFFEAD5F6983F03AED699275026B57AFE
SHA-512:	A0C9F96A252FB12E4C4D505C7B9A7EC52665719FE471873A90529133DA95D9FED798C59E22FBBCE5AB5FEEA1813D5438A8CCC94307CE0B62F66EBD2729D429D5
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-7.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M24 14C24.7956 14 25.5587 14.3161 26.1213 14.8787C26.6839 15.4413 27 16.2044 27 17C27 17.7956 26.6839 18.5587 26.1213 19.1213C25.5587 19.6839 24.7956 20 24 20M16 14V25C16 25.2652 15.8946 25.5196 15.7071 25.7071C15.5196 25.8946 15.2652 26 15 26H14C13.7348 26 13.4804 25.8946 13.2929 25.7071C13.1054 25.5196 13 25.2652 13 25V20M18 14L22.524 10.23C22.6555 10.1205 22.8154 10.0508 22.9851 10.0289C23.1548 10.0071 23.3271 10.034 23.482 10.1067C23.6369 10.1793 23.7679 10.2946 23.8597 10.439C23.9514 10.5834 24.0001 10.7509 24 10.922V23.078C24.0001 23.2491 23.9514 23.4167 23.8597 23.5611C23.7679 23.7055 23.6369 23.8207 23.482 23.8934C23.3271 23.966 23.1548 23.9929 22.9851 23.9711C22.8154 23.9493 22.6555 23.8795 22.524 23.77L18 20H10C9.73478 20 9.48043 19.8947 9.29289 19.7071C9.10536 19.5196 9 19.2652 9 19V15C9 14.7348 9.10536 14.4804 9.29289 14.2929C9.48043

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1192
Entropy (8bit):	4.555141017493368
Encrypted:	false
SSDEEP:	24:2diO44l/FwCSBWhBSGTo0TMpqdWYiuzbfKk4ZbHkaeOJG4cWQnhllo/:c35VSBzGTEpuPKk4ZbH/eGGg
MD5:	33F4F6B85978A47E43DEFFD425AE8744
SHA1:	E3D66EB9DF631706647445785B189EB22A332B6B
SHA-256:	8BD50BEAAAA05384AA393B089E8680C4BE05EEC7750AA8A582622920CAB21915
SHA-512:	FCC638D9384666A076B0E75ED43EE09294531B53AE9A1EFB19129BD8326479E98CC69A07D7553E66BE4BC4D1F3F10C7E3ECF36ECF1A9BFAF1E44AFE79CCD923B
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-13.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M15 16H15.01M21 16H21.01M15.5 21C15.8259 21.3326 16.2148 21.5968 16.6441 21.7772C17.0734 21.9576 17.5344 22.0505 18 22.0505C18.4656 22.0505 18.9266 21.9576 19.3559 21.7772C19.7852 21.5968 20.1741 21.3326 20.5 21M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40808), with no line terminators
Category:	dropped
Size (bytes):	40808
Entropy (8bit):	5.373477028185836
Encrypted:	false
SSDEEP:	384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj
MD5:	F3B8CE97FF6CE324DA6232DA353ADF40
SHA1:	2A3DAABC70232C6350AB48D32605DC4A6AC1F1FA
SHA-256:	2AC46EBEE46D515BE86DEEBA385B4E41F8CFF160364B362C9A6E153DF327C66B
SHA-512:	000D41CE9E50D0AD4A6A728A9AF37FE1DDC844A565BFD3D883014FBE6DF69CF3BA412F321F51CEECB6E0075A6088EC4FB5F7A0E73127D9B6BAE0C51CA89C7A08
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.swal=e():t.swal=e()}(this,function(){return function(t){function e(o){if(n[o])return n[o].exports;var r=n[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,e),r.l=!0,r.exports}var n={};return e.m=t,e.c=n,e.d=function(t,n,o){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:!1,enumerable:!0,get:o})},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="",e(e.s=8)}([function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o="swal-button";e.CLASS_NAMES={MODAL:"swal-modal",OVERLAY:"swal-overlay",SHOW_MODAL:"swal-overlay--show-modal",MODAL_TITLE:"swal-title",MODAL_TEXT:"swal-text",ICON:"swal-icon",ICON_CUSTOM:"swal-icon--custom",CONTENT:"swal-content",FOOTER:"

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4842), with no line terminators
Category:	dropped
Size (bytes):	4842
Entropy (8bit):	5.237361087857328
Encrypted:	false
SSDEEP:	96:+AtyN0n7SUVPrB7PqN7ncXkl6g8sQh/nJPVEzXg1nRexv:+AtyN0n2UHPO7ncXkdVQhPJP1p8
MD5:	D53F26CE71A7333D477B01F52BDADE3E
SHA1:	524408BE370C364FC1EF156CF43434705D31CC42
SHA-256:	428FEFA036DE5A227B40945C94BE22B37A89516BC6B8A5C0DD09B88E17FD9DDF
SHA-512:	A68BD93DB533B2532954155FDF6CBE2CAB8A7453B6A005D4B9ECFBA214C9E95485F684075ABD67FB4EAF13DFF9BDB7995E2291F60FDD045F1E9EA4A9EBC3186D
Malicious:	false
Reputation:	low
Preview:	var FPROM=function(){"use strict";var c={},r="https://t.firstpromoter.com/tr",n="https://t.firstpromoter.com/get_details",f=null,t="_fprom_details",i="_fprom_tid",o="_fprom_ref",e=86400,a=1440,u=["fp_ref","fpr","via","ref","a","_from","_by","deal","_go","_get"],d=!1;function l(){return window.fprom_loaded}function s(n){c=function(n,e){if(!e)return n;var t,i={};for(t in n)n.hasOwnProperty(t)&&(i[t]=n[t]);for(t in e)e.hasOwnProperty(t)&&(i[t]=e[t]);return i}(c,n)}function _(n,e){return(new RegExp("^(?:.*?\\.)?([a-zA-Z0-9\\-_]{"+e+",}\\.(?:\\w{2,8}\|\\w{2,5}\\.\\w{2,4}))$").exec(n)\|\|[])[1]\|\|""}function p(){var n,e;c.domain=(n=_(e=window.location.hostname,3),e=_(e,4),n.length>e.length?n:e),c.test_mode="1"===x("test_mode"),c.test_mode\|\|(c.cookie_tid=v(i),c.cookie_ref_id=v(o),c.details=g(v(t),!0)),c.referrer=document.referrer,c.url_ref_id=function(){var e;c.custom_param&&u.unshift(c.custom_param);return u.some(function(n){return e=x(n)}),e}(),c.ref_id=c.url_ref_id\|\|c.cookie_ref_id,c.url=windo

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4006)
Category:	downloaded
Size (bytes):	154810
Entropy (8bit):	5.599566121585692
Encrypted:	false
SSDEEP:	3072:02UApAJOtXxgSMaY4j4pG3I3diG9aDNqBBCEc7lMrKcmCBPd/OUBPSRUqDHU:02UAphtXxgSMaY4j4pEIdiG9axqBwEcG
MD5:	B19187A7E0B3DB9261FBDEE1C9D9829E
SHA1:	DD1F6633E0A7137B11EE3D288DA728A2D2237516
SHA-256:	0C1ACA5590A6867981DC850EEDA40388B14EB66A1BD3F1DD08B67833B46F24FE
SHA-512:	4E7C6A03E5E9CCF20D562C01301C13EBE6BDC2F82C77CC59CC3FFCC6C575A781C3D5C47C9F9EBAC92ADE746549ACC96AD7A4A9DDF14F2E5637891DB8A3D6E98E
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-4356324893470239
Preview:	(function(sttc){'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	91729
Entropy (8bit):	5.529356354156138
Encrypted:	false
SSDEEP:	768:j9BMXfvqnIgZCDSxCJ2PUNkCIXdMv++jnUb2UO5RhA+Kgqr5H0KtoaskDb1T16ZA:yfvMS8ARqzuSR1MPIN6Y1EcNzWwlplh1
MD5:	F4A7C3BE38AEBFC93BBABAC26A17711D
SHA1:	433EF4F152D7FA5087FA123881E2095ABA7AA1A7
SHA-256:	9CC0A3844574595578E1BABEB7FF35D03D5B57F21FAE3CA5D23B464D613BDA33
SHA-512:	4761582A9402A7827137A3B48BD9EF845119E7A34842FB6D9FC8B30F5F951B9ED7373DF07619EA7E933730349545C35FEBF2FC819C483437D305B3BFB882EE2D
Malicious:	false
Reputation:	low
URL:	https://js.usemessages.com/conversations-embed.js
Preview:	!function(e){var t={};function i(s){if(t[s])return t[s].exports;var n=t[s]={i:s,l:!1,exports:{}};e[s].call(n.exports,n,n.exports,i);n.l=!0;return n.exports}i.m=e;i.c=t;i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})};i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};i.t=function(e,t){1&t&&(e=i(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var s=Object.create(null);i.r(s);Object.defineProperty(s,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var n in e)i.d(s,n,function(t){return e[t]}.bind(null,n));return s};i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};i.d(t,"a",t);return t};i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};i.p="//static.hsappstatic.net/conversations-embed/static-1.18177/";i(i.s=0)}([function(e,t,i){"use strict"

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	683
Entropy (8bit):	5.2867929689472675
Encrypted:	false
SSDEEP:	12:TMHdiO4/KYtoZ+TfsKcXs+dQDjxA4SQHFR4ZXxfPzqLQLSupDKpOqfiYn:2diO4LpQKc8xDjx5SKReNb6QL5gprfl
MD5:	6EB1B168756A0758720CD21E4B711AE8
SHA1:	9723D8587DEA3DCFCD5ADD8AB75BC72DE36A2FD9
SHA-256:	E79EF5AFB7F839E3259EE6B3288AC03C39297A150D0586EC2D35864551E1BC61
SHA-512:	2A000DA25ABA95358D09A5929E5608418D7ACBCC36FEDD58C7B76055197329720ABE6F7F78D917970A0A6EC6CC80F0AB4DD8B38AECAF2085A121C98651C747EA
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/loading.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" style="margin: auto; background: none; display: block; shape-rendering: auto;" width="44px" height="44px" viewBox="0 0 100 100" preserveAspectRatio="xMidYMid"><circle cx="50" cy="50" fill="none" stroke="#ffffff" stroke-width="10" r="35" stroke-dasharray="164.93361431346415 56.97787143782138" transform="rotate(171.548 50 50)"><animateTransform attributeName="transform" type="rotate" repeatCount="indefinite" dur="1.9607843137254901s" values="0 50 50;360 50 50" keyTimes="0;1"></animateTransform></circle> [ldio] generated by https://loading.io/ --></svg>

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48449)
Category:	downloaded
Size (bytes):	73160
Entropy (8bit):	5.288404468319956
Encrypted:	false
SSDEEP:	768:hrDTClRYf9tFz5XKuaJuZMpDaIi0oO3vYCRuB+MJ534ywu9uqkjwxRXCKVNTeccy:hbCzItFzdZIBj3AvB+MJ5ocC3WsRw9
MD5:	78F9ABF2D03F7EE6A755E0178D41F2F8
SHA1:	9368DE7D2E8B0D335ADBAAB171143E307ED5FB54
SHA-256:	2D5FA531E30AC3DEBAD673003128F1CA9AD3C964EF17B547377E7ED09BD4504F
SHA-512:	C138CDBCC824524CBD5CBFA8EDF966ACF66462916349A5D9539723C6F5F10F44357059CC28DDBB95D50D3E17710E9F533BEBB658D82527D980804B8A3A31F9D1
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/sweetalert2@10
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t=t\|\|self).Sweetalert2=e()}(this,function(){"use strict";function r(t){return(r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}function a(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o(t,e){for(var n=0;n<e.length;n++){var o=e[n];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),Object.defineProperty(t,o.key,o)}}function u(t,e,n){return e&&o(t.prototype,e),n&&o(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n,o=arguments[e];for(n in o)Object.prototype.hasOwnProperty.call(o,n)&&(t[n]=o[n])}return t}).apply(this,arguments)}function c(t){return(c=Object.setPrototypeOf?Object.getP

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	6.27946819487808
Encrypted:	false
SSDEEP:	6:6v/lhPI0g0Dl55dKcHqlyg44RNczHG8J96AItXHte0qmHT8p:6v/7A/0vZwHIGqIt8kHa
MD5:	B43E597619471193508AD3C099650AD6
SHA1:	5561C180E0D027FCEC2C09E2D0975783245087D8
SHA-256:	278F6CA2DEC0A74579477865AF688CD39F96F7B4B151B0F76BC4FA112B415844
SHA-512:	D4F3E98F7729F1D7232E7EA6FD8AD8D7118083BD839263070181C825591CAF6A123833D620EBB50377C3F24BF5000A868B915CFB019F974627E5A5FF526B01FB
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2023/06/germany.png
Preview:	.PNG........IHDR..............Y .....sBIT.....O.....pHYs..........}.8....tEXtSoftware.www.inkscape.org..<....0PLTE...CCW..WGGU..ZFFT..[GGU..ZFFU..ZFFU..ZFFU.KU..Z.m.Q....tRNS.&&]]...............`IDAT.Wc`.................w.`"C,.s..........p...r.!.Zr.#.T.y...C?..!......,b`Y.c.r``P.O$1...A..Q=......IEND.B`.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	299
Entropy (8bit):	5.0999304086595165
Encrypted:	false
SSDEEP:	6:tI9mc4slzPDN9j4sacRdHn1oVaafT4hg7ptVaa2rdGoScQHnDp2:t4JDQCnHafT4hWX27QHnA
MD5:	9B0E557745BD84BDACDDA58817A58CBB
SHA1:	F9E11D51679C95E1056831B99BBE09008D999D9E
SHA-256:	DC148FA8B264165AEB7418A450B25EEF969ED9206F48032E28A93D0C7F56983C
SHA-512:	C6D33CAA49933192999BF1CE078FEACA39255F31BC08ABC94FC4C1D5F4EC7E01D45B8CD64CE8B196572CD183F8A480C55418EEF1E202EDA28AB27DCE7A139E9E
Malicious:	false
Reputation:	low
URL:	https://assets.sesamehr.com/hubfs/Dev%20Resources/caret-down.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="8.277" height="4.695" viewBox="0 0 8.277 4.695">. <path id="caret-down" d="M11.852,192h7.163a.556.556,0,0,1,.393.949l-3.58,3.583a.558.558,0,0,1-.788,0l-3.58-3.583A.556.556,0,0,1,11.852,192Z" transform="translate(-11.295 -192)" fill="#1f2d52"/>.</svg>.

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1570), with no line terminators
Category:	downloaded
Size (bytes):	1570
Entropy (8bit):	4.896811138540167
Encrypted:	false
SSDEEP:	48:/8SggskKyKLCwp+Tfa8YCAGYcsQPX63HyvK0Mb:/8da56/0Tfa8FRsSX63Hyv3Mb
MD5:	F673178D3585BFD26489B0559D3A2641
SHA1:	4CBBE806357D087DFE490F92FB9FB519E77C06C0
SHA-256:	76A67F34264911D75244E86E461232902553DA4326C4B363398FD942613A62D1
SHA-512:	D58338C10EE6115D4EFFBADE303B459C7D584D4E1C4E165A8999C599A39A748642A2BFA0085EABE2578E2FAE1468EA079EFC4C8D045FC20E7824334B847EB6FF
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/print.css?ver=3.0
Preview:	@media print{@page{margin:2cm}.entry-header,.site-footer{margin:0}.posts{padding:0}.entry-content,.entry-content p,.section-inner,.section-inner.max-percentage,.section-inner.medium,.section-inner.small,.section-inner.thin{max-width:100%;width:100%}body{background:#fff !important;color:#000;font:13pt Georgia,"Times New Roman",Times,serif;line-height:1.3}h1{font-size:20pt}h2,h2.entry-title,h3,h4,.has-normal-font-size,.has-regular-font-size,.has-large-font-size,.comments-header{font-size:14pt;margin-top:1cm}a{page-break-inside:avoid}blockquote{page-break-inside:avoid}h1,h2,h3,h4,h5,h6{page-break-after:avoid;page-break-inside:avoid}img{page-break-inside:avoid;page-break-after:avoid}table,pre{page-break-inside:avoid}ul,ol,dl{page-break-before:avoid}a:link,a:visited,a{background:rgba(0,0,0,0);font-weight:bold;text-decoration:underline}a{page-break-inside:avoid}a[href^=http]:after{content:" < " attr(href) "> "}a:after>img{content:""}article a[href^="#"]:after{content:""}a:not(:local-link):af

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	91729
Entropy (8bit):	5.529356354156138
Encrypted:	false
SSDEEP:	768:j9BMXfvqnIgZCDSxCJ2PUNkCIXdMv++jnUb2UO5RhA+Kgqr5H0KtoaskDb1T16ZA:yfvMS8ARqzuSR1MPIN6Y1EcNzWwlplh1
MD5:	F4A7C3BE38AEBFC93BBABAC26A17711D
SHA1:	433EF4F152D7FA5087FA123881E2095ABA7AA1A7
SHA-256:	9CC0A3844574595578E1BABEB7FF35D03D5B57F21FAE3CA5D23B464D613BDA33
SHA-512:	4761582A9402A7827137A3B48BD9EF845119E7A34842FB6D9FC8B30F5F951B9ED7373DF07619EA7E933730349545C35FEBF2FC819C483437D305B3BFB882EE2D
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function i(s){if(t[s])return t[s].exports;var n=t[s]={i:s,l:!1,exports:{}};e[s].call(n.exports,n,n.exports,i);n.l=!0;return n.exports}i.m=e;i.c=t;i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})};i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};i.t=function(e,t){1&t&&(e=i(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var s=Object.create(null);i.r(s);Object.defineProperty(s,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var n in e)i.d(s,n,function(t){return e[t]}.bind(null,n));return s};i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};i.d(t,"a",t);return t};i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};i.p="//static.hsappstatic.net/conversations-embed/static-1.18177/";i(i.s=0)}([function(e,t,i){"use strict"

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29400)
Category:	downloaded
Size (bytes):	29803
Entropy (8bit):	5.246061204030198
Encrypted:	false
SSDEEP:	768:xveaVfq2uGhc6eIRE2yNQ4iyHuqpp0L0pvj8vCwF3Cv:x5VfqpGvPqZWyNf0L0pvjWCwF3I
MD5:	0758BE5332E68750471D7862FE1A6942
SHA1:	BE2BB3E06D111E4EE8FBD0353D9455B408D47F14
SHA-256:	FD62E97CE1EFEC8F038643C0FA0A54CFF911926B8EAB345BB14B1514C68E5C3D
SHA-512:	9A93CADE9BD16EB1D7B94A15825DC4BB81A421459A1D986EF1B0E8984EDFC10544BF1B0508D480AA9F72A16E32889E724FFC6B775892104E27731549C2953218
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/splide.min.js?ver=4.1.3
Preview:	function r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype",{writable:!1})}./!. Splide.js. * Version : 4.1.2. * License : MIT. * Copyright: 2022 Naotoshi Fujita. */.var n,t;n=this,t=function(){"use strict";var v="(prefers-reduced-motion: reduce)",G=4,rn=5,r={CREATED:1,MOUNTED:2,IDLE:3,MOVING:G,SCROLLING:rn,DRAGGING:6,DESTROYED:7};function D(n){n.length=0}function o(n,t,i){return Array.prototype.slice.call(n,t,i)}function R(n){return n.bind.apply(n,[null].concat(o(arguments,1)))}function on(){}var p=setTimeout;function h(n){return requestAnimationFrame(n)}function u(n,t){return typeof t===n}function un(n){return!c(n)&&u("object",n)}var e=Array.isArray,x=R(u,"function"),C=R(u,"string"),en=R(u,"undefined");function c(n){return null===n}function m(n){try{return n instanceof(n.ownerDocument.default

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1147
Entropy (8bit):	4.431384166829831
Encrypted:	false
SSDEEP:	24:2diO44l/zWs3kwsOqWgMMPeZyLW57f5Pnhllo/:c35r7Tl7f+
MD5:	C228E8A3809D2C6E09F214E7B86925D0
SHA1:	ABFB1CF58A9197187760552E37526FC721A0BCC0
SHA-256:	9CF910E849BE1F8BD60190F3BE6E622A8B890B518298D7F4758B3C7145B10A39
SHA-512:	7B3ECCD9E9EE1662A4712B70F8877259E03B43DA836B30C21F78BCA6BA85555EBA559A048BBF1A71113007523A13DFB087DB9B9857FC0367E207B361D411BB54
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/uploads/2024/05/IconoCaja-6.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M8 26C8.22717 26.3165 8.52797 26.5729 8.87642 26.7471C9.22488 26.9214 9.6105 27.0081 10 27C10.3895 27.0081 10.7751 26.9214 11.1236 26.7471C11.472 26.5729 11.7728 26.3165 12 26C12.2272 25.6835 12.528 25.4271 12.8764 25.2528C13.2249 25.0786 13.6105 24.9918 14 25C14.3895 24.9918 14.7751 25.0786 15.1236 25.2528C15.472 25.4271 15.7728 25.6835 16 26C16.2272 26.3165 16.528 26.5729 16.8764 26.7471C17.2249 26.9214 17.6105 27.0081 18 27C18.3895 27.0081 18.7751 26.9214 19.1236 26.7471C19.472 26.5729 19.7728 26.3165 20 26C20.2272 25.6835 20.528 25.4271 20.8764 25.2528C21.2249 25.0786 21.6105 24.9918 22 25C22.3895 24.9918 22.7751 25.0786 23.1236 25.2528C23.472 25.4271 23.7728 25.6835 24 26C24.2272 26.3165 24.528 26.5729 24.8764 26.7471C25.2249 26.9214 25.6105 27.0081 26 27C26.3895 27.0081 26.7751 26.9214 27.1236 26.7471C27.472 26.5729 27.7728 26.3165 28 26M1

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	545
Entropy (8bit):	4.924217514358177
Encrypted:	false
SSDEEP:	12:YL0T4QGwaZFsUwaZRG/MUwaZ0waZdqTwaZdbXsUwaZztwaZbVQFNwaJmDw:YsZaKSRCoqMogRoqGV7GmU
MD5:	092BBEF13DF81B2AC9C566140F8C90E9
SHA1:	35ABA80FDCF4960DF209F4EDC0CD8B847A7AF17B
SHA-256:	C3558F66DAC66DBB8B5058C3082724E425DA03161862A49E36BEF61F34F22DAB
SHA-512:	104A5C05DC44532CCBDC81ECA86A21363B51AD4E3D0D6717A60FC76D676E9A16F09708367341125CA84B29A896F419ADD939FD01165FFD210EC98507E7F4503A
Malicious:	false
Reputation:	low
Preview:	{"pixels":{"FACEBOOK":[{"pixelId":"1100471544585903","limitedDataUseEnabled":false},{"pixelId":"378668614805602","limitedDataUseEnabled":false},{"pixelId":"424873573760210","limitedDataUseEnabled":false},{"pixelId":"746567544052736","limitedDataUseEnabled":false},{"pixelId":"829891824052519","limitedDataUseEnabled":false},{"pixelId":"885752078714622","limitedDataUseEnabled":false},{"pixelId":"1916122565318891","limitedDataUseEnabled":false},{"pixelId":"3852657628303348","limitedDataUseEnabled":false}]},"enhancedConversionEventSettings":{}}

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	18764
Entropy (8bit):	7.9853814261722675
Encrypted:	false
SSDEEP:	384:Z0P130MAZp3TbWwjG3qV7yMM7l0k8pQDblIn2meUjX+AolfHieNZ:Z2+5JfomyZ7l0k8wR/UjJgaGZ
MD5:	E3A0D2DEDACFE2D3DBB5FFF13640A496
SHA1:	5C4B12109C4E26C866E9E8A7B79EDEB1662CAE58
SHA-256:	49A0EDF09CB636547F9CFA640626ECA76632EAD7DACE209D934D11F02368941C
SHA-512:	BED445DEBBEB87CEE6C82D7EA99EAECA2ECD00B7A15D43ED5F57339E9B62DA1C9EC975EF138A2402AE4085444C5F890C08FB81F10F284523187A38C9B0BCB211
Malicious:	false
Reputation:	low
Preview:	RIFFDI..WEBPVP8L7I../../......{..w.J[.?if......%y.i@.l[.r.?..........H.\......I..DJR.]........;...X..T..t.....lCp.....kw.....<}......$.....<......Q..q.F....{...Nr...E.2G+.....<.....X9...........,.q}.p...._..4...b....z.on..Ms..e...,zT.d,.e...b.]..y......3.Cf.>.....g_4$..L.h]h..u...h.L.L....L..?WC2..O)..dD..W....g.....b..uc.ck....X&b...E...&.U...\|Hm..j>...(.r.....eVQ4%.3..)P1..9.X^\|...YO...I..g.....-yn&...R.a....(_l.$N....ODz/.^\TW....rF..Y..a.Wc@c.....J`m..~x...U..w..`9..9........{C..,...lR...A..)..-*.p..........N........n....f.d......jR.`Cl.`....u...c....n.<.pf...5..v.)......U.".I....w!......;?..s..a..'^.7e.&f....Y.Ua7.m..A.Yv}..w.)wZ?vq{.<..l........T.....K.Q....._.&""&.$.Ch}b...m{...`9.R......Y..).` .._G..1.$.1.{."..%"...>..p....#2...{b......:...O8.c..?.I..6.^@4."P._@Y..m3....N4a8.2.q..[C...j.....e(..9.2.b.]@3?....'.~......$...D.q........:m=.l~$.q.[.jd...s..:.. ..........9.l..o....^.qK&r....A.....H.{...3....s.a.9.g.......D..9x..

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	18776
Entropy (8bit):	7.902873576704525
Encrypted:	false
SSDEEP:	384:YJkOHMYBhpiD3OX+QwRnEenbDwjsxJoLkPpf0z:YJkXYB6YSn5nbDNJooPpfy
MD5:	2F93F20F0161073E8B13371F695F2577
SHA1:	8E2AAFCF40B0BE22430FB312E5C05F510CBBA264
SHA-256:	61918A786DB2446C036E445A863F2F7EB822F0B4B38606131BB856E76479353C
SHA-512:	CBC4B6A1E4886AD30A8BA5F6B70B7C54C89F9278A112F815860D4FEB18784E1D5892DD6DD846863038F95F86B88FFABE5C21B75A048218E982C0DECFEAC6F22A
Malicious:	false
Reputation:	low
Preview:	PK.............#E............manifest.json%.A..0....."D(.p......Z...V.!..V.3y../`..mt..t...B...7...:`...U.X.J..1X7.7.....g..ntBC...\/..W..$q.....D!3.....!=..Il.S.iu..A....m..I.w...PK.............N.&...M...4...animations/07279acf-6d3d-4098-8f3b-08b99d479b9d.json.V..4.~....;......#$.t."n...m.-.6U...j..g.....u..BB..c...o.....ol.."`...:c..{...E]..o...Z}...E .T g...a...#.o..K....xe....m..;...1Q.]...uVe+.........b....}<gO...l...1..NI\/OX.....e.../..Q..TK..2.3..+m.6WD..a....w.............:I........K..VGz..R....NB...i..4.6..P.g..PvT.Y..NH..m..q..*..d..IN`.`...1.J8...........0I...H.8.B. ^b.....D.gd....G.Q.B.>.Y"..wQ...$V....v.5.sh...%..G.d...$.o.w...T...WR.P...t.;(R.....qp.En..k......D..A....t..:..Lt..7."..0!.0.r\|.TJ3.y..n.S.<._.F.......X.e.1.a.....{.v......u.Q3.../....f..s.......2B.k.A..n...j7.".5W.....U..H..~;..d(..\.N..f...4q....r..H.e,"...p......)i-<i..0.Y......L...4.........x Jxn..".)9.F..Kz..X...W.W?.uQ..(.W...x.B.<.g..(.5.j,..H.........!.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	dropped
Size (bytes):	412014
Entropy (8bit):	5.373766870100786
Encrypted:	false
SSDEEP:	6144:+jS0/MJYSHDNJwzcDnKDYVY2qpMThN7qF7lgm0Tt63mN6GLPY7:JnKNpMTDqf6Tt63mNVLg7
MD5:	C5DE4C83B8A80B23BD28E277B1A02FC7
SHA1:	5155B18C655BCC531E961762E431C849A49AC76E
SHA-256:	3F52C72AC822F5149DBBB3816F9825774A34387C194A435A4173AA976B5D7730
SHA-512:	E8BB5FBEB38B26BDFDAF14C5ADCA50EEED5F51A5459FC37673EC2FCFD135DF15329BF22B2989099673E5DF02E97F90A918B2CFF6863EA5D5A92ED6F1CD5E8E56
Malicious:	false
Reputation:	low
Preview:	/* VimeoPlayer - v4.37.7 - 2024-10-02 - https://player.vimeo.com/NOTICE.txt */.var e=Object.prototype;function t(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)}function n(e,t){return function(n){return e(t(n))}}var r=n(Object.keys,Object),i=Object.prototype.hasOwnProperty;function o(e){if(!t(e))return r(e);var n=[];for(var o in Object(e))i.call(e,o)&&"constructor"!=o&&n.push(o);return n}var s="object"==typeof global&&global&&global.Object===Object&&global,a="object"==typeof self&&self&&self.Object===Object&&self,u=s\|\|a\|\|Function("return this")(),c=u.Symbol,l=Object.prototype,d=l.hasOwnProperty,h=l.toString,f=c?c.toStringTag:void 0,_=Object.prototype.toString,p=c?c.toStringTag:void 0;function m(e){return null==e?void 0===e?"[object Undefined]":"[object Null]":p&&p in Object(e)?function(e){var t=d.call(e,f),n=e[f];try{e[f]=void 0;var r=!0}catch(Fl){}var i=h.call(e);return r&&(t?e[f]=n:delete e[f]),i}(e):function(e){return _.call(e)}(e)}function v(e){var t=typ

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	49712
Entropy (8bit):	7.958790313946667
Encrypted:	false
SSDEEP:	768:FToMcVocQYxKj/1aKaHW+qkSI8d9rXDtuL30fNHbmWWC5QEF0U3zNQMGy51M6x:ATxK5aKaHWDH93PNrWCpF02KMGy513x
MD5:	C15F7A40E29B9358ADA641A9AB8BFC44
SHA1:	91E172DB0270BB4C00A2C80BF5F36842C0C71347
SHA-256:	C65DB8B1FFF235151D1F27C0A8D8AEB55043646CA71C89DE9FA5082F7A1A2EC5
SHA-512:	540D5CC01C5B9E38E2F17982D1D0385B977F94CC9FADE8AD48848A20FBAD1C4D627195281B235905A817ACC341004F530E1EAC9834B5D62B90E1BC15B8AFCA81
Malicious:	false
Reputation:	low
Preview:	RIFF(...WEBPVP8X....0......F..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.H...$.m.H..g......4C...w..SO.m..%I..k./....d.....L......L.QKf.fffvf..0.0...^..g{b.]~kY....-I.%I.m.......o\.........q[.mMDL..6..I.yDf....v.+3....."b..w..................~.~.E............. '..A.......... ." ...rX@.D.. ...."..... .....z.....0...aA@. "............{......\|.{...O..;....3......$.`b.......H..{........8$..M.@H ..'@.L !!..=..\..!.(....lJ... L...................^.w.......^.dB..]......@.u303q....!AJ...].a.i.&.....2IH.H.!.^....$.B.....2!.\|........@.....0.I.?.W..../.

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	630
Entropy (8bit):	5.44215075185929
Encrypted:	false
SSDEEP:	12:TMHdAs0Ii/nzVV/KYf3n/gNKoxHDAvAXTZ49uH:2dAsAjLf3/AKoxjTcuH
MD5:	01A182AEFAB788DB11B2A0BF327D8DA1
SHA1:	53D815D570EA9B332DFFFA0610C2089436BA1E13
SHA-256:	9B9DC61268ACDBC45AF56E0A9863E047DFE157FF0AE4E7D19E50FE73B211DE92
SHA-512:	50A8D64B6F82AE48E8E3C0D7105289D200A51B77AE8BB259546FC0B0F5F0ED2EABCF6F088FFFD2C1C23A28D0A974165C96EA654186F95DF73B6EF2EC3D9C9249
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: $$$/GeneralStr/196=Adobe Illustrator 27.6.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 10.1 8" style="enable-background:new 0 0 10.1 8;" xml:space="preserve">.<style type="text/css">...st0{fill:none;}...st1{fill:none;stroke:#1F2D52;stroke-width:1.5;stroke-linecap:round;stroke-linejoin:round;}.</style>.<g transform="translate(1.061)">..<path class="st0" d="M0,0h8v8H0V0z"/>..<path class="st1" d="M0,2l4,4l4-4"/>.</g>.</svg>

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	143361
Entropy (8bit):	4.9467474575791925
Encrypted:	false
SSDEEP:	3072:IIZV4WKzPniGSdDznXHMCPaLtjCMRXaIe:pKqdDIRXab
MD5:	A29D7BE306FFE775320654DE25145405
SHA1:	50F9A82F46D82A0E1012264D180B6A222FCB18DA
SHA-256:	19FEC16AA62CD87222C215014D0B62EDEBD1932A87290092F4E1D7B5A05477FE
SHA-512:	C08E5184C905B354B838EE01BAF0AF04E925FE559860D096DAA925BC56B94FF9517FFE94F32F2767F95D19A343EEF1EC8E48E1E4A6B7C52175911C6AA78D4673
Malicious:	false
Reputation:	low
Preview:	[{"provider_id":"43","provider_name":"AdPredictive","policy_url":"https://adpredictive.com/privacy","domains":"adpredictive.com adpredictive.io adpredictive.net platform.adpredictive.com platform.adpredictive.io"},{"provider_id":"46","provider_name":"Adriver","policy_url":"https://www.adriver.ru/about/privacy-en/","domains":"ad.adriver.ru adriver.ru boom-stage.adriver.ru boom1.adriver.ru cgi.adriver.ru content.adriver.ru datariver.ru dsp-moderation.adriver.ru dsp.adriver.ru dsp.soloway.ru dsp2.adriver.ru ead.adriver.ru edp2.adriver.ru exposure.adriver.ru foo.datariver.ru fp-content.adriver.ru fp.adriver.ru fp.fap1.adriver.ru gb.adriver.ru gz.adriver.ru js.adriver.ru kz.kaztel1.adriver.ru kz1.adriver.ru lb.adriver.ru log3.adriver.ru lw1.adriver.ru masterh.adriver.ru media.soloway.ru mh6.adriver.ru mh8.adriver.ru mirror.adriver.ru pb.soloway.ru rad*.adriver.ru rdg1.adriver.ru rosst.adriver.ru rsport.adriver.ru servers1.adriver.ru servers2.adriver.ru servers3.adriver.ru servers5.adriv

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	171372
Entropy (8bit):	5.376028916008218
Encrypted:	false
SSDEEP:	3072:IOd8N9KK4wbDtZkYGDusJEg3P1sibzmsJTYg9CHSMnGW8ZBMPk6:I5nK8DtZkYGDusJf/1sibzmsJTv9CHSm
MD5:	94ECD40669C01B7176FA0A4FFCF3FE8E
SHA1:	E166D7521AB67367AD786E8CCC17AA48E5F6E20C
SHA-256:	2DD1B4E7E2C6EBFD815D4CDF497A829B83E9D30089E9F2CC35830594B78FFD39
SHA-512:	743D5823B13F4FC6637E2EC98FB6C54AF88890516F398844F105833788FD2CD3748A2010A89FD3B92684115CB2B4CCB5AEA8974A32F3F1495DCC21181BFC9D50
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=126)}([function(e,t,n){e.exports=n(57)},,,,,function(e,t,n){"use strict";var r=n(30),o=Obj

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	downloaded
Size (bytes):	18776
Entropy (8bit):	7.902873576704525
Encrypted:	false
SSDEEP:	384:YJkOHMYBhpiD3OX+QwRnEenbDwjsxJoLkPpf0z:YJkXYB6YSn5nbDNJooPpfy
MD5:	2F93F20F0161073E8B13371F695F2577
SHA1:	8E2AAFCF40B0BE22430FB312E5C05F510CBBA264
SHA-256:	61918A786DB2446C036E445A863F2F7EB822F0B4B38606131BB856E76479353C
SHA-512:	CBC4B6A1E4886AD30A8BA5F6B70B7C54C89F9278A112F815860D4FEB18784E1D5892DD6DD846863038F95F86B88FFABE5C21B75A048218E982C0DECFEAC6F22A
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/img/new-home/Casa.lottie
Preview:	PK.............#E............manifest.json%.A..0....."D(.p......Z...V.!..V.3y../`..mt..t...B...7...:`...U.X.J..1X7.7.....g..ntBC...\/..W..$q.....D!3.....!=..Il.S.iu..A....m..I.w...PK.............N.&...M...4...animations/07279acf-6d3d-4098-8f3b-08b99d479b9d.json.V..4.~....;......#$.t."n...m.-.6U...j..g.....u..BB..c...o.....ol.."`...:c..{...E]..o...Z}...E .T g...a...#.o..K....xe....m..;...1Q.]...uVe+.........b....}<gO...l...1..NI\/OX.....e.../..Q..TK..2.3..+m.6WD..a....w.............:I........K..VGz..R....NB...i..4.6..P.g..PvT.Y..NH..m..q..*..d..IN`.`...1.J8...........0I...H.8.B. ^b.....D.gd....G.Q.B.>.Y"..wQ...$V....v.5.sh...%..G.d...$.o.w...T...WR.P...t.;(R.....qp.En..k......D..A....t..:..Lt..7."..0!.0.r\|.TJ3.y..n.S.<._.F.......X.e.1.a.....{.v......u.Q3.../....f..s.......2B.k.A..n...j7.".5W.....U..H..~;..d(..\.N..f...4q....r..H.e,"...p......)i-<i..0.Y......L...4.........x Jxn..".)9.F..Kz..X...W.W?.uQ..(.W...x.B.<.g..(.5.j,..H.........!.

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2485)
Category:	dropped
Size (bytes):	25555
Entropy (8bit):	5.2943372126006185
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwUpxbY/Y3YOgQYeYZYHYZYVY+YSY+GcCPxyzODXnnpIKwNp:RIT7sZwuvL54WAcl/d
MD5:	44D3E21F048BD10CA26259496636D3A7
SHA1:	F8391C2A53DC5BE0EED848D22E8903C194C595F6
SHA-256:	01D26CAB424468C1D8ADD47FAA7ABCE1A98B6312CC068E9D79C2479C88A55E35
SHA-512:	D81413C1166630542A16C39DD437149A7CA668634B0E3F463FD7CB4A54B594F340A03AD27615840CAB0B3C8785FFF332E0178F01AEDA0C7CEF6CF2CAD2A0E0F3
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	996
Entropy (8bit):	4.6713707059371945
Encrypted:	false
SSDEEP:	24:2diO44l/FwCHtzITo0TMpqdWYiuzbfKk4ZbHkaeOJG4cWQnhllo/:c35VHtzITEpuPKk4ZbH/eGGg
MD5:	F36F9131A287CB116293BDA6CB350893
SHA1:	2A82E00EF7EE0697FC0E00BE1AE6E4FB97F6940B
SHA-256:	E4AC8D81A9DD2157B46783EC64EF49991285760D5698ED18BBAA38762B9A4AE7
SHA-512:	82B24600C8CBD4825ABF95C3AA18D60DFB0BF814B6CD94B489BCD53A0254939389E3C1F035F36F8AE67BAD0C163DDF6FBE6212F05C6D416AD84188D56E2EC4C3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M21 20L18 18V13M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.4718 25.1997 13.4639 25.8626 14.5558 26.3149C15.6478 26.7672 16.8181 27 18 27C19.1819 27 20.3522 26.7672 21.4442 26.3149C22.5361 25.8626 23.5282 25.1997 24.364 24.364C25.1997 23.5282 25.8626 22.5361 26.3149 21.4442C26.7672 20.3522 27 19.1819 27 18C27 16.8181 26.7672 15.6478 26.3149 14.5558C25.8626 13.4639 25.1997 12.4718 24.364 11.636C23.5282 10.8003 22.5361 10.1374 21.4442 9.68508C20.3522 9.23279 19.1819 9 18 9C16.8181 9 15.6478 9.23279 14.5558 9.68508C13.4639 10.1374 12.4718 10.8003 11.636 11.636C10.8003 12.4718 10.1374 13.4639 9.68508 14.5558C9.23279 15.6478 9 16.8181 9 18Z" stroke="#6C63FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	50030
Entropy (8bit):	7.994792866149325
Encrypted:	true
SSDEEP:	768:YoC39X3Agw5oqi2zV7SiyYop59wokxPK2KRTtAzdMjWyW:+x3Rwdui2CouHMCyW
MD5:	83E1978FF3CF34DA8460CFDC384A801D
SHA1:	993C7357045DFF0391E4938C9BD40A81C94A6761
SHA-256:	43B7AD81B01A86968CF8D1817DE5D07FB84C3141C6D50CE087930A9ACD8631DC
SHA-512:	046C91C020B3608EB24A33437DBBDA11F77B711ABE1EED3347F0130B6C3918CADB7AB00EB423FD4E6F1C52294891AFC41CA7752325BA3294AB6655E7FB1F0C9A
Malicious:	false
Reputation:	low
Preview:	RIFFf...WEBPVP8LY.../../.M8l.F..ev..y./...".?.m.3(. t../...w...w.Q..A.....(..X..j.,.v]....@rN..^...Gp.$..&'!.Z&[..3a.....&..&..4."..^....L.....`R!Z.AE.Bc...JK.i...8.v.TU.i.J.b.Z.PUWw.......\|.....^..u.Dk-........:...H.$W.v..g.w}.u(..QQ.......r$...e..<f..k...z.L.G.$...x$9Z ...m..$.V.Bp.S.....L...W...v........&_._\|Zb..'...W..!O...0`....'.....L......oq.w.I.O..._...a.../{..[L..L.s..S.........f;s.C ....h._...w.._.R.{............Q...3..L\|.,e.[.H5gL..kb..%\|..pL..5.[X,w.t$=...%..Wq....1.'......w..J..Kp..Tr.z!...10.W...X..q...7..b...mj..+......f...Q.......9.".......9m&e.5q..dt.7...-.!o.....j?3~9........j...E.DM..w.....2..\g!V...e....S#5...4..L..Q.......DsWQ.N.ML..7y.n,.vZ...p...k.v.....4..vlwc..aG.;.1...[...;B..........Uj....J..........z..j....K.n.4..p.. .5&..[.R.H.....H..19+R..r.57.6i.S..x7......"...8...H....J.}Z.;...I.IZRE.......d...{:tV.V.N.....r....~.6...h.V{9T...5uv..._......!.u.s...V.v..cSr:.0.2..7..4.hFS..B-..........J.J.O0.....I.......

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10632)
Category:	downloaded
Size (bytes):	10633
Entropy (8bit):	5.07123632012594
Encrypted:	false
SSDEEP:	192:6QZOksRszLTQOlEOSYPPF9JPcxG8wJCXywg+qYQzWKwqctzhVHuAI3E:6GqC8sEjYPN0VwJCXyb+7XRgI
MD5:	92FB13FAE11F843F0133B4F34CC81D76
SHA1:	3541A6958447994121FA9E8AEB4DB43DAB0263C0
SHA-256:	702331D04A1C126B1F637478C3D1C70D5A16B833CCDAB72B369BA4A9FD2ACDD2
SHA-512:	5B68E97B47CEB0CE962BC485773E3E46B23493F668EEED7EE37415C8BF76D09F1924F8BD429C83D85461EB8464F84607FEA031180717DB3C511392BD2B5B1FE4
Malicious:	false
Reputation:	low
URL:	https://www.sesamehr.com/wp-content/themes/sesamehr/assets/js/index.js?ver=3.0
Preview:	var sesamehr=sesamehr\|\|{};function sesamehrDomReady(e){if("function"==typeof e){if("interactive"===document.readyState\|\|"complete"===document.readyState)return e();document.addEventListener("DOMContentLoaded",e,!1)}}function sesamehrToggleAttribute(e,t,o,a){var s;e.hasAttribute(t)&&(void 0===o&&(o=!0),void 0===a&&(a=!1),(s=document.querySelectorAll('[data-toggle-target="'+e.dataset.toggleTarget+'"]')).forEach(function(e){e.hasAttribute(t)&&(e.getAttribute(t)!==o?e.setAttribute(t,o):e.setAttribute(t,a))}))}function sesamehrMenuToggle(e,t){var o,a,s,n,i,r=[],l=[];e&&((n=(s=e.closest(".menu-wrapper")).querySelectorAll(".menu-item")).forEach(function(e,t){r[t]={x:e.offsetLeft,y:e.offsetTop}}),o=e.parentElement.offsetHeight,e.classList.add("toggling-target"),e.classList.toggle("active"),n.forEach(function(e,t){l[t]={x:e.offsetLeft,y:e.offsetTop}}),a=e.parentElement.offsetHeight,e.classList.toggle("active"),s.classList.add("is-toggling"),e.classList.toggle("active"),n.forEach(function(t,a){v

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 15:38:13.147208929 CEST	192.168.2.5	1.1.1.1	0xf4ba	Standard query (0)	getsesametime.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:13.147351980 CEST	192.168.2.5	1.1.1.1	0xce38	Standard query (0)	getsesametime.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:13.809123039 CEST	192.168.2.5	1.1.1.1	0x75f5	Standard query (0)	sesamehr.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:13.809408903 CEST	192.168.2.5	1.1.1.1	0xd78e	Standard query (0)	sesamehr.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:14.616832018 CEST	192.168.2.5	1.1.1.1	0xb985	Standard query (0)	www.sesamehr.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:14.617069006 CEST	192.168.2.5	1.1.1.1	0xa2eb	Standard query (0)	www.sesamehr.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:15.629965067 CEST	192.168.2.5	1.1.1.1	0x2e88	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:15.630347967 CEST	192.168.2.5	1.1.1.1	0x71da	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:18.000425100 CEST	192.168.2.5	1.1.1.1	0x847	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:18.001162052 CEST	192.168.2.5	1.1.1.1	0x98d3	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:18.002835035 CEST	192.168.2.5	1.1.1.1	0xbef3	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:18.003273010 CEST	192.168.2.5	1.1.1.1	0xadaf	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:18.978580952 CEST	192.168.2.5	1.1.1.1	0xcfc2	Standard query (0)	www.sesamehr.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:18.979249001 CEST	192.168.2.5	1.1.1.1	0x2efd	Standard query (0)	www.sesamehr.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:20.092196941 CEST	192.168.2.5	1.1.1.1	0x2ea1	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.092561007 CEST	192.168.2.5	1.1.1.1	0x488d	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:20.702744961 CEST	192.168.2.5	1.1.1.1	0x9e17	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.702883005 CEST	192.168.2.5	1.1.1.1	0x2fba	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:20.716983080 CEST	192.168.2.5	1.1.1.1	0xdc0	Standard query (0)	cmp.inmobi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.717241049 CEST	192.168.2.5	1.1.1.1	0x5175	Standard query (0)	cmp.inmobi.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:20.728594065 CEST	192.168.2.5	1.1.1.1	0xae43	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.728934050 CEST	192.168.2.5	1.1.1.1	0x7dfa	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:20.999624014 CEST	192.168.2.5	1.1.1.1	0x8f64	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.000010967 CEST	192.168.2.5	1.1.1.1	0x4759	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:21.040515900 CEST	192.168.2.5	1.1.1.1	0x90cc	Standard query (0)	fresnel.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.040678978 CEST	192.168.2.5	1.1.1.1	0x156a	Standard query (0)	fresnel.vimeocdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:21.041203022 CEST	192.168.2.5	1.1.1.1	0xa4e0	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.041342974 CEST	192.168.2.5	1.1.1.1	0x9692	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:21.047709942 CEST	192.168.2.5	1.1.1.1	0x7d16	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.048341036 CEST	192.168.2.5	1.1.1.1	0xd450	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:21.874921083 CEST	192.168.2.5	1.1.1.1	0xbef5	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.875205040 CEST	192.168.2.5	1.1.1.1	0x7de6	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:22.059134960 CEST	192.168.2.5	1.1.1.1	0xa21f	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:22.059320927 CEST	192.168.2.5	1.1.1.1	0xceed	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:22.481065035 CEST	192.168.2.5	1.1.1.1	0xc870	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:22.481277943 CEST	192.168.2.5	1.1.1.1	0x2dc7	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:22.485759020 CEST	192.168.2.5	1.1.1.1	0xb017	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:22.485759020 CEST	192.168.2.5	1.1.1.1	0x949d	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:22.487001896 CEST	192.168.2.5	1.1.1.1	0xa79b	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:22.487225056 CEST	192.168.2.5	1.1.1.1	0xba1c	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:22.487709999 CEST	192.168.2.5	1.1.1.1	0x3367	Standard query (0)	cmp.inmobi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:22.487854004 CEST	192.168.2.5	1.1.1.1	0x28fe	Standard query (0)	cmp.inmobi.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:23.508737087 CEST	192.168.2.5	1.1.1.1	0xbc8f	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.509051085 CEST	192.168.2.5	1.1.1.1	0x9df4	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:23.778642893 CEST	192.168.2.5	1.1.1.1	0x74f9	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.778847933 CEST	192.168.2.5	1.1.1.1	0x9b29	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:23.832180023 CEST	192.168.2.5	1.1.1.1	0xb051	Standard query (0)	vod-adaptive-ak.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.833803892 CEST	192.168.2.5	1.1.1.1	0x3c1c	Standard query (0)	vod-adaptive-ak.vimeocdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:24.414283037 CEST	192.168.2.5	1.1.1.1	0x6708	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:24.414771080 CEST	192.168.2.5	1.1.1.1	0xf013	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:24.415190935 CEST	192.168.2.5	1.1.1.1	0xb18c	Standard query (0)	cdn.firstpromoter.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:24.415594101 CEST	192.168.2.5	1.1.1.1	0xb658	Standard query (0)	cdn.firstpromoter.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:26.703569889 CEST	192.168.2.5	1.1.1.1	0xba2c	Standard query (0)	js.hubspotfeedback.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:26.703635931 CEST	192.168.2.5	1.1.1.1	0x1a7d	Standard query (0)	js.hubspotfeedback.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:27.718358040 CEST	192.168.2.5	1.1.1.1	0x9a55	Standard query (0)	js.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:27.718738079 CEST	192.168.2.5	1.1.1.1	0xa492	Standard query (0)	js.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:28.560502052 CEST	192.168.2.5	1.1.1.1	0x71f4	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.560556889 CEST	192.168.2.5	1.1.1.1	0x1ed4	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:28.591048956 CEST	192.168.2.5	1.1.1.1	0xf3a	Standard query (0)	js.usemessages.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.591634035 CEST	192.168.2.5	1.1.1.1	0x8287	Standard query (0)	js.usemessages.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:29.431271076 CEST	192.168.2.5	1.1.1.1	0xf0fb	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.431642056 CEST	192.168.2.5	1.1.1.1	0x8c1d	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:29.545890093 CEST	192.168.2.5	1.1.1.1	0xf0de	Standard query (0)	vod-adaptive-ak.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.546263933 CEST	192.168.2.5	1.1.1.1	0x3098	Standard query (0)	vod-adaptive-ak.vimeocdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:29.547184944 CEST	192.168.2.5	1.1.1.1	0x7c5e	Standard query (0)	cdn.firstpromoter.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.552566051 CEST	192.168.2.5	1.1.1.1	0xff2c	Standard query (0)	cdn.firstpromoter.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:29.554038048 CEST	192.168.2.5	1.1.1.1	0x201a	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.555042028 CEST	192.168.2.5	1.1.1.1	0x40a3	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:29.555696011 CEST	192.168.2.5	1.1.1.1	0x2b65	Standard query (0)	cta-service-cms2.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.602858067 CEST	192.168.2.5	1.1.1.1	0x77b8	Standard query (0)	cta-service-cms2.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:29.898161888 CEST	192.168.2.5	1.1.1.1	0x450e	Standard query (0)	api.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.898161888 CEST	192.168.2.5	1.1.1.1	0x9ce3	Standard query (0)	api.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:30.534307957 CEST	192.168.2.5	1.1.1.1	0x7107	Standard query (0)	vimeo.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.534580946 CEST	192.168.2.5	1.1.1.1	0x2593	Standard query (0)	vimeo.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:30.574348927 CEST	192.168.2.5	1.1.1.1	0x12aa	Standard query (0)	js.hubspotfeedback.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.574873924 CEST	192.168.2.5	1.1.1.1	0xde5f	Standard query (0)	js.hubspotfeedback.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:30.575402021 CEST	192.168.2.5	1.1.1.1	0xaaac	Standard query (0)	js.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.575788975 CEST	192.168.2.5	1.1.1.1	0x3bb8	Standard query (0)	js.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:30.666383982 CEST	192.168.2.5	1.1.1.1	0xbe5	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.666886091 CEST	192.168.2.5	1.1.1.1	0x5984	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:30.669019938 CEST	192.168.2.5	1.1.1.1	0x1eef	Standard query (0)	js.usemessages.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.669106960 CEST	192.168.2.5	1.1.1.1	0xa4d5	Standard query (0)	js.usemessages.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:30.763381958 CEST	192.168.2.5	1.1.1.1	0xc6cf	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.763381958 CEST	192.168.2.5	1.1.1.1	0x2de6	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:31.411751986 CEST	192.168.2.5	1.1.1.1	0xf28c	Standard query (0)	js.hsadspixel.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:31.411889076 CEST	192.168.2.5	1.1.1.1	0xcb73	Standard query (0)	js.hsadspixel.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:31.412908077 CEST	192.168.2.5	1.1.1.1	0x562c	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:31.413156033 CEST	192.168.2.5	1.1.1.1	0x3935	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.342442989 CEST	192.168.2.5	1.1.1.1	0xf4bd	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.342442989 CEST	192.168.2.5	1.1.1.1	0x8f47	Standard query (0)	tracker.metricool.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.524010897 CEST	192.168.2.5	1.1.1.1	0xa35	Standard query (0)	cta-service-cms2.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.524010897 CEST	192.168.2.5	1.1.1.1	0x82b1	Standard query (0)	cta-service-cms2.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.550786972 CEST	192.168.2.5	1.1.1.1	0x8923	Standard query (0)	api.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.551136971 CEST	192.168.2.5	1.1.1.1	0xf2c8	Standard query (0)	api.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.563112020 CEST	192.168.2.5	1.1.1.1	0x72f	Standard query (0)	js.hsadspixel.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.564212084 CEST	192.168.2.5	1.1.1.1	0xf674	Standard query (0)	js.hsadspixel.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.626559973 CEST	192.168.2.5	1.1.1.1	0xc4a4	Standard query (0)	cdn.amplitude.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.627084970 CEST	192.168.2.5	1.1.1.1	0xa604	Standard query (0)	cdn.amplitude.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.632932901 CEST	192.168.2.5	1.1.1.1	0xd3ef	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.633093119 CEST	192.168.2.5	1.1.1.1	0xa4ea	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.639230967 CEST	192.168.2.5	1.1.1.1	0x91b1	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.639285088 CEST	192.168.2.5	1.1.1.1	0xa21f	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.687984943 CEST	192.168.2.5	1.1.1.1	0x5c14	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.688421011 CEST	192.168.2.5	1.1.1.1	0x22c4	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:32.763307095 CEST	192.168.2.5	1.1.1.1	0x4942	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.763463974 CEST	192.168.2.5	1.1.1.1	0xca7d	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 4, 2024 15:38:33.015497923 CEST	192.168.2.5	1.1.1.1	0xb821	Standard query (0)	perf-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.015738010 CEST	192.168.2.5	1.1.1.1	0x2dd8	Standard query (0)	perf-na1.hsforms.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:33.121560097 CEST	192.168.2.5	1.1.1.1	0x4bc9	Standard query (0)	api.hubapi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.122013092 CEST	192.168.2.5	1.1.1.1	0x9fb2	Standard query (0)	api.hubapi.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:33.137458086 CEST	192.168.2.5	1.1.1.1	0xab12	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.137752056 CEST	192.168.2.5	1.1.1.1	0x66ab	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:33.349574089 CEST	192.168.2.5	1.1.1.1	0x1ef2	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.349792957 CEST	192.168.2.5	1.1.1.1	0x8a72	Standard query (0)	tracker.metricool.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:33.827816010 CEST	192.168.2.5	1.1.1.1	0x52a5	Standard query (0)	fresnel-events.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.827903986 CEST	192.168.2.5	1.1.1.1	0x9f8	Standard query (0)	fresnel-events.vimeocdn.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:34.108206987 CEST	192.168.2.5	1.1.1.1	0xc3e6	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.108529091 CEST	192.168.2.5	1.1.1.1	0x349	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 4, 2024 15:38:34.117532969 CEST	192.168.2.5	1.1.1.1	0x5b22	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.117712021 CEST	192.168.2.5	1.1.1.1	0x392c	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:34.121509075 CEST	192.168.2.5	1.1.1.1	0xd1b5	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.121656895 CEST	192.168.2.5	1.1.1.1	0xa4ec	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 4, 2024 15:38:34.121975899 CEST	192.168.2.5	1.1.1.1	0xdff	Standard query (0)	perf-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.122103930 CEST	192.168.2.5	1.1.1.1	0x1d4f	Standard query (0)	perf-na1.hsforms.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:34.122459888 CEST	192.168.2.5	1.1.1.1	0xa626	Standard query (0)	api.hubapi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.122596979 CEST	192.168.2.5	1.1.1.1	0xafcc	Standard query (0)	api.hubapi.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:34.459657907 CEST	192.168.2.5	1.1.1.1	0x5bd7	Standard query (0)	cdn.amplitude.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.459839106 CEST	192.168.2.5	1.1.1.1	0xe1b2	Standard query (0)	cdn.amplitude.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:34.798392057 CEST	192.168.2.5	1.1.1.1	0x14f1	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.798507929 CEST	192.168.2.5	1.1.1.1	0x33bc	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Oct 4, 2024 15:38:35.343012094 CEST	192.168.2.5	1.1.1.1	0xeb0e	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:36.371663094 CEST	192.168.2.5	1.1.1.1	0xeb0e	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:36.476490021 CEST	192.168.2.5	1.1.1.1	0x1032	Standard query (0)	api.cmp.inmobi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:36.476639986 CEST	192.168.2.5	1.1.1.1	0x1cf4	Standard query (0)	api.cmp.inmobi.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:36.533638000 CEST	192.168.2.5	1.1.1.1	0xd81d	Standard query (0)	www.sesamehr.es	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:36.534003019 CEST	192.168.2.5	1.1.1.1	0x88c5	Standard query (0)	www.sesamehr.es	65	IN (0x0001)	false
Oct 4, 2024 15:38:37.399797916 CEST	192.168.2.5	1.1.1.1	0xeb0e	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:39.417658091 CEST	192.168.2.5	1.1.1.1	0xeb0e	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:40.234190941 CEST	192.168.2.5	1.1.1.1	0xb00c	Standard query (0)	api.cmp.inmobi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:40.234508038 CEST	192.168.2.5	1.1.1.1	0xc602	Standard query (0)	api.cmp.inmobi.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:40.279015064 CEST	192.168.2.5	1.1.1.1	0x7408	Standard query (0)	www.sesamehr.es	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:40.279407978 CEST	192.168.2.5	1.1.1.1	0xea42	Standard query (0)	www.sesamehr.es	65	IN (0x0001)	false
Oct 4, 2024 15:38:43.437336922 CEST	192.168.2.5	1.1.1.1	0xeb0e	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.472004890 CEST	192.168.2.5	1.1.1.1	0x996a	Standard query (0)	app.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.472290993 CEST	192.168.2.5	1.1.1.1	0x8499	Standard query (0)	app.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:47.514668941 CEST	192.168.2.5	1.1.1.1	0xebb3	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.515019894 CEST	192.168.2.5	1.1.1.1	0xb20e	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:47.515454054 CEST	192.168.2.5	1.1.1.1	0xf09c	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.515676022 CEST	192.168.2.5	1.1.1.1	0xb82a	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:47.516047001 CEST	192.168.2.5	1.1.1.1	0xc7bd	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.516618013 CEST	192.168.2.5	1.1.1.1	0xa858	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 4, 2024 15:38:48.171912909 CEST	192.168.2.5	1.1.1.1	0xc037	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.171962976 CEST	192.168.2.5	1.1.1.1	0x37a8	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:48.214910984 CEST	192.168.2.5	1.1.1.1	0x3c83	Standard query (0)	static.hsappstatic.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.215096951 CEST	192.168.2.5	1.1.1.1	0xfde6	Standard query (0)	static.hsappstatic.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:48.808545113 CEST	192.168.2.5	1.1.1.1	0x8c73	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.808619976 CEST	192.168.2.5	1.1.1.1	0xae75	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:48.916135073 CEST	192.168.2.5	1.1.1.1	0x8e39	Standard query (0)	static.hsappstatic.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.916475058 CEST	192.168.2.5	1.1.1.1	0x46e7	Standard query (0)	static.hsappstatic.net	65	IN (0x0001)	false
Oct 4, 2024 15:38:48.922418118 CEST	192.168.2.5	1.1.1.1	0xc645	Standard query (0)	feedback.hubapi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.922620058 CEST	192.168.2.5	1.1.1.1	0x179e	Standard query (0)	feedback.hubapi.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:50.276515007 CEST	192.168.2.5	1.1.1.1	0x4151	Standard query (0)	feedback.hubapi.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:50.277014017 CEST	192.168.2.5	1.1.1.1	0x29c3	Standard query (0)	feedback.hubapi.com	65	IN (0x0001)	false
Oct 4, 2024 15:38:50.279577971 CEST	192.168.2.5	1.1.1.1	0x85f8	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:50.280855894 CEST	192.168.2.5	1.1.1.1	0xe5c6	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 4, 2024 15:38:59.592617035 CEST	192.168.2.5	1.1.1.1	0x202b	Standard query (0)	capig.stape.cloud	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:59.592912912 CEST	192.168.2.5	1.1.1.1	0x808b	Standard query (0)	capig.stape.cloud	65	IN (0x0001)	false
Oct 4, 2024 15:39:00.411336899 CEST	192.168.2.5	1.1.1.1	0xec99	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:00.467009068 CEST	192.168.2.5	1.1.1.1	0xaf41	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:04.369864941 CEST	192.168.2.5	1.1.1.1	0xfab8	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:04.370332956 CEST	192.168.2.5	1.1.1.1	0xfce2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:04.391645908 CEST	192.168.2.5	1.1.1.1	0x212b	Standard query (0)	capig.stape.cloud	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:04.392106056 CEST	192.168.2.5	1.1.1.1	0xed07	Standard query (0)	capig.stape.cloud	65	IN (0x0001)	false
Oct 4, 2024 15:39:06.869860888 CEST	192.168.2.5	1.1.1.1	0xa32b	Standard query (0)	cdn.neverbounce.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:06.870184898 CEST	192.168.2.5	1.1.1.1	0x22be	Standard query (0)	cdn.neverbounce.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:06.874645948 CEST	192.168.2.5	1.1.1.1	0x78f5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:06.874903917 CEST	192.168.2.5	1.1.1.1	0x6952	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:06.877945900 CEST	192.168.2.5	1.1.1.1	0x1eeb	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:06.878094912 CEST	192.168.2.5	1.1.1.1	0x77c8	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 4, 2024 15:39:07.201934099 CEST	192.168.2.5	1.1.1.1	0xc2d9	Standard query (0)	assets.sesamehr.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:07.202600956 CEST	192.168.2.5	1.1.1.1	0x6c88	Standard query (0)	assets.sesamehr.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:09.099656105 CEST	192.168.2.5	1.1.1.1	0x197d	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:09.099801064 CEST	192.168.2.5	1.1.1.1	0x6db9	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:09.729285002 CEST	192.168.2.5	1.1.1.1	0xf9e6	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:09.729600906 CEST	192.168.2.5	1.1.1.1	0x3537	Standard query (0)	tracker.metricool.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:09.817465067 CEST	192.168.2.5	1.1.1.1	0xd641	Standard query (0)	api.neverbounce.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:09.817771912 CEST	192.168.2.5	1.1.1.1	0x35c3	Standard query (0)	api.neverbounce.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:10.010420084 CEST	192.168.2.5	1.1.1.1	0xb73e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.010584116 CEST	192.168.2.5	1.1.1.1	0x4609	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:10.013175964 CEST	192.168.2.5	1.1.1.1	0xb19	Standard query (0)	assets.sesamehr.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.013350964 CEST	192.168.2.5	1.1.1.1	0xb69f	Standard query (0)	assets.sesamehr.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:10.014764071 CEST	192.168.2.5	1.1.1.1	0xbe8e	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.015053034 CEST	192.168.2.5	1.1.1.1	0x385b	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 4, 2024 15:39:10.015718937 CEST	192.168.2.5	1.1.1.1	0x85a4	Standard query (0)	cdn.neverbounce.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.015882969 CEST	192.168.2.5	1.1.1.1	0x5dcc	Standard query (0)	cdn.neverbounce.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:10.746393919 CEST	192.168.2.5	1.1.1.1	0x9d75	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.746540070 CEST	192.168.2.5	1.1.1.1	0xf35d	Standard query (0)	tracker.metricool.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:11.801795006 CEST	192.168.2.5	1.1.1.1	0x416e	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:11.801958084 CEST	192.168.2.5	1.1.1.1	0xa3fb	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:11.811398983 CEST	192.168.2.5	1.1.1.1	0xd981	Standard query (0)	api.neverbounce.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:11.811645985 CEST	192.168.2.5	1.1.1.1	0x19c0	Standard query (0)	api.neverbounce.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:12.842319012 CEST	192.168.2.5	1.1.1.1	0x7973	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:13.847404003 CEST	192.168.2.5	1.1.1.1	0x7973	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:14.861665010 CEST	192.168.2.5	1.1.1.1	0x7973	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:16.874500990 CEST	192.168.2.5	1.1.1.1	0x7973	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:20.876702070 CEST	192.168.2.5	1.1.1.1	0x7973	Standard query (0)	tracker.metricool.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:30.770831108 CEST	192.168.2.5	1.1.1.1	0xf12f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:30.771612883 CEST	192.168.2.5	1.1.1.1	0x3c3a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:30.774194002 CEST	192.168.2.5	1.1.1.1	0xa2fc	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:30.774853945 CEST	192.168.2.5	1.1.1.1	0xca0a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 4, 2024 15:39:36.011744022 CEST	192.168.2.5	1.1.1.1	0xbb65	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:36.012043953 CEST	192.168.2.5	1.1.1.1	0xefba	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 15:38:13.159849882 CEST	1.1.1.1	192.168.2.5	0xf4ba	No error (0)	getsesametime.com		15.197.225.128	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:13.159849882 CEST	1.1.1.1	192.168.2.5	0xf4ba	No error (0)	getsesametime.com		3.33.251.168	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:13.854717970 CEST	1.1.1.1	192.168.2.5	0x75f5	No error (0)	sesamehr.com		15.235.45.220	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:14.665330887 CEST	1.1.1.1	192.168.2.5	0xa2eb	No error (0)	www.sesamehr.com	sesamehr.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:14.686182022 CEST	1.1.1.1	192.168.2.5	0xb985	No error (0)	www.sesamehr.com	sesamehr.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:14.686182022 CEST	1.1.1.1	192.168.2.5	0xb985	No error (0)	sesamehr.com		15.235.45.220	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:15.638582945 CEST	1.1.1.1	192.168.2.5	0x2e88	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:15.638623953 CEST	1.1.1.1	192.168.2.5	0x71da	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:18.007216930 CEST	1.1.1.1	192.168.2.5	0x847	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:18.008694887 CEST	1.1.1.1	192.168.2.5	0x98d3	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:18.010132074 CEST	1.1.1.1	192.168.2.5	0xbef3	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:18.010132074 CEST	1.1.1.1	192.168.2.5	0xbef3	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:18.010132074 CEST	1.1.1.1	192.168.2.5	0xbef3	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:18.010132074 CEST	1.1.1.1	192.168.2.5	0xbef3	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:18.010132074 CEST	1.1.1.1	192.168.2.5	0xbef3	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:18.010498047 CEST	1.1.1.1	192.168.2.5	0xadaf	No error (0)	unpkg.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:19.026563883 CEST	1.1.1.1	192.168.2.5	0xcfc2	No error (0)	www.sesamehr.com	sesamehr.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:19.026563883 CEST	1.1.1.1	192.168.2.5	0xcfc2	No error (0)	sesamehr.com		15.235.45.220	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:19.045676947 CEST	1.1.1.1	192.168.2.5	0x2efd	No error (0)	www.sesamehr.com	sesamehr.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.101257086 CEST	1.1.1.1	192.168.2.5	0x2ea1	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.102035046 CEST	1.1.1.1	192.168.2.5	0x488d	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.684011936 CEST	1.1.1.1	192.168.2.5	0xe553	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.684011936 CEST	1.1.1.1	192.168.2.5	0xe553	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.684011936 CEST	1.1.1.1	192.168.2.5	0xe553	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.710849047 CEST	1.1.1.1	192.168.2.5	0x2fba	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.711160898 CEST	1.1.1.1	192.168.2.5	0x9e17	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.725249052 CEST	1.1.1.1	192.168.2.5	0x5175	No error (0)	cmp.inmobi.com	cmp-prod.inmobi-choice.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.725249052 CEST	1.1.1.1	192.168.2.5	0x5175	No error (0)	cmp-prod.inmobi-choice.io	d23sp3kzv1t6m5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.725265026 CEST	1.1.1.1	192.168.2.5	0xdc0	No error (0)	cmp.inmobi.com	cmp-prod.inmobi-choice.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.725265026 CEST	1.1.1.1	192.168.2.5	0xdc0	No error (0)	cmp-prod.inmobi-choice.io	d23sp3kzv1t6m5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:20.725265026 CEST	1.1.1.1	192.168.2.5	0xdc0	No error (0)	d23sp3kzv1t6m5.cloudfront.net		3.160.150.36	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.725265026 CEST	1.1.1.1	192.168.2.5	0xdc0	No error (0)	d23sp3kzv1t6m5.cloudfront.net		3.160.150.61	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.725265026 CEST	1.1.1.1	192.168.2.5	0xdc0	No error (0)	d23sp3kzv1t6m5.cloudfront.net		3.160.150.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.725265026 CEST	1.1.1.1	192.168.2.5	0xdc0	No error (0)	d23sp3kzv1t6m5.cloudfront.net		3.160.150.40	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.736144066 CEST	1.1.1.1	192.168.2.5	0xae43	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.736144066 CEST	1.1.1.1	192.168.2.5	0xae43	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.736144066 CEST	1.1.1.1	192.168.2.5	0xae43	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.736144066 CEST	1.1.1.1	192.168.2.5	0xae43	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.736144066 CEST	1.1.1.1	192.168.2.5	0xae43	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:20.739584923 CEST	1.1.1.1	192.168.2.5	0x7dfa	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:21.006855965 CEST	1.1.1.1	192.168.2.5	0x8f64	No error (0)	googleads.g.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.007662058 CEST	1.1.1.1	192.168.2.5	0x4759	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:21.052711964 CEST	1.1.1.1	192.168.2.5	0x90cc	No error (0)	fresnel.vimeocdn.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.053051949 CEST	1.1.1.1	192.168.2.5	0xa4e0	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:21.053051949 CEST	1.1.1.1	192.168.2.5	0xa4e0	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.053051949 CEST	1.1.1.1	192.168.2.5	0xa4e0	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.053051949 CEST	1.1.1.1	192.168.2.5	0xa4e0	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.053051949 CEST	1.1.1.1	192.168.2.5	0xa4e0	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.053369999 CEST	1.1.1.1	192.168.2.5	0x9692	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:21.056277037 CEST	1.1.1.1	192.168.2.5	0x7d16	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:21.056277037 CEST	1.1.1.1	192.168.2.5	0x7d16	No error (0)	vimeo-video.map.fastly.net		151.101.194.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.056277037 CEST	1.1.1.1	192.168.2.5	0x7d16	No error (0)	vimeo-video.map.fastly.net		151.101.66.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.056277037 CEST	1.1.1.1	192.168.2.5	0x7d16	No error (0)	vimeo-video.map.fastly.net		151.101.2.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.056277037 CEST	1.1.1.1	192.168.2.5	0x7d16	No error (0)	vimeo-video.map.fastly.net		151.101.130.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:21.057610989 CEST	1.1.1.1	192.168.2.5	0xd450	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:21.882440090 CEST	1.1.1.1	192.168.2.5	0xbef5	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:21.882440090 CEST	1.1.1.1	192.168.2.5	0xbef5	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:21.882457018 CEST	1.1.1.1	192.168.2.5	0x7de6	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:21.882457018 CEST	1.1.1.1	192.168.2.5	0x7de6	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:22.067770004 CEST	1.1.1.1	192.168.2.5	0xceed	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:22.067783117 CEST	1.1.1.1	192.168.2.5	0xa21f	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446686983 CEST	1.1.1.1	192.168.2.5	0xc870	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446686983 CEST	1.1.1.1	192.168.2.5	0xc870	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446686983 CEST	1.1.1.1	192.168.2.5	0xc870	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446686983 CEST	1.1.1.1	192.168.2.5	0xc870	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446686983 CEST	1.1.1.1	192.168.2.5	0xc870	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446691990 CEST	1.1.1.1	192.168.2.5	0xb424	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446691990 CEST	1.1.1.1	192.168.2.5	0xb424	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446691990 CEST	1.1.1.1	192.168.2.5	0xb424	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446707010 CEST	1.1.1.1	192.168.2.5	0x2dc7	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:23.446712017 CEST	1.1.1.1	192.168.2.5	0xb017	No error (0)	unpkg.com		104.17.245.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446712017 CEST	1.1.1.1	192.168.2.5	0xb017	No error (0)	unpkg.com		104.17.248.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446712017 CEST	1.1.1.1	192.168.2.5	0xb017	No error (0)	unpkg.com		104.17.246.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446712017 CEST	1.1.1.1	192.168.2.5	0xb017	No error (0)	unpkg.com		104.17.249.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446712017 CEST	1.1.1.1	192.168.2.5	0xb017	No error (0)	unpkg.com		104.17.247.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.446726084 CEST	1.1.1.1	192.168.2.5	0x949d	No error (0)	unpkg.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:23.453036070 CEST	1.1.1.1	192.168.2.5	0xba1c	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453047991 CEST	1.1.1.1	192.168.2.5	0x28fe	No error (0)	cmp.inmobi.com	cmp-prod.inmobi-choice.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453047991 CEST	1.1.1.1	192.168.2.5	0x28fe	No error (0)	cmp-prod.inmobi-choice.io	d23sp3kzv1t6m5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453059912 CEST	1.1.1.1	192.168.2.5	0xa79b	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453066111 CEST	1.1.1.1	192.168.2.5	0x3367	No error (0)	cmp.inmobi.com	cmp-prod.inmobi-choice.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453066111 CEST	1.1.1.1	192.168.2.5	0x3367	No error (0)	cmp-prod.inmobi-choice.io	d23sp3kzv1t6m5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453066111 CEST	1.1.1.1	192.168.2.5	0x3367	No error (0)	d23sp3kzv1t6m5.cloudfront.net		3.160.150.36	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453066111 CEST	1.1.1.1	192.168.2.5	0x3367	No error (0)	d23sp3kzv1t6m5.cloudfront.net		3.160.150.117	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453066111 CEST	1.1.1.1	192.168.2.5	0x3367	No error (0)	d23sp3kzv1t6m5.cloudfront.net		3.160.150.61	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.453066111 CEST	1.1.1.1	192.168.2.5	0x3367	No error (0)	d23sp3kzv1t6m5.cloudfront.net		3.160.150.40	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.519392014 CEST	1.1.1.1	192.168.2.5	0x9df4	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.528424025 CEST	1.1.1.1	192.168.2.5	0xbc8f	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.528424025 CEST	1.1.1.1	192.168.2.5	0xbc8f	No error (0)	vimeo-video.map.fastly.net		151.101.2.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.528424025 CEST	1.1.1.1	192.168.2.5	0xbc8f	No error (0)	vimeo-video.map.fastly.net		151.101.66.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.528424025 CEST	1.1.1.1	192.168.2.5	0xbc8f	No error (0)	vimeo-video.map.fastly.net		151.101.130.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.528424025 CEST	1.1.1.1	192.168.2.5	0xbc8f	No error (0)	vimeo-video.map.fastly.net		151.101.194.109	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.734486103 CEST	1.1.1.1	192.168.2.5	0xe8db	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.734486103 CEST	1.1.1.1	192.168.2.5	0xe8db	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:23.786897898 CEST	1.1.1.1	192.168.2.5	0x9b29	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.786897898 CEST	1.1.1.1	192.168.2.5	0x9b29	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.786926031 CEST	1.1.1.1	192.168.2.5	0x74f9	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.786926031 CEST	1.1.1.1	192.168.2.5	0x74f9	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.842847109 CEST	1.1.1.1	192.168.2.5	0xb051	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:23.844577074 CEST	1.1.1.1	192.168.2.5	0x3c1c	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:24.422646046 CEST	1.1.1.1	192.168.2.5	0x6708	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:24.422646046 CEST	1.1.1.1	192.168.2.5	0x6708	No error (0)	platform.twitter.map.fastly.net		146.75.52.157	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:24.424185038 CEST	1.1.1.1	192.168.2.5	0xf013	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:24.424217939 CEST	1.1.1.1	192.168.2.5	0xb658	No error (0)	cdn.firstpromoter.com	d2ycxbs0cq3yaz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:24.427083015 CEST	1.1.1.1	192.168.2.5	0xb18c	No error (0)	cdn.firstpromoter.com	d2ycxbs0cq3yaz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:24.427083015 CEST	1.1.1.1	192.168.2.5	0xb18c	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		18.245.31.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:24.427083015 CEST	1.1.1.1	192.168.2.5	0xb18c	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		18.245.31.42	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:24.427083015 CEST	1.1.1.1	192.168.2.5	0xb18c	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		18.245.31.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:24.427083015 CEST	1.1.1.1	192.168.2.5	0xb18c	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		18.245.31.25	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:26.710798979 CEST	1.1.1.1	192.168.2.5	0x1a7d	No error (0)	js.hubspotfeedback.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:26.711558104 CEST	1.1.1.1	192.168.2.5	0xba2c	No error (0)	js.hubspotfeedback.com		104.18.64.124	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:26.711558104 CEST	1.1.1.1	192.168.2.5	0xba2c	No error (0)	js.hubspotfeedback.com		104.17.95.250	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:26.711558104 CEST	1.1.1.1	192.168.2.5	0xba2c	No error (0)	js.hubspotfeedback.com		104.17.240.124	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:26.711558104 CEST	1.1.1.1	192.168.2.5	0xba2c	No error (0)	js.hubspotfeedback.com		104.17.79.250	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:26.711558104 CEST	1.1.1.1	192.168.2.5	0xba2c	No error (0)	js.hubspotfeedback.com		104.17.224.124	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:27.726007938 CEST	1.1.1.1	192.168.2.5	0x9a55	No error (0)	js.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:27.726007938 CEST	1.1.1.1	192.168.2.5	0x9a55	No error (0)	js.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:27.726023912 CEST	1.1.1.1	192.168.2.5	0xa492	No error (0)	js.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:28.571269989 CEST	1.1.1.1	192.168.2.5	0x71f4	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.571269989 CEST	1.1.1.1	192.168.2.5	0x71f4	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.571787119 CEST	1.1.1.1	192.168.2.5	0x1ed4	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:28.598820925 CEST	1.1.1.1	192.168.2.5	0xf3a	No error (0)	js.usemessages.com		104.16.76.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.598820925 CEST	1.1.1.1	192.168.2.5	0xf3a	No error (0)	js.usemessages.com		104.16.77.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.598820925 CEST	1.1.1.1	192.168.2.5	0xf3a	No error (0)	js.usemessages.com		104.16.78.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.598820925 CEST	1.1.1.1	192.168.2.5	0xf3a	No error (0)	js.usemessages.com		104.16.79.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.598820925 CEST	1.1.1.1	192.168.2.5	0xf3a	No error (0)	js.usemessages.com		104.16.75.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:28.599447012 CEST	1.1.1.1	192.168.2.5	0x8287	No error (0)	js.usemessages.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:29.440937042 CEST	1.1.1.1	192.168.2.5	0x8c1d	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:29.441405058 CEST	1.1.1.1	192.168.2.5	0xf0fb	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:29.441405058 CEST	1.1.1.1	192.168.2.5	0xf0fb	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.441405058 CEST	1.1.1.1	192.168.2.5	0xf0fb	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.441405058 CEST	1.1.1.1	192.168.2.5	0xf0fb	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.441405058 CEST	1.1.1.1	192.168.2.5	0xf0fb	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.558131933 CEST	1.1.1.1	192.168.2.5	0x3098	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:29.559416056 CEST	1.1.1.1	192.168.2.5	0xf0de	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:29.563410044 CEST	1.1.1.1	192.168.2.5	0x7c5e	No error (0)	cdn.firstpromoter.com	d2ycxbs0cq3yaz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:29.563410044 CEST	1.1.1.1	192.168.2.5	0x7c5e	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		18.245.31.86	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.563410044 CEST	1.1.1.1	192.168.2.5	0x7c5e	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		18.245.31.42	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.563410044 CEST	1.1.1.1	192.168.2.5	0x7c5e	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		18.245.31.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.563410044 CEST	1.1.1.1	192.168.2.5	0x7c5e	No error (0)	d2ycxbs0cq3yaz.cloudfront.net		18.245.31.25	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.566879034 CEST	1.1.1.1	192.168.2.5	0x201a	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:29.566879034 CEST	1.1.1.1	192.168.2.5	0x201a	No error (0)	platform.twitter.map.fastly.net		146.75.52.157	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.567034006 CEST	1.1.1.1	192.168.2.5	0x40a3	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:29.567214966 CEST	1.1.1.1	192.168.2.5	0x2b65	No error (0)	cta-service-cms2.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.567214966 CEST	1.1.1.1	192.168.2.5	0x2b65	No error (0)	cta-service-cms2.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.574532986 CEST	1.1.1.1	192.168.2.5	0xff2c	No error (0)	cdn.firstpromoter.com	d2ycxbs0cq3yaz.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:29.614422083 CEST	1.1.1.1	192.168.2.5	0x77b8	No error (0)	cta-service-cms2.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:29.906224966 CEST	1.1.1.1	192.168.2.5	0x9ce3	No error (0)	api.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:29.906764030 CEST	1.1.1.1	192.168.2.5	0x450e	No error (0)	api.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:29.906764030 CEST	1.1.1.1	192.168.2.5	0x450e	No error (0)	api.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.085983992 CEST	1.1.1.1	192.168.2.5	0x2435	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:30.085983992 CEST	1.1.1.1	192.168.2.5	0x2435	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.546765089 CEST	1.1.1.1	192.168.2.5	0x7107	No error (0)	vimeo.com		162.159.138.60	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.546765089 CEST	1.1.1.1	192.168.2.5	0x7107	No error (0)	vimeo.com		162.159.128.61	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.581480026 CEST	1.1.1.1	192.168.2.5	0x12aa	No error (0)	js.hubspotfeedback.com		104.17.224.124	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.581480026 CEST	1.1.1.1	192.168.2.5	0x12aa	No error (0)	js.hubspotfeedback.com		104.17.95.250	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.581480026 CEST	1.1.1.1	192.168.2.5	0x12aa	No error (0)	js.hubspotfeedback.com		104.17.79.250	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.581480026 CEST	1.1.1.1	192.168.2.5	0x12aa	No error (0)	js.hubspotfeedback.com		104.18.64.124	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.581480026 CEST	1.1.1.1	192.168.2.5	0x12aa	No error (0)	js.hubspotfeedback.com		104.17.240.124	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.582349062 CEST	1.1.1.1	192.168.2.5	0xde5f	No error (0)	js.hubspotfeedback.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:30.582617044 CEST	1.1.1.1	192.168.2.5	0xaaac	No error (0)	js.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.582617044 CEST	1.1.1.1	192.168.2.5	0xaaac	No error (0)	js.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.582834005 CEST	1.1.1.1	192.168.2.5	0x3bb8	No error (0)	js.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:30.679131031 CEST	1.1.1.1	192.168.2.5	0xbe5	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.679131031 CEST	1.1.1.1	192.168.2.5	0xbe5	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.681674004 CEST	1.1.1.1	192.168.2.5	0x1eef	No error (0)	js.usemessages.com		104.16.76.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.681674004 CEST	1.1.1.1	192.168.2.5	0x1eef	No error (0)	js.usemessages.com		104.16.79.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.681674004 CEST	1.1.1.1	192.168.2.5	0x1eef	No error (0)	js.usemessages.com		104.16.75.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.681674004 CEST	1.1.1.1	192.168.2.5	0x1eef	No error (0)	js.usemessages.com		104.16.78.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.681674004 CEST	1.1.1.1	192.168.2.5	0x1eef	No error (0)	js.usemessages.com		104.16.77.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:30.682158947 CEST	1.1.1.1	192.168.2.5	0xa4d5	No error (0)	js.usemessages.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:30.682346106 CEST	1.1.1.1	192.168.2.5	0x5984	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:30.770473003 CEST	1.1.1.1	192.168.2.5	0xc6cf	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:31.420614004 CEST	1.1.1.1	192.168.2.5	0xf28c	No error (0)	js.hsadspixel.net		104.17.128.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:31.420614004 CEST	1.1.1.1	192.168.2.5	0xf28c	No error (0)	js.hsadspixel.net		104.17.223.152	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:31.421556950 CEST	1.1.1.1	192.168.2.5	0x562c	No error (0)	js.hs-banner.com		104.18.40.240	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:31.421556950 CEST	1.1.1.1	192.168.2.5	0x562c	No error (0)	js.hs-banner.com		172.64.147.16	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:31.421621084 CEST	1.1.1.1	192.168.2.5	0xcb73	No error (0)	js.hsadspixel.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:31.424117088 CEST	1.1.1.1	192.168.2.5	0x3935	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:32.531560898 CEST	1.1.1.1	192.168.2.5	0x82b1	No error (0)	cta-service-cms2.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:32.557971001 CEST	1.1.1.1	192.168.2.5	0x8923	No error (0)	api.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.557971001 CEST	1.1.1.1	192.168.2.5	0x8923	No error (0)	api.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.558873892 CEST	1.1.1.1	192.168.2.5	0xf2c8	No error (0)	api.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:32.571000099 CEST	1.1.1.1	192.168.2.5	0x72f	No error (0)	js.hsadspixel.net		104.17.223.152	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.571000099 CEST	1.1.1.1	192.168.2.5	0x72f	No error (0)	js.hsadspixel.net		104.17.128.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.571949005 CEST	1.1.1.1	192.168.2.5	0xf674	No error (0)	js.hsadspixel.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:32.633271933 CEST	1.1.1.1	192.168.2.5	0xc4a4	No error (0)	cdn.amplitude.com		18.245.86.4	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.633271933 CEST	1.1.1.1	192.168.2.5	0xc4a4	No error (0)	cdn.amplitude.com		18.245.86.111	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.633271933 CEST	1.1.1.1	192.168.2.5	0xc4a4	No error (0)	cdn.amplitude.com		18.245.86.101	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.633271933 CEST	1.1.1.1	192.168.2.5	0xc4a4	No error (0)	cdn.amplitude.com		18.245.86.69	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.639816046 CEST	1.1.1.1	192.168.2.5	0xd3ef	No error (0)	t.co		172.66.0.227	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.646431923 CEST	1.1.1.1	192.168.2.5	0xa21f	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.646431923 CEST	1.1.1.1	192.168.2.5	0xa21f	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.646775007 CEST	1.1.1.1	192.168.2.5	0x91b1	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.646775007 CEST	1.1.1.1	192.168.2.5	0x91b1	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.646775007 CEST	1.1.1.1	192.168.2.5	0x91b1	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.695482016 CEST	1.1.1.1	192.168.2.5	0x5c14	No error (0)	js.hs-banner.com		172.64.147.16	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.695482016 CEST	1.1.1.1	192.168.2.5	0x5c14	No error (0)	js.hs-banner.com		104.18.40.240	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:32.697268009 CEST	1.1.1.1	192.168.2.5	0x22c4	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:32.770896912 CEST	1.1.1.1	192.168.2.5	0xca7d	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.770896912 CEST	1.1.1.1	192.168.2.5	0xca7d	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.771213055 CEST	1.1.1.1	192.168.2.5	0x4942	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.771213055 CEST	1.1.1.1	192.168.2.5	0x4942	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.771213055 CEST	1.1.1.1	192.168.2.5	0x4942	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.771213055 CEST	1.1.1.1	192.168.2.5	0x4942	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:32.771213055 CEST	1.1.1.1	192.168.2.5	0x4942	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.005911112 CEST	1.1.1.1	192.168.2.5	0x834d	No error (0)	cta-service-cms2.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.005911112 CEST	1.1.1.1	192.168.2.5	0x834d	No error (0)	cta-service-cms2.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.024621964 CEST	1.1.1.1	192.168.2.5	0xb821	No error (0)	perf-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.024621964 CEST	1.1.1.1	192.168.2.5	0xb821	No error (0)	perf-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.024761915 CEST	1.1.1.1	192.168.2.5	0x2dd8	No error (0)	perf-na1.hsforms.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:33.131593943 CEST	1.1.1.1	192.168.2.5	0x4bc9	No error (0)	api.hubapi.com		104.18.243.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.131593943 CEST	1.1.1.1	192.168.2.5	0x4bc9	No error (0)	api.hubapi.com		104.18.244.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.131593943 CEST	1.1.1.1	192.168.2.5	0x4bc9	No error (0)	api.hubapi.com		104.18.242.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.131593943 CEST	1.1.1.1	192.168.2.5	0x4bc9	No error (0)	api.hubapi.com		104.18.241.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.131593943 CEST	1.1.1.1	192.168.2.5	0x4bc9	No error (0)	api.hubapi.com		104.18.240.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:33.132841110 CEST	1.1.1.1	192.168.2.5	0x9fb2	No error (0)	api.hubapi.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:33.144335985 CEST	1.1.1.1	192.168.2.5	0xab12	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:33.144335985 CEST	1.1.1.1	192.168.2.5	0xab12	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:33.146290064 CEST	1.1.1.1	192.168.2.5	0x66ab	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:33.146290064 CEST	1.1.1.1	192.168.2.5	0x66ab	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:33.842608929 CEST	1.1.1.1	192.168.2.5	0x52a5	No error (0)	fresnel-events.vimeocdn.com		34.120.15.67	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.116862059 CEST	1.1.1.1	192.168.2.5	0xc3e6	No error (0)	t.co		172.66.0.227	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.125467062 CEST	1.1.1.1	192.168.2.5	0x5b22	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.125467062 CEST	1.1.1.1	192.168.2.5	0x5b22	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.125467062 CEST	1.1.1.1	192.168.2.5	0x5b22	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.125632048 CEST	1.1.1.1	192.168.2.5	0x392c	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.125632048 CEST	1.1.1.1	192.168.2.5	0x392c	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.133877993 CEST	1.1.1.1	192.168.2.5	0xdff	No error (0)	perf-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.133877993 CEST	1.1.1.1	192.168.2.5	0xdff	No error (0)	perf-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.133929968 CEST	1.1.1.1	192.168.2.5	0xd1b5	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.133929968 CEST	1.1.1.1	192.168.2.5	0xd1b5	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.133929968 CEST	1.1.1.1	192.168.2.5	0xd1b5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.133929968 CEST	1.1.1.1	192.168.2.5	0xd1b5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.134051085 CEST	1.1.1.1	192.168.2.5	0xa4ec	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.134051085 CEST	1.1.1.1	192.168.2.5	0xa4ec	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.134131908 CEST	1.1.1.1	192.168.2.5	0x1d4f	No error (0)	perf-na1.hsforms.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:34.134145975 CEST	1.1.1.1	192.168.2.5	0xafcc	No error (0)	api.hubapi.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:34.134356976 CEST	1.1.1.1	192.168.2.5	0xa626	No error (0)	api.hubapi.com		104.18.244.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.134356976 CEST	1.1.1.1	192.168.2.5	0xa626	No error (0)	api.hubapi.com		104.18.242.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.134356976 CEST	1.1.1.1	192.168.2.5	0xa626	No error (0)	api.hubapi.com		104.18.241.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.134356976 CEST	1.1.1.1	192.168.2.5	0xa626	No error (0)	api.hubapi.com		104.18.240.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.134356976 CEST	1.1.1.1	192.168.2.5	0xa626	No error (0)	api.hubapi.com		104.18.243.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.467314005 CEST	1.1.1.1	192.168.2.5	0x5bd7	No error (0)	cdn.amplitude.com		18.245.86.69	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.467314005 CEST	1.1.1.1	192.168.2.5	0x5bd7	No error (0)	cdn.amplitude.com		18.245.86.101	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.467314005 CEST	1.1.1.1	192.168.2.5	0x5bd7	No error (0)	cdn.amplitude.com		18.245.86.111	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.467314005 CEST	1.1.1.1	192.168.2.5	0x5bd7	No error (0)	cdn.amplitude.com		18.245.86.4	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:34.806360960 CEST	1.1.1.1	192.168.2.5	0x33bc	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:34.806430101 CEST	1.1.1.1	192.168.2.5	0x14f1	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:36.484095097 CEST	1.1.1.1	192.168.2.5	0x1032	No error (0)	api.cmp.inmobi.com	cmp-api-prod.inmobi-choice.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:36.484095097 CEST	1.1.1.1	192.168.2.5	0x1032	No error (0)	cmp-api-prod.inmobi-choice.io	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:36.484095097 CEST	1.1.1.1	192.168.2.5	0x1032	No error (0)	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		35.157.41.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:36.484095097 CEST	1.1.1.1	192.168.2.5	0x1032	No error (0)	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		52.28.88.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:36.484095097 CEST	1.1.1.1	192.168.2.5	0x1032	No error (0)	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		52.58.75.155	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:36.484108925 CEST	1.1.1.1	192.168.2.5	0x1cf4	No error (0)	api.cmp.inmobi.com	cmp-api-prod.inmobi-choice.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:36.484108925 CEST	1.1.1.1	192.168.2.5	0x1cf4	No error (0)	cmp-api-prod.inmobi-choice.io	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:36.575371981 CEST	1.1.1.1	192.168.2.5	0x88c5	No error (0)	www.sesamehr.es	sesamehr.es		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:36.591131926 CEST	1.1.1.1	192.168.2.5	0xd81d	No error (0)	www.sesamehr.es	sesamehr.es		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:36.591131926 CEST	1.1.1.1	192.168.2.5	0xd81d	No error (0)	sesamehr.es		54.38.108.40	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:40.243232012 CEST	1.1.1.1	192.168.2.5	0xb00c	No error (0)	api.cmp.inmobi.com	cmp-api-prod.inmobi-choice.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:40.243232012 CEST	1.1.1.1	192.168.2.5	0xb00c	No error (0)	cmp-api-prod.inmobi-choice.io	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:40.243232012 CEST	1.1.1.1	192.168.2.5	0xb00c	No error (0)	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		52.28.88.203	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:40.243232012 CEST	1.1.1.1	192.168.2.5	0xb00c	No error (0)	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		52.58.75.155	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:40.243232012 CEST	1.1.1.1	192.168.2.5	0xb00c	No error (0)	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		35.157.41.160	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:40.244406939 CEST	1.1.1.1	192.168.2.5	0xc602	No error (0)	api.cmp.inmobi.com	cmp-api-prod.inmobi-choice.io		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:40.244406939 CEST	1.1.1.1	192.168.2.5	0xc602	No error (0)	cmp-api-prod.inmobi-choice.io	choice-apis-prod-2120274730.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:40.331125975 CEST	1.1.1.1	192.168.2.5	0x7408	No error (0)	www.sesamehr.es	sesamehr.es		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:40.331125975 CEST	1.1.1.1	192.168.2.5	0x7408	No error (0)	sesamehr.es		54.38.108.40	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:40.333775997 CEST	1.1.1.1	192.168.2.5	0xea42	No error (0)	www.sesamehr.es	sesamehr.es		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:45.422894001 CEST	1.1.1.1	192.168.2.5	0x51ae	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:45.422894001 CEST	1.1.1.1	192.168.2.5	0x51ae	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.484246969 CEST	1.1.1.1	192.168.2.5	0x8499	No error (0)	app.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:47.484971046 CEST	1.1.1.1	192.168.2.5	0x996a	No error (0)	app.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.484971046 CEST	1.1.1.1	192.168.2.5	0x996a	No error (0)	app.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525544882 CEST	1.1.1.1	192.168.2.5	0xebb3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525544882 CEST	1.1.1.1	192.168.2.5	0xebb3	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525558949 CEST	1.1.1.1	192.168.2.5	0xb20e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525558949 CEST	1.1.1.1	192.168.2.5	0xb20e	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:47.525558949 CEST	1.1.1.1	192.168.2.5	0xb20e	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:47.525569916 CEST	1.1.1.1	192.168.2.5	0xf09c	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525569916 CEST	1.1.1.1	192.168.2.5	0xf09c	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525615931 CEST	1.1.1.1	192.168.2.5	0xa858	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525615931 CEST	1.1.1.1	192.168.2.5	0xa858	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525671005 CEST	1.1.1.1	192.168.2.5	0xb82a	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:47.525882959 CEST	1.1.1.1	192.168.2.5	0xc7bd	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:47.525882959 CEST	1.1.1.1	192.168.2.5	0xc7bd	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:48.178658962 CEST	1.1.1.1	192.168.2.5	0xc037	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.178658962 CEST	1.1.1.1	192.168.2.5	0xc037	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.179399014 CEST	1.1.1.1	192.168.2.5	0x37a8	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:48.221870899 CEST	1.1.1.1	192.168.2.5	0x3c83	No error (0)	static.hsappstatic.net		104.17.175.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.221870899 CEST	1.1.1.1	192.168.2.5	0x3c83	No error (0)	static.hsappstatic.net		104.17.172.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.221870899 CEST	1.1.1.1	192.168.2.5	0x3c83	No error (0)	static.hsappstatic.net		104.17.176.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.221870899 CEST	1.1.1.1	192.168.2.5	0x3c83	No error (0)	static.hsappstatic.net		104.17.174.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.221870899 CEST	1.1.1.1	192.168.2.5	0x3c83	No error (0)	static.hsappstatic.net		104.17.173.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.224414110 CEST	1.1.1.1	192.168.2.5	0xfde6	No error (0)	static.hsappstatic.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:48.818656921 CEST	1.1.1.1	192.168.2.5	0x8c73	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:48.818656921 CEST	1.1.1.1	192.168.2.5	0x8c73	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.818794012 CEST	1.1.1.1	192.168.2.5	0xae75	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:48.818794012 CEST	1.1.1.1	192.168.2.5	0xae75	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:48.818794012 CEST	1.1.1.1	192.168.2.5	0xae75	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:48.924228907 CEST	1.1.1.1	192.168.2.5	0x8e39	No error (0)	static.hsappstatic.net		104.17.175.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.924228907 CEST	1.1.1.1	192.168.2.5	0x8e39	No error (0)	static.hsappstatic.net		104.17.172.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.924228907 CEST	1.1.1.1	192.168.2.5	0x8e39	No error (0)	static.hsappstatic.net		104.17.174.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.924228907 CEST	1.1.1.1	192.168.2.5	0x8e39	No error (0)	static.hsappstatic.net		104.17.173.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.924228907 CEST	1.1.1.1	192.168.2.5	0x8e39	No error (0)	static.hsappstatic.net		104.17.176.91	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.928611040 CEST	1.1.1.1	192.168.2.5	0x46e7	No error (0)	static.hsappstatic.net			65	IN (0x0001)	false
Oct 4, 2024 15:38:48.931490898 CEST	1.1.1.1	192.168.2.5	0xc645	No error (0)	feedback.hubapi.com		104.18.240.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.931490898 CEST	1.1.1.1	192.168.2.5	0xc645	No error (0)	feedback.hubapi.com		104.18.244.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.931490898 CEST	1.1.1.1	192.168.2.5	0xc645	No error (0)	feedback.hubapi.com		104.18.243.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.931490898 CEST	1.1.1.1	192.168.2.5	0xc645	No error (0)	feedback.hubapi.com		104.18.242.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.931490898 CEST	1.1.1.1	192.168.2.5	0xc645	No error (0)	feedback.hubapi.com		104.18.241.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:48.931526899 CEST	1.1.1.1	192.168.2.5	0x179e	No error (0)	feedback.hubapi.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:50.284365892 CEST	1.1.1.1	192.168.2.5	0x4151	No error (0)	feedback.hubapi.com		104.18.241.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:50.284365892 CEST	1.1.1.1	192.168.2.5	0x4151	No error (0)	feedback.hubapi.com		104.18.240.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:50.284365892 CEST	1.1.1.1	192.168.2.5	0x4151	No error (0)	feedback.hubapi.com		104.18.242.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:50.284365892 CEST	1.1.1.1	192.168.2.5	0x4151	No error (0)	feedback.hubapi.com		104.18.244.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:50.284365892 CEST	1.1.1.1	192.168.2.5	0x4151	No error (0)	feedback.hubapi.com		104.18.243.108	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:50.285876036 CEST	1.1.1.1	192.168.2.5	0x29c3	No error (0)	feedback.hubapi.com			65	IN (0x0001)	false
Oct 4, 2024 15:38:50.286894083 CEST	1.1.1.1	192.168.2.5	0x85f8	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:50.286894083 CEST	1.1.1.1	192.168.2.5	0x85f8	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:50.288398027 CEST	1.1.1.1	192.168.2.5	0xe5c6	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:50.288398027 CEST	1.1.1.1	192.168.2.5	0xe5c6	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:38:59.797607899 CEST	1.1.1.1	192.168.2.5	0x202b	No error (0)	capig.stape.cloud		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:59.797607899 CEST	1.1.1.1	192.168.2.5	0x202b	No error (0)	capig.stape.cloud		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:38:59.799412012 CEST	1.1.1.1	192.168.2.5	0x808b	No error (0)	capig.stape.cloud			65	IN (0x0001)	false
Oct 4, 2024 15:39:00.425065041 CEST	1.1.1.1	192.168.2.5	0xec99	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:00.425065041 CEST	1.1.1.1	192.168.2.5	0xec99	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:00.481744051 CEST	1.1.1.1	192.168.2.5	0xaf41	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:04.377336979 CEST	1.1.1.1	192.168.2.5	0xfab8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:04.377336979 CEST	1.1.1.1	192.168.2.5	0xfab8	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:04.378112078 CEST	1.1.1.1	192.168.2.5	0xfce2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:04.398597002 CEST	1.1.1.1	192.168.2.5	0x212b	No error (0)	capig.stape.cloud		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:04.398597002 CEST	1.1.1.1	192.168.2.5	0x212b	No error (0)	capig.stape.cloud		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:04.402395010 CEST	1.1.1.1	192.168.2.5	0xed07	No error (0)	capig.stape.cloud			65	IN (0x0001)	false
Oct 4, 2024 15:39:05.466358900 CEST	1.1.1.1	192.168.2.5	0x2238	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:05.466358900 CEST	1.1.1.1	192.168.2.5	0x2238	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:06.882920027 CEST	1.1.1.1	192.168.2.5	0x78f5	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:06.882982969 CEST	1.1.1.1	192.168.2.5	0x6952	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 15:39:06.885215044 CEST	1.1.1.1	192.168.2.5	0x77c8	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:06.886276960 CEST	1.1.1.1	192.168.2.5	0x1eeb	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:06.887964010 CEST	1.1.1.1	192.168.2.5	0x22be	No error (0)	cdn.neverbounce.com	d3g1ftmock1oxn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:06.893552065 CEST	1.1.1.1	192.168.2.5	0xa32b	No error (0)	cdn.neverbounce.com	d3g1ftmock1oxn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:06.893552065 CEST	1.1.1.1	192.168.2.5	0xa32b	No error (0)	d3g1ftmock1oxn.cloudfront.net		18.245.46.122	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:06.893552065 CEST	1.1.1.1	192.168.2.5	0xa32b	No error (0)	d3g1ftmock1oxn.cloudfront.net		18.245.46.30	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:06.893552065 CEST	1.1.1.1	192.168.2.5	0xa32b	No error (0)	d3g1ftmock1oxn.cloudfront.net		18.245.46.63	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:06.893552065 CEST	1.1.1.1	192.168.2.5	0xa32b	No error (0)	d3g1ftmock1oxn.cloudfront.net		18.245.46.48	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:07.246228933 CEST	1.1.1.1	192.168.2.5	0xc2d9	No error (0)	assets.sesamehr.com	8564339.group39.sites.hubspot.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:07.246228933 CEST	1.1.1.1	192.168.2.5	0xc2d9	No error (0)	8564339.group39.sites.hubspot.net	group39.sites.hscoscdn30.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:07.246228933 CEST	1.1.1.1	192.168.2.5	0xc2d9	No error (0)	group39.sites.hscoscdn30.net		199.60.103.29	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:07.246228933 CEST	1.1.1.1	192.168.2.5	0xc2d9	No error (0)	group39.sites.hscoscdn30.net		199.60.103.227	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:07.262845993 CEST	1.1.1.1	192.168.2.5	0x6c88	No error (0)	assets.sesamehr.com	8564339.group39.sites.hubspot.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:07.262845993 CEST	1.1.1.1	192.168.2.5	0x6c88	No error (0)	8564339.group39.sites.hubspot.net	group39.sites.hscoscdn30.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:07.262845993 CEST	1.1.1.1	192.168.2.5	0x6c88	No error (0)	group39.sites.hscoscdn30.net			65	IN (0x0001)	false
Oct 4, 2024 15:39:09.111068010 CEST	1.1.1.1	192.168.2.5	0x6db9	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:09.111191034 CEST	1.1.1.1	192.168.2.5	0x197d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:09.111191034 CEST	1.1.1.1	192.168.2.5	0x197d	No error (0)	plus.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:09.837481976 CEST	1.1.1.1	192.168.2.5	0xd641	No error (0)	api.neverbounce.com	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:09.837481976 CEST	1.1.1.1	192.168.2.5	0xd641	No error (0)	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		54.165.55.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:09.837481976 CEST	1.1.1.1	192.168.2.5	0xd641	No error (0)	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		52.72.107.194	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:09.837481976 CEST	1.1.1.1	192.168.2.5	0xd641	No error (0)	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		107.20.182.197	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:09.850369930 CEST	1.1.1.1	192.168.2.5	0x35c3	No error (0)	api.neverbounce.com	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.017323017 CEST	1.1.1.1	192.168.2.5	0xb73e	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.017502069 CEST	1.1.1.1	192.168.2.5	0x4609	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 15:39:10.022106886 CEST	1.1.1.1	192.168.2.5	0xbe8e	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.023483992 CEST	1.1.1.1	192.168.2.5	0x385b	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.025304079 CEST	1.1.1.1	192.168.2.5	0x5dcc	No error (0)	cdn.neverbounce.com	d3g1ftmock1oxn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.026278973 CEST	1.1.1.1	192.168.2.5	0x85a4	No error (0)	cdn.neverbounce.com	d3g1ftmock1oxn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.026278973 CEST	1.1.1.1	192.168.2.5	0x85a4	No error (0)	d3g1ftmock1oxn.cloudfront.net		18.245.46.122	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.026278973 CEST	1.1.1.1	192.168.2.5	0x85a4	No error (0)	d3g1ftmock1oxn.cloudfront.net		18.245.46.48	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.026278973 CEST	1.1.1.1	192.168.2.5	0x85a4	No error (0)	d3g1ftmock1oxn.cloudfront.net		18.245.46.30	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.026278973 CEST	1.1.1.1	192.168.2.5	0x85a4	No error (0)	d3g1ftmock1oxn.cloudfront.net		18.245.46.63	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.041538000 CEST	1.1.1.1	192.168.2.5	0xb19	No error (0)	assets.sesamehr.com	8564339.group39.sites.hubspot.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.041538000 CEST	1.1.1.1	192.168.2.5	0xb19	No error (0)	8564339.group39.sites.hubspot.net	group39.sites.hscoscdn30.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.041538000 CEST	1.1.1.1	192.168.2.5	0xb19	No error (0)	group39.sites.hscoscdn30.net		199.60.103.29	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.041538000 CEST	1.1.1.1	192.168.2.5	0xb19	No error (0)	group39.sites.hscoscdn30.net		199.60.103.227	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:10.069614887 CEST	1.1.1.1	192.168.2.5	0xb69f	No error (0)	assets.sesamehr.com	8564339.group39.sites.hubspot.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.069614887 CEST	1.1.1.1	192.168.2.5	0xb69f	No error (0)	8564339.group39.sites.hubspot.net	group39.sites.hscoscdn30.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:10.069614887 CEST	1.1.1.1	192.168.2.5	0xb69f	No error (0)	group39.sites.hscoscdn30.net			65	IN (0x0001)	false
Oct 4, 2024 15:39:11.808897972 CEST	1.1.1.1	192.168.2.5	0x416e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:11.808897972 CEST	1.1.1.1	192.168.2.5	0x416e	No error (0)	plus.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:11.809170008 CEST	1.1.1.1	192.168.2.5	0xa3fb	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:11.839438915 CEST	1.1.1.1	192.168.2.5	0x19c0	No error (0)	api.neverbounce.com	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:11.844666004 CEST	1.1.1.1	192.168.2.5	0xd981	No error (0)	api.neverbounce.com	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:11.844666004 CEST	1.1.1.1	192.168.2.5	0xd981	No error (0)	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		54.165.55.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:11.844666004 CEST	1.1.1.1	192.168.2.5	0xd981	No error (0)	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		107.20.182.197	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:11.844666004 CEST	1.1.1.1	192.168.2.5	0xd981	No error (0)	api-w-ssh-1606603881.us-east-1.elb.amazonaws.com		52.72.107.194	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:24.884651899 CEST	1.1.1.1	192.168.2.5	0x764e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:24.884651899 CEST	1.1.1.1	192.168.2.5	0x764e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:30.778225899 CEST	1.1.1.1	192.168.2.5	0xf12f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:30.780879974 CEST	1.1.1.1	192.168.2.5	0xa2fc	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:39:36.019458055 CEST	1.1.1.1	192.168.2.5	0xefba	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:39:36.019675016 CEST	1.1.1.1	192.168.2.5	0xbb65	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 4, 2024 15:39:00.262550116 CEST	151.101.2.109	443	192.168.2.5	60084	CN=*.vimeocdn.com CN=GlobalSign Atlas R3 DV TLS CA 2024 Q3, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Atlas R3 DV TLS CA 2024 Q3, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Sep 25 00:55:12 CEST 2024 Wed Apr 17 05:17:30 CEST 2024	Sun Oct 26 23:55:11 CET 2025 Fri Apr 17 02:00:00 CEST 2026	771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,35-65281-65037-0-10-27-16-13-43-23-11-51-5-18-17513-45-41,29-23-24,0	ce35b7cb7b7d3230f80a3d9a5163d9f0
Oct 4, 2024 15:39:00.262550116 CEST	151.101.2.109	443	192.168.2.5	60084	CN=GlobalSign Atlas R3 DV TLS CA 2024 Q3, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Apr 17 05:17:30 CEST 2024	Fri Apr 17 02:00:00 CEST 2026		ce35b7cb7b7d3230f80a3d9a5163d9f0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	15.197.225.128	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:13 UTC	660	OUT	GET / HTTP/1.1 Host: getsesametime.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:13 UTC	297	IN	HTTP/1.1 301 Moved Permanently Content-Length: 55 Content-Type: text/html; charset=utf-8 Date: Fri, 04 Oct 2024 13:38:13 GMT Location: https://sesamehr.com Server: ip-10-123-125-154.ec2.internal Vary: Accept-Encoding X-Request-Id: 7fd64440-9de7-40b3-aae6-ae0619de1b1f Connection: close
2024-10-04 13:38:13 UTC	55	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 73 61 6d 65 68 72 2e 63 6f 6d 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sesamehr.com">Moved Permanently</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:14 UTC	655	OUT	GET / HTTP/1.1 Host: sesamehr.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:14 UTC	479	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 13:38:14 GMT Server: Apache Expires: Fri, 04 Oct 2024 14:38:14 GMT Cache-Control: max-age=3600 X-Redirect-By: WordPress Set-Cookie: country_code=us; expires=Sat, 05-Oct-2024 13:38:14 GMT; Max-Age=86400 Upgrade: h2 Connection: Upgrade, close Location: https://www.sesamehr.com/ X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:15 UTC	659	OUT	GET / HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:15 GMT Server: Apache Link: <https://www.sesamehr.com/wp-json/>; rel="https://api.w.org/", <https://www.sesamehr.com/wp-json/wp/v2/pages/38>; rel="alternate"; title="JSON"; type="application/json", <https://www.sesamehr.com/>; rel=shortlink Set-Cookie: country_code=us; expires=Sat, 05-Oct-2024 13:38:15 GMT; Max-Age=86400 Upgrade: h2 Connection: Upgrade, close Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-04 13:38:15 UTC	7608	IN	Data Raw: 31 65 39 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 3e 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 3b 76 61 72 20 73 61 76 65 64 43 6f 6e 73 65 6e 74 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 63 6f 6e 73 65 Data Ascii: 1e93<!DOCTYPE html><html class="no-js" lang="en-US"><head> ... Google Tag Manager --> <script async> function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[];var savedConsent=localStorage.getItem("conse
2024-10-04 13:38:15 UTC	225	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 55 52 4c 26 26 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 42 6c 6f 62 29 74 72 79 7b 76 61 72 20 65 3d 22 70 6f 73 74 4d 65 73 73 61 67 65 28 22 2b 66 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 28 22 2b 5b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 73 29 2c 75 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 Data Ascii: "!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"
2024-10-04 13:38:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-04 13:38:15 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 29 29 3b 22 2c 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 65 5d 2c 7b 74 79 70 65 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 7d 29 2c 61 3d 6e 65 77 20 57 6f 72 6b 65 72 28 55 52 4c 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 55 52 4c 28 72 29 2c 7b 6e 61 6d 65 3a 22 77 70 54 65 73 74 45 6d 6f 6a 69 53 75 70 70 6f 72 74 73 22 7d 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 28 61 2e 6f 6e 6d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 28 6e 3d 65 2e 64 61 74 61 29 2c 61 2e 74 65 72 6d 69 6e 61 74 65 28 29 2c 74 28 6e 29 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 63 28 6e 3d 66 28 73 2c 75 2c 70 29 29 7d 74 28 6e 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 6e 2e 73 75 70 Data Ascii: 1ff8));",r=new Blob([e],{type:"text/javascript"}),a=new Worker(URL.createObjectURL(r),{name:"wpTestEmojiSupports"});return void(a.onmessage=function(e){c(n=e.data),a.terminate(),t(n)})}catch(e){}c(n=f(s,u,p))}t(n)}).then(function(e){for(var t in e)n.sup
2024-10-04 13:38:15 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-10-04 13:38:15 UTC	8184	IN	Data Raw: 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 Data Ascii: or--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--w
2024-10-04 13:38:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-04 13:38:15 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 75 72 6e 20 63 6f 6f 6b 69 65 56 61 6c 75 65 2e 73 70 6c 69 74 28 27 3d 27 29 5b 31 5d 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 09 09 09 09 7d 0a 09 09 09 09 63 6f 6e 73 74 20 73 74 61 79 5f 68 65 72 65 20 3d 20 67 65 74 43 6f 6f 6b 69 65 28 27 63 6f 75 6e 74 72 79 5f 72 65 6d 61 69 6e 27 29 3b 20 2f 2f 63 6f 6f 6b 69 65 20 73 74 61 79 0a 09 09 09 09 63 6f 6e 73 74 20 63 6f 64 65 5f 69 73 6f 20 3d 20 67 65 74 43 6f 6f 6b 69 65 28 27 63 6f 75 6e 74 72 79 5f 63 6f 64 65 27 29 3b 20 2f 2f 20 63 6f 6f 6b 69 65 20 64 65 20 63 c3 b3 64 69 67 6f 20 64 65 20 70 61 c3 ad 73 2e 20 28 76 69 65 6e 65 20 64 65 6c 20 70 6c 75 67 69 6e 29 0a 0a 09 09 09 2f 2f 20 73 69 20 74 69 65 6e 65 20 6c 61 20 63 6f 6f 6b 69 65 Data Ascii: 1ff8urn cookieValue.split('=')[1];}return null;}const stay_here = getCookie('country_remain'); //cookie stayconst code_iso = getCookie('country_code'); // cookie de cdigo de pas. (viene del plugin)// si tiene la cookie
2024-10-04 13:38:15 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-10-04 13:38:15 UTC	8184	IN	Data Raw: 6e 64 73 20 27 20 2b 20 63 6c 69 63 6b 20 2b 20 27 3c 2f 70 3e 3c 61 20 27 20 2b 20 64 61 74 61 4c 61 79 65 72 47 41 43 68 61 6e 67 65 20 2b 20 27 20 63 6c 61 73 73 3d 22 62 74 6e 2d 63 74 61 20 62 67 2d 69 6e 64 69 67 6f 2d 35 30 30 20 70 79 2d 32 20 70 78 2d 36 20 72 6f 75 6e 64 65 64 2d 32 78 6c 20 74 65 78 74 2d 73 6d 20 74 65 78 74 2d 77 68 69 74 65 20 66 6f 6e 74 2d 6d 65 64 69 75 6d 20 77 68 69 74 65 73 70 61 63 65 2d 6e 6f 77 72 61 70 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 73 61 6d 65 68 72 2e 6e 6c 22 3e 27 20 2b 20 63 68 61 6e 67 65 20 2b 20 27 3c 2f 61 3e 3c 73 70 61 6e 20 27 20 2b 20 64 61 74 61 4c 61 79 65 72 47 41 52 65 6d 61 69 6e 20 2b 20 27 20 63 6c 61 73 73 3d 22 6e 6f 74 68 61 6e 6b 73 20 63 75 72 73 6f 72 2d Data Ascii: nds ' + click + '</p><a ' + dataLayerGAChange + ' class="btn-cta bg-indigo-500 py-2 px-6 rounded-2xl text-sm text-white font-medium whitespace-nowrap" href="https://www.sesamehr.nl">' + change + '</a><span ' + dataLayerGARemain + ' class="nothanks cursor-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	614	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.1 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:16 UTC	358	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 08 Aug 2024 07:21:35 GMT ETag: "1b723-61f26e07beddd" Accept-Ranges: bytes Content-Length: 112419 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:16 UTC	7834	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 64 69 Data Ascii: ;margin-bottom:.25em}.wp-block-post-comments .comment-form input:not([type=submit]):not([type=checkbox]),.wp-block-post-comments .comment-form textarea{box-sizing:border-box;display:block;width:100%}.wp-block-post-comments .comment-form-cookies-consent{di
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 77 Data Ascii: dim.has-background-dim-80 .wp-block-cover__background,.wp-block-cover.has-background-dim.has-background-dim-80 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-80:not(.has-background-gradient):before{opacity:.8}.w
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 6c 65 66 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d Data Ascii: block-cover__inner-container,.wp-block-cover-image.has-custom-content-position.has-custom-content-position.is-position-top-left .wp-block-cover__inner-container,.wp-block-cover-image.has-custom-content-position.has-custom-content-position.is-position-top-
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 77 72 61 70 3a 77 72 61 70 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 2c 2e 77 70 2d 62 6c 6f 63 Data Ascii: wrap:wrap;list-style-type:none;margin:0;padding:0}.blocks-gallery-grid:not(.has-nested-images) .blocks-gallery-image,.blocks-gallery-grid:not(.has-nested-images) .blocks-gallery-item,.wp-block-gallery:not(.has-nested-images) .blocks-gallery-image,.wp-bloc
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 75 6d 6e 73 2d 36 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 36 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 36 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 36 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 Data Ascii: umns-6 .blocks-gallery-image:nth-of-type(6n),.wp-block-gallery:not(.has-nested-images).columns-6 .blocks-gallery-item:nth-of-type(6n),.wp-block-gallery:not(.has-nested-images).columns-7 .blocks-gallery-image:nth-of-type(7n),.wp-block-gallery:not(.has-nest
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 72 6c 5d 29 2c 68 35 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 5d 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 6c 72 5d 29 2c 68 35 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 5d 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 72 6c 5d 29 2c 68 36 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 5d 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 6c 72 5d 29 2c 68 36 2e 68 61 73 2d 74 65 78 Data Ascii: where([style=vertical-rl]),h5.has-text-align-left[style=writing-mode]:where([style=vertical-lr]),h5.has-text-align-right[style=writing-mode]:where([style=vertical-rl]),h6.has-text-align-left[style=writing-mode]:where([style*=vertical-lr]),h6.has-tex
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 6b 2d 6c 61 74 65 73 74 2d 70 6f 73 74 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6c 61 74 65 73 74 2d 70 6f 73 74 73 2e 61 6c 69 67 6e 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6c 61 74 65 73 74 2d 70 6f 73 74 73 2e 61 6c 69 67 6e 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6c 61 74 65 73 74 2d 70 6f 73 74 73 2e 77 70 2d 62 6c 6f 63 6b 2d 6c 61 74 65 73 74 2d 70 6f 73 74 73 5f 5f 6c 69 73 74 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6c 61 74 65 73 74 2d 70 6f 73 74 73 2e 77 70 2d 62 6c 6f 63 6b 2d 6c 61 74 65 73 74 2d 70 6f 73 74 73 5f 5f 6c 69 73 74 20 Data Ascii: k-latest-posts{box-sizing:border-box}.wp-block-latest-posts.alignleft{margin-right:2em}.wp-block-latest-posts.alignright{margin-left:2em}.wp-block-latest-posts.wp-block-latest-posts__list{list-style:none}.wp-block-latest-posts.wp-block-latest-posts__list
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 68 61 73 2d 63 68 69 6c 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 69 63 6f 6e 20 73 76 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 68 61 73 2d 63 68 69 6c 64 20 2e 77 70 2d 62 Data Ascii: igation__submenu-container .wp-block-navigation__submenu-icon{margin-right:.25em}.wp-block-navigation .has-child .wp-block-navigation__submenu-container .wp-block-navigation__submenu-icon svg{transform:rotate(-90deg)}}.wp-block-navigation .has-child .wp-b
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 69 73 69 62 6c 65 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 Data Ascii: isible;width:auto}.wp-block-navigation__responsive-container.is-menu-open .wp-block-navigation__responsive-container-content .wp-block-navigation__container,.wp-block-navigation__responsive-container.is-menu-open .wp-block-navigation__responsive-container

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	641	OUT	GET /wp-content/plugins/review-post-plugin-sesame-main/assets/css/style.css?ver=1728049095 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:16 UTC	354	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Tue, 01 Oct 2024 09:54:01 GMT ETag: "e63-623674d11da1f" Accept-Ranges: bytes Content-Length: 3683 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:16 UTC	3683	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 20 47 65 6e 65 72 61 6c 20 53 74 79 6c 65 73 20 66 6f 72 20 50 6f 73 74 20 52 61 74 69 6e 67 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 2f 2a 20 43 6f 6e 74 61 69 6e 65 72 20 66 6f 72 20 74 68 65 20 72 61 74 69 6e 67 20 73 65 63 74 69 6f 6e 20 2a 2f 0a 23 70 6f 73 74 2d 72 61 74 69 6e 67 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 2e 35 72 65 6d 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 72 65 6d 20 61 Data Ascii: /* =========================== General Styles for Post Rating =========================== // Container for the rating section */#post-rating { background-color: #ffffff; border-radius: 1.5rem; padding-bottom: 1px; margin: 3rem a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49715	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	600	OUT	GET /wp-content/themes/sesamehr/style.css?ver=3.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:16 UTC	357	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 27 Mar 2024 08:38:34 GMT ETag: "17198-614a0550b64cd" Accept-Ranges: bytes Content-Length: 94616 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:16 UTC	7835	IN	Data Raw: ef bb bf 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 53 65 73 61 6d 65 48 52 0a 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 73 65 73 61 6d 65 68 72 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 30 0a 54 65 73 74 65 64 20 75 70 20 74 6f 3a 20 36 2e 32 0a 52 65 71 75 69 72 65 73 20 61 74 20 6c 65 61 73 74 3a 20 34 2e 37 0a 52 65 71 75 69 72 65 73 20 50 48 50 3a 20 37 2e 34 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 53 65 73 61 6d 65 20 48 52 20 63 75 73 74 6f 6d 20 74 65 6d 70 6c 61 74 65 0a 41 75 74 68 6f 72 3a 20 63 2e 65 73 74 65 76 65 20 26 20 66 2e 70 65 72 65 7a 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 73 61 6d 65 68 72 2e 65 73 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 73 61 6d 65 68 72 2e Data Ascii: /*Theme Name: SesameHRText Domain: sesamehrVersion: 3.0Tested up to: 6.2Requires at least: 4.7Requires PHP: 7.4Description: Sesame HR custom templateAuthor: c.esteve & f.perezAuthor URI: https://www.sesamehr.esTheme URI: https://www.sesamehr.
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 20 63 61 6c 63 28 35 30 25 20 2d 20 31 36 70 78 29 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 63 61 6c 63 28 35 30 25 20 2d 20 31 36 70 78 29 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 20 63 61 6c 63 28 35 30 25 20 2b 20 31 36 70 78 29 2c 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 20 63 61 6c 63 28 35 30 25 20 2b 20 31 36 70 78 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 2e 31 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 63 6c 69 70 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 72 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 68 72 2e 73 74 79 6c Data Ascii: calc(50% - 16px), transparent calc(50% - 16px), transparent calc(50% + 16px), currentColor calc(50% + 16px));background-color:rgba(0,0,0,0) !important;border:none;height:.1rem;overflow:clip;position:relative}.entry-content hr:not(.has-background),hr.styl
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 74 2d 68 6f 76 65 72 3a 66 6f 63 75 73 2c 2e 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 29 7d 2e 62 67 2d 61 63 63 65 6e 74 2c 2e 62 67 2d 61 63 63 65 6e 74 2d 68 6f 76 65 72 3a 66 6f 63 75 73 2c 2e 62 67 2d 61 63 63 65 6e 74 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 29 7d 2e 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2c 2e 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 68 6f 76 65 72 3a 66 6f 63 75 73 2c 2e 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 68 6f 76 65 72 3a 68 6f Data Ascii: t-hover:focus,.color-accent-hover:hover{color:var(--font-primary-color)}.bg-accent,.bg-accent-hover:focus,.bg-accent-hover:hover{background-color:var(--font-primary-color)}.border-color-accent,.border-color-accent-hover:focus,.border-color-accent-hover:ho
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 6f 6d 3a 61 75 74 6f 3b 72 69 67 68 74 3a 2d 31 2e 36 72 65 6d 3b 74 6f 70 3a 32 72 65 6d 7d 2e 72 74 6c 20 2e 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 75 6c 20 75 6c 3a 3a 61 66 74 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 40 6d 65 64 69 61 28 61 6e 79 2d 70 6f 69 6e 74 65 72 3a 20 63 6f 61 72 73 65 29 7b 2e 70 72 69 6d 61 72 79 2d 6d 65 6e 75 3e 6c 69 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 3e 61 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 72 65 6d 7d 2e 70 72 69 6d 61 72 79 2d 6d 65 6e 75 20 75 6c 20 6c 69 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 3e 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 34 2e 35 72 65 Data Ascii: om:auto;right:-1.6rem;top:2rem}.rtl .primary-menu ul ul::after{transform:rotate(180deg)}@media(any-pointer: coarse){.primary-menu>li.menu-item-has-children>a{padding-right:0;margin-right:2rem}.primary-menu ul li.menu-item-has-children>a{margin-right:4.5re
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 74 65 2d 66 75 6c 6c 2d 77 69 64 74 68 20 5b 63 6c 61 73 73 2a 3d 77 70 2d 62 6c 6f 63 6b 5d 2e 61 6c 69 67 6e 66 75 6c 6c 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 20 5b 63 6c 61 73 73 2a 3d 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 5d 3e 2e 61 6c 69 67 6e 6c 65 66 74 2c 62 6f 64 79 2e 74 65 6d 70 6c 61 74 65 2d 66 75 6c 6c 2d 77 69 64 74 68 20 5b 63 6c 61 73 73 2a 3d 77 70 2d 62 6c 6f 63 6b 5d 2e 61 6c 69 67 6e 66 75 6c 6c 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 20 5b 63 6c 61 73 73 2a 3d 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 5d 3e 70 20 2e 61 6c 69 67 6e 6c 65 66 74 2c 62 6f 64 79 2e 74 65 6d 70 6c 61 74 65 2d 66 75 6c 6c 2d 77 69 64 74 68 20 5b 63 6c 61 73 73 2a 3d 77 70 2d 62 6c 6f 63 Data Ascii: te-full-width [class=wp-block].alignfull:not(.has-background) [class=__inner-container]>.alignleft,body.template-full-width [class=wp-block].alignfull:not(.has-background) [class=__inner-container]>p .alignleft,body.template-full-width [class*=wp-bloc
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 61 6c 69 67 6e 77 69 64 65 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 66 75 6c 6c 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 6c 65 66 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 72 69 67 68 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 63 65 6e 74 65 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 77 69 64 65 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 66 75 6c 6c 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 2e 61 6c 69 67 6e 77 69 64 65 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 66 75 6c 6c 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 6c 65 66 74 29 3a 6e 6f 74 28 2e 61 6c 69 67 6e 72 69 67 68 74 29 3a 6e 6f 74 28 Data Ascii: .wp-block-gallery:not(.alignwide):not(.alignfull):not(.alignleft):not(.alignright):not(.aligncenter),.wp-block-group:not(.has-background):not(.alignwide):not(.alignfull),.wp-block-image:not(.alignwide):not(.alignfull):not(.alignleft):not(.alignright):not(
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 6f 72 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 63 69 74 65 2c 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 63 69 74 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 5b 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 22 5d 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 5b 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 22 5d 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 2e 32 72 65 6d 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 30 20 32 72 65 6d 20 30 20 30 7d 2e 77 70 2d 62 6c Data Ascii: or cite,.wp-block-quote.has-background cite,.has-background .wp-block-quote cite{color:inherit}.wp-block-quote[style="text-align:center"]{border-width:0;padding:0}.wp-block-quote[style="text-align:right"]{border-width:0 .2rem 0 0;padding:0 2rem 0 0}.wp-bl
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 6f 6d 6d 65 6e 74 2d 72 65 73 70 6f 6e 64 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 6f 6d 6d 65 6e 74 2d 72 65 73 70 6f 6e 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2b 6c 61 62 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 7d 2e 63 6f 6d 6d 65 6e 74 2d 72 65 73 70 6f 6e 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 63 6f 6d 6d 65 6e 74 2d 72 65 73 70 6f 6e 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 63 6f 6d 6d 65 6e 74 2d 72 65 73 70 6f 6e 64 20 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 6f 6d 6d 65 6e 74 2d 72 65 73 70 6f 6e 64 Data Ascii: gin-bottom:0}.comment-respond label{display:block}.comment-respond input[type=checkbox]+label{font-size:1.5rem;line-height:1.25}.comment-respond input[type=text],.comment-respond input[type=email],.comment-respond textarea{margin-bottom:0}.comment-respond
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 69 67 6e 77 69 64 65 2b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 6c 69 67 6e 77 69 64 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 6c 69 67 6e 66 75 6c 6c 2b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 6c 69 67 6e 66 75 6c 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 72 65 6d 7d 2e 70 6f 73 74 2d 6e 61 76 2d 6c 69 6e 6b 73 7b 6d 61 72 67 69 6e 3a 33 65 6d 20 30 20 30 20 30 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 36 30 70 78 29 7b 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 2e 61 6c 69 67 6e 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 28 31 30 30 76 77 20 2d 20 35 38 72 65 6d 20 2d 20 38 72 65 6d 29 2f 2d 32 29 7d 66 69 67 75 72 65 2e 77 70 Data Ascii: ignwide+.wp-block-columns.alignwide,.wp-block-columns.alignfull+.wp-block-columns.alignfull{margin-top:-4rem}.post-nav-links{margin:3em 0 0 0}}@media(min-width: 660px){figure.wp-block-gallery.alignleft{margin-left:calc((100vw - 58rem - 8rem)/-2)}figure.wp
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 72 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 67 72 6f 75 70 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 70 61 64 64 69 6e 67 3a 34 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 61 6c 69 67 6e 66 75 6c 6c 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 67 72 6f 75 70 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 70 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 Data Ascii: margin-top:6rem}.wp-block-group.has-background{padding:4rem;margin-top:0;margin-bottom:0}.alignfull:not(.has-background)>.wp-block-group__inner-container>p:not(.has-background-color){padding-left:0;padding-right:0}.wp-block-media-text .wp-block-media-text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	614	OUT	GET /wp-content/themes/sesamehr/assets/css/themecss.css?ver=1.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:16 UTC	356	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 07:23:52 GMT ETag: "85ed-617879a0a66e1" Accept-Ranges: bytes Content-Length: 34285 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:16 UTC	7836	IN	Data Raw: 2f 2a 21 20 74 61 69 6c 77 69 6e 64 63 73 73 20 76 33 2e 33 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 74 61 69 6c 77 69 6e 64 63 73 73 2e 63 6f 6d 2a 2f 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 65 35 65 37 65 62 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 2d 2d 74 77 2d 63 6f 6e 74 65 6e 74 3a 22 22 7d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 6c 62 65 72 74 20 53 61 6e 73 3b 66 6f 6e 74 2d 76 61 72 69 61 Data Ascii: /! tailwindcss v3.3.2 \| MIT License \| https://tailwindcss.com/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;font-feature-settings:normal;font-family:Albert Sans;font-varia
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 37 35 72 65 6d 7d 2e 68 2d 31 32 7b 68 65 69 67 68 74 3a 33 72 65 6d 7d 2e 68 2d 31 34 7b 68 65 69 67 68 74 3a 33 2e 35 72 65 6d 7d 2e 68 2d 31 36 7b 68 65 69 67 68 74 3a 34 72 65 6d 7d 2e 68 2d 33 7b 68 65 69 67 68 74 3a 2e 37 35 72 65 6d 7d 2e 68 2d 36 7b 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 7d 2e 68 2d 38 7b 68 65 69 67 68 74 3a 32 72 65 6d 7d 2e 68 2d 61 75 74 6f 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 68 2d 66 75 6c 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 77 2d 31 7b 77 69 64 74 68 3a 2e 32 35 72 65 6d 7d 2e 77 2d 31 5c 2f 31 32 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 25 7d 2e 77 2d 31 5c 2f 32 7b 77 69 64 74 68 3a 35 30 25 7d 2e 77 2d 31 5c 2f 33 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 77 2d 31 30 7b 77 69 64 74 68 3a Data Ascii: 75rem}.h-12{height:3rem}.h-14{height:3.5rem}.h-16{height:4rem}.h-3{height:.75rem}.h-6{height:1.5rem}.h-8{height:2rem}.h-auto{height:auto}.h-full{height:100%}.w-1{width:.25rem}.w-1\/12{width:8.333333%}.w-1\/2{width:50%}.w-1\/3{width:33.333333%}.w-10{width:
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 2e 37 35 72 65 6d 7d 2e 74 65 78 74 2d 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 72 65 6d 7d 2e 66 6f 6e 74 2d 62 6c 61 63 6b 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 7d 2e 66 6f 6e 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 66 6f 6e 74 2d 65 78 74 72 61 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 7d 2e 66 6f 6e 74 2d 65 78 74 72 61 6c 69 67 68 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 32 30 30 7d 2e 66 6f 6e 74 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 66 6f 6e 74 2d 6e 6f 72 6d 61 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 6f 6e 74 2d 73 65 6d 69 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: .75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-black{font-weight:900}.font-bold{font-weight:700}.font-extrabold{font-weight:800}.font-extralight{font-weight:200}.font-medium{font-weight:500}.font-normal{font-weight:400}.font-semibold{font-weight:
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6d 64 5c 3a 77 2d 36 5c 2f 31 32 7b 77 69 64 74 68 3a 35 30 25 7d 2e 6d 64 5c 3a 77 2d 37 5c 2f 31 32 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6d 64 5c 3a 77 2d 38 5c 2f 31 32 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6d 64 5c 3a 77 2d 39 5c 2f 31 32 7b 77 69 64 74 68 3a 37 35 25 7d 2e 6d 64 5c 3a 77 2d 61 75 74 6f 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 6d 64 5c 3a 77 2d 66 75 6c 6c 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 64 5c 3a 67 72 69 64 2d 63 6f 6c 73 2d 31 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 31 2c 6d 69 6e 6d 61 78 28 30 2c 31 66 72 29 29 7d 2e 6d 64 5c 3a 67 72 69 64 2d 63 6f 6c 73 2d 32 7b 67 72 69 64 2d 74 65 6d Data Ascii: dth:83.333333%}.md\:w-6\/12{width:50%}.md\:w-7\/12{width:58.333333%}.md\:w-8\/12{width:66.666667%}.md\:w-9\/12{width:75%}.md\:w-auto{width:auto}.md\:w-full{width:100%}.md\:grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.md\:grid-cols-2{grid-tem
2024-10-04 13:38:16 UTC	2449	IN	Data Raw: 70 79 2d 32 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 35 72 65 6d 7d 2e 6c 67 5c 3a 70 79 2d 32 34 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 72 65 6d 7d 2e 6c 67 5c 3a 70 79 2d 33 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 37 35 72 65 6d 7d 2e 6c 67 5c 3a 70 79 2d 34 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 6c 67 5c 3a 70 79 2d 36 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 2e 35 72 65 6d 7d 2e 6c 67 5c 3a 70 79 2d 38 7b 70 61 64 64 Data Ascii: py-2{padding-bottom:.5rem;padding-top:.5rem}.lg\:py-24{padding-bottom:6rem;padding-top:6rem}.lg\:py-3{padding-bottom:.75rem;padding-top:.75rem}.lg\:py-4{padding-bottom:1rem;padding-top:1rem}.lg\:py-6{padding-bottom:1.5rem;padding-top:1.5rem}.lg\:py-8{padd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49718	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	617	OUT	GET /wp-content/themes/sesamehr/assets/css/animate.min.css?ver=1.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:16 UTC	357	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 24 Jan 2024 14:34:24 GMT ETag: "11846-60fb1f59cd84b" Accept-Ranges: bytes Content-Length: 71750 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:16 UTC	7835	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 65 70 65 61 74 3a Data Ascii: @charset "UTF-8";/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-repeat:
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 30 25 2c 33 30 25 2c 35 30 25 2c 37 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 70 78 2c 30 29 7d 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 70 78 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 59 7b 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 Data Ascii: form:translateZ(0)}10%,30%,50%,70%,90%{-webkit-transform:translate3d(0,-10px,0);transform:translate3d(0,-10px,0)}20%,40%,60%,80%{-webkit-transform:translate3d(0,10px,0);transform:translate3d(0,10px,0)}}@keyframes shakeY{0%,to{-webkit-transform:translateZ(
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 62 61 63 6b 49 6e 44 6f 77 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 61 63 6b 49 6e 44 6f 77 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 62 61 63 6b 49 6e 44 6f 77 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 49 6e 4c 65 66 74 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 30 70 78 29 20 73 63 61 6c 65 28 2e 37 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 30 70 78 29 20 73 63 61 6c 65 28 2e 37 29 3b 6f 70 61 63 69 74 79 Data Ascii: nsform:scale(1);transform:scale(1);opacity:1}}.animate__backInDown{-webkit-animation-name:backInDown;animation-name:backInDown}@-webkit-keyframes backInLeft{0%{-webkit-transform:translateX(-2000px) scale(.7);transform:translateX(-2000px) scale(.7);opacity
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 33 64 28 35 70 78 2c 30 2c 30 29 20 73 63 61 6c 65 58 28 2e 39 39 35 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 4c 65 66 74 7b 30 25 2c 36 30 25 2c 37 35 25 2c 39 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 6f 70 61 63 69 Data Ascii: 3d(5px,0,0) scaleX(.995)}to{-webkit-transform:translateZ(0);transform:translateZ(0)}}@keyframes bounceInLeft{0%,60%,75%,90%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1)}0%{opaci
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 30 30 70 78 2c 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 49 6e 44 6f 77 6e 42 69 67 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 44 6f 77 6e 42 69 67 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 44 6f 77 6e 42 69 67 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 4c 65 66 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 Data Ascii: ansform:translate3d(0,-2000px,0)}to{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}}.animate__fadeInDownBig{-webkit-animation-name:fadeInDownBig;animation-name:fadeInDownBig}@-webkit-keyframes fadeInLeft{0%{opacity:0;-webkit-transform:t
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 2c 2d 31 30 30 25 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 4f 75 74 54 6f 70 4c 65 66 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 2d 31 30 30 25 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 2d 31 30 30 25 2c 30 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 66 61 64 65 4f 75 74 54 6f 70 4c 65 66 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f Data Ascii: ,-100%,0)}}@keyframes fadeOutTopLeft{0%{opacity:1;-webkit-transform:translateZ(0);transform:translateZ(0)}to{opacity:0;-webkit-transform:translate3d(-100%,-100%,0);transform:translate3d(-100%,-100%,0)}}.animate__fadeOutTopLeft{-webkit-animation-name:fadeO
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 29 2a 30 2e 37 35 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 29 2a 30 2e 37 35 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 6c 69 70 4f 75 74 58 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 6c 69 70 4f 75 74 58 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 6c 69 70 4f 75 74 59 7b 30 25 7b Data Ascii: var(--animate-duration)0.75);animation-duration:calc(var(--animate-duration)0.75);-webkit-animation-name:flipOutX;animation-name:flipOutX;-webkit-backface-visibility:visible!important;backface-visibility:visible!important}@-webkit-keyframes flipOutY{0%{
2024-10-04 13:38:16 UTC	8000	IN	Data Raw: 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 4f 75 74 55 70 52 69 67 68 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 72 6f 74 61 74 65 4f 75 74 55 70 52 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 72 6f 74 61 74 65 4f 75 74 55 70 52 69 67 68 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 72 6f 74 61 74 65 4f 75 74 55 70 52 69 67 68 74 3b 2d 77 65 Data Ascii: 90deg);transform:rotate(90deg);opacity:0}}@keyframes rotateOutUpRight{0%{opacity:1}to{-webkit-transform:rotate(90deg);transform:rotate(90deg);opacity:0}}.animate__rotateOutUpRight{-webkit-animation-name:rotateOutUpRight;animation-name:rotateOutUpRight;-we
2024-10-04 13:38:16 UTC	7915	IN	Data Raw: 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 7a 6f 6f 6d 49 6e 55 70 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 7a 6f 6f 6d 49 6e 55 70 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 7a 6f 6f 6d 49 6e 55 70 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 7a 6f 6f 6d 4f 75 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 33 2c Data Ascii: -function:cubic-bezier(.175,.885,.32,1);animation-timing-function:cubic-bezier(.175,.885,.32,1)}}.animate__zoomInUp{-webkit-animation-name:zoomInUp;animation-name:zoomInUp}@-webkit-keyframes zoomOut{0%{opacity:1}50%{opacity:0;-webkit-transform:scale3d(.3,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	614	OUT	GET /wp-content/themes/sesamehr/assets/fonts/albert.css?ver=1.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:16 UTC	351	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 24 Jan 2024 14:34:29 GMT ETag: "52-60fb1f5eda816" Accept-Ranges: bytes Content-Length: 82 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:16 UTC	82	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 41 6c 62 65 72 74 2b 53 61 6e 73 3a 77 67 68 74 40 31 30 30 2e 2e 39 30 30 27 29 3b Data Ascii: @import url('https://fonts.googleapis.com/css2?family=Albert+Sans:wght@100..900');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49724	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	617	OUT	GET /wp-content/themes/sesamehr/assets/css/style-child.css?ver=1.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:16 UTC	356	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 07:31:41 GMT ETag: "2fbb-61787b601afe7" Accept-Ranges: bytes Content-Length: 12219 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:16 UTC	7836	IN	Data Raw: 2e 62 74 6e 2d 61 63 63 65 64 65 72 20 61 2c 2e 62 74 6e 2d 67 72 61 74 69 73 20 61 2c 2e 68 73 2d 73 75 62 6d 69 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 3a 72 6f 6f 74 7b 2d 2d 62 67 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 2d 2d 62 74 6e 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 23 36 43 36 33 46 46 3b 2d 2d 62 74 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 35 43 35 36 44 42 3b 2d 2d 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 23 31 46 32 44 35 32 7d 68 74 6d 6c 2e 6a 73 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 64 6d 69 6e 69 73 74 72 61 63 69 6f 6e 2d 74 69 74 6c 65 2c 2e 66 6f 6f 74 65 72 2d 6e 61 76 2d 77 69 64 67 65 74 73 2d 77 72 61 70 70 Data Ascii: .btn-acceder a,.btn-gratis a,.hs-submit{text-align:center}:root{--bg-primary-color:white;--btn-primary-color:#6C63FF;--btn-hover-color:#5C56DB;--font-primary-color:#1F2D52}html.js{overflow-x:hidden!important}.administracion-title,.footer-nav-widgets-wrapp
2024-10-04 13:38:16 UTC	4383	IN	Data Raw: 73 74 2d 73 74 79 6c 65 3a 6e 75 6d 7d 2e 6c 65 67 61 6c 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 67 61 6c 20 68 32 2c 2e 6c 65 67 61 6c 20 68 33 7b 6d 61 72 67 69 6e 3a 32 72 65 6d 20 30 20 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 6c 65 67 61 6c 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 72 65 6d 7d 2e 6c 65 67 61 6c 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 72 65 6d 7d 2e 6c 65 67 61 6c 20 74 61 62 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 68 73 2d 66 69 65 6c 64 74 79 70 65 2d 69 6e 74 6c 2d Data Ascii: st-style:num}.legal p{margin-bottom:.5rem;font-size:1rem}.legal h2,.legal h3{margin:2rem 0 1rem!important;color:var(--font-primary-color);font-weight:600}.legal h2{font-size:1.6rem}.legal h3{font-size:1.3rem}.legal table{font-size:1rem}.hs-fieldtype-intl-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49725	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	600	OUT	GET /wp-content/themes/sesamehr/css/templates.css HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:16 UTC	355	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 16 Aug 2024 12:45:44 GMT ETag: "2056-61fcc566d2ca6" Accept-Ranges: bytes Content-Length: 8278 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:16 UTC	7837	IN	Data Raw: 0a 2f 2a 20 48 65 61 64 65 72 20 2a 2f 0a 0a 23 62 72 61 6e 64 2d 6b 69 74 2d 68 65 61 64 65 72 20 2e 67 72 69 64 2d 32 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 34 30 25 20 31 66 72 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 38 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 67 61 70 3a 20 33 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 72 65 6d 3b 0a 7d 0a 0a 23 62 72 61 6e 64 2d 6b 69 74 2d 68 65 61 64 65 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a Data Ascii: /* Header */#brand-kit-header .grid-2 { display: grid; grid-template-columns: 40% 1fr; align-items: center; max-width: 1280px; margin: auto; height: 100%; gap: 30px; padding: 1rem;}#brand-kit-header { padding-top:
2024-10-04 13:38:16 UTC	441	IN	Data Raw: 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 23 62 72 61 6e 64 2d 6b 69 74 2d 70 72 6f 64 75 63 74 2d 61 73 73 65 74 73 20 70 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 31 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 0a 7d 0a 0a 23 62 72 61 6e 64 2d 6b 69 74 2d 70 72 6f 64 75 63 74 2d 61 73 73 65 74 73 20 2e 69 6d 67 2d 70 72 6f 64 75 63 74 2d 61 73 73 65 74 73 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 35 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 2e 35 72 65 6d Data Ascii: eight: bold;}#brand-kit-product-assets p { text-align: center; line-height: 21px; margin-top: 8px !important; font-size: 19px;}#brand-kit-product-assets .img-product-assets { max-width: 1250px; width: 100%; margin: 3.5rem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49726	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	587	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:17 UTC	371	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 29 Dec 2023 09:18:15 GMT ETag: "15601-60da28318e4e3" Accept-Ranges: bytes Content-Length: 87553 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:17 UTC	7821	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e Data Ascii: ldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}fun
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 70 74 69 6f 6e 22 29 26 26 21 21 65 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e Data Ascii: ption")&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:fun
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 28 74 68 69 73 2e 67 65 74 28 29 2c 63 65 28 65 2c 74 29 29 29 29 7d 2c 61 64 64 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 6c 74 65 72 28 65 29 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 6e 75 6c 6c 7d 2c 70 61 72 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 29 7d 2c 70 61 72 65 6e 74 73 55 6e 74 69 6c 3a 66 Data Ascii: (this.get(),ce(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),ce.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return d(e,"parentNode")},parentsUntil:f
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 64 20 30 21 3d 3d 28 74 3d 7a 2e 67 65 74 28 6f 2c 6e 29 29 3f 74 3a 76 6f 69 64 20 30 21 3d 3d 28 74 3d 56 28 6f 2c 6e 29 29 3f 74 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 73 65 74 28 74 68 69 73 2c 6e 2c 65 29 7d 29 7d 2c 6e 75 6c 6c 2c 65 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 Data Ascii: d 0!==(t=z.get(o,n))?t:void 0!==(t=V(o,n))?t:void 0;this.each(function(){z.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){z.remove(this,e)})}}),ce.extend({queue:function(e,t,n){var r;if(e)return t=(
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 6c 29 2c 74 3d 30 3b 77 68 69 6c 65 28 28 69 3d 61 5b 74 2b 2b 5d 29 26 26 21 75 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 7b 75 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 69 2e 65 6c 65 6d 2c 6e 3d 30 3b 77 68 69 6c 65 28 28 6f 3d 69 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 75 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 75 2e 72 6e 61 6d 65 73 70 61 63 65 26 26 21 31 21 3d 3d 6f 2e 6e 61 6d 65 73 70 61 63 65 26 26 21 75 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 6f 2e 6e 61 6d 65 73 70 61 63 65 29 7c 7c 28 75 2e 68 61 6e 64 6c 65 4f 62 6a 3d 6f 2c 75 2e 64 61 74 61 3d 6f 2e 64 61 74 61 2c 76 6f 69 64 20 30 21 3d 3d 28 72 3d 28 28 63 65 2e 65 76 65 Data Ascii: l),t=0;while((i=a[t++])&&!u.isPropagationStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rnamespace.test(o.namespace)\|\|(u.handleObj=o,u.data=o.data,void 0!==(r=((ce.eve
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 52 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: ppendChild(e)})},prepend:function(){return $e(this,arguments,function(e){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var t=Re(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return $e(this,arguments,function(e){this.parentNod
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 68 69 73 2e 73 74 61 72 74 3d 74 68 69 73 2e 6e 6f 77 3d 74 68 69 73 2e 63 75 72 28 29 2c 74 68 69 73 2e 65 6e 64 3d 72 2c 74 68 69 73 2e 75 6e 69 74 3d 6f 7c 7c 28 63 65 2e 63 73 73 4e 75 6d 62 65 72 5b 6e 5d 3f 22 22 3a 22 70 78 22 29 7d 2c 63 75 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 67 65 74 3f 65 2e 67 65 74 28 74 68 69 73 29 3a 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 68 69 73 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e Data Ascii: his.start=this.now=this.cur(),this.end=r,this.unit=o\|\|(ce.cssNumber[n]?"":"px")},cur:function(){var e=at.propHooks[this.prop];return e&&e.get?e.get(this):at.propHooks._default.get(this)},run:function(e){var t,n=at.propHooks[this.prop];return this.options.
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 63 65 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 63 65 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 63 65 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 6d 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 63 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 Data Ascii: &&2!==o)return"undefined"==typeof e.getAttribute?ce.prop(e,t,n):(1===o&&ce.isXMLDoc(e)\|\|(i=ce.attrHooks[t.toLowerCase()]\|\|(ce.expr.match.bool.test(t)?mt:void 0)),void 0!==n?null===n?void ce.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setA
2024-10-04 13:38:17 UTC	8000	IN	Data Raw: 64 69 73 61 62 6c 65 64 22 29 26 26 4f 74 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 21 48 74 2e 74 65 73 74 28 65 29 26 26 28 74 68 69 73 2e 63 68 65 63 6b 65 64 7c 7c 21 77 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 65 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 75 6c 6c 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 63 65 2e 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 65 2e 72 65 70 6c 61 63 65 28 4c 74 2c 22 5c 72 5c 6e 22 29 7d 7d 29 3a 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 6e 2e 72 65 70 6c 61 63 65 28 4c Data Ascii: disabled")&&Ot.test(this.nodeName)&&!Ht.test(e)&&(this.checked\|\|!we.test(e))}).map(function(e,t){var n=ce(this).val();return null==n?null:Array.isArray(n)?ce.map(n,function(e){return{name:t.name,value:e.replace(Lt,"\r\n")}}):{name:t.name,value:n.replace(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	595	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:17 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:16 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 16 Aug 2023 08:20:07 GMT ETag: "3509-60305f69be53a" Accept-Ranges: bytes Content-Length: 13577 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:17 UTC	7822	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-10-04 13:38:17 UTC	5755	IN	Data Raw: 73 6c 69 63 65 28 31 29 29 7c 7c 41 5b 72 5d 7c 7c 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 22 63 73 73 2d 6e 75 6d 62 65 72 22 29 3b 76 61 72 20 53 2c 50 2c 6b 2c 48 2c 45 3d 73 2e 64 61 74 61 3b 69 28 73 2c 22 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 61 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f Data Ascii: slice(1))\|\|A[r]\|\|u("css-number",'Number-typed values are deprecated for jQuery.fn.css( "'+e+'", value )')),Q.apply(this,arguments))},"css-number");var S,P,k,H,E=s.data;i(s,"data",function(e,t,r){var n,o,a;if(t&&"object"==typeof t&&2===arguments.length){fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49729	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	606	OUT	GET /wp-content/themes/sesamehr/assets/js/load-more-post.js?ver=6.6.1 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:17 UTC	368	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:17 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2024 14:37:31 GMT ETag: "4e7-6113037bcce0e" Accept-Ranges: bytes Content-Length: 1255 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:17 UTC	1255	IN	Data Raw: 6a 51 75 65 72 79 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 0a 09 76 61 72 20 70 6f 73 74 73 5f 70 65 72 5f 70 61 67 65 20 3d 20 38 3b 20 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 63 78 63 5f 6c 6f 61 64 5f 6d 6f 72 65 5f 70 6f 73 74 73 28 20 63 78 63 5f 74 68 69 73 2c 20 70 61 67 65 4e 75 6d 62 65 72 20 29 7b 0a 09 09 76 61 72 20 70 61 67 65 5f 63 6f 75 6e 74 20 3d 20 30 3b 0a 09 09 76 61 72 20 73 74 72 20 3d 20 27 26 70 61 67 65 4e 75 6d 62 65 72 3d 27 20 2b 20 70 61 67 65 4e 75 6d 62 65 72 20 2b 20 27 26 70 6f 73 74 73 5f 70 65 72 5f 70 61 67 65 3d 27 20 2b 20 70 6f 73 74 73 5f 70 65 72 5f 70 61 67 65 20 2b 20 27 26 61 63 74 69 6f 6e 3d 63 6f 64 65 78 5f 6c 6f 61 64 5f 6d 6f 72 65 5f 70 6f 73 74 5f 61 Data Ascii: jQuery( document ).ready( function($){var posts_per_page = 8; function cxc_load_more_posts( cxc_this, pageNumber ){var page_count = 0;var str = '&pageNumber=' + pageNumber + '&posts_per_page=' + posts_per_page + '&action=codex_load_more_post_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:16 UTC	601	OUT	GET /wp-content/themes/sesamehr/assets/js/custom-privacy-link.js HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:17 UTC	367	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:17 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 18 Jul 2024 10:49:00 GMT ETag: "13e-61d835399af9f" Accept-Ranges: bytes Content-Length: 318 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:17 UTC	318	IN	Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 69 6e 74 65 72 76 61 6c 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 24 70 72 69 76 61 63 79 4c 69 6e 6b 20 3d 20 6a 51 75 65 72 79 28 27 2e 71 63 2d 63 6d 70 32 2d 65 78 70 61 6e 64 61 62 6c 65 2d 6c 69 73 74 20 6c 69 20 61 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 70 72 69 76 61 63 79 4c 69 6e 6b 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 70 72 69 76 61 63 79 4c 69 6e 6b 2e 61 74 74 72 28 27 72 65 6c 27 2c 20 27 6e 6f 66 6f 6c 6c 6f 77 20 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 27 29 3b 0a 20 20 Data Ascii: jQuery(document).ready(function() { const interval = setInterval(() => { const $privacyLink = jQuery('.qc-cmp2-expandable-list li a'); if ($privacyLink.length) { $privacyLink.attr('rel', 'nofollow noopener noreferrer');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49730	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:17 UTC	651	OUT	GET /wp-content/uploads/2024/01/gestion-de-equipos.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:17 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:17 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 11:45:49 GMT ETag: "3dd-60fc3b88e57de" Accept-Ranges: bytes Content-Length: 989 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:17 UTC	989	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 61 31 36 30 66 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 72 78 3d 22 31 36 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 3e 3c 2f 72 65 63 74 3e 3c 72 65 63 74 20 78 3d 22 30 2e 37 35 22 20 79 3d 22 30 2e 37 35 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g fill="none" stroke="#a160f5" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49732	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:17 UTC	651	OUT	GET /wp-content/uploads/2024/01/gestion-de-talento.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:17 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:17 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 11:45:50 GMT ETag: "316-60fc3b8979ee6" Accept-Ranges: bytes Content-Length: 790 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:17 UTC	790	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 66 36 62 63 36 32 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 72 78 3d 22 31 36 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 3e 3c 2f 72 65 63 74 3e 3c 72 65 63 74 20 78 3d 22 30 2e 37 35 22 20 79 3d 22 30 2e 37 35 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g fill="none" stroke="#f6bc62" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49735	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:18 UTC	650	OUT	GET /wp-content/uploads/2024/01/gestion-de-tiempo.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:18 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:18 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 11:45:50 GMT ETag: "2f6-60fc3b8a01acf" Accept-Ranges: bytes Content-Length: 758 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:18 UTC	758	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 32 30 20 2d 31 38 38 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 32 30 20 31 38 38 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 35 30 65 31 62 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g transform="translate(-320 -188)"><g transform="translate(320 188)" fill="none" stroke="#50e1b5" stroke-width="1.5"><rect width="40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49734	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:18 UTC	646	OUT	GET /wp-content/uploads/2023/06/united-states.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:18 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:18 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:17 GMT ETag: "312-5ff430d7ea9ef" Accept-Ranges: bytes Content-Length: 786 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:18 UTC	786	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 01 44 50 4c 54 45 ff ff ff f7 f7 f7 ff 4b 57 8f 93 c1 9d 49 7a ff 81 88 f9 a8 ad ff 4b 55 b1 98 ba fc 7d 84 fc 7d 83 fc 69 72 f9 b2 b5 6c 5e a0 f8 c8 cb ff 52 5b ff 4b 55 72 48 89 ff 4f 5a ff 4b 55 ff 4b 56 59 48 91 f5 f5 f5 49 49 9a 5a 47 91 4a 49 99 4a 4c 9c 4a 4e 9e 4b 48 97 4b 4c 9b 57 48 93 4b 47 98 4e 4a 9a 4f 4b 9a 50 4c 9b 52 4f 9c 53 4f 9c ff 4b 55 41 47 9b 42 47 9b 42 48 9b 42 48 9c 43 49 9c 44 4a 9c 45 4a 9d 45 4b 9c 45 4b 9d Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<DPLTEKWIzKU}}irl^R[KUrHOZKUKVYHIIZGJIJLJNKHKLWHKGNJOKPLROSOKUAGBGBHBHCIDJEJEKEK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49740	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:18 UTC	640	OUT	GET /wp-content/uploads/2023/06/germany.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:18 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:18 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:16 GMT ETag: "137-5ff430d62f416" Accept-Ranges: bytes Content-Length: 311 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:18 UTC	311	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 30 50 4c 54 45 ff ff ff 43 43 57 ff e4 57 47 47 55 ff e1 5a 46 46 54 ff e1 5b 47 47 55 ff e0 5a 46 46 55 ff e1 5a 46 46 55 ff e1 5a 46 46 55 ff 4b 55 ff e1 5a 8b 6d d6 51 00 00 00 0d 74 52 4e 53 00 26 26 5d 5d a3 a3 d9 d9 f6 f6 fe fe 9a b1 c4 7f 00 00 00 60 49 44 41 54 18 57 63 60 10 ad be 0b 06 db 03 19 18 98 e7 de 85 82 9b 06 0c 92 77 e1 60 22 43 2c 82 73 95 a1 16 c1 b9 ce b0 17 c1 b9 cd 70 17 09 a0 72 de 21 01 5a 72 fe 23 01 54 ce Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<0PLTECCWWGGUZFFT[GGUZFFUZFFUZFFUKUZmQtRNS&&]]`IDATWc`w`"C,spr!Zr#T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49737	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:18 UTC	638	OUT	GET /wp-content/uploads/2023/06/italy.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:18 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:18 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:16 GMT ETag: "120-5ff430d66cc79" Accept-Ranges: bytes Content-Length: 288 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:18 UTC	288	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 30 50 4c 54 45 ff ff ff 72 ae 00 ff 4a 57 73 af 00 ff 4a 55 74 af 00 ff 4b 54 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 f5 f5 f5 ff 4b 55 bb 3d d9 fa 00 00 00 0d 74 52 4e 53 00 26 26 5d 5d a3 a3 d9 d9 f6 f6 fe fe 9a b1 c4 7f 00 00 00 49 49 44 41 54 18 95 63 60 10 ad be fb 0e 08 fe 9f 48 62 60 60 9e 7b 17 c2 f9 ff cb 81 41 f2 2e 8c f3 7f 11 43 2c 82 f3 8d a1 16 c1 f9 c1 b0 17 c1 f9 c3 70 17 c1 f9 3f d8 38 28 0e 45 Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<0PLTErJWsJUtKTsKUsKUsKUsKU=tRNS&&]]IIDATc`Hb``{A.C,p?8(E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49739	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:18 UTC	704	OUT	GET /wp-content/themes/sesamehr/assets/images/triangle-down.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/wp-content/themes/sesamehr/style.css?ver=3.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:18 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:18 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 24 Jan 2024 14:34:31 GMT ETag: "276-60fb1f609bbb0" Accept-Ranges: bytes Content-Length: 630 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:18 UTC	630	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 24 24 24 2f 47 65 6e 65 72 61 6c 53 74 72 2f 31 39 36 3d 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 36 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: $$$/GeneralStr/196=Adobe Illustrator 27.6.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49738	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:18 UTC	639	OUT	GET /wp-content/uploads/2023/06/france.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:18 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:18 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:15 GMT ETag: "120-5ff430d5f5a32" Accept-Ranges: bytes Content-Length: 288 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:18 UTC	288	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 30 50 4c 54 45 ff ff ff 43 4a 9a ff 4a 57 42 47 9c ff 4a 55 42 46 9b ff 4b 54 41 47 9b ff 4b 55 41 46 9b ff 4b 55 41 47 9b ff 4b 55 41 47 9b f5 f5 f5 ff 4b 55 ac 38 18 d4 00 00 00 0d 74 52 4e 53 00 26 26 5d 5d a3 a3 d9 d9 f6 f6 fe fe 9a b1 c4 7f 00 00 00 49 49 44 41 54 18 95 63 60 10 ad be fb 0e 08 fe 9f 48 62 60 60 9e 7b 17 c2 f9 ff cb 81 41 f2 2e 8c f3 7f 11 43 2c 82 f3 8d a1 16 c1 f9 c1 b0 17 c1 f9 c3 70 17 c1 f9 3f d8 38 28 0e 45 Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<0PLTECJJWBGJUBFKTAGKUAFKUAGKUAGKU8tRNS&&]]IIDATc`Hb``{A.C,p?8(E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49743	104.17.246.203	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:18 UTC	606	OUT	GET /@lottiefiles/lottie-interactivity@latest/dist/lottie-interactivity.min.js?ver=6.6.1 HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:19 UTC	532	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 13:38:18 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * location: /@lottiefiles/lottie-interactivity@latest/dist/lottie-interactivity.min.js vary: Accept via: 1.1 fly.io fly-request-id: 01J9BVF7ZGFDPE0DW1W65Z315R-lga CF-Cache-Status: HIT Age: 594 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8cd592548d543320-EWR
2024-10-04 13:38:19 UTC	102	IN	Data Raw: 36 30 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 40 6c 6f 74 74 69 65 66 69 6c 65 73 2f 6c 6f 74 74 69 65 2d 69 6e 74 65 72 61 63 74 69 76 69 74 79 40 6c 61 74 65 73 74 2f 64 69 73 74 2f 6c 6f 74 74 69 65 2d 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 6d 69 6e 2e 6a 73 0d 0a Data Ascii: 60Found. Redirecting to /@lottiefiles/lottie-interactivity@latest/dist/lottie-interactivity.min.js
2024-10-04 13:38:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49742	104.17.246.203	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:18 UTC	577	OUT	GET /@dotlottie/player-component@1.0.0/dist/dotlottie-player.js?ver=6.6.1 HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:19 UTC	511	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 13:38:19 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * location: /@dotlottie/player-component@1.0.0/dist/dotlottie-player.js vary: Accept via: 1.1 fly.io fly-request-id: 01J9BW1C6X2HYWKT3QZZ1ARVE4-lga CF-Cache-Status: EXPIRED Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8cd59254881a43a1-EWR
2024-10-04 13:38:19 UTC	87	IN	Data Raw: 35 31 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 40 64 6f 74 6c 6f 74 74 69 65 2f 70 6c 61 79 65 72 2d 63 6f 6d 70 6f 6e 65 6e 74 40 31 2e 30 2e 30 2f 64 69 73 74 2f 64 6f 74 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 2e 6a 73 0d 0a Data Ascii: 51Found. Redirecting to /@dotlottie/player-component@1.0.0/dist/dotlottie-player.js
2024-10-04 13:38:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49748	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:19 UTC	637	OUT	GET /wp-content/uploads/2023/06/peru.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:19 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:19 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:17 GMT ETag: "103-5ff430d728484" Accept-Ranges: bytes Content-Length: 259 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:19 UTC	259	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 1b 50 4c 54 45 ff ff ff ff 4a 57 ff 4a 55 ff 4b 54 ff 4b 55 ff 4b 55 ff 4b 55 f5 f5 f5 ff 4b 55 ba 87 21 9d 00 00 00 07 74 52 4e 53 00 26 5d a3 d9 f6 fe 81 77 26 7d 00 00 00 47 49 44 41 54 18 95 63 60 10 76 eb 28 07 82 8e 14 43 06 06 a6 88 0e 08 a7 a3 55 81 41 b4 03 c6 e9 08 64 b0 40 70 9a 19 3c 10 9c 16 86 0c 04 a7 8d a1 03 c1 e9 18 6c 1c 14 87 a2 78 01 c5 73 28 de 46 09 10 e4 a0 02 00 7d 6b 89 11 e4 4a 33 6a 00 00 00 00 49 45 4e 44 Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTEJWJUKTKUKUKUKU!tRNS&]w&}GIDATc`v(CUAd@p<lxs(F}kJ3jIEND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49747	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:19 UTC	642	OUT	GET /wp-content/uploads/2023/06/costarica.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:19 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:19 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:15 GMT ETag: "17f-5ff430d577a8b" Accept-Ranges: bytes Content-Length: 383 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:19 UTC	383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 09 70 48 59 73 00 00 00 9d 00 00 00 9d 01 8f 72 e7 6e 00 00 01 31 49 44 41 54 48 89 dd 95 bb 4a 03 51 10 86 67 72 66 57 21 37 36 86 80 28 0b 22 98 2d 24 75 5a 1b 2d c4 d2 87 08 1b c1 d6 c2 ca d6 4a 13 f6 59 b4 d9 d6 da 2e 85 08 41 1b 93 dd cd 0d 8d ec 39 3b 36 16 16 16 12 33 85 7e 0f f0 7f 9c 19 ce 3f c8 87 c7 70 fe b4 51 8f b5 6a dd 8e cb 7e a2 15 31 2c 06 02 80 43 46 ef 97 c7 dd 0a 99 e0 62 f3 b9 87 67 8d 53 ef 6e 56 b8 09 27 45 77 c1 dc 6f d9 2b 4d fb cd c2 ec 80 06 ef aa 1d c6 79 17 20 5b 66 3e 84 71 de dd b6 de da b8 e3 5d 9a a1 b1 72 4b 4d ff a4 aa d2 0c a3 e8 95 01 51 22 1f 80 19 90 99 17 dd e9 8f 10 19 cd 57 c8 8c 47 a2 02 7c 68 ee 8a 8e 88 Data Ascii: PNGIHDRw=pHYsrn1IDATHJQgrfW!76("-$uZ-JY.A9;63~?pQj~1,CFbgSnV'Ewo+My [f>q]rKMQ"WG\|h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49754	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	641	OUT	GET /wp-content/uploads/2023/06/colombia.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:15 GMT ETag: "12f-5ff430d535408" Accept-Ranges: bytes Content-Length: 303 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:20 UTC	303	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 30 50 4c 54 45 ff ff ff ff 4a 57 ff e4 57 ff 4a 55 ff e1 5a ff 4b 54 ff e1 5b ff 4b 55 ff e0 5a ff 4b 55 ff e1 5a ff 4b 55 ff e1 5a 41 47 9b ff 4b 55 ff e1 5a 45 25 69 67 00 00 00 0d 74 52 4e 53 00 26 26 5d 5d a3 a3 d9 d9 f6 f6 fe fe 9a b1 c4 7f 00 00 00 58 49 44 41 54 18 57 63 64 50 4b 2b 66 00 81 93 b3 e6 31 b2 ac 0e 60 80 80 df 6e 8c 5a 57 19 60 60 31 63 fe 04 38 e7 3b 63 7f 01 9c f3 93 f1 bc 01 9c f3 97 f1 3f 03 02 50 ce b9 4b 55 Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<0PLTEJWWJUZKT[KUZKUZKUZAGKUZE%igtRNS&&]]XIDATWcdPK+f1`nZW``1c8;c?PKU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49755	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	635	OUT	GET /wp-content/uploads/2023/06/uk.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:17 GMT ETag: "300-5ff430d7ac1eb" Accept-Ranges: bytes Content-Length: 768 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:20 UTC	768	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 01 44 50 4c 54 45 ff ff ff 43 4a 9a a6 aa cd a8 ab ce ad ad cf ab ae d0 42 47 9c 42 46 9b 41 47 9b c3 c4 db c8 c7 dd dc 9b ab e0 9d ad 41 46 9b 64 68 ad 41 47 9b f6 81 8a f9 6d 77 fb 69 72 fc 66 6f 41 47 9b 45 4b 9d 47 4c 9e 5d 62 a9 66 6b ae 6b 6f b0 70 75 b3 87 8b be 9c 9f c9 a2 a4 cb bc be d8 c5 c7 dc c5 c7 dd d6 d7 e5 d7 d8 e6 da db e8 ea eb f0 eb e7 ec ec d9 de ef 4c 5c f1 f2 f3 f2 ea ec f2 eb ed f3 f3 f4 f4 e8 e9 f4 e9 eb f4 f4 f4 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<DPLTECJBGBFAGAFdhAGmwirfoAGEKGL]bfkkopuL\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49753	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	644	OUT	GET /wp-content/uploads/2023/06/netherlands.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:16 GMT ETag: "6d6-5ff430d6e6da0" Accept-Ranges: bytes Content-Length: 1750 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:20 UTC	1750	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 09 70 48 59 73 00 00 00 9d 00 00 00 9d 01 8f 72 e7 6e 00 00 05 d1 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 31 62 36 35 61 37 39 62 34 2c 20 32 30 32 32 2f 30 36 2f 31 33 2d 32 32 3a 30 31 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRw=pHYsrniTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49752	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	638	OUT	GET /wp-content/uploads/2023/06/chile.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:14 GMT ETag: "198-5ff430d4faa84" Accept-Ranges: bytes Content-Length: 408 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:20 UTC	408	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 63 50 4c 54 45 ff ff ff f8 f8 f8 ff 4a 57 95 99 c8 f4 f4 f4 ff 4a 55 86 8a be f6 f6 f6 ff 4b 54 f4 f4 f4 ff 4b 55 71 75 b3 f5 f5 f5 ff 4b 55 58 5d a7 f5 f5 f5 ff 4b 55 41 47 9b 42 48 9b 47 4d 9e 49 4f 9f 58 5d a6 6d 72 b1 a5 a7 cd b1 b3 d3 b4 b6 d5 b5 b7 d5 be c0 d9 df e0 ea eb eb f0 f1 f2 f3 f5 f5 f5 ff 4b 55 22 7c 0c 4c 00 00 00 11 74 52 4e 53 00 26 26 46 5d 5d 98 a3 a3 d9 d9 de f6 f6 f9 fe fe 85 7c 7b 54 00 00 00 8a 49 44 41 54 28 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<cPLTEJWJUKTKUquKUX]KUAGBHGMIOX]mrKU"\|LtRNS&&F]]\|{TIDAT(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49761	104.17.246.203	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	596	OUT	GET /@lottiefiles/lottie-interactivity@latest/dist/lottie-interactivity.min.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:20 UTC	580	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 13:38:20 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /@lottiefiles/lottie-interactivity@1.6.2/dist/lottie-interactivity.min.js vary: Accept via: 1.1 fly.io fly-request-id: 01J9BVVAJGC6P8RSV7V2GXZK2X-lga CF-Cache-Status: HIT Age: 200 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8cd5925be8e3de97-EWR
2024-10-04 13:38:20 UTC	101	IN	Data Raw: 35 66 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 40 6c 6f 74 74 69 65 66 69 6c 65 73 2f 6c 6f 74 74 69 65 2d 69 6e 74 65 72 61 63 74 69 76 69 74 79 40 31 2e 36 2e 32 2f 64 69 73 74 2f 6c 6f 74 74 69 65 2d 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 6d 69 6e 2e 6a 73 0d 0a Data Ascii: 5fFound. Redirecting to /@lottiefiles/lottie-interactivity@1.6.2/dist/lottie-interactivity.min.js
2024-10-04 13:38:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49764	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	424	OUT	GET /wp-content/themes/sesamehr/assets/js/custom-privacy-link.js HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	367	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 18 Jul 2024 10:49:00 GMT ETag: "13e-61d835399af9f" Accept-Ranges: bytes Content-Length: 318 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:20 UTC	318	IN	Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 69 6e 74 65 72 76 61 6c 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 28 29 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 24 70 72 69 76 61 63 79 4c 69 6e 6b 20 3d 20 6a 51 75 65 72 79 28 27 2e 71 63 2d 63 6d 70 32 2d 65 78 70 61 6e 64 61 62 6c 65 2d 6c 69 73 74 20 6c 69 20 61 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 70 72 69 76 61 63 79 4c 69 6e 6b 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 70 72 69 76 61 63 79 4c 69 6e 6b 2e 61 74 74 72 28 27 72 65 6c 27 2c 20 27 6e 6f 66 6f 6c 6c 6f 77 20 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 27 29 3b 0a 20 20 Data Ascii: jQuery(document).ready(function() { const interval = setInterval(() => { const $privacyLink = jQuery('.qc-cmp2-expandable-list li a'); if ($privacyLink.length) { $privacyLink.attr('rel', 'nofollow noopener noreferrer');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49767	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	429	OUT	GET /wp-content/themes/sesamehr/assets/js/load-more-post.js?ver=6.6.1 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	368	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2024 14:37:31 GMT ETag: "4e7-6113037bcce0e" Accept-Ranges: bytes Content-Length: 1255 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:20 UTC	1255	IN	Data Raw: 6a 51 75 65 72 79 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 0a 09 76 61 72 20 70 6f 73 74 73 5f 70 65 72 5f 70 61 67 65 20 3d 20 38 3b 20 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 63 78 63 5f 6c 6f 61 64 5f 6d 6f 72 65 5f 70 6f 73 74 73 28 20 63 78 63 5f 74 68 69 73 2c 20 70 61 67 65 4e 75 6d 62 65 72 20 29 7b 0a 09 09 76 61 72 20 70 61 67 65 5f 63 6f 75 6e 74 20 3d 20 30 3b 0a 09 09 76 61 72 20 73 74 72 20 3d 20 27 26 70 61 67 65 4e 75 6d 62 65 72 3d 27 20 2b 20 70 61 67 65 4e 75 6d 62 65 72 20 2b 20 27 26 70 6f 73 74 73 5f 70 65 72 5f 70 61 67 65 3d 27 20 2b 20 70 6f 73 74 73 5f 70 65 72 5f 70 61 67 65 20 2b 20 27 26 61 63 74 69 6f 6e 3d 63 6f 64 65 78 5f 6c 6f 61 64 5f 6d 6f 72 65 5f 70 6f 73 74 5f 61 Data Ascii: jQuery( document ).ready( function($){var posts_per_page = 8; function cxc_load_more_posts( cxc_this, pageNumber ){var page_count = 0;var str = '&pageNumber=' + pageNumber + '&posts_per_page=' + posts_per_page + '&action=codex_load_more_post_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49763	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	418	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 16 Aug 2023 08:20:07 GMT ETag: "3509-60305f69be53a" Accept-Ranges: bytes Content-Length: 13577 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:20 UTC	7822	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-10-04 13:38:20 UTC	5755	IN	Data Raw: 73 6c 69 63 65 28 31 29 29 7c 7c 41 5b 72 5d 7c 7c 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 22 63 73 73 2d 6e 75 6d 62 65 72 22 29 3b 76 61 72 20 53 2c 50 2c 6b 2c 48 2c 45 3d 73 2e 64 61 74 61 3b 69 28 73 2c 22 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 61 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f Data Ascii: slice(1))\|\|A[r]\|\|u("css-number",'Number-typed values are deprecated for jQuery.fn.css( "'+e+'", value )')),Q.apply(this,arguments))},"css-number");var S,P,k,H,E=s.data;i(s,"data",function(e,t,r){var n,o,a;if(t&&"object"==typeof t&&2===arguments.length){fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49765	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	414	OUT	GET /wp-content/uploads/2024/01/gestion-de-talento.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 11:45:50 GMT ETag: "316-60fc3b8979ee6" Accept-Ranges: bytes Content-Length: 790 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:20 UTC	790	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 66 36 62 63 36 32 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 72 78 3d 22 31 36 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 3e 3c 2f 72 65 63 74 3e 3c 72 65 63 74 20 78 3d 22 30 2e 37 35 22 20 79 3d 22 30 2e 37 35 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g fill="none" stroke="#f6bc62" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49766	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	414	OUT	GET /wp-content/uploads/2024/01/gestion-de-equipos.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 11:45:49 GMT ETag: "3dd-60fc3b88e57de" Accept-Ranges: bytes Content-Length: 989 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:20 UTC	989	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 61 31 36 30 66 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 72 78 3d 22 31 36 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 3e 3c 2f 72 65 63 74 3e 3c 72 65 63 74 20 78 3d 22 30 2e 37 35 22 20 79 3d 22 30 2e 37 35 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g fill="none" stroke="#a160f5" stroke-width="1.5"><rect width="40" height="40" rx="16" stroke="none"></rect><rect x="0.75" y="0.75"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49762	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	410	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	371	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 29 Dec 2023 09:18:15 GMT ETag: "15601-60da28318e4e3" Accept-Ranges: bytes Content-Length: 87553 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:20 UTC	7821	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e Data Ascii: ldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}fun
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 70 74 69 6f 6e 22 29 26 26 21 21 65 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e Data Ascii: ption")&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:fun
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 28 74 68 69 73 2e 67 65 74 28 29 2c 63 65 28 65 2c 74 29 29 29 29 7d 2c 61 64 64 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 6c 74 65 72 28 65 29 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 6e 75 6c 6c 7d 2c 70 61 72 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 29 7d 2c 70 61 72 65 6e 74 73 55 6e 74 69 6c 3a 66 Data Ascii: (this.get(),ce(e,t))))},addBack:function(e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),ce.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return d(e,"parentNode")},parentsUntil:f
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 64 20 30 21 3d 3d 28 74 3d 7a 2e 67 65 74 28 6f 2c 6e 29 29 3f 74 3a 76 6f 69 64 20 30 21 3d 3d 28 74 3d 56 28 6f 2c 6e 29 29 3f 74 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 73 65 74 28 74 68 69 73 2c 6e 2c 65 29 7d 29 7d 2c 6e 75 6c 6c 2c 65 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 Data Ascii: d 0!==(t=z.get(o,n))?t:void 0!==(t=V(o,n))?t:void 0;this.each(function(){z.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){z.remove(this,e)})}}),ce.extend({queue:function(e,t,n){var r;if(e)return t=(
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 6c 29 2c 74 3d 30 3b 77 68 69 6c 65 28 28 69 3d 61 5b 74 2b 2b 5d 29 26 26 21 75 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 7b 75 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 69 2e 65 6c 65 6d 2c 6e 3d 30 3b 77 68 69 6c 65 28 28 6f 3d 69 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 75 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 75 2e 72 6e 61 6d 65 73 70 61 63 65 26 26 21 31 21 3d 3d 6f 2e 6e 61 6d 65 73 70 61 63 65 26 26 21 75 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 6f 2e 6e 61 6d 65 73 70 61 63 65 29 7c 7c 28 75 2e 68 61 6e 64 6c 65 4f 62 6a 3d 6f 2c 75 2e 64 61 74 61 3d 6f 2e 64 61 74 61 2c 76 6f 69 64 20 30 21 3d 3d 28 72 3d 28 28 63 65 2e 65 76 65 Data Ascii: l),t=0;while((i=a[t++])&&!u.isPropagationStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rnamespace.test(o.namespace)\|\|(u.handleObj=o,u.data=o.data,void 0!==(r=((ce.eve
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 52 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: ppendChild(e)})},prepend:function(){return $e(this,arguments,function(e){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var t=Re(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return $e(this,arguments,function(e){this.parentNod
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 68 69 73 2e 73 74 61 72 74 3d 74 68 69 73 2e 6e 6f 77 3d 74 68 69 73 2e 63 75 72 28 29 2c 74 68 69 73 2e 65 6e 64 3d 72 2c 74 68 69 73 2e 75 6e 69 74 3d 6f 7c 7c 28 63 65 2e 63 73 73 4e 75 6d 62 65 72 5b 6e 5d 3f 22 22 3a 22 70 78 22 29 7d 2c 63 75 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 67 65 74 3f 65 2e 67 65 74 28 74 68 69 73 29 3a 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 68 69 73 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e Data Ascii: his.start=this.now=this.cur(),this.end=r,this.unit=o\|\|(ce.cssNumber[n]?"":"px")},cur:function(){var e=at.propHooks[this.prop];return e&&e.get?e.get(this):at.propHooks._default.get(this)},run:function(e){var t,n=at.propHooks[this.prop];return this.options.
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 63 65 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 63 65 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 63 65 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 6d 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 63 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 Data Ascii: &&2!==o)return"undefined"==typeof e.getAttribute?ce.prop(e,t,n):(1===o&&ce.isXMLDoc(e)\|\|(i=ce.attrHooks[t.toLowerCase()]\|\|(ce.expr.match.bool.test(t)?mt:void 0)),void 0!==n?null===n?void ce.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setA
2024-10-04 13:38:20 UTC	8000	IN	Data Raw: 64 69 73 61 62 6c 65 64 22 29 26 26 4f 74 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 21 48 74 2e 74 65 73 74 28 65 29 26 26 28 74 68 69 73 2e 63 68 65 63 6b 65 64 7c 7c 21 77 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 65 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 75 6c 6c 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 63 65 2e 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 65 2e 72 65 70 6c 61 63 65 28 4c 74 2c 22 5c 72 5c 6e 22 29 7d 7d 29 3a 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 6e 2e 72 65 70 6c 61 63 65 28 4c Data Ascii: disabled")&&Ot.test(this.nodeName)&&!Ht.test(e)&&(this.checked\|\|!we.test(e))}).map(function(e,t){var n=ce(this).val();return null==n?null:Array.isArray(n)?ce.map(n,function(e){return{name:t.name,value:e.replace(Lt,"\r\n")}}):{name:t.name,value:n.replace(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49750	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 13:38:20 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=184013 Date: Fri, 04 Oct 2024 13:38:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49772	104.17.246.203	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	567	OUT	GET /@dotlottie/player-component@1.0.0/dist/dotlottie-player.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:21 UTC	578	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"52f95-a5ortVpVcaDVdN2fO+5oFj6JbNE" via: 1.1 fly.io fly-request-id: 01HRW74T83N1N4MKC9JQFQFXXH-lga CF-Cache-Status: HIT Age: 17705091 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8cd59260fed272ab-EWR
2024-10-04 13:38:21 UTC	791	IN	Data Raw: 37 64 35 65 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 5b 22 64 6f 74 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 22 5d 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 Data Ascii: 7d5e!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["dotlottie-player"]={})}(this,(function(exports){"use
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 43 48 41 4e 54 41 42 49 4c 49 54 59 0a 20 20 41 4e 44 20 46 49 54 4e 45 53 53 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 20 41 55 54 48 4f 52 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 53 50 45 43 49 41 4c 2c 20 44 49 52 45 43 54 2c 0a 20 20 49 4e 44 49 52 45 43 54 2c 20 4f 52 20 43 4f 4e 53 45 51 55 45 4e 54 49 41 4c 20 44 41 4d 41 47 45 53 20 4f 52 20 41 4e 59 20 44 41 4d 41 47 45 53 20 57 48 41 54 53 4f 45 56 45 52 20 52 45 53 55 4c 54 49 4e 47 20 46 52 4f 4d 0a 20 20 4c 4f 53 53 20 4f 46 20 55 53 45 2c 20 44 41 54 41 20 4f 52 20 50 52 4f 46 49 54 53 2c 20 57 48 45 54 48 45 52 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 4e 45 47 4c 49 47 45 4e 43 45 20 4f 52 0a 20 20 4f 54 48 Data Ascii: CHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTH
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 70 6f 6c 79 66 69 6c 6c 57 72 61 70 46 6c 75 73 68 43 61 6c 6c 62 61 63 6b 2c 72 65 6d 6f 76 65 4e 6f 64 65 73 3d 28 74 2c 65 2c 72 3d 6e 75 6c 6c 29 3d 3e 7b 66 6f 72 28 3b 65 21 3d 3d 72 3b 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 2c 65 3d 72 7d 7d 2c 6d 61 72 6b 65 72 3d 60 7b 7b 6c 69 74 2d 24 7b 53 74 72 69 6e 67 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 73 6c 69 63 65 28 32 29 7d 7d 7d 60 2c 6e 6f 64 65 4d 61 72 6b 65 72 3d 60 5c 78 33 Data Ascii: "!=typeof window&&null!=window.customElements&&void 0!==window.customElements.polyfillWrapFlushCallback,removeNodes=(t,e,r=null)=>{for(;e!==r;){const r=e.nextSibling;t.removeChild(e),e=r}},marker=`{{lit-${String(Math.random()).slice(2)}}}`,nodeMarker=`\x3
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 74 65 53 75 66 66 69 78 2e 6c 65 6e 67 74 68 29 2b 74 5b 33 5d 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6e 29 7d 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 74 29 2c 74 68 69 73 2e 70 61 72 74 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 6e 6f 64 65 22 2c 69 6e 64 65 78 3a 2b 2b 61 7d 29 7d 22 22 3d 3d 3d 73 5b 6e 5d 3f 28 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 72 65 61 74 65 4d 61 72 6b 65 72 28 29 2c 74 29 2c 72 2e 70 75 73 68 28 74 29 29 3a 74 2e 64 61 74 61 3d 73 5b 6e 5d 2c 6f 2b 3d 6e 7d 7d 65 6c 73 65 20 69 66 28 38 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 74 2e 64 61 74 61 3d 3d 3d 6d 61 72 6b 65 72 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 6e 75 6c 6c 21 Data Ascii: teSuffix.length)+t[3]),r=document.createTextNode(n)}i.insertBefore(r,t),this.parts.push({type:"node",index:++a})}""===s[n]?(i.insertBefore(createMarker(),t),r.push(t)):t.data=s[n],o+=n}}else if(8===t.nodeType)if(t.data===marker){const e=t.parentNode;null!
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 2c 61 3d 69 5b 6e 5d 7d 6c 2e 66 6f 72 45 61 63 68 28 74 3d 3e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 29 7d 63 6f 6e 73 74 20 63 6f 75 6e 74 4e 6f 64 65 73 3d 74 3d 3e 7b 6c 65 74 20 65 3d 31 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 30 3a 31 3b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 72 65 65 57 61 6c 6b 65 72 28 74 2c 77 61 6c 6b 65 72 4e 6f 64 65 46 69 6c 74 65 72 2c 6e 75 6c 6c 2c 21 31 29 3b 66 6f 72 28 3b 72 2e 6e 65 78 74 4e 6f 64 65 28 29 3b 29 65 2b 2b 3b 72 65 74 75 72 6e 20 65 7d 2c 6e 65 78 74 41 63 74 69 76 65 49 6e 64 65 78 49 6e 54 65 6d 70 6c 61 74 65 50 61 72 74 73 3d 28 74 2c 65 3d 2d 31 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 72 3d 65 2b 31 3b 72 3c 74 2e 6c 65 6e Data Ascii: ,a=i[n]}l.forEach(t=>t.parentNode.removeChild(t))}const countNodes=t=>{let e=11===t.nodeType?0:1;const r=document.createTreeWalker(t,walkerNodeFilter,null,!1);for(;r.nextNode();)e++;return e},nextActiveIndexInTemplateParts=(t,e=-1)=>{for(let r=e+1;r<t.len
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 74 20 64 69 72 65 63 74 69 76 65 73 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 69 73 44 69 72 65 63 74 69 76 65 3d 74 3d 3e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 64 69 72 65 63 74 69 76 65 73 2e 68 61 73 28 74 29 2c 6e 6f 43 68 61 6e 67 65 3d 7b 7d 2c 6e 6f 74 68 69 6e 67 3d 7b 7d 3b 0a 2f 2a 2a 0a 20 20 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 20 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 Data Ascii: t directives=new WeakMap,isDirective=t=>"function"==typeof t&&directives.has(t),noChange={},nothing={};/** * @license * Copyright (c) 2017 The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 63 65 73 73 6f 72 2e 68 61 6e 64 6c 65 54 65 78 74 45 78 70 72 65 73 73 69 6f 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 3b 74 2e 69 6e 73 65 72 74 41 66 74 65 72 4e 6f 64 65 28 6f 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 2c 74 68 69 73 2e 5f 5f 70 61 72 74 73 2e 70 75 73 68 28 74 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 5f 70 61 72 74 73 2e 70 75 73 68 28 2e 2e 2e 74 68 69 73 2e 70 72 6f 63 65 73 73 6f 72 2e 68 61 6e 64 6c 65 41 74 74 72 69 62 75 74 65 45 78 70 72 65 73 73 69 6f 6e 73 28 6f 2c 73 2e 6e 61 6d 65 2c 73 2e 73 74 72 69 6e 67 73 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 29 3b 6e 2b 2b 7d 65 6c 73 65 20 74 68 69 73 2e 5f 5f 70 61 72 74 73 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 6e 2b 2b 3b 72 65 74 75 72 6e 20 69 73 43 45 50 6f 6c Data Ascii: cessor.handleTextExpression(this.options);t.insertAfterNode(o.previousSibling),this.__parts.push(t)}else this.__parts.push(...this.processor.handleAttributeExpressions(o,s.name,s.strings,this.options));n++}else this.__parts.push(void 0),n++;return isCEPol
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 6d 70 6c 61 74 65 22 29 3b 72 65 74 75 72 6e 20 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 68 69 73 2e 67 65 74 48 54 4d 4c 28 29 2c 74 7d 7d 0a 2f 2a 2a 0a 20 20 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 20 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 Data Ascii: eElement(){const t=document.createElement("template");return t.innerHTML=this.getHTML(),t}}/** * @license * Copyright (c) 2017 The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license found at
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 73 2e 5f 67 65 74 56 61 6c 75 65 28 29 29 29 7d 7d 63 6c 61 73 73 20 41 74 74 72 69 62 75 74 65 50 61 72 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 63 6f 6d 6d 69 74 74 65 72 3d 74 7d 73 65 74 56 61 6c 75 65 28 74 29 7b 74 3d 3d 3d 6e 6f 43 68 61 6e 67 65 7c 7c 69 73 50 72 69 6d 69 74 69 76 65 28 74 29 26 26 74 3d 3d 3d 74 68 69 73 2e 76 61 6c 75 65 7c 7c 28 74 68 69 73 2e 76 61 6c 75 65 3d 74 2c 69 73 44 69 72 65 63 74 69 76 65 28 74 29 7c 7c 28 74 68 69 73 2e 63 6f 6d 6d 69 74 74 65 72 2e 64 69 72 74 79 3d 21 30 29 29 7d 63 6f 6d 6d 69 74 28 29 7b 66 6f 72 28 3b 69 73 44 69 72 65 63 74 69 76 65 28 74 68 69 73 2e 76 61 6c 75 65 29 3b 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e Data Ascii: s._getValue()))}}class AttributePart{constructor(t){this.value=void 0,this.committer=t}setValue(t){t===noChange\|\|isPrimitive(t)&&t===this.value\|\|(this.value=t,isDirective(t)\|\|(this.committer.dirty=!0))}commit(){for(;isDirective(this.value);){const t=this.
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 28 74 29 7b 74 68 69 73 2e 76 61 6c 75 65 21 3d 3d 74 26 26 28 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 5f 5f 69 6e 73 65 72 74 28 74 29 2c 74 68 69 73 2e 76 61 6c 75 65 3d 74 29 7d 5f 5f 63 6f 6d 6d 69 74 54 65 78 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 73 74 61 72 74 4e 6f 64 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 72 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 74 3d 6e 75 6c 6c 3d 3d 74 3f 22 22 3a 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 3b 65 3d 3d 3d 74 68 69 73 2e 65 6e 64 4e 6f 64 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 33 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 61 74 61 3d 72 3a 74 68 69 73 2e 5f 5f 63 6f 6d 6d 69 74 4e 6f 64 65 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 Data Ascii: (t){this.value!==t&&(this.clear(),this.__insert(t),this.value=t)}__commitText(t){const e=this.startNode.nextSibling,r="string"==typeof(t=null==t?"":t)?t:String(t);e===this.endNode.previousSibling&&3===e.nodeType?e.data=r:this.__commitNode(document.createT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49771	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	639	OUT	GET /wp-content/uploads/2023/06/espana.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:20 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:15 GMT ETag: "203-5ff430d5bb0af" Accept-Ranges: bytes Content-Length: 515 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:20 UTC	515	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 cc 50 4c 54 45 ff ff ff c9 43 4a c8 42 4a c8 42 4b c8 41 4b c8 41 4b c8 41 4b b8 76 6e b9 af c8 c3 ac 6f c8 41 4b c9 6e 59 d4 7e 52 da 6c 49 da 77 63 db 77 5f db 7b 63 de 94 93 df 89 63 df be 60 e2 80 52 e3 7e 48 e3 7f 48 e3 a7 a0 e3 a9 a6 e3 aa a7 e3 c0 5e e4 81 48 e4 a8 a0 e6 8d 54 e7 9d 75 e8 92 4b e8 95 5f e8 97 57 e8 c4 5c e9 c8 8a e9 c9 8e ea a3 61 ea ae 7f eb a8 71 eb ba 9c ec c6 5a ed bf 9d f1 b3 67 f1 bb 71 f1 d0 d9 f3 c6 5c Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTECJBJBKAKAKAKvnoAKnY~RlIwcw_{cc`R~HH^HTuK_W\aqZgq\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49770	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	639	OUT	GET /wp-content/uploads/2023/06/brazil.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:20 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:14 GMT ETag: "212-5ff430d4c0101" Accept-Ranges: bytes Content-Length: 530 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:21 UTC	530	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 9c 50 4c 54 45 ff ff ff 72 ae 00 73 af 00 74 af 00 73 af 00 73 af 00 73 af 00 41 47 9b 45 4a 9d 48 4c 99 49 4e 98 49 4f 9f 4c 51 99 4e 53 9b 50 55 9c 51 55 9e 51 56 a3 52 58 a4 55 5b a5 56 5b a5 58 5e a7 59 5f a7 5a 5f a7 5a 60 a8 68 6d ae 69 6d af 73 af 00 74 71 89 7c 80 b8 8b 88 9c 90 93 c3 91 95 c3 9e be 1c 9f bf 1c 9f bf 1d a0 bf 1d a1 bf 1d a1 bf 1e a4 a7 cc ab ad d0 ba bc d7 cf ce d5 d2 d3 e3 db dc e8 dd de e8 e0 c8 64 e0 c9 66 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTErstsssAGEJHLINIOLQNSPUQUQVRXU[V[X^Y_Z_Z`hmimstq\|df

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49774	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	646	OUT	GET /wp-content/uploads/2024/01/sesamehr-logo.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 11:43:16 GMT ETag: "e22-60fc3af71aadc" Accept-Ranges: bytes Content-Length: 3618 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:21 UTC	3618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 33 36 2e 38 33 39 22 20 68 65 69 67 68 74 3d 22 32 38 2e 37 37 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 2e 38 33 39 20 32 38 2e 37 37 34 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 35 35 2e 37 31 33 20 2d 35 36 30 2e 37 32 36 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 34 33 2e 35 35 32 20 35 37 37 2e 30 36 33 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 2d 34 33 2e 33 2d 33 2e 31 68 30 63 32 2e 32 2e 35 2c 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="136.839" height="28.774" viewBox="0 0 136.839 28.774"><g transform="translate(-355.713 -560.726)"><g transform="translate(443.552 577.063)"><path d="M-43.3-3.1h0c2.2.5,4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49776	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	675	OUT	GET /wp-content/themes/sesamehr/img/new-home/v2/dashboard_sidebar_plegado.webp HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	311	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:40:14 GMT ETag: "2b9c6-61786fdf4e765" Accept-Ranges: bytes Content-Length: 178630 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:21 UTC	7881	IN	Data Raw: 52 49 46 46 be b9 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 b1 04 00 63 03 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0cICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: 44 4f 3b 56 b3 3f 83 8b 9a e1 25 2c 14 01 14 e9 75 d0 f7 1b 08 06 bd 5c ff 06 1b c9 da da 0b 61 54 3f 31 74 36 a9 58 82 8d 84 a1 b4 5b b0 f7 0e ce 6f 91 ef c8 55 0c ae 0f 1d 31 78 6c 02 a2 7a ea 99 5f d0 4d 0b 51 fb b2 51 42 23 db a4 e4 83 24 d4 c3 72 71 fa 99 79 e3 0d 09 d5 02 0a ec 66 a1 4c ef f1 7b 19 1b d1 6c 03 1e 65 f1 4f 92 55 37 23 ba 73 a4 ad a2 a2 e2 75 fe b7 e3 64 d7 ac c5 d0 d0 e5 31 f7 36 95 8e d2 83 84 78 02 e8 19 c0 25 ea 80 b2 96 ab dc a6 7c 54 60 20 52 d2 1f 74 e8 b5 57 24 54 e5 d7 af 45 47 9f 2a 36 54 f7 8c 39 81 52 78 96 98 65 38 fd 50 f9 25 f2 21 91 c9 b6 5d e3 92 a9 08 9e 93 d0 14 bb 8d 8d 48 8d b5 19 58 d1 81 7d bc 66 8f f3 2a c7 62 22 1c d8 51 2e e3 97 11 50 68 4f 15 1b 32 81 e2 5c 7b 39 36 52 21 95 2f 9c 6a b4 c0 ab 95 a9 9d 2f 04 Data Ascii: DO;V?%,u\aT?1t6X[oU1xlz_MQQB#$rqyfL{leOU7#sud16x%\|T` RtW$TEG6T9Rxe8P%!]HX}fb"Q.PhO2\{96R!/j/
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: 34 f3 f9 fb 19 20 3e 58 fa 05 39 1d 6d 7a 7c be 6c 54 5e b6 3e 78 45 74 01 fb 75 13 f9 f9 f2 e5 42 47 2a 6f eb e3 ca f2 40 d1 14 ec 3d 35 fb f8 99 cf 78 01 f6 72 11 33 23 b3 74 5a 63 29 34 0e bf ae 7f af fd b0 9b b3 27 cb 55 04 47 db ca 1e 9d 46 33 25 8d 67 75 e6 81 34 9f 91 51 50 79 b7 35 ae c5 d2 87 aa 4f 57 f6 d8 7d be 83 28 1d d3 ce f6 f7 f3 41 d8 c9 e7 c5 0c 58 66 a8 9d 3e 8d 16 52 9c 8c 4a 58 86 70 5d 77 aa cb 17 79 e1 7b ef 78 1a 0d b6 ff 9a 80 a4 7e 04 57 1e f2 e9 e5 f9 28 f2 e7 9f 23 28 51 b8 c4 d9 bc 35 a8 06 81 8d 9f f0 e4 95 5f ff 9e 3f 8f b9 b9 49 3a b5 1b 24 d2 f8 a2 0e dd 28 3a 59 f5 e7 39 f4 4a 1c 63 33 55 34 34 c3 68 e8 d5 dd 4b e1 e0 79 f1 34 ca 48 93 cc 33 4f 40 d0 d2 85 66 a4 97 fb 79 34 3b 68 7c bf 4c 51 77 c9 a4 49 6a 8f a6 d8 c9 ae Data Ascii: 4 >X9mz\|lT^>xEtuBG*o@=5xr3#tZc)4'UGF3%gu4QPy5OW}(AXf>RJXp]wy{x~W(#(Q5_?I:$(:Y9Jc3U44hKy4H3O@fy4;h\|LQwIj
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: b2 f8 54 35 98 30 5f 5a 64 aa a2 c4 ef 92 96 fa d3 25 55 16 27 7c 94 b7 d6 99 2a a8 b1 37 9b 90 49 e3 3e db 95 9e a3 22 ea f4 0c a8 8d 92 2a 92 e3 3a de bf b2 ec 0d f6 4d 62 51 52 c0 37 8d 6a fd 6b 31 da 12 30 ea 63 b5 70 26 89 76 25 f7 ba 3e 0e 5b 30 62 61 c3 84 be ac 5c 8c 1c 4a ea e3 18 5d e6 4e 7b bd 84 d8 12 46 a0 d1 b2 c6 3d 39 57 48 de ca ed f1 59 d2 4a c3 1b 87 dc 28 74 b4 e8 77 35 df da 7d 40 22 3d a6 ea 0d 20 06 0e 29 ee 47 df e5 0f 72 3e ff 28 7b 8e 3b 57 55 8a f8 eb c9 af 5a ad 3a 54 27 ce 97 2a 3c 48 4f df 06 b7 84 40 ec 88 2d 7d 8e 81 c0 ca e5 94 bc 73 a5 4c 83 ba 56 3e 47 0a 40 11 3d 65 11 be 93 7c 21 af be 28 cc 06 b0 98 c9 c6 55 51 62 77 c7 22 c7 a2 b9 f0 97 79 1a 77 df e4 76 df e3 f6 8e e9 92 82 16 58 5d d8 e1 3c 1a eb ae ba eb ae ba eb Data Ascii: T50_Zd%U'\|7I>":MbQR7jk10cp&v%>[0ba\J]N{F=9WHYJ(tw5}@"= )Gr>({;WUZ:T'*<HO@-}sLV>G@=e\|!(UQbw"ywvX]<
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: 82 e2 06 5e e8 54 6c 52 2a 8f 86 4a fe 11 ad 66 da 88 05 fb 4d 3e a5 6a bb 42 ce ab eb fe 28 44 35 63 d4 a7 74 05 1a 62 2a 9e b6 79 6e 2a 00 5c a0 c6 0c 5a c4 7c 10 f1 38 45 4c 13 9e fd 3c 47 59 b5 cb 78 54 b6 01 fd 28 6e 34 e1 d7 cd 43 b6 65 73 05 9e 41 b9 92 92 31 a8 2d 53 fd b4 0a 5c 2a 2c 01 17 8d d5 4c 1d 20 cc e5 82 6b c6 37 54 3a d3 dd b8 31 dc 05 ee 5a a3 a4 9b 56 12 24 0c d9 71 ca ea 55 3d b6 46 75 22 dc 6e c2 75 0d c9 8c be 6c 58 cb 40 dc de 53 27 b7 98 e4 a7 9d d1 cf 7d 32 75 96 dc f4 2b 86 91 b8 48 d2 6b 66 9c cd a3 b1 43 8e cf 61 69 c4 e4 2a ed 33 29 12 b1 48 c2 e1 6f 8b 69 0f cb 4a 0a 50 18 9b eb c6 ac 7c 32 d4 ff 5d d7 8f 3b 66 d9 7d 3f e8 8b a1 18 fc 9d 6d 4f 03 cf dc 9a d6 39 87 52 2d c6 ec 27 50 dc 98 cb e6 c5 8c b4 0d cd e5 32 7b 79 8e Data Ascii: ^TlRJfM>jB(D5ctbyn\Z\|8EL<GYxT(n4CesA1-S\,L k7T:1ZV$qU=Fu"nulX@S'}2u+HkfCai*3)HoiJP\|2];f}?mO9R-'P2{y
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: 98 a1 48 f7 1f 85 08 41 83 cc 34 8f f3 11 65 46 57 7b 79 21 1a d7 b0 3a 1b c5 f9 ef 6b e5 9a 2a 5c 9f 78 14 8c ed 9f 5a d9 62 77 2e 05 f7 e3 80 dd 96 82 ff 8d 12 a8 41 c6 34 2e 8b a6 7a 98 6b ca 1e 9c 9b 86 be af e1 a7 87 ae f4 92 10 1b ec 78 55 e1 fa 86 aa e5 7d dc 93 45 21 65 6a d2 f2 10 d3 b3 c8 8f f1 c1 26 57 f4 44 23 27 3d ba c3 88 b7 19 8d 8b 95 12 9b b6 d3 87 72 9c d1 ff 49 b2 10 64 49 b1 57 1b 27 68 67 42 f1 ec 55 92 e7 c5 7e ae 73 a8 e8 b3 12 9f 02 a7 22 59 79 5a dc 45 14 0b 8c 56 9a 7c a4 1a 7b 8e 44 94 3c 4d 9e 17 33 4e b1 63 5e 11 cb d5 a6 6f 1a 7c ac 15 2d f3 7c 2a a0 b7 6b 6e 1b 52 8a 54 93 44 46 67 3f 1e a9 8d 14 48 cd fe 20 f3 04 05 17 66 c4 6d 10 44 40 e3 c3 5b 5b 2f c8 35 85 65 f1 73 4c 05 9a 7a 2b 5b 7d cb b2 c3 a9 da 2f cd 44 64 c0 2c Data Ascii: HA4eFW{y!:k\xZbw.A4.zkxU}E!ej&WD#'=rIdIW'hgBU~s"YyZEV\|{D<M3Nc^o\|-\|knRTDFg?H fmD@[[/5esLz+[}/Dd,
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: e6 88 b0 a2 e5 bd 61 92 e6 15 11 84 7a 0d a5 24 f3 79 c2 e6 0f 39 3d 92 58 94 cd 74 11 74 1b 54 f6 50 4f 90 29 67 ab e8 3a 44 7b ad d6 45 b5 b9 db 74 4f c6 0d 24 7c 6b fc 57 48 87 d5 0e 8c ec 1e 82 61 c9 f1 a7 a5 06 b0 73 bf 96 e7 c7 e0 5c 0c 78 43 a6 6c a6 e7 23 39 36 07 bd c2 d2 c9 ed 25 ab 0a ca d9 db 85 d6 91 6b a1 0b ed 7f ed 6d 06 59 4c be d6 06 ff 38 9c 3e ef 01 bf e7 3c 05 a8 65 41 07 3e 24 60 80 b0 de d2 0e 30 03 c8 20 92 94 4b 3f bf ec 2d 33 a9 0f f4 07 6e 89 df ad f5 f4 27 ec 9f 2d cc 5d e8 c7 ed e0 84 56 07 5f d3 5c e6 66 4d 22 d7 a8 a1 13 97 8d 38 dc 91 dd ef 93 a6 1e 15 14 4d 83 6e 2c d1 2a 22 86 e8 2a 58 e2 bc 65 75 eb 5e 0a fd b7 02 53 46 c6 5e f1 cc d0 16 bd 09 85 16 4f ef cc de 0b 5b 6d aa f0 01 ae 20 df 04 0c bc a2 d0 73 cf 78 87 a4 cb Data Ascii: az$y9=XttTPO)g:D{EtO$\|kWHas\xCl#96%kmYL8><eA>$`0 K?-3n'-]V_\fM"8Mn,"Xeu^SF^O[m sx
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: cc 88 f9 87 9c ed e2 5d ee 82 0e 93 d5 83 a8 19 36 8d e3 02 53 48 fb d1 06 8a fe 9a ff d9 ef e1 d7 49 41 31 e0 2c ae 5d 72 f8 c4 f4 30 ce 81 eb ff 90 e9 f4 f2 b6 5e 2b a4 f1 94 3d 0a d3 b4 38 18 32 92 67 29 84 78 5a 72 14 e6 9f 92 e9 33 79 2b eb 0c 35 15 15 c3 6a c9 47 ce 95 3a 41 ee 6e 7e 3e 78 52 56 31 0d 03 69 8b 08 fd 04 90 00 c8 6d 22 cd 02 61 ef 8e 7a dc 63 8b 80 60 ef 46 e3 9c 92 63 ab 60 13 1a db 40 72 27 57 09 44 00 8d 96 88 0e dc fa ab ea 06 67 b3 d1 f6 9e c7 04 32 08 23 4c 0f 93 ff 57 7d ef ef d7 42 b8 0b 42 1d 9b d2 f8 ad c5 82 fb 83 5b 73 c7 a0 c7 59 93 cf 4c 80 02 2f 3b 95 a3 66 42 6a 4b 8f 6f f3 d1 d1 65 09 3b 14 b9 c0 e4 8a 10 00 00 00 00 96 2c 24 2a b4 ba 3a 95 91 fa 9f 21 e8 97 ca 85 74 0f d0 49 34 56 6b bf 0f b3 1b 2d c2 02 bf 28 78 57 Data Ascii: ]6SHIA1,]r0^+=82g)xZr3y+5jG:An~>xRV1im"azc`Fc`@r'WDg2#LW}BB[sYL/;fBjKoe;,$*:!tI4Vk-(xW
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: 28 fa 9e 86 93 43 23 49 73 4b 2f 30 4f 12 e5 4d 1a 4d 94 4c 89 40 1d 78 09 70 79 f4 a5 ed 28 cf 5b bc ec 80 1c 32 e7 27 fa 74 b7 44 bd 36 ed f3 19 80 c3 b9 0a 62 e3 73 98 64 15 56 79 34 db 80 68 85 ad 1b 9c 29 41 5c 48 77 92 8c 33 55 2a 0f e0 c2 40 d5 84 bf c8 4b 53 21 62 13 df f2 ea 75 76 29 46 d7 97 12 3f 07 1b fe 8b d6 d6 5d 96 1f 8e f4 1e 35 fa 45 30 92 22 f1 60 ee 5d e1 68 67 e5 91 6d b7 85 d3 c8 8a af 59 06 d1 06 fd 3b b5 a0 dd aa f5 e4 27 f3 bf 33 21 d9 a7 1b 21 48 af e6 95 d0 07 63 29 f9 12 22 ad b2 ff 02 8f 1b f6 f8 d5 10 b5 a2 ba 0e 9b dc 2a c2 16 db 97 95 63 70 ae bc 5d 0f fd 9f a7 92 d3 6b 11 58 31 ad d9 2b d3 af c1 7b bc f5 b1 b2 03 c3 5d 5f 0b c6 31 da 21 dd d5 d8 94 bc 40 ed 2a 3c 87 fa ac 6b 65 97 f8 6e 88 f2 be 01 37 c1 d5 83 b1 6f 87 1e Data Ascii: (C#IsK/0OMML@xpy([2'tD6bsdVy4h)A\Hw3U@KS!buv)F?]5E0"`]hgmY;'3!!Hc)"cp]kX1+{]_1!@*<ken7o
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: 2b f5 d0 fa d5 79 7f 00 44 15 8e e3 51 57 1e 25 fe 61 99 10 a4 80 06 2c 52 10 2b 1e 26 e9 a2 e3 01 52 b4 9d 93 9a b2 65 e5 50 6a 24 f0 a2 f6 80 86 18 78 a0 d6 6c f6 bd 41 a8 c9 3a 7f 35 74 7b 98 11 01 04 98 9e 23 c0 a4 39 d4 6a 7c 68 d6 c1 a2 87 66 4a fe 86 66 a0 c6 ea ed 76 b2 1e 6f 90 71 3c 6c 65 2c 2f 14 eb 14 19 e3 2a 96 e0 3b 37 59 e3 36 a3 c4 0e ba 19 c8 d2 86 ef 95 b9 48 2f b4 2d 9d 58 bb d6 ce 98 79 82 38 f8 44 10 15 2d 63 60 61 6b 35 d1 bf 83 26 39 1f 02 ff ff e2 8d 57 c7 a4 f9 af 52 f1 1b b2 3d 54 88 ff 88 5e 60 5a 33 1a 8a 2c a4 a6 05 d7 f7 17 92 8e 85 8f b0 2a 2a 72 82 54 36 ae dc fb ed 03 2e a9 f9 53 a4 60 a6 5d 21 e7 8a e8 d4 71 e8 de fe 91 94 87 30 85 f1 ff 40 83 85 b3 95 9d 2f b7 15 56 69 f6 cd 76 8a a3 60 b8 5d b3 1b 75 fb 1f 3d e2 fd 91 Data Ascii: +yDQW%a,R+&RePj$xlA:5t{#9j\|hfJfvoq<le,/;7Y6H/-Xy8D-c`ak5&9WR=T^`Z3,*rT6.S`]!q0@/Viv`]u=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49777	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	403	OUT	GET /wp-content/uploads/2023/06/germany.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:16 GMT ETag: "137-5ff430d62f416" Accept-Ranges: bytes Content-Length: 311 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:21 UTC	311	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 30 50 4c 54 45 ff ff ff 43 43 57 ff e4 57 47 47 55 ff e1 5a 46 46 54 ff e1 5b 47 47 55 ff e0 5a 46 46 55 ff e1 5a 46 46 55 ff e1 5a 46 46 55 ff 4b 55 ff e1 5a 8b 6d d6 51 00 00 00 0d 74 52 4e 53 00 26 26 5d 5d a3 a3 d9 d9 f6 f6 fe fe 9a b1 c4 7f 00 00 00 60 49 44 41 54 18 57 63 60 10 ad be 0b 06 db 03 19 18 98 e7 de 85 82 9b 06 0c 92 77 e1 60 22 43 2c 82 73 95 a1 16 c1 b9 ce b0 17 c1 b9 cd 70 17 09 a0 72 de 21 01 5a 72 fe 23 01 54 ce Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<0PLTECCWWGGUZFFT[GGUZFFUZFFUZFFUKUZmQtRNS&&]]`IDATWc`w`"C,spr!Zr#T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49775	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	654	OUT	GET /wp-content/themes/sesamehr/img/resenas/getapp_01.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	334	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 24 Jan 2024 14:35:07 GMT ETag: "9997-60fb1f82e91b2" Accept-Ranges: bytes Content-Length: 39319 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:21 UTC	7858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 01 15 08 06 00 00 00 f0 c8 1c 35 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec 7d 09 7c 15 d5 d9 fe 99 b9 01 01 17 c0 a5 2e 08 82 7b eb 02 88 1b a2 70 93 60 48 c2 96 44 63 ab d6 8a 8a 7b 3f 45 ff b6 55 bb 69 5b 97 da f6 13 db aa 15 37 b4 6a b5 91 e4 02 92 85 25 f7 b2 89 b5 45 70 fd dc c1 8d 1d 12 20 24 40 ee 9d f3 7f 26 12 1b 62 92 7b 67 e6 cc 9c 33 33 ef fd fd fc 55 9b 73 de e5 39 67 66 ce 79 ce fb be 47 63 f4 23 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 14 46 40 53 d8 36 32 8d 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 60 44 60 d1 24 20 04 08 01 42 80 10 20 04 08 01 Data Ascii: PNGIHDR5sBIT\|d IDATx^}\|.{p`HDc{?EUi[7j%Ep $@&b{g33Us9gfyGc#B B B B F@S62 B B B B`D`$ B
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: e4 ec c9 ca 60 eb 43 43 cc db 41 51 b6 61 05 8a 86 d7 a0 ee 92 32 44 b7 97 50 aa 4c 12 a9 42 ae e1 59 ab e7 8d 7c 90 5f df 19 4e e7 13 e6 c8 95 78 d7 8c 07 0e 43 40 fe 0c 74 2a af b5 3f 9e bf 55 66 b4 12 e4 c6 40 10 3e 2b 4a ae 29 a7 25 da 57 eb 31 19 91 51 e3 61 73 54 a4 6c 3b b2 f0 ce 7e 57 63 bc 4a 63 c6 d3 41 5c 03 44 a3 d1 1e 5a cf 03 6f 05 36 23 f1 cf 69 58 23 1f 62 07 a7 8e fa 60 7e bc 83 f9 b7 02 fb c2 27 31 4f 16 8a 92 6b ca 19 59 38 f1 94 08 8f 5c 8d e8 aa 3c cc 93 13 44 ca b6 27 8b cf 03 e9 39 6b 57 37 e3 99 a5 b3 66 6d b7 27 c3 9d 5e ca 12 58 26 79 65 24 93 09 55 08 1c 77 e0 ef 58 aa 6a e4 d5 37 56 72 be 93 eb 7a a1 9b 24 96 8a e4 d5 37 1f 37 ce 9f 5f 9b 97 7f 19 08 55 7c e7 04 fd a6 4d bb 0e c4 e0 a3 82 a4 b9 23 86 53 24 96 3b c0 3a 97 0a 32 Data Ascii: `CCAQa2DPLBY\|_NxC@t*?Uf@>+J)%W1QasTl;~WcJcA\DZo6#iX#b`~'1OkY8\<D'9kW7fm'^X&ye$UwXj7Vrz$77_U\|M#S$;:2
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: b4 83 ed 9e f5 b2 19 bd ae db e9 2f ba 4f 32 99 1a b0 68 ee cc 2f 5a e5 7e 43 60 85 9d bc 9a df d0 d0 1d 60 f8 8d c4 71 3c 3f 7c 4a 5e b5 f8 8d 4d d7 3a be cf 3e 43 37 9e 74 d2 3a c7 40 b4 11 70 e8 bc ca b3 23 5c 57 3e 8d c0 60 fc 8a 75 79 05 d3 45 fa ce 9e 78 c2 bc 0d 63 92 50 99 e2 85 6d 86 c8 e3 91 4e 28 fd 26 31 f1 ae a5 97 a8 02 09 83 d3 24 22 b0 d2 0f 95 6f 5a 08 27 b0 0a 4a aa 41 20 8d 91 06 00 67 7f 42 cd 9b db a4 e9 b7 a9 78 f8 98 d2 03 7b 44 92 1f 20 ed ea 60 9b 22 84 74 33 0c 7e 71 a2 ba e2 45 21 c2 2c 08 91 4d 60 e1 39 88 82 c8 5d 68 c1 64 6a da 09 02 48 1f ac 53 a1 78 3b cc 53 a2 78 39 ea 81 ad 86 2d 47 c9 9e 30 b2 8a d9 3b f1 5b 5d 02 8b 17 81 10 9c e9 c4 37 59 7d 91 4e 58 86 82 dd 17 ca d2 df 4e af 90 34 42 55 09 2c 10 9d f7 21 7a e8 4e 45 Data Ascii: /O2h/Z~C``q<?\|J^M:>C7t:@p#\W>`uyExcPmN(&1$"oZ'JA gBx{D `"t3~qE!,M`9]hdjHSx;Sx9-G0;[]7Y}NXN4BU,!zNE
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: 6e c6 cb 4e 64 50 5f b5 10 30 6f 19 c5 b3 9d 8d eb cc bf f4 ca 32 d9 04 16 22 b0 7e 8f 08 ac db bd f2 57 75 3d d8 cc 4e c7 66 f6 72 d5 ed 24 fb dc 47 00 9b f3 7a de c8 07 25 12 b1 7a f7 b5 ed ad 41 36 81 65 70 fe 8b 44 55 c5 3d 5e fb 2d 43 1f d6 25 75 58 97 f4 91 a1 db d4 69 de 2e 07 12 e8 10 3b fa a5 17 71 e7 2c 86 72 0c c5 76 6c f7 5b 1f 44 ea cd 03 81 34 5a 96 dd 20 d4 ef 95 42 60 11 89 15 20 12 8b f3 ad 18 cf 73 45 a7 0d 9a e4 95 c6 5b 18 56 69 73 34 83 07 93 c8 ab 8b 2e 4a 65 80 13 35 71 01 01 7c 40 2e c1 c3 f1 bc 0b a2 2d 89 34 43 79 b1 e0 18 67 a9 53 c8 1b 0f 1f 5e da b3 67 9f d4 46 bc dd f6 95 0d 85 dd 82 a9 6d ed 56 e1 e6 22 d9 38 06 45 3f 16 86 6b f1 d9 7d 94 37 45 1e 4c 24 ca 1a bc f4 4b 36 81 85 77 d9 1f f0 2e 93 76 aa ec 25 d6 e9 74 45 a3 45 Data Ascii: nNdP_0o2"~Wu=Nfr$Gz%zA6epDU=^-C%uXi.;q,rvl[D4Z B` sE[Vis4.Je5q\|@.-4CygS^gFmV"8E?k}7EL$K6w.v%tEE
2024-10-04 13:38:21 UTC	7461	IN	Data Raw: de 3c 6d da 77 aa 6c ea f9 ea d7 5c 73 b0 e3 79 b7 a8 dd 63 62 6b 33 89 86 c8 79 95 04 d5 ba 6d b3 b1 79 d9 62 d7 73 56 d6 2d 80 1c 77 5c 5f 36 7f ac 2f 9b 0b 72 dc 85 ed ae 07 d1 80 ae 53 b8 4d 7f ad f7 e8 9a 54 86 52 f3 46 3f e7 ac 52 6f e7 0f 52 31 18 93 91 96 96 96 71 db 9c f1 77 eb 19 3d 33 a6 26 f3 d8 4c 45 11 58 b5 26 68 e4 71 e0 d2 f6 59 f9 ce 14 61 ed ce 4d db ee 8b ec 19 73 55 7f 4f e7 05 d5 f8 81 80 55 0d bd 8c ea 1a b3 6d d8 f1 66 af eb 59 71 4f 5a 1e 20 60 a5 45 3a 3e 3b 5a 8b dc 31 d0 d3 71 8a 5a 54 ba ed 68 bf ba 17 b0 02 5c 39 14 b1 10 af 10 af a2 5d e9 94 86 c0 5e 08 04 91 58 8e eb 75 91 13 2b 3f 53 44 0a c4 b7 25 5e bd ad 92 87 be 8d bd 6c 6a 5e d6 e6 78 4e 87 8d be d5 9c 4f c6 7f 9f b6 0d e6 32 81 7e 53 cb d2 a3 8d eb 06 27 a9 1e 50 73 Data Ascii: <mwl\sycbk3ymybsV-w\_6/rSMTRF?RoR1qw=3&LEX&hqYaMsUOUmfYqOZ `E:>;Z1qZTh\9]^Xu+?SD%^lj^xNO2~S'Ps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49780	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	401	OUT	GET /wp-content/uploads/2023/06/italy.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:16 GMT ETag: "120-5ff430d66cc79" Accept-Ranges: bytes Content-Length: 288 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:21 UTC	288	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 30 50 4c 54 45 ff ff ff 72 ae 00 ff 4a 57 73 af 00 ff 4a 55 74 af 00 ff 4b 54 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 f5 f5 f5 ff 4b 55 bb 3d d9 fa 00 00 00 0d 74 52 4e 53 00 26 26 5d 5d a3 a3 d9 d9 f6 f6 fe fe 9a b1 c4 7f 00 00 00 49 49 44 41 54 18 95 63 60 10 ad be fb 0e 08 fe 9f 48 62 60 60 9e 7b 17 c2 f9 ff cb 81 41 f2 2e 8c f3 7f 11 43 2c 82 f3 8d a1 16 c1 f9 c1 b0 17 c1 f9 c3 70 17 c1 f9 3f d8 38 28 0e 45 Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<0PLTErJWsJUtKTsKUsKUsKUsKU=tRNS&&]]IIDATc`Hb``{A.C,p?8(E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49778	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	423	OUT	GET /wp-content/themes/sesamehr/assets/images/triangle-down.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 24 Jan 2024 14:34:31 GMT ETag: "276-60fb1f609bbb0" Accept-Ranges: bytes Content-Length: 630 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:21 UTC	630	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 24 24 24 2f 47 65 6e 65 72 61 6c 53 74 72 2f 31 39 36 3d 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 36 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: $$$/GeneralStr/196=Adobe Illustrator 27.6.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49779	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	409	OUT	GET /wp-content/uploads/2023/06/united-states.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:17 GMT ETag: "312-5ff430d7ea9ef" Accept-Ranges: bytes Content-Length: 786 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:21 UTC	786	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 01 44 50 4c 54 45 ff ff ff f7 f7 f7 ff 4b 57 8f 93 c1 9d 49 7a ff 81 88 f9 a8 ad ff 4b 55 b1 98 ba fc 7d 84 fc 7d 83 fc 69 72 f9 b2 b5 6c 5e a0 f8 c8 cb ff 52 5b ff 4b 55 72 48 89 ff 4f 5a ff 4b 55 ff 4b 56 59 48 91 f5 f5 f5 49 49 9a 5a 47 91 4a 49 99 4a 4c 9c 4a 4e 9e 4b 48 97 4b 4c 9b 57 48 93 4b 47 98 4e 4a 9a 4f 4b 9a 50 4c 9b 52 4f 9c 53 4f 9c ff 4b 55 41 47 9b 42 47 9b 42 48 9b 42 48 9c 43 49 9c 44 4a 9c 45 4a 9d 45 4b 9c 45 4b 9d Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<DPLTEKWIzKU}}irl^R[KUrHOZKUKVYHIIZGJIJLJNKHKLWHKGNJOKPLROSOKUAGBGBHBHCIDJEJEKEK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49773	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	656	OUT	GET /wp-content/themes/sesamehr/img/resenas/capterra_01.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	334	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 24 Jan 2024 14:35:06 GMT ETag: "7253-60fb1f819253e" Accept-Ranges: bytes Content-Length: 29267 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:21 UTC	7858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 01 15 08 06 00 00 00 f0 c8 1c 35 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ed bd 6d 90 65 45 7a df 99 e7 de 6a 7a 2c 21 4f 53 55 28 14 1d 92 28 c2 eb 11 78 a4 a0 b1 11 03 5d 77 4d 33 31 c3 cb d0 2d 1a 5b 33 03 1e cb 14 0a 7b 0d 8e 8d a5 f9 a0 58 70 c4 aa 6f eb 83 0d bb de a0 09 45 40 dd d6 2e 34 1f 76 17 3e d1 2c 3d b3 cd 27 8a f0 cb 82 77 c3 f4 6c 84 63 61 ec 58 7a c2 a1 01 5b 21 d3 02 cb d2 50 55 37 f7 c9 7b ab 8a ea 7a bb e7 25 5f 9e 73 ce af 22 7a 7a e8 ca 93 2f bf 27 4f 9e cc 7f 3e f9 64 66 f8 81 00 04 5a 4d a0 6f 6d e7 e3 ff f3 93 6f 19 6b 17 86 9d ee 3f 3a 73 fb 81 7f d5 6a 20 34 1e 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 d4 11 c8 d4 d5 88 Data Ascii: PNGIHDR5sBIT\|d IDATx^meEzjz,!OSU((x]wM31-[3{XpoE@.4v>,='wlcaXz[!PU7{z%_s"zz/'O>dfZMomok?:sj 4 @
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: 74 3f e7 7d ec 1f 1d 89 1f 71 77 fc e3 fd c8 7b b7 32 65 ee f4 c9 dd 5b e5 37 84 5f f1 ba 8e cd c5 5b 23 76 cf 68 43 c0 9f b2 cf c5 e0 bf 2d 06 d6 7f 38 72 e4 ea 95 fd fb 1f 90 00 6a df 95 6a 7e 53 12 5c 15 a1 dd 14 51 90 c0 7f 1e 66 3f ba f1 4b b7 35 4c b8 29 08 41 92 37 4d c0 92 01 e0 f3 65 3b 9c 7d b1 77 ed 67 c5 69 d4 f3 09 2d b7 0f 8e 6e 1e 9c ca e6 62 0c bc f5 b4 54 43 6b bd 16 8f a1 b1 a2 d5 4e 66 5b 3f ee 10 62 97 38 42 37 09 22 60 6d aa b7 9b 88 b9 c5 e7 f0 fc c9 e7 2a 37 67 b4 d3 6a 9e d5 28 5c 6d 6d 5b 50 ef 81 ca 20 27 67 80 80 75 45 27 6e 8c 80 b5 e6 3d 73 22 b6 08 31 b9 c7 4d 4e b1 e1 19 12 69 51 37 b9 46 d5 53 84 10 52 d6 6b e5 4d 4c 4f 25 a0 6c c6 eb 59 4c 09 cc 7d ec c1 54 b5 9f 2a d8 a8 71 ef dc ea b2 b9 59 85 07 aa fb fe 2f 8b 27 7f 66 Data Ascii: t?}qw{2e[7_[#vhC-8rjj~S\Qf?K5L)A7Me;}wgi-nbTCkNf[?b8B7"`m7gj(\mm[P 'guE'n=s"1MNiQ7FSRkMLO%lYL}TqY/'f
2024-10-04 13:38:21 UTC	8000	IN	Data Raw: a8 66 cc 0d bc f8 51 21 b2 44 12 11 0a 75 80 aa 89 45 d4 9f 5a 35 9f 54 cd 86 e7 03 13 88 d4 f7 54 08 29 2d 9c bf a9 e0 1e 78 0c 0f fc 86 a4 cb de 8d a1 2b d9 e3 72 33 a0 bb 54 65 2e 5d 45 6a 58 32 02 56 0d 8d 16 ab ca 35 0e e6 ae 51 c0 b2 d6 7e 34 e8 cd 1e 8c 65 be ba 95 a3 e4 23 ec ae 74 0f 1a 8f a5 6e 76 69 6b 7d dd 6e 58 66 ed 09 bc ad 4a f7 00 04 ac d2 e8 e2 3c 98 2a a8 f4 0e ad 0b da 57 10 b0 c2 f4 27 2d 1e 8f 61 5a d7 a0 5c 11 b0 1a 64 cc ed 4d 51 32 77 0e 3a 86 37 ce 80 a3 9b a9 cd e3 b2 de 70 c2 15 de 56 65 0c 8c 80 55 86 5a 7b 9e a9 6b 30 77 8d 02 96 28 23 83 c5 de cc a3 ed e9 3d c5 5a aa e4 23 ec 2a cd 87 b8 98 e9 1a 95 da 2d ca e4 e6 c0 97 d8 0d ab 6c d6 e8 ef 91 96 05 75 6d 8e 10 1e ed f7 45 a0 3d 59 d9 d2 15 33 90 49 fc 25 09 e2 7e 7d c5 6c Data Ascii: fQ!DuEZ5TT)-x+r3Te.]EjX2V5Q~4e#tnvik}nXfJ<W'-aZ\dMQ2w:7pVeUZ{k0w(#=Z#-lumE=Y3I%~}l
2024-10-04 13:38:21 UTC	5409	IN	Data Raw: 14 43 bc 1a b5 8e 5d b2 0d 23 3b 61 21 55 0c b8 18 1e 77 eb 0d 45 c0 8a ff 5e 6f 2e 31 f6 82 b9 6a 6b 11 b9 c7 04 63 be a3 db 6c e6 2e de 98 32 e7 e4 f6 d0 9b aa da 93 e7 bf 20 90 42 94 54 21 a4 e0 81 95 ea 35 68 8f 07 d6 1a 61 8e 12 a6 ea 6a 57 96 bb 35 4c 05 02 96 0e bb 34 b6 16 a1 83 b9 fb 16 b0 6c 66 ee 1d 1c 9e b9 d0 58 83 b4 b0 61 6e 07 45 82 bb 9f 4d b5 b0 6f 13 f2 54 9e 19 ec 92 8d 17 a7 76 68 2e 76 3a e6 d9 14 7d 4e ca 8f 16 c8 1d 01 2b 85 85 37 44 90 a8 de 1e 5e 5a ca ad a5 23 8c 31 03 b8 ef 68 37 8e f7 7b e9 ce 5b c4 e4 07 c4 f3 f5 9c f7 8c f7 c8 10 01 2b 26 ed 2f ca 52 c1 bd 65 1e 58 23 fa 8c 5b b2 84 1a 7b 5d 27 0d 6c bf 25 4c 05 02 56 9a 71 a8 35 a5 86 5e 58 7a 16 b0 3e 1d ee 9f 9e 3d 73 4b b6 dc 1a 03 b5 a5 a1 1c 29 0c 6f 69 77 6c 70 c5 1c Data Ascii: C]#;a!UwE^o.1jkcl.2 BT!5hajW5L4lfXanEMoTvh.v:}N+7D^Z#1h7{[+&/ReX#[{]'l%LVq5^Xz>=sK)oiwlp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49781	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	402	OUT	GET /wp-content/uploads/2023/06/france.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:15 GMT ETag: "120-5ff430d5f5a32" Accept-Ranges: bytes Content-Length: 288 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:21 UTC	288	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 30 50 4c 54 45 ff ff ff 43 4a 9a ff 4a 57 42 47 9c ff 4a 55 42 46 9b ff 4b 54 41 47 9b ff 4b 55 41 46 9b ff 4b 55 41 47 9b ff 4b 55 41 47 9b f5 f5 f5 ff 4b 55 ac 38 18 d4 00 00 00 0d 74 52 4e 53 00 26 26 5d 5d a3 a3 d9 d9 f6 f6 fe fe 9a b1 c4 7f 00 00 00 49 49 44 41 54 18 95 63 60 10 ad be fb 0e 08 fe 9f 48 62 60 60 9e 7b 17 c2 f9 ff cb 81 41 f2 2e 8c f3 7f 11 43 2c 82 f3 8d a1 16 c1 f9 c1 b0 17 c1 f9 c3 70 17 c1 f9 3f d8 38 28 0e 45 Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<0PLTECJJWBGJUBFKTAGKUAFKUAGKUAGKU8tRNS&&]]IIDATc`Hb``{A.C,p?8(E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49782	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:20 UTC	413	OUT	GET /wp-content/uploads/2024/01/gestion-de-tiempo.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:21 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 11:45:50 GMT ETag: "2f6-60fc3b8a01acf" Accept-Ranges: bytes Content-Length: 758 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:21 UTC	758	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 32 30 20 2d 31 38 38 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 32 30 20 31 38 38 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 35 30 65 31 62 35 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="40" height="40" viewBox="0 0 40 40"><g transform="translate(-320 -188)"><g transform="translate(320 188)" fill="none" stroke="#50e1b5" stroke-width="1.5"><rect width="40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49784	150.171.27.10	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:21 UTC	518	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:21 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 547006E9FF2644009D246376001412B2 Ref B: EWR30EDGE0911 Ref C: 2024-10-04T13:38:21Z Date: Fri, 04 Oct 2024 13:38:20 GMT Connection: close
2024-10-04 13:38:21 UTC	3238	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-04 13:38:21 UTC	8192	IN	Data Raw: 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 22 69 74 65 6d 73 2e 76 61 72 69 61 6e 74 22 3a 7b 7d 2c 70 72 6f 6d 6f 74 69 6f 6e 73 3a 7b 74 79 70 65 3a 22 61 72 72 61 79 22 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 63 72 65 61 74 69 76 65 5f 6e 61 6d 65 22 3a 7b 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 63 72 65 61 74 69 76 65 5f 73 6c 6f 74 22 3a 7b 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 69 64 22 3a 7b 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 6e 61 6d 65 22 3a 7b 7d 2c 70 69 64 3a 7b 74 79 70 65 3a 22 6f 62 6a 65 63 74 22 7d 2c 22 70 69 64 2e 65 6d 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 7d 2c 22 70 69 64 2e 65 6d 61 69 6c 22 3a 7b 74 79 70 65 3a 22 70 69 64 22 2c 62 65 61 63 6f 6e 3a 22 65 6d 22 7d 2c 22 70 69 64 2e 70 68 22 3a 7b 74 79 70 65 3a 22 70 Data Ascii: ype:"number"},"items.variant":{},promotions:{type:"array"},"promotions.creative_name":{},"promotions.creative_slot":{},"promotions.id":{},"promotions.name":{},pid:{type:"object"},"pid.em":{type:"pid"},"pid.email":{type:"pid",beacon:"em"},"pid.ph":{type:"p
2024-10-04 13:38:21 UTC	4578	IN	Data Raw: 6f 66 20 6f 2e 67 74 6d 54 61 67 53 6f 75 72 63 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 67 74 6d 54 61 67 53 6f 75 72 63 65 3d 6f 2e 67 74 6d 54 61 67 53 6f 75 72 63 65 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 21 31 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 50 69 64 22 29 26 26 6f 2e 70 61 67 65 50 69 64 26 26 74 79 70 65 6f 66 20 6f 2e 70 61 67 65 50 69 64 3d 3d 22 6f 62 6a 65 63 74 22 3f 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 2e 70 69 64 3d 6f 2e 70 61 67 65 50 69 64 3a 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 67 74 61 67 50 69 64 22 29 26 26 6f 2e 67 74 61 67 50 69 64 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 Data Ascii: of o.gtmTagSource=="string"&&(this.uetConfig.gtmTagSource=o.gtmTagSource);this.uetConfig.gtagPid=!1;o.hasOwnProperty("pagePid")&&o.pagePid&&typeof o.pagePid=="object"?this.pageLevelParams.pid=o.pagePid:o.hasOwnProperty("gtagPid")&&o.gtagPid===!0&&(this.ue
2024-10-04 13:38:21 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-10-04 13:38:21 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-10-04 13:38:21 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-10-04 13:38:21 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-10-04 13:38:21 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49788	104.16.138.209	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:21 UTC	527	OUT	GET /8564339.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:21 UTC	652	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:21 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 2896 Connection: close Cf-Bgj: minify Cf-Polished: origSize=3008 access-control-allow-credentials: true access-control-allow-origin: https://try.sesamehr.co access-control-max-age: 3600 vary: origin x-content-type-options: nosniff x-hubspot-correlation-id: b7829c04-e69b-4a31-822e-df5d4ade1c12 Last-Modified: Fri, 04 Oct 2024 13:37:07 GMT CF-Cache-Status: HIT Age: 31 Expires: Fri, 04 Oct 2024 13:39:51 GMT Cache-Control: public, max-age=90 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd59263aa4317b1-EWR
2024-10-04 13:38:21 UTC	717	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 75 62 73 70 6f 74 66 65 65 64 62 61 63 6b 2e 63 6f 6d 2f 66 65 65 64 62 61 63 6b 77 65 62 2d 6e 65 77 2e 6a 73 22 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 Data Ascii: !function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hubspotfeedback.com/feedbackweb-new.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.get
2024-10-04 13:38:21 UTC	1369	IN	Data Raw: 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 68 75 62 73 70 6f 74 2d 77 65 62 2d 69 6e 74 65 72 61 63 74 69 76 65 73 2d 6c 6f 61 64 65 72 22 2c 30 2c 7b 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 3a 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 Data Ascii: ,n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hubspot-web-interactives-loader",0,{"crossorigin":"anonymous","data-loader":"hs-scriptloader"
2024-10-04 13:38:21 UTC	810	IN	Data Raw: 65 28 6e 2c 69 29 7d 7d 28 22 68 73 2d 61 64 73 2d 70 69 78 65 6c 2d 38 35 36 34 33 33 39 22 2c 30 2c 7b 22 64 61 74 61 2d 61 64 73 2d 70 6f 72 74 61 6c 2d 69 64 22 3a 38 35 36 34 33 33 39 2c 22 64 61 74 61 2d 61 64 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 38 35 36 34 33 33 39 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 6e 61 31 22 7d 29 3b 76 61 72 20 5f 68 73 70 3d 77 69 6e 64 6f 77 2e 5f 68 73 70 3d 77 69 6e 64 6f 77 2e 5f 68 73 70 7c 7c 5b 5d 3b 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 45 6e 61 62 6c 65 64 46 Data Ascii: e(n,i)}}("hs-ads-pixel-8564339",0,{"data-ads-portal-id":8564339,"data-ads-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":8564339,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});var _hsp=window._hsp=window._hsp\|\|[];_hsp.push(['addEnabledF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49787	3.160.150.36	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:21 UTC	576	OUT	GET /choice/srUtCbgF3R7rD/www.sesamehr.com/choice.js?tag_version=V2 HTTP/1.1 Host: cmp.inmobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:21 UTC	661	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8567 Connection: close Cache-Control: max-age=900 Date: Fri, 04 Oct 2024 13:38:22 GMT Last-Modified: Tue, 25 Jun 2024 12:21:45 GMT ETag: "8422f52ce2f09ab49d5c8e3c3cd38ea8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Cross-Origin-Resource-Policy: cross-origin Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 96f7375d4633bdc30f727db82897e3b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: ClNNUprSo2FwyanY7FIEwSvI62jY8qBc5YZ9wnvncWwcpFPYW7vMVQ==
2024-10-04 13:38:21 UTC	8567	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6d 70 46 69 6c 65 3d 27 6e 6f 4d 6f 64 75 6c 65 27 69 6e 20 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3f 27 63 6d 70 32 2e 6a 73 27 3a 27 63 6d 70 32 2d 70 6f 6c 79 66 69 6c 6c 65 64 2e 6a 73 27 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6d 70 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 76 61 72 20 66 69 72 73 74 53 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 63 6d 70 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 61 73 79 6e Data Ascii: 'use strict';(function(){var cmpFile='noModule'in HTMLScriptElement.prototype?'cmp2.js':'cmp2-polyfilled.js';(function(){var cmpScriptElement=document.createElement('script');var firstScript=document.getElementsByTagName('script')[0];cmpScriptElement.asyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49785	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 13:38:21 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184087 Date: Fri, 04 Oct 2024 13:38:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 13:38:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49792	151.101.194.109	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:21 UTC	573	OUT	GET /p/4.37.7/js/player.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:21 UTC	457	IN	HTTP/1.1 200 OK Connection: close Content-Length: 608152 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 150849 Date: Fri, 04 Oct 2024 13:38:21 GMT X-Served-By: cache-iad-kiad7000055-IAD, cache-ewr-kewr1740029-EWR X-Cache: HIT, HIT X-Cache-Hits: 19, 0 X-Timer: S1728049102.740236,VS0,VE1 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 33 37 2e 37 20 2d 20 32 30 32 34 2d 31 30 2d 30 32 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 69 6d 70 6f 72 74 7b 5f 20 61 73 20 65 2c 64 20 61 73 20 74 2c 61 20 61 73 20 6e 2c 69 2c 73 20 61 73 20 6f 2c 43 20 61 73 20 72 2c 63 20 61 73 20 61 2c 62 20 61 73 20 73 2c 65 20 61 73 20 6c 2c 4c 20 61 73 20 63 2c 67 20 61 73 20 64 2c 66 20 61 73 20 75 2c 78 20 61 73 20 70 2c 68 20 61 73 20 5f 2c 6a 20 61 73 20 76 2c 56 20 61 73 20 6d 2c 74 20 61 73 20 66 2c 6b 20 61 73 20 68 2c 6c 20 61 73 20 67 2c 6d 20 61 73 20 62 2c 72 20 61 73 20 45 2c 6e 20 61 73 20 79 2c 70 20 61 73 20 43 2c 50 20 61 73 20 54 2c 54 20 61 73 20 4c Data Ascii: /* VimeoPlayer - v4.37.7 - 2024-10-02 - https://player.vimeo.com/NOTICE.txt */import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,t as f,k as h,l as g,m as b,r as E,n as y,p as C,P as T,T as L
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 74 29 7b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 2c 69 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3a 5e 7c 5c 5c 73 29 22 2b 74 2b 22 28 3f 21 5c 5c 53 29 22 2c 22 67 22 29 3b 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 2e 74 72 69 6d 28 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 6e 29 7d 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 65 29 3f 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 29 3a 74 68 69 73 2e 61 64 64 28 65 29 7d 7d 7d 7d 29 3b 6c 65 74 20 69 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 3d 22 22 2c 74 3d 7b 7d 29 7b 76 61 72 20 6e 3b 69 66 28 28 6e 75 6c 6c 3d 3d 28 6e 3d 69 74 2e 65 Data Ascii: t){var n=e.getAttribute("class")\|\|"",i=new RegExp("(?:^\|\\s)"+t+"(?!\\S)","g");n=n.replace(i,"").trim(),e.setAttribute("class",n)},toggle:function(e){this.contains(e)?this.remove(e):this.add(e)}}}});let it={};function ot(e="",t={}){var n;if((null==(n=it.e
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 69 65 6e 74 52 65 63 74 28 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 46 75 6c 6c 73 63 72 65 65 6e 45 6c 65 6d 65 6e 74 26 26 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 3d 77 69 6e 64 6f 77 26 26 65 2e 6f 66 66 73 65 74 57 69 64 74 68 3c 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 26 26 28 74 3d 7b 62 6f 74 74 6f 6d 3a 31 30 30 2a 74 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 31 30 30 2a 74 2e 6c 65 66 74 2c 74 6f 70 3a 31 30 30 2a 74 2e 74 6f 70 2c 72 69 67 68 74 3a 31 30 30 2a 74 2e 72 69 67 68 74 2c 77 69 64 74 68 3a 31 30 30 2a 74 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 31 30 30 2a 74 2e 68 65 69 67 68 74 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 28 65 29 2e 6f 72 69 Data Ascii: ientRect();return document.msFullscreenElement&&window.parent!==window&&e.offsetWidth<e.clientWidth&&(t={bottom:100t.bottom,left:100t.left,top:100t.top,right:100t.right,width:100t.width,height:100t.height}),t}function _t(e){try{return new URL(e).ori
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 77 73 29 3f 7c 76 69 6d 65 6f 2d 28 65 6e 74 65 72 70 72 69 73 65 7c 77 6f 72 6b 29 29 5c 2e 28 63 6f 6d 7c 64 65 76 7c 77 6f 72 6b 29 7c 28 76 69 64 65 6f 6a 69 7c 76 69 64 65 6f 73 68 69 70 69 6e 75 72 6c 29 5c 2e 28 68 6b 7c 63 6e 29 29 5c 2f 76 69 64 65 6f 5c 2f 5c 64 2b 5c 2f 63 6f 6e 66 69 67 28 3f 3d 24 7c 5c 3f 29 2f 2e 74 65 73 74 28 65 29 7d 28 69 29 29 72 65 74 75 72 6e 20 69 3b 63 6f 6e 73 74 20 72 3d 62 74 28 69 29 2c 61 3d 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 2c 73 3d 74 28 60 24 7b 69 7d 60 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 73 2c 6f 29 3b 72 65 74 75 72 6e 20 6e 28 60 24 7b 65 7d 2f 76 69 64 65 6f 2f 24 7b 72 7d 2f 63 6f 6e 66 69 67 60 Data Ascii: ws)?\|vimeo-(enterprise\|work))\.(com\|dev\|work)\|(videoji\|videoshipinurl)\.(hk\|cn))\/video\/\d+\/config(?=$\|\?)/.test(e)}(i))return i;const r=bt(i),a=t(window.location.search),s=t(`${i}`.split("?")[1]),l=Object.assign(a,s,o);return n(`${e}/video/${r}/config`
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 28 74 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 29 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 68 69 6c 64 72 65 6e 29 2e 69 6e 64 65 78 4f 66 28 65 29 3a 2d 31 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 3b 28 6e 75 6c 6c 3d 3d 28 6e 3d 65 29 3f 76 6f 69 64 20 30 3a 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 26 26 21 54 74 28 65 2c 74 29 3b 29 7b 76 61 72 20 6e 3b 65 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 72 65 74 75 72 6e 20 54 74 28 65 2c 74 29 3f 65 3a 6e 75 6c 6c 7d 29 29 3b 6c 65 74 20 49 74 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 50 74 28 65 3d 22 70 22 29 7b 72 65 74 75 72 6e 60 24 7b 65 7d 24 7b 2b 2b Data Ascii: (t.apply(void 0,n)))}((function(e){return e?Array.from(e.parentNode.children).indexOf(e):-1}),(function(e,t){for(;(null==(n=e)?void 0:n.parentElement)&&!Tt(e,t);){var n;e=e.parentElement}return Tt(e,t)?e:null}));let It=0;function Pt(e="p"){return`${e}${++
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 61 74 65 3a 50 74 28 29 2c 5f 64 65 73 74 72 6f 79 3a 50 74 28 29 2c 5f 63 68 61 6e 67 65 41 75 64 69 6f 54 72 61 63 6b 3a 50 74 28 29 2c 5f 72 65 71 75 65 73 74 43 6f 6d 70 6c 65 74 65 4c 69 76 65 53 75 62 74 69 74 6c 65 73 3a 50 74 28 29 2c 5f 6f 70 65 6e 52 65 6d 6f 74 65 43 6f 6d 70 6f 6e 65 6e 74 3a 50 74 28 29 2c 5f 63 6c 6f 73 65 52 65 6d 6f 74 65 43 6f 6d 70 6f 6e 65 6e 74 3a 50 74 28 29 2c 5f 75 70 64 61 74 65 4c 69 76 65 53 75 62 74 69 74 6c 65 52 65 71 75 65 73 74 73 3a 50 74 28 29 7d 2c 4e 74 3d 7b 77 69 6c 6c 3a 22 77 69 6c 6c 4c 69 6b 65 56 69 64 65 6f 22 2c 64 69 64 3a 22 64 69 64 4c 69 6b 65 56 69 64 65 6f 22 7d 2c 44 74 3d 7b 77 69 6c 6c 3a 22 77 69 6c 6c 55 6e 6c 69 6b 65 56 69 64 65 6f 22 2c 64 69 64 3a 22 64 69 64 55 6e 6c 69 6b 65 56 Data Ascii: ate:Pt(),_destroy:Pt(),_changeAudioTrack:Pt(),_requestCompleteLiveSubtitles:Pt(),_openRemoteComponent:Pt(),_closeRemoteComponent:Pt(),_updateLiveSubtitleRequests:Pt()},Nt={will:"willLikeVideo",did:"didLikeVideo"},Dt={will:"willUnlikeVideo",did:"didUnlikeV
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 69 6e 67 45 6e 64 65 64 3a 50 74 28 29 2c 5f 76 6f 6c 75 6d 65 53 63 72 75 62 62 69 6e 67 53 74 61 72 74 65 64 3a 50 74 28 29 2c 5f 76 6f 6c 75 6d 65 53 63 72 75 62 62 69 6e 67 45 6e 64 65 64 3a 50 74 28 29 2c 5f 63 6f 6e 74 72 6f 6c 42 61 72 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 74 6f 61 73 74 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 73 69 64 65 64 6f 63 6b 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 6d 65 6e 75 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 63 61 70 74 69 6f 6e 73 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 63 75 65 50 6f 69 6e 74 41 64 64 65 64 3a 50 74 28 29 2c 5f 63 75 65 50 6f 69 6e 74 52 65 6d 6f 76 65 64 3a 50 74 28 Data Ascii: ingEnded:Pt(),_volumeScrubbingStarted:Pt(),_volumeScrubbingEnded:Pt(),_controlBarVisibilityChanged:Pt(),_toastVisibilityChanged:Pt(),_sidedockVisibilityChanged:Pt(),_menuVisibilityChanged:Pt(),_captionsChanged:Pt(),_cuePointAdded:Pt(),_cuePointRemoved:Pt(
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 69 67 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 6c 69 76 65 45 76 65 6e 74 53 65 74 74 69 6e 67 73 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 70 61 73 73 77 6f 72 64 55 6e 6c 6f 63 6b 65 64 3a 50 74 28 29 2c 5f 70 72 69 76 61 74 65 55 6e 6c 6f 63 6b 65 64 3a 50 74 28 29 2c 5f 65 6e 74 65 72 65 64 54 69 6e 79 4d 6f 64 65 3a 50 74 28 29 2c 5f 65 6e 74 65 72 65 64 4d 69 6e 69 4d 6f 64 65 3a 50 74 28 29 2c 5f 65 6e 74 65 72 65 64 4e 6f 72 6d 61 6c 4d 6f 64 65 3a 50 74 28 29 2c 5f 61 73 73 65 74 55 72 6c 73 52 65 66 72 65 73 68 65 64 3a 50 74 28 29 2c 5f 65 6d 62 65 64 53 65 74 74 69 6e 67 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 63 72 65 61 74 65 49 6e 74 65 72 61 63 74 69 76 65 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 6f 74 74 4d 65 74 61 64 61 74 61 53 65 Data Ascii: igChanged:Pt(),_liveEventSettingsChanged:Pt(),_passwordUnlocked:Pt(),_privateUnlocked:Pt(),_enteredTinyMode:Pt(),_enteredMiniMode:Pt(),_enteredNormalMode:Pt(),_assetUrlsRefreshed:Pt(),_embedSettingChanged:Pt(),_createInteractiveChanged:Pt(),_ottMetadataSe
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 6e 74 65 72 61 63 74 69 76 65 4f 76 65 72 6c 61 79 50 61 6e 65 6c 43 6c 69 63 6b 65 64 3a 50 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 4d 61 72 6b 65 72 43 6c 69 63 6b 65 64 3a 50 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 53 65 65 6b 43 61 6c 6c 3a 50 74 28 29 2c 5f 74 72 61 6e 73 63 72 69 70 74 43 68 61 6e 67 65 64 3a 50 74 28 29 2c 5f 72 69 67 68 74 43 6f 6e 74 65 6e 74 41 72 65 61 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3a 50 74 28 29 2c 5f 72 69 67 68 74 43 6f 6e 74 65 6e 74 41 72 65 61 45 6e 61 62 6c 65 64 3a 50 74 28 29 2c 5f 72 69 67 68 74 43 6f 6e 74 65 6e 74 41 72 65 61 44 69 73 61 62 6c 65 64 3a 50 74 28 29 2c 5f 74 72 61 6e 73 63 72 69 70 74 4e 61 76 41 63 74 69 76 65 3a 50 74 28 29 2c 5f 74 72 61 6e 73 63 72 69 70 74 53 65 Data Ascii: nteractiveOverlayPanelClicked:Pt(),_interactiveMarkerClicked:Pt(),_interactiveSeekCall:Pt(),_transcriptChanged:Pt(),_rightContentAreaVisibilityChange:Pt(),_rightContentAreaEnabled:Pt(),_rightContentAreaDisabled:Pt(),_transcriptNavActive:Pt(),_transcriptSe
2024-10-04 13:38:21 UTC	1371	IN	Data Raw: 74 79 63 68 61 6e 67 65 64 22 2c 54 4f 41 53 54 5f 56 49 53 49 42 49 4c 49 54 59 5f 43 48 41 4e 47 45 44 3a 22 74 6f 61 73 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 64 22 2c 43 55 45 5f 43 48 41 4e 47 45 3a 22 63 75 65 63 68 61 6e 67 65 22 2c 43 55 45 50 4f 49 4e 54 3a 22 63 75 65 70 6f 69 6e 74 22 2c 44 55 52 41 54 49 4f 4e 5f 43 48 41 4e 47 45 3a 22 64 75 72 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 45 4d 41 49 4c 5f 43 41 50 54 55 52 45 5f 46 41 49 4c 45 44 3a 22 65 6d 61 69 6c 63 61 70 74 75 72 65 66 61 69 6c 65 64 22 2c 45 4d 41 49 4c 5f 43 41 50 54 55 52 45 3a 22 65 6d 61 69 6c 63 61 70 74 75 72 65 22 2c 45 4e 44 45 44 3a 22 65 6e 64 65 64 22 2c 45 52 52 4f 52 3a 22 65 72 72 6f 72 22 2c 46 55 4c 4c 53 43 52 45 45 4e 43 48 41 4e 47 45 3a 22 66 Data Ascii: tychanged",TOAST_VISIBILITY_CHANGED:"toastvisibilitychanged",CUE_CHANGE:"cuechange",CUEPOINT:"cuepoint",DURATION_CHANGE:"durationchange",EMAIL_CAPTURE_FAILED:"emailcapturefailed",EMAIL_CAPTURE:"emailcapture",ENDED:"ended",ERROR:"error",FULLSCREENCHANGE:"f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49796	104.17.246.203	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:21 UTC	595	OUT	GET /@lottiefiles/lottie-interactivity@1.6.2/dist/lottie-interactivity.min.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:22 UTC	574	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:22 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"4f2c-jEDFlsTFN2OEDC3P02SAdZDlWAQ" via: 1.1 fly.io fly-request-id: 01J9AZW7P819V03J07X1KS4J1X-lga CF-Cache-Status: HIT Age: 29532 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8cd592679db38c0b-EWR
2024-10-04 13:38:22 UTC	795	IN	Data Raw: 34 66 32 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 65 7c 7c 73 65 6c 66 29 2e 4c 6f 74 74 69 65 49 6e 74 65 72 61 63 74 69 76 69 74 79 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: 4f2c!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e=e\|\|self).LottieInteractivity={})}(this,(function(e){"use strict";function t(e){return(t="function"==typeo
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 69 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 69 2c 61 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 3d 72 5b 69 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 61 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 65 2c 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 72 3d 4f 62 6a Data Ascii: le:!0,writable:!0}):e[t]=n,e}function r(e,t){if(null==e)return{};var n,i,a=function(e,t){if(null==e)return{};var n,i,a={},r=Object.keys(e);for(i=0;i<r.length;i++)n=r[i],t.indexOf(n)>=0\|\|(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var r=Obj
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 7d 3b 69 2e 73 74 61 74 65 48 61 6e 64 6c 65 72 2e 73 65 74 28 22 6c 6f 6f 70 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 61 63 74 69 6f 6e 73 5b 69 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 78 5d 2e 6c 6f 6f 70 3f 69 2e 70 6c 61 79 65 72 2e 6c 6f 6f 70 3d 70 61 72 73 65 49 6e 74 28 69 2e 61 63 74 69 6f 6e 73 5b 69 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 78 5d 2e 6c 6f 6f 70 29 2d 31 3a 69 2e 70 6c 61 79 65 72 2e 6c 6f 6f 70 3d 21 30 2c 69 2e 70 6c 61 79 65 72 2e 61 75 74 6f 70 6c 61 79 3d 21 30 7d 29 29 2c 69 2e 73 74 61 74 65 48 61 6e 64 6c 65 72 2e 73 65 74 28 22 61 75 74 6f 70 6c 61 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 70 6c 61 79 65 72 2e 6c 6f 6f 70 3d 21 31 2c 69 2e 70 6c 61 79 65 72 2e 61 Data Ascii: {passive:!0})};i.stateHandler.set("loop",(function(){i.actions[i.interactionIdx].loop?i.player.loop=parseInt(i.actions[i.interactionIdx].loop)-1:i.player.loop=!0,i.player.autoplay=!0})),i.stateHandler.set("autoplay",(function(){i.player.loop=!1,i.player.a
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 69 2e 70 6c 61 79 65 72 2e 73 74 6f 70 28 29 2c 69 2e 70 6c 61 79 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 6e 74 65 72 46 72 61 6d 65 22 2c 6f 28 69 2c 45 29 29 2c 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 6f 28 69 2c 75 29 29 2c 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 6f 28 69 2c 76 29 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6f 75 74 22 2c 6f 28 69 2c 6d 29 29 7d 29 29 7d 7d 7d 29 2c 64 2e 73 65 74 28 74 68 69 73 2c 7b 77 72 69 74 61 Data Ascii: nction(){i.player.stop(),i.player.addEventListener("enterFrame",o(i,E)),i.container.addEventListener("mousemove",o(i,u)),i.container.addEventListener("touchmove",o(i,v),{passive:!1}),i.container.addEventListener("mouseout",o(i,m))}))}}}),d.set(this,{writa
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6f 28 69 2c 50 29 2e 63 61 6c 6c 28 69 2c 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 2c 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 59 29 7d 7d 29 2c 6d 2e 73 65 74 28 74 68 69 73 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 69 2c 50 29 2e 63 61 6c 6c 28 69 2c 2d 31 2c 2d 31 29 7d 7d 29 2c 66 2e 73 65 74 28 74 68 69 73 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 6c 6f 6f 70 22 3d 3d 3d 69 2e 61 63 74 69 6f 6e 73 5b 69 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 78 5d 2e 73 74 61 74 65 3f 69 2e 70 6c 61 79 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: e.preventDefault(),o(i,P).call(i,e.touches[0].clientX,e.touches[0].clientY)}}),m.set(this,{writable:!0,value:function(){o(i,P).call(i,-1,-1)}}),f.set(this,{writable:!0,value:function(){"loop"===i.actions[i.interactionIdx].state?i.player.removeEventListene
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 65 6e 64 22 2c 6f 28 69 2c 49 29 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 69 2e 70 6c 61 79 65 72 2e 70 61 75 73 65 28 29 2c 69 2e 68 6f 6c 64 53 74 61 74 75 73 3d 21 31 2c 69 2e 6e 65 78 74 49 6e 74 65 72 61 63 74 69 6f 6e 28 29 29 2c 2d 31 3d 3d 3d 69 2e 70 6c 61 79 65 72 2e 70 6c 61 79 44 69 72 65 63 74 69 6f 6e 26 26 65 26 26 69 2e 70 6c 61 79 65 72 2e 63 75 72 72 65 6e 74 46 72 61 6d 65 3c 65 5b 30 5d 26 26 69 2e 70 6c 61 79 65 72 2e 70 61 75 73 65 28 29 7d 7d 29 2c 77 2e 73 65 74 28 74 68 69 73 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 2d 31 21 3d 3d 69 2e 70 6c 61 79 65 72 2e 70 6c 61 79 44 69 72 65 63 74 69 6f 6e 26 26 6e 75 6c 6c Data Ascii: eEventListener("touchend",o(i,I),{passive:!0}),i.player.pause(),i.holdStatus=!1,i.nextInteraction()),-1===i.player.playDirection&&e&&i.player.currentFrame<e[0]&&i.player.pause()}}),w.set(this,{writable:!0,value:function(){-1!==i.player.playDirection&&null
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 65 72 28 22 6d 6f 75 73 65 6f 75 74 22 2c 6f 28 69 2c 6d 29 29 2c 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 65 6e 64 22 2c 6f 28 69 2c 49 29 29 2c 69 2e 70 6c 61 79 65 72 29 74 72 79 7b 69 2e 70 6c 61 79 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 6f 70 43 6f 6d 70 6c 65 74 65 22 2c 6f 28 69 2c 66 29 29 2c 69 2e 70 6c 61 79 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6f 6d 70 6c 65 74 65 22 2c 6f 28 69 2c 66 29 29 2c 69 2e 70 6c 61 79 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 6e 74 65 72 46 72 61 6d 65 22 2c 6f 28 69 2c 45 29 29 2c 69 2e 70 6c 61 79 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e Data Ascii: er("mouseout",o(i,m)),i.container.removeEventListener("touchend",o(i,I)),i.player)try{i.player.removeEventListener("loopComplete",o(i,f)),i.player.removeEventListener("complete",o(i,f)),i.player.removeEventListener("enterFrame",o(i,E)),i.player.removeEven
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 73 65 74 28 74 68 69 73 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 69 2e 61 63 74 69 6f 6e 73 5b 69 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 78 5d 2e 66 72 61 6d 65 73 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 69 2e 70 6c 61 79 65 72 2e 72 65 73 65 74 53 65 67 6d 65 6e 74 73 28 21 30 29 2c 76 6f 69 64 20 69 2e 70 6c 61 79 65 72 2e 67 6f 54 6f 41 6e 64 50 6c 61 79 28 30 2c 21 30 29 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 69 2e 70 6c 61 79 65 72 2e 67 6f 54 6f 41 6e 64 50 6c 61 79 28 74 2c 65 29 3a 69 2e 70 6c 61 79 65 72 2e 70 6c 61 79 53 65 67 6d 65 6e 74 73 28 74 2c 65 29 7d 7d 29 2c 6b 2e 73 65 74 28 74 68 69 73 2c 7b 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c Data Ascii: set(this,{writable:!0,value:function(e){var t=i.actions[i.interactionIdx].frames;if(!t)return i.player.resetSegments(!0),void i.player.goToAndPlay(0,!0);"string"==typeof t?i.player.goToAndPlay(t,e):i.player.playSegments(t,e)}}),k.set(this,{writable:!0,val
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 64 65 4e 61 6d 65 26 26 28 69 2e 61 74 74 61 63 68 65 64 4c 69 73 74 65 6e 65 72 73 7c 7c 28 69 2e 65 6e 74 65 72 65 64 50 6c 61 79 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 22 2c 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 22 7d 29 29 2c 69 2e 65 6e 74 65 72 65 64 50 6c 61 79 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 70 6c 61 79 65 72 3d 69 2e 65 6e 74 65 72 65 64 50 6c 61 79 65 72 2e 67 65 74 4c 6f 74 74 69 65 28 29 2c 6f 28 69 2c 53 29 2e 63 61 6c 6c 28 69 2c 7b 69 67 6e 6f 72 65 50 61 74 Data Ascii: deName&&(i.attachedListeners\|\|(i.enteredPlayer.addEventListener("ready",(function(){i.container.style.width="",i.container.style.height=""})),i.enteredPlayer.addEventListener("load",(function(){i.player=i.enteredPlayer.getLottie(),o(i,S).call(i,{ignorePat
2024-10-04 13:38:22 UTC	1369	IN	Data Raw: 69 2e 61 63 74 69 6f 6e 73 5b 69 2e 61 63 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 2d 31 5d 2e 72 65 73 65 74 26 26 30 3d 3d 3d 69 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 78 29 3f 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 28 69 2e 70 6c 61 79 65 72 2e 61 75 74 6f 70 6c 61 79 3d 21 31 2c 69 2e 70 6c 61 79 65 72 2e 72 65 73 65 74 53 65 67 6d 65 6e 74 73 28 21 30 29 2c 69 2e 70 6c 61 79 65 72 2e 67 6f 54 6f 41 6e 64 53 74 6f 70 28 6e 5b 30 5d 2c 21 30 29 29 2c 6c 3f 6c 2e 63 61 6c 6c 28 29 3a 22 6e 6f 6e 65 22 3d 3d 3d 61 26 26 28 69 2e 70 6c 61 79 65 72 2e 6c 6f 6f 70 3d 21 31 2c 69 2e 70 6c 61 79 65 72 2e 61 75 74 6f 70 6c 61 79 3d 21 31 29 2c 63 26 26 63 2e 63 61 6c 6c 28 29 2c 69 2e 70 6c 61 79 65 72 2e 61 75 74 6f 70 6c Data Ascii: i.actions[i.actions.length-1].reset&&0===i.interactionIdx)?setTimeout((function(){n&&(i.player.autoplay=!1,i.player.resetSegments(!0),i.player.goToAndStop(n[0],!0)),l?l.call():"none"===a&&(i.player.loop=!1,i.player.autoplay=!1),c&&c.call(),i.player.autopl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49800	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:22 UTC	639	OUT	GET /wp-content/uploads/2023/06/mexico.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:22 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:22 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:16 GMT ETag: "1aa-5ff430d6a859c" Accept-Ranges: bytes Content-Length: 426 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:22 UTC	426	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 81 50 4c 54 45 ff ff ff 72 ae 00 ff 4a 57 73 af 00 ff 4a 55 74 af 00 ff 4b 54 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 97 cc c7 97 cc c9 99 96 89 99 a8 a5 9a 6e 75 9b 54 62 a3 64 71 a4 75 7e a7 c8 b3 ab e0 b8 b7 9f 9b c7 aa 8d ce b4 b9 ce e3 ab d6 e8 cd d7 e8 cc db df af dc e7 c1 e0 e8 b6 e1 dd d3 e3 eb cc e5 d8 db e6 eb c5 e7 ee d8 f0 f0 d6 f3 f1 ef f4 f5 f4 f5 f5 f5 ff 4b 55 b4 6c 8c 33 00 00 00 0d 74 52 4e 53 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTErJWsJUtKTsKUsKUsKUsnuTbdqu~KUl3tRNS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49799	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:22 UTC	618	OUT	GET /wp-content/themes/sesamehr/assets/css/splide.min.css?ver=4.1.3 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:22 UTC	355	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:22 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:56:12 GMT ETag: "138a-6138e7d841bff" Accept-Ranges: bytes Content-Length: 5002 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: text/css
2024-10-04 13:38:22 UTC	5002	IN	Data Raw: 2e 73 70 6c 69 64 65 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 70 6c 69 64 65 5f 5f 6c 69 73 74 7b 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 70 6c 69 64 65 2e 69 73 2d 69 6e 69 74 69 61 6c 69 7a 65 64 3a 6e 6f 74 28 2e 69 73 2d 61 63 74 69 76 65 29 20 2e 73 70 6c 69 64 65 5f 5f 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 70 6c Data Ascii: .splide__container{box-sizing:border-box;position:relative}.splide__list{backface-visibility:hidden;display:-ms-flexbox;display:flex;height:100%;margin:0!important;padding:0!important}.splide.is-initialized:not(.is-active) .splide__list{display:block}.spl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49802	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:22 UTC	602	OUT	GET /wp-content/themes/sesamehr/assets/js/splide.min.js?ver=4.1.3 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:22 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:22 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:56:30 GMT ETag: "746b-6138e7e9aec11" Accept-Ranges: bytes Content-Length: 29803 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:22 UTC	7822	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 69 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 72 2e 6b 65 79 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 6e 2c 74 2c 69 29 7b 74 26 26 72 28 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 69 26 26 72 28 6e 2c 69 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 Data Ascii: function r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype",{wri
2024-10-04 13:38:22 UTC	8000	IN	Data Raw: 65 72 76 61 6c 22 3b 76 61 72 20 6a 74 3d 7b 70 61 73 73 69 76 65 3a 21 31 2c 63 61 70 74 75 72 65 3a 21 30 7d 3b 76 61 72 20 4e 74 3d 7b 53 70 61 63 65 62 61 72 3a 22 20 22 2c 52 69 67 68 74 3a 48 6e 2c 4c 65 66 74 3a 42 6e 2c 55 70 3a 74 2c 44 6f 77 6e 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 43 28 6e 29 3f 6e 3a 6e 2e 6b 65 79 2c 4e 74 5b 6e 5d 7c 7c 6e 7d 76 61 72 20 47 74 3d 22 6b 65 79 64 6f 77 6e 22 3b 76 61 72 20 46 74 3d 66 2b 22 2d 6c 61 7a 79 22 2c 58 74 3d 46 74 2b 22 2d 73 72 63 73 65 74 22 2c 57 74 3d 22 5b 22 2b 46 74 2b 22 5d 2c 20 5b 22 2b 58 74 2b 22 5d 22 3b 76 61 72 20 59 74 3d 5b 22 20 22 2c 22 45 6e 74 65 72 22 5d 3b 76 61 72 20 55 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 Data Ascii: erval";var jt={passive:!1,capture:!0};var Nt={Spacebar:" ",Right:Hn,Left:Bn,Up:t,Down:n};function Tt(n){return n=C(n)?n:n.key,Nt[n]\|\|n}var Gt="keydown";var Ft=f+"-lazy",Xt=Ft+"-srcset",Wt="["+Ft+"], ["+Xt+"]";var Yt=[" ","Enter"];var Ut=Object.freeze({__p
2024-10-04 13:38:23 UTC	8000	IN	Data Raw: 29 7b 76 61 72 20 69 3d 61 7c 7c 28 50 28 29 3f 31 3a 73 29 2c 69 3d 4f 28 78 2b 69 2a 28 6e 3f 2d 31 3a 31 29 2c 78 2c 21 28 61 7c 7c 50 28 29 29 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 69 26 26 79 26 26 21 53 6e 28 64 28 29 2c 72 28 21 6e 29 2c 31 29 3f 6e 3f 30 3a 63 3a 74 3f 69 3a 41 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 68 28 29 7c 7c 50 28 29 3f 28 28 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 79 26 26 22 6d 6f 76 65 22 3d 3d 3d 65 2e 74 72 69 6d 53 70 61 63 65 26 26 6e 21 3d 3d 78 29 66 6f 72 28 76 61 72 20 74 3d 64 28 29 3b 74 3d 3d 3d 76 28 6e 2c 21 30 29 26 26 45 6e 28 6e 2c 30 2c 6f 2e 6c 65 6e 67 74 68 2d 31 2c 21 65 2e 72 65 77 69 6e 64 29 3b 29 6e 3c 78 3f 2d 2d 6e 3a Data Ascii: ){var i=a\|\|(P()?1:s),i=O(x+i*(n?-1:1),x,!(a\|\|P()));return-1===i&&y&&!Sn(d(),r(!n),1)?n?0:c:t?i:A(i)}function O(n,t,i){var r;return h()\|\|P()?((r=function(n){if(y&&"move"===e.trimSpace&&n!==x)for(var t=d();t===v(n,!0)&&En(n,0,o.length-1,!e.rewind);)n<x?--n:
2024-10-04 13:38:23 UTC	5981	IN	Data Raw: 69 6f 6e 7c 7c 64 2e 64 69 72 65 63 74 69 6f 6e 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 6e 29 7b 72 65 74 75 72 6e 20 53 5b 77 2e 74 6f 50 61 67 65 28 6e 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 76 61 72 20 6e 2c 74 3d 5f 28 72 28 21 30 29 29 2c 69 3d 5f 28 72 28 29 29 3b 74 26 26 28 58 28 6e 3d 74 2e 62 75 74 74 6f 6e 2c 74 6e 29 2c 50 28 6e 2c 51 6e 29 2c 49 28 6e 2c 24 2c 2d 31 29 29 2c 69 26 26 28 4d 28 6e 3d 69 2e 62 75 74 74 6f 6e 2c 74 6e 29 2c 49 28 6e 2c 51 6e 2c 21 30 29 2c 49 28 6e 2c 24 2c 22 22 29 29 2c 67 28 22 70 61 67 69 6e 61 74 69 6f 6e 3a 75 70 64 61 74 65 64 22 2c 7b 6c 69 73 74 3a 76 2c 69 74 65 6d 73 3a 53 7d 2c 74 2c 69 29 7d 72 65 74 75 72 6e 7b 69 74 65 6d 73 3a 53 2c 6d 6f 75 6e 74 3a 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 45 Data Ascii: ion\|\|d.direction}function _(n){return S[w.toPage(n)]}function z(){var n,t=_(r(!0)),i=_(r());t&&(X(n=t.button,tn),P(n,Qn),I(n,$,-1)),i&&(M(n=i.button,tn),I(n,Qn,!0),I(n,$,"")),g("pagination:updated",{list:v,items:S},t,i)}return{items:S,mount:function n(){E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49801	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:22 UTC	595	OUT	GET /wp-content/themes/sesamehr/assets/js/index.js?ver=3.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:22 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:22 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2024 14:37:29 GMT ETag: "2989-61130379f7251" Accept-Ranges: bytes Content-Length: 10633 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:22 UTC	7822	IN	Data Raw: 76 61 72 20 73 65 73 61 6d 65 68 72 3d 73 65 73 61 6d 65 68 72 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 65 73 61 6d 65 68 72 44 6f 6d 52 65 61 64 79 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 22 69 6e 74 65 72 61 63 74 69 76 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 72 65 74 75 72 6e 20 65 28 29 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 21 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 73 61 6d 65 68 72 54 6f 67 67 6c 65 41 74 74 72 69 62 75 74 65 28 65 2c 74 2c 6f 2c Data Ascii: var sesamehr=sesamehr\|\|{};function sesamehrDomReady(e){if("function"==typeof e){if("interactive"===document.readyState\|\|"complete"===document.readyState)return e();document.addEventListener("DOMContentLoaded",e,!1)}}function sesamehrToggleAttribute(e,t,o,
2024-10-04 13:38:22 UTC	2811	IN	Data Raw: 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 66 6f 63 75 73 22 29 3f 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 22 20 66 6f 63 75 73 22 2c 22 22 29 3a 65 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 66 6f 63 75 73 22 29 2c 65 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 7d 7d 2c 73 65 73 61 6d 65 68 72 2e 74 6f 67 67 6c 65 73 3d 7b 63 6c 69 63 6b 65 64 45 6c 3a 21 31 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 6f 67 67 6c 65 28 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 43 68 65 63 6b 28 29 2c 74 68 69 73 2e 75 6e 74 6f 67 67 6c 65 4f 6e 45 73 63 61 70 65 4b 65 79 50 72 65 73 73 28 29 7d 2c 70 65 72 66 6f 72 6d 54 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: ame.indexOf("focus")?e.className=e.className.replace(" focus",""):e.className+=" focus"),e=e.parentElement}}},sesamehr.toggles={clickedEl:!1,init:function(){this.toggle(),this.resizeCheck(),this.untoggleOnEscapeKeyPress()},performToggle:function(e,t){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49797	151.101.194.109	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:22 UTC	573	OUT	GET /p/4.37.7/js/vendor.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:22 UTC	457	IN	HTTP/1.1 200 OK Connection: close Content-Length: 412014 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 150850 Date: Fri, 04 Oct 2024 13:38:22 GMT X-Served-By: cache-iad-kcgs7200089-IAD, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT X-Cache-Hits: 25, 0 X-Timer: S1728049102.079671,VS0,VE1 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 33 37 2e 37 20 2d 20 32 30 32 34 2d 31 30 2d 30 32 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 74 28 6e 29 29 7d 7d 76 61 72 20 72 3d 6e 28 4f 62 6a 65 63 74 2e Data Ascii: /* VimeoPlayer - v4.37.7 - 2024-10-02 - https://player.vimeo.com/NOTICE.txt */var e=Object.prototype;function t(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)}function n(e,t){return function(n){return e(t(n))}}var r=n(Object.
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 6f 6e 20 53 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 63 61 6c 6c 28 65 29 7d 63 61 74 63 68 28 46 6c 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 65 2b 22 22 7d 63 61 74 63 68 28 46 6c 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 76 61 72 20 62 3d 2f 5e 5c 5b 6f 62 6a 65 63 74 20 2e 2b 3f 43 6f 6e 73 74 72 75 63 74 6f 72 5c 5d 24 2f 2c 41 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 77 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 49 3d 41 2e 74 6f 53 74 72 69 6e 67 2c 52 3d 77 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6b 3d 52 65 67 45 78 70 28 22 5e 22 2b 49 2e 63 61 6c 6c 28 52 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5c 5e 24 2e 2a 2b 3f 28 29 5b 5c 5d 7b 7d 7c 5d 2f 67 2c 22 5c 5c 24 26 Data Ascii: on S(e){if(null!=e){try{return T.call(e)}catch(Fl){}try{return e+""}catch(Fl){}}return""}var b=/^\[object .+?Constructor\]$/,A=Function.prototype,w=Object.prototype,I=A.toString,R=w.hasOwnProperty,k=RegExp("^"+I.call(R).replace(/[\\^$.*+?()[\]{}\|]/g,"\\$&
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3e 2d 31 26 26 65 25 31 3d 3d 30 26 26 65 3c 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 24 28 65 2e 6c 65 6e 67 74 68 29 26 26 21 67 28 65 29 7d 76 61 72 20 51 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 65 78 70 6f 72 74 73 26 26 21 65 78 70 6f 72 74 73 2e 6e 6f 64 65 54 79 70 65 26 26 65 78 70 6f 72 74 73 2c 4a 3d 51 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 26 26 21 6d 6f 64 75 6c 65 2e 6e 6f 64 65 54 79 70 65 26 26 6d 6f Data Ascii: Array;function $(e){return"number"==typeof e&&e>-1&&e%1==0&&e<=9007199254740991}function z(e){return null!=e&&$(e.length)&&!g(e)}var Q="object"==typeof exports&&exports&&!exports.nodeType&&exports,J=Q&&"object"==typeof module&&module&&!module.nodeType&&mo
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 7a 28 65 29 26 26 28 59 28 65 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 70 6c 69 63 65 7c 7c 65 65 28 65 29 7c 7c 75 65 28 65 29 7c 7c 57 28 65 29 29 29 72 65 74 75 72 6e 21 65 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6e 3d 42 28 65 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 6e 7c 7c 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 3d 3d 6e 29 72 65 74 75 72 6e 21 65 2e 73 69 7a 65 3b 69 66 28 74 28 65 29 29 72 65 74 75 72 6e 21 6f 28 65 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 72 20 69 Data Ascii: .hasOwnProperty;function le(e){if(null==e)return!0;if(z(e)&&(Y(e)\|\|"string"==typeof e\|\|"function"==typeof e.splice\|\|ee(e)\|\|ue(e)\|\|W(e)))return!e.length;var n=B(e);if("[object Map]"==n\|\|"[object Set]"==n)return!e.size;if(t(e))return!o(e).length;for(var r i
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 6d 65 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 65 2c 74 29 7b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 2c 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 Data Ascii: .getOwnPropertyDescriptors(n)):me(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function ge(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}function ye(e){re
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 45 65 28 6e 2c 65 29 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 7b 7d 2c 6f 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 6f 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 6f 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 69 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 69 7d 28 65 2c 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 Data Ascii: e:!1,writable:!0,configurable:!0}}),Ee(n,e)})(e)}function Ae(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0\|\|(i[n]=e[n]);return i}(e,t);if(Object.getOwnPrope
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 6e 3d 52 65 28 65 29 29 7c 7c 74 26 26 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 6e 26 26 28 65 3d 6e 29 3b 76 61 72 20 72 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3e 3d 65 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 65 5b 72 2b 2b 5d 7d 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 Data Ascii: (Array.isArray(e)\|\|(n=Re(e))\|\|t&&e&&"number"==typeof e.length){n&&(e=n);var r=0;return function(){return r>=e.length?{done:!0}:{done:!1,value:e[r++]}}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-arr
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 65 64 53 6f 75 72 63 65 42 75 66 66 65 72 3b 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 2c 2e 2e 2e 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 64 75 63 65 28 28 65 2c 74 29 3d 3e 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 65 5b 6e 5d 2c 69 3d 74 5b 6e 5d 3b 72 26 26 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3f 65 5b 6e 5d 3d 28 72 7c 7c 5b 5d 29 2e 63 6f 6e 63 61 74 28 69 29 3a 28 65 3d 3e 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 28 69 29 3f 65 5b 6e 5d 3d 47 65 28 7b 7d 2c 72 2c 69 29 3a 65 5b 6e 5d 3d 69 29 7d 29 2c 65 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 65 28 29 7b 6c 65 74 20 65 2c 74 2c 6e 3d 6e 65 77 Data Ascii: edSourceBuffer;function Ge(e,...t){return t.reduce((e,t)=>(Object.keys(t\|\|{}).forEach(n=>{const r=e[n],i=t[n];r&&void 0===i\|\|(Array.isArray(i)?e[n]=(r\|\|[]).concat(i):(e=>e&&"object"==typeof e)(i)?e[n]=Ge({},r,i):e[n]=i)}),e),e)}function Ke(){let e,t,n=new
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 2f 22 29 3b 69 66 28 32 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6e 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 72 65 74 75 72 6e 20 6e 5b 30 5d 3b 63 6f 6e 73 74 20 72 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 3f 22 29 3b 69 66 28 72 2e 6c 65 6e 67 74 68 3e 31 29 72 65 74 75 72 6e 20 72 5b 30 5d 3b 63 6f 6e 73 74 20 69 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 23 22 29 3b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 3e 31 3f 69 5b 30 5d 3a 74 5b 31 5d 7d 63 6f 6e 73 74 20 6e 74 3d 28 65 2c 74 29 3d 3e 28 2e 2e 2e 6e 29 3d 3e 7b 5b 60 25 63 24 7b 65 7d 60 2c 74 5d 2e 63 6f 6e 63 61 74 28 6e 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 74 29 7b 74 68 69 73 2e Data Ascii: /");if(2!==t.length)return null;const n=t[1].split("/");if(n.length>1)return n[0];const r=t[1].split("?");if(r.length>1)return r[0];const i=t[1].split("#");return i.length>1?i[0]:t[1]}const nt=(e,t)=>(...n)=>{[`%c${e}`,t].concat(n)};function rt(e,t){this.
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 3d 3d 3d 63 2e 73 74 61 74 75 73 26 26 28 21 63 2e 72 65 73 70 6f 6e 73 65 55 52 4c 7c 7c 30 21 3d 3d 63 2e 72 65 73 70 6f 6e 73 65 55 52 4c 2e 69 6e 64 65 78 4f 66 28 22 66 69 6c 65 3a 22 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 63 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 28 2e 2a 3f 29 3a 5b 5e 5c 53 5c 6e 5d 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 24 2f 67 6d 2c 28 74 2c 6e 2c 72 29 3d 3e 7b 65 5b 6e 5d 3d 65 5b 6e 5d 3f 60 24 7b 65 5b 6e 5d 7d 2c 24 7b 72 7d 60 3a 72 7d 29 3b 6c 65 74 20 74 3d 7b 7d 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 70 65 72 66 Data Ascii: function(){if(0===c.status&&(!c.responseURL\|\|0!==c.responseURL.indexOf("file:")))return;const e={};c.getAllResponseHeaders().replace(/^(.?):[^\S\n]([\s\S]*?)$/gm,(t,n,r)=>{e[n]=e[n]?`${e[n]},${r}`:r});let t={};if(window.performance&&void 0!==window.perf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49798	151.101.194.109	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:22 UTC	551	OUT	GET /p/4.37.7/css/player.css HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:22 UTC	443	IN	HTTP/1.1 200 OK Connection: close Content-Length: 216508 Content-Type: text/css Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 150850 Date: Fri, 04 Oct 2024 13:38:22 GMT X-Served-By: cache-iad-kjyo7100102-IAD, cache-ewr-kewr1740050-EWR X-Cache: HIT, HIT X-Cache-Hits: 23, 0 X-Timer: S1728049102.103308,VS0,VE2 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 33 37 2e 37 20 2d 20 32 30 32 34 2d 31 30 2d 30 32 20 2a 2f 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 70 78 29 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 4c 65 66 74 7b 30 25 7b 6c 65 66 74 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 31 30 70 78 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 74 68 72 6f 62 7b 30 25 2c 31 30 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 34 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 69 67 67 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 Data Ascii: /* VimeoPlayer - v4.37.7 - 2024-10-02 */@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:tra
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 73 69 7a 65 3a 31 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 73 65 70 61 72 61 74 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 7d 2e 70 6c 61 79 65 72 20 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 61 64 65 66 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 7d 2e 70 6c 61 79 65 72 2c 2e 70 6c 61 79 65 72 20 2a 2c 2e 70 6c 61 79 65 72 20 3a 3a 61 66 74 65 72 2c 2e 70 6c 61 79 65 72 20 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 Data Ascii: size:10px;overflow:visible;border-collapse:separate;user-select:none;touch-action:manipulation}.player :focus{outline:2px solid #00adef;outline-offset:2px}.player,.player *,.player ::after,.player ::before{box-sizing:border-box;-webkit-tap-highlight-color
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 34 7d 2e 70 6c 61 79 65 72 2e 70 6c 61 79 65 72 2d 61 64 20 2e 76 70 2d 74 61 72 67 65 74 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 63 6f 6e 74 72 6f 6c 73 2d 77 72 61 70 70 65 72 2c 2e 70 6c 61 79 65 72 20 2e 76 70 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 32 35 6d 73 20 65 61 73 65 2d 6f 75 74 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 76 69 6d 65 6f 2d 69 6e 74 65 72 61 63 74 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 Data Ascii: t:0;width:100%;height:100%;z-index:4}.player.player-ad .vp-target{visibility:hidden}.player .vp-controls-wrapper,.player .vp-video-wrapper{opacity:1;transition:opacity 125ms ease-out}.player .vp-vimeo-interactive-container{position:absolute;height:100%;wi
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 69 6e 67 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 72 69 67 68 74 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 70 6c 61 79 65 72 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 75 70 70 6f 72 74 65 64 2e 61 6e 69 6d 61 74 69 6e 67 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 2e 76 70 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 72 69 67 68 74 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 6f 70 61 63 69 74 79 20 31 32 35 6d 73 20 65 61 73 Data Ascii: ing>.content-area-sibling-enabled{transition:width .4s ease-in-out,right .4s ease-in-out}.player.right-content-area-supported.animating>.content-area-sibling-enabled.vp-video-wrapper{transition:width .4s ease-in-out,right .4s ease-in-out,opacity 125ms eas
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 61 72 65 61 2d 73 75 70 70 6f 72 74 65 64 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 6f 70 65 6e 2e 69 73 2d 67 6f 6f 67 6c 65 2d 62 6f 74 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 72 69 67 68 74 3a 30 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 61 64 73 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 61 64 73 2d 77 72 61 70 70 65 72 20 2e 76 70 2d 61 64 73 2d 74 61 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 6c 65 66 74 3a 31 30 70 78 3b 68 65 Data Ascii: area-supported.right-content-area-open.is-google-bot>.content-area-sibling-enabled{width:100%;right:0}.player .vp-ads-wrapper{position:absolute;top:0;left:0;width:100%;height:100%}.player .vp-ads-wrapper .vp-ads-tag{position:absolute;top:10px;left:10px;he
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 6e 74 72 6f 2d 77 72 61 70 20 2e 61 72 72 6f 77 2e 61 72 72 6f 77 2d 72 69 67 68 74 3a 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 6c 65 66 74 3a 2d 32 70 78 7d 2e 70 6c 61 79 65 72 20 2e 69 6e 74 72 6f 2d 77 72 61 70 20 2e 61 72 72 6f 77 2e 61 72 72 6f 77 2d 64 6f 77 6e 3a 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 74 6f 70 3a 2d 32 70 78 7d 2e 70 6c 61 79 65 72 20 2e 69 6e 74 72 6f 2d 77 72 61 70 20 2e 61 72 72 6f 77 2e 61 72 72 6f 77 2d 6c 65 66 74 3a 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 35 64 65 67 29 3b 6c 65 66 74 3a 32 70 78 7d 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 5d 20 2e 74 Data Ascii: ntro-wrap .arrow.arrow-right::before{transform:rotate(45deg);left:-2px}.player .intro-wrap .arrow.arrow-down::before{transform:rotate(135deg);top:-2px}.player .intro-wrap .arrow.arrow-left::before{transform:rotate(-135deg);left:2px}.player[data-filter] .t
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 74 72 61 6e 73 70 61 72 65 6e 74 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 63 69 72 63 6c 65 2c 23 64 30 62 61 38 65 20 32 30 25 2c 23 33 36 30 33 30 39 20 38 35 25 2c 23 31 64 30 32 31 30 20 31 30 30 25 29 3b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6f 76 65 72 6c 61 79 7d 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 68 75 64 73 6f 6e 5d 20 2e 74 68 75 6d 62 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 68 75 64 73 6f 6e 5d 20 2e 76 70 2d 70 72 65 76 69 65 77 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 68 75 64 73 6f 6e 5d 20 2e 76 70 2d 76 69 64 65 6f 7b 66 69 6c 74 65 72 3a 62 72 69 67 68 74 6e Data Ascii: -gradient(to right,transparent,transparent),radial-gradient(circle,#d0ba8e 20%,#360309 85%,#1d0210 100%);mix-blend-mode:overlay}.player[data-filter=hudson] .thumb,.player[data-filter=hudson] .vp-preview,.player[data-filter=hudson] .vp-video{filter:brightn
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 61 74 20 34 30 25 20 34 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 38 29 2c 72 67 62 61 28 32 35 35 2c 32 30 30 2c 32 30 30 2c 2e 36 29 2c 23 31 31 31 20 36 30 25 29 3b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6f 76 65 72 6c 61 79 3b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 74 6f 61 73 74 65 72 5d 20 2e 74 68 75 6d 62 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 74 6f 61 73 74 65 72 5d 20 2e 76 70 2d 70 72 65 76 69 65 77 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 74 6f 61 73 74 65 72 5d 20 2e 76 70 2d 76 69 64 65 6f 7b 66 69 6c 74 65 72 3a 62 72 69 67 68 74 6e 65 73 73 28 2e 39 29 20 63 6f 6e 74 72 61 73 74 28 31 2e 35 29 20 67 72 61 79 73 63 Data Ascii: at 40% 40%,rgba(255,255,255,.8),rgba(255,200,200,.6),#111 60%);mix-blend-mode:overlay;opacity:.4}.player[data-filter=toaster] .thumb,.player[data-filter=toaster] .vp-preview,.player[data-filter=toaster] .vp-video{filter:brightness(.9) contrast(1.5) graysc
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 73 66 6f 72 6d 2d 62 6f 78 3a 66 69 6c 6c 2d 62 6f 78 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 2e 77 61 74 63 68 2d 6c 61 74 65 72 2d 69 63 6f 6e 20 2e 6d 69 6e 75 74 65 2d 68 61 6e 64 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 32 35 2e 35 25 20 32 36 2e 35 25 3b 74 72 61 6e 73 66 6f 72 6d 2d 62 6f 78 3a 66 69 6c 6c 2d 62 6f 78 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 63 65 6c 6c 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 7b 7a Data Ascii: sform-box:fill-box}.player .vp-notification-wrapper .watch-later-icon .minute-hand{transform-origin:25.5% 26.5%;transform-box:fill-box}.player .vp-notification-cell{display:table-cell;vertical-align:middle;width:100%;height:100%}.player .vp-notification{z
2024-10-04 13:38:22 UTC	1371	IN	Data Raw: 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 38 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 73 68 61 72 65 2d 62 75 74 74 6f 6e 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 31 65 6d 20 2e 35 65 6d 20 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 73 68 61 72 65 2d 62 75 74 74 6f 6e 73 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 34 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 34 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 Data Ascii: t;line-height:1;font-size:1.8em!important}.player .vp-share-buttons{color:#fff;display:inline-block;margin:1em .5em 0;padding:0;list-style:none}.player .vp-share-buttons-item{display:inline-block;width:41px!important;height:40px!important;border-right:1px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49806	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	405	OUT	GET /wp-content/uploads/2023/06/costarica.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:23 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:23 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:15 GMT ETag: "17f-5ff430d577a8b" Accept-Ranges: bytes Content-Length: 383 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:23 UTC	383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 09 70 48 59 73 00 00 00 9d 00 00 00 9d 01 8f 72 e7 6e 00 00 01 31 49 44 41 54 48 89 dd 95 bb 4a 03 51 10 86 67 72 66 57 21 37 36 86 80 28 0b 22 98 2d 24 75 5a 1b 2d c4 d2 87 08 1b c1 d6 c2 ca d6 4a 13 f6 59 b4 d9 d6 da 2e 85 08 41 1b 93 dd cd 0d 8d ec 39 3b 36 16 16 16 12 33 85 7e 0f f0 7f 9c 19 ce 3f c8 87 c7 70 fe b4 51 8f b5 6a dd 8e cb 7e a2 15 31 2c 06 02 80 43 46 ef 97 c7 dd 0a 99 e0 62 f3 b9 87 67 8d 53 ef 6e 56 b8 09 27 45 77 c1 dc 6f d9 2b 4d fb cd c2 ec 80 06 ef aa 1d c6 79 17 20 5b 66 3e 84 71 de dd b6 de da b8 e3 5d 9a a1 b1 72 4b 4d ff a4 aa d2 0c a3 e8 95 01 51 22 1f 80 19 90 99 17 dd e9 8f 10 19 cd 57 c8 8c 47 a2 02 7c 68 ee 8a 8e 88 Data Ascii: PNGIHDRw=pHYsrn1IDATHJQgrfW!76("-$uZ-JY.A9;63~?pQj~1,CFbgSnV'Ewo+My [f>q]rKMQ"WG\|h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49808	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	400	OUT	GET /wp-content/uploads/2023/06/peru.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:23 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:23 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:17 GMT ETag: "103-5ff430d728484" Accept-Ranges: bytes Content-Length: 259 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:23 UTC	259	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 1b 50 4c 54 45 ff ff ff ff 4a 57 ff 4a 55 ff 4b 54 ff 4b 55 ff 4b 55 ff 4b 55 f5 f5 f5 ff 4b 55 ba 87 21 9d 00 00 00 07 74 52 4e 53 00 26 5d a3 d9 f6 fe 81 77 26 7d 00 00 00 47 49 44 41 54 18 95 63 60 10 76 eb 28 07 82 8e 14 43 06 06 a6 88 0e 08 a7 a3 55 81 41 b4 03 c6 e9 08 64 b0 40 70 9a 19 3c 10 9c 16 86 0c 04 a7 8d a1 03 c1 e9 18 6c 1c 14 87 a2 78 01 c5 73 28 de 46 09 10 e4 a0 02 00 7d 6b 89 11 e4 4a 33 6a 00 00 00 00 49 45 4e 44 Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTEJWJUKTKUKUKUKU!tRNS&]w&}GIDATc`v(CUAd@p<lxs(F}kJ3jIEND

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49809	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	404	OUT	GET /wp-content/uploads/2023/06/colombia.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:23 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:23 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:15 GMT ETag: "12f-5ff430d535408" Accept-Ranges: bytes Content-Length: 303 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:23 UTC	303	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 04 03 00 00 00 12 59 20 cb 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 30 50 4c 54 45 ff ff ff ff 4a 57 ff e4 57 ff 4a 55 ff e1 5a ff 4b 54 ff e1 5b ff 4b 55 ff e0 5a ff 4b 55 ff e1 5a ff 4b 55 ff e1 5a 41 47 9b ff 4b 55 ff e1 5a 45 25 69 67 00 00 00 0d 74 52 4e 53 00 26 26 5d 5d a3 a3 d9 d9 f6 f6 fe fe 9a b1 c4 7f 00 00 00 58 49 44 41 54 18 57 63 64 50 4b 2b 66 00 81 93 b3 e6 31 b2 ac 0e 60 80 80 df 6e 8c 5a 57 19 60 60 31 63 fe 04 38 e7 3b 63 7f 01 9c f3 93 f1 bc 01 9c f3 97 f1 3f 03 02 50 ce b9 4b 55 Data Ascii: PNGIHDRY sBITOpHYs}8tEXtSoftwarewww.inkscape.org<0PLTEJWWJUZKT[KUZKUZKUZAGKUZE%igtRNS&&]]XIDATWcdPK+f1`nZW``1c8;c?PKU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49807	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	398	OUT	GET /wp-content/uploads/2023/06/uk.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:23 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:23 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:17 GMT ETag: "300-5ff430d7ac1eb" Accept-Ranges: bytes Content-Length: 768 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:23 UTC	768	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 01 44 50 4c 54 45 ff ff ff 43 4a 9a a6 aa cd a8 ab ce ad ad cf ab ae d0 42 47 9c 42 46 9b 41 47 9b c3 c4 db c8 c7 dd dc 9b ab e0 9d ad 41 46 9b 64 68 ad 41 47 9b f6 81 8a f9 6d 77 fb 69 72 fc 66 6f 41 47 9b 45 4b 9d 47 4c 9e 5d 62 a9 66 6b ae 6b 6f b0 70 75 b3 87 8b be 9c 9f c9 a2 a4 cb bc be d8 c5 c7 dc c5 c7 dd d6 d7 e5 d7 d8 e6 da db e8 ea eb f0 eb e7 ec ec d9 de ef 4c 5c f1 f2 f3 f2 ea ec f2 eb ed f3 f3 f4 f4 e8 e9 f4 e9 eb f4 f4 f4 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<DPLTECJBGBFAGAFdhAGmwirfoAGEKGL]bfkkopuL\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49810	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	407	OUT	GET /wp-content/uploads/2023/06/netherlands.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:23 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:16 GMT ETag: "6d6-5ff430d6e6da0" Accept-Ranges: bytes Content-Length: 1750 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:24 UTC	1750	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 09 70 48 59 73 00 00 00 9d 00 00 00 9d 01 8f 72 e7 6e 00 00 05 d1 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 31 62 36 35 61 37 39 62 34 2c 20 32 30 32 32 2f 30 36 2f 31 33 2d 32 32 3a 30 31 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRw=pHYsrniTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49814	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	592	OUT	GET /wp-content/themes/sesamehr/img/new-home/Corazon.lottie HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	309	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:23 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:58:10 GMT ETag: "435d-6138e84914fed" Accept-Ranges: bytes Content-Length: 17245 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:24 UTC	7883	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 c8 16 02 4b 91 00 00 00 bd 00 00 00 0d 00 00 00 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 25 ce 41 0e c2 20 10 05 d0 bb cc 5a 4c 41 ab b5 07 70 e5 0d 8c 8b 01 26 8a b6 8c 19 50 63 9a de 5d b0 cb 99 bc ff f3 27 c0 18 46 cc 81 63 82 fe 3c 41 f0 d0 83 f1 0e 11 f7 ad da 10 59 b5 b5 46 2b eb da 46 75 da ec 6c 67 dc a1 d3 2d ac 60 64 4f 45 47 96 11 87 72 fb 20 e4 6a 15 f4 7a be ac 00 5f f9 c6 52 c4 89 73 0e 74 0c 03 a5 ca 28 39 09 cf 05 42 79 5c 29 92 60 fe 53 cf 79 d1 ea 5e ed 83 be 1f 16 5f b6 55 f8 26 49 4b 4a af 1b 98 7f 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 7f 97 60 44 d7 03 00 00 6e 0c 00 00 34 00 00 00 61 6e 69 6d 61 74 69 6f 6e 73 2f 32 64 63 61 61 61 37 35 2d 33 65 65 62 2d 34 62 32 31 2d 62 63 35 30 2d 38 31 Data Ascii: PKKmanifest.json%A ZLAp&Pc]'Fc<AYF+Fulg-`dOEGr jz_Rst(9By\)`Sy^_U&IKJPK`Dn4animations/2dcaaa75-3eeb-4b21-bc50-81
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: 9e 6c 44 ab f1 35 5f 3b e2 dd f4 b8 90 a5 c7 93 86 8a 05 80 1e 6f 32 f1 e0 bf 3c 99 85 a0 8e 15 61 b7 14 18 be 82 74 3e ee 88 47 82 2d 01 84 c4 db 78 3c dd b2 0c 27 8a 85 8f 46 80 c2 52 fc ec b0 73 8f 97 7a 96 c4 6b 46 b3 2a b7 7a 3c 25 0e 12 b7 12 2f 17 d2 09 f1 0c 1a a2 d1 93 65 14 d2 81 9e 9d c7 a3 fa dd ea 94 63 43 3c b3 7a 36 aa 2b 68 c0 a8 2e ca e8 ea 9c 78 5c a8 ec 0c ad 1f ea 61 8f e7 05 82 b1 23 1e e8 51 8f 57 88 07 8d 74 c5 e3 31 f1 0c e2 9f 11 cf 20 0f ac 63 4f 3c 1c 31 6c ea 40 c2 a8 8e 95 c7 cb 44 75 a4 4b 3d 2b 8f 87 37 9c 9d 8e c6 e3 1d b1 40 31 33 37 21 b4 62 94 74 d4 58 fe da 7b 3c f4 30 85 78 34 1a 10 67 1a 16 ea f5 79 bc aa a3 7a 3c 25 5e 92 77 49 bc 69 b6 27 1e 22 a2 23 5e 1d 33 3e e4 3f c6 9c f1 29 f1 1a 8f 17 a8 8a f8 57 3c 1e 4d 28 Data Ascii: lD5_;o2<at>G-x<'FRszkF*z<%/ecC<z6+h.x\a#QWt1 cO<1l@DuK=+7@137!btX{<0x4gyz<%^wIi'"#^3>?)W<M(
2024-10-04 13:38:24 UTC	1362	IN	Data Raw: d3 ec 77 fa 4f 91 9c 70 5c 31 e3 96 a1 4a bc 8a 6e 9f 30 92 2f 50 6c 58 cf 4c 1c 7b 2a 8c cf 0d c1 f1 25 3f 45 cf 2c f1 0b 61 b0 ce 4b 3d be 30 59 4f bf a0 54 cf ad 21 4e 88 77 e6 f1 f8 43 d7 9e 70 85 78 fe 8a 7c ec 9f 9b 15 e2 c5 c8 7a f0 81 f3 2d de ef bc fd bb 2f 7f dc ec d6 6c df fb 89 af ff dc b0 f1 31 f4 08 fc 00 14 13 9c 81 54 00 0a ec 3d 9e 9b 45 59 d1 38 6f 25 9d 27 a8 f1 78 6c f6 7d 0b 14 20 37 1e 8f e3 eb 35 e7 31 f4 50 7c 98 37 ea c1 f8 a8 27 da a9 36 38 c7 f7 9f 63 c1 94 78 79 43 da aa 16 84 49 3d b7 86 f2 f0 fe 7a 65 8f 57 f5 20 a8 86 d9 c7 be e7 93 ef fb d5 68 36 33 b3 77 bc 78 fb 47 87 d9 17 3c 21 8e e4 f5 73 33 be 31 22 81 1a 5e 3b 5d 27 14 09 cf 91 be f7 e6 63 6c 59 4c 18 8e cf 2b 9c 75 58 14 ce 48 8f 2e d5 4c fc ca e3 d9 4a 8f 14 1e b7 Data Ascii: wOp\1Jn0/PlXL{*%?E,aK=0YOT!NwCpx\|z-/l1T=EY8o%'xl} 751P\|7'68cxyCI=zeW h63wxG<!s31"^;]'clYL+uXH.LJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49812	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	591	OUT	GET /wp-content/themes/sesamehr/img/new-home/Rocket.lottie HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	309	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:23 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:58:21 GMT ETag: "4162-6138e853c26f5" Accept-Ranges: bytes Content-Length: 16738 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:24 UTC	7883	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 91 bc ec 27 91 00 00 00 bd 00 00 00 0d 00 00 00 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 25 ce 41 0e c2 20 10 05 d0 bb cc 5a 4c 5b 2c 89 3d 80 2b 6f 60 5c 0c cc a8 68 0b 66 40 8d 69 7a 77 c1 2e 67 f2 fe cf 9f 01 83 9f 30 fb 18 12 0c a7 19 3c c1 00 46 ef b5 eb 0d aa be d1 46 ed 2e b6 53 d6 22 29 dd b1 b6 d4 3a 32 c8 b0 81 29 12 17 1d a2 4c 38 96 9b bc b0 ab 55 30 b4 cb 79 03 f8 ca b7 28 45 1c 63 ce 9e 0f 7e e4 54 19 27 27 fe b9 42 28 8f 2b 07 16 cc 7f 4a 31 af 5a dd ab 7d f0 f7 13 85 ca b6 0a df 2c 69 4d b5 db 06 96 1f 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 e7 e0 4d 2c e8 05 00 00 5c 21 00 00 34 00 00 00 61 6e 69 6d 61 74 69 6f 6e 73 2f 36 33 39 33 63 35 36 61 2d 35 30 33 36 2d 34 66 62 32 2d 62 62 61 64 2d 33 32 Data Ascii: PK'manifest.json%A ZL[,=+o`\hf@izw.g0<FF.S"):2)L8U0y(Ec~T''B(+J1Z},iMPKM,\!4animations/6393c56a-5036-4fb2-bbad-32
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: ec 28 93 85 46 77 19 72 70 8e f1 23 43 52 7f 5d 4f 63 d8 d1 da 7f 63 62 36 ee 20 93 99 96 33 12 ec 06 05 86 74 66 94 0a 09 c7 37 6a a7 83 ca 9c 77 ca 90 5a d1 eb 06 27 a3 e9 7a f6 fe bb 61 27 eb 6a 8c 01 1a df 18 87 79 6d 81 b7 fe 23 d3 a9 21 61 ae 43 79 db f5 db 0c e9 f9 10 f1 92 21 fb 38 66 7d 06 6f 6b cd ff 6d 97 9b a7 ca 01 89 32 e4 e3 0d 89 1a 1d 58 ce 10 76 63 0e 33 99 1c 4c 4c 8d 13 54 74 9f 4f 32 59 94 99 fa 7c de 38 cb bc 6d 3d c5 68 61 ff 2c 93 bd a8 0c 09 e2 8d d6 63 95 17 ee a7 68 82 5b 17 78 a1 6c 86 98 1a 12 d4 5f 8d 93 18 b2 57 14 57 36 57 98 ab 48 cb 09 58 be 6e 9c e5 0c 69 79 7d 05 27 bc 66 be 03 de be 2e d5 f3 9a 82 3d e0 25 e3 4c 33 64 5f 47 e5 45 6a c8 b6 ff 86 77 ff c2 53 fc 7c 29 fd 2e 9a e0 a0 f0 41 9a 1d 38 36 8e c9 3a c9 c1 ce 0c Data Ascii: (Fwrp#CR]Occb6 3tf7jwZ'za'jym#!aCy!8f}okm2Xvc3LLTtO2Y\|8m=ha,ch[xl_WW6WHXniy}'f.=%L3d_GEjwS\|).A86:
2024-10-04 13:38:24 UTC	855	IN	Data Raw: 32 24 fa 42 fa 4c 66 4b 2d cb 64 26 43 d2 41 3a cc 90 6d 27 f6 71 a7 bc 26 93 b5 f9 94 97 fb e5 bc 36 43 0e a0 f8 7b c3 c5 f1 36 ce 2c 93 c7 19 12 58 fa ce 07 e2 cf f5 2c df ec 73 c8 6b 19 72 e7 fd 0f ef 7d e3 0f 7c 12 f2 70 87 b0 bc f6 da 43 7d fb e1 c3 00 fe 97 31 10 1d c0 d5 ef 7c 8c 8a 9c 18 27 34 24 8c 19 2f 7f 0e d9 0d c4 9c 81 71 8c 19 07 ef e9 4c 26 bc 6a bc 30 93 19 de 88 93 8d b3 f3 86 19 32 59 57 e6 24 5e fd 5c 4f af 57 3f d7 53 43 fa 0c 69 0d 19 7c 0e f9 bf bf f5 bb cf fe 62 79 ed b5 07 39 72 5c e7 f6 51 5f 7b ed a5 af bf fb 37 3e 53 50 3e 6a 4e 48 34 42 95 36 7d d0 0b af 66 9d 70 3e fd 8b 45 de c3 07 f3 9e e4 0c 79 a9 22 8e 78 2f 73 d2 ba 5e 79 98 7e 11 a7 f0 2e ec 7f 05 3e ff 3d 6f bc f1 13 e5 b5 7f f5 ad c3 29 a3 c7 ef fc bd 8f 7d 74 2b db Data Ascii: 2$BLfK-d&CA:m'q&6C{6,X,skr}\|pC}1\|'4$/qL&j02YW$^\OW?SCi\|by9r\Q_{7>SP>jNH4B6}fp>Ey"x/s^y~.>=o)}t+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49821	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	661	OUT	GET /wp-content/themes/sesamehr/img/new-home/v2/elipse_4853.webp HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	311	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:40:17 GMT ETag: "209ae-61786fe257d14" Accept-Ranges: bytes Content-Length: 133550 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:24 UTC	7881	IN	Data Raw: 52 49 46 46 a6 09 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 bd 07 00 2e 06 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0.ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: e8 d9 56 72 65 c8 e3 2b ef 4e ba f9 76 69 c5 77 de 42 89 fa bf 4b f9 27 82 de ab 9c df 19 8b 42 6d 42 e9 79 5e 10 ec 51 82 91 47 21 2e 2b 64 8b 73 b3 72 4f 2f ed 26 72 85 a5 3a fc 0b fc 9a fb ca 70 95 d8 04 c3 53 d0 65 6f f0 3c d6 e9 a0 f7 e9 00 55 df 2d 72 92 c4 6b c2 51 05 c9 36 4c 46 1c 05 cf 63 2c fe d4 04 ef b8 28 86 6c 52 90 2a 44 2e 97 50 46 d3 a1 f2 75 4a 88 46 5c 5c f9 c7 07 42 e9 49 40 3b 1a a6 18 f3 ba a1 d4 1b 00 4a e1 f8 c2 97 19 ba 27 d2 c9 a0 f7 f0 0d ae 5a d1 23 90 7e d4 8d dd 0e dc ec 4d 5b a2 d6 a2 07 c3 37 40 e9 b6 68 bd 0c 84 67 11 f0 ba e5 08 1c 04 b2 6c 05 ce eb 24 06 c9 a0 06 08 f0 08 82 f6 30 46 82 aa 74 ea 2f a6 9c 09 41 0d 5f 58 03 f1 64 d0 fb b2 b7 45 b1 4f eb 0a 9b d3 e7 08 ce 36 4a 40 e0 53 b2 59 0a 08 5d af 49 b1 ca dc 46 b8 Data Ascii: Vre+NviwBK'BmBy^QG!.+dsrO/&r:pSeo<U-rkQ6LFc,(lR*D.PFuJF\\BI@;J'Z#~M[7@hgl$0Ft/A_XdEO6J@SY]IF
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: a5 c6 6b 61 23 85 06 42 66 b3 15 51 a3 f7 1b 14 48 c6 b9 dc 4b 36 85 0f 74 5c d7 f3 ee fe e9 ea 25 db fb 26 03 cb 83 cb e2 37 3b 65 af c8 3d e3 4a 1c 46 01 26 9c 60 ac 05 5b 8c 51 6a 50 11 12 88 af 90 81 87 37 68 4f 4d 4f 4b ca 33 40 06 08 b6 33 c1 15 2b 04 cd 85 3e 67 82 87 5a 48 34 40 e0 82 04 0d 92 60 fd de d1 81 8f ec 15 db fb 25 02 1b d8 2c 7e b4 21 67 28 81 13 68 8d 24 b4 c2 39 04 23 36 a8 10 a4 30 69 b4 88 74 ed ae 8b 94 91 2e a2 63 20 89 a8 16 b5 62 20 54 24 5a 97 91 68 4f 43 21 e9 d0 a5 22 0f 01 0d 24 6f d0 8f ab 46 cc 2f d8 de 6f 55 75 bc da c3 c1 46 97 92 d3 33 c6 d9 9a e4 28 f7 7b 27 0d aa 90 cc a2 ab e1 f9 d1 57 45 7a 16 69 eb 70 08 79 49 bf 18 cc 4c 6b 41 17 d0 1f fd 2c ea a6 08 49 f9 7a ed bd 76 c4 f2 ea b6 75 a8 d5 2f 12 35 10 f6 b7 0a 2f Data Ascii: ka#BfQHK6t\%&7;e=JF&`[QjP7hOMOK3@3+>gZH4@`%,~!g(h$9#60it.c b T$ZhOC!"$oF/oUuF3({'WEzipyILkA,Izvu/5/
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: 6f 61 11 d1 be ca 27 dc 89 50 90 11 85 f3 9a e9 7d 35 54 35 38 8a bb 5b e8 1f 0a 81 1e 86 56 e0 48 ec a6 2a 01 3a af 42 e0 01 78 5b 61 4b a7 fc 89 e5 d4 e1 19 ac f0 15 68 67 3b 70 8e 42 5e a8 5f 61 a4 1b 35 54 0f d3 99 b9 58 22 bd e3 79 c9 f4 1e a4 c0 54 7c f8 b5 9e d7 9a 1a a0 9b 5e b9 ab 2a 0a cb 12 79 40 92 2a e6 98 01 e9 6c 30 e1 5f 7c 2d c5 f6 6c 9e 77 74 76 dd e8 bf 07 71 73 cd b8 e0 e5 cb 2e 97 bc 4a b5 18 e3 f8 db a2 3b fa 0b a6 f7 cb 70 0b 16 d8 a9 c4 9f af 21 78 df 4b bb 1b 55 1c 68 41 ad e1 04 ba 43 35 87 5f 7d 19 64 a0 b6 de cb f6 5f 95 85 ba 76 d4 ce cb d5 c3 ec 3f 0d f0 99 c0 d7 e1 2e 20 17 80 09 7a 2e 70 af 97 de b7 43 55 83 b3 b8 bf 85 f4 30 1f f5 b0 8e a8 20 d0 9f 25 f0 2a e6 c2 2e 86 3b d3 d4 02 97 4a f9 00 cc f3 1a b1 1a 1a 19 ee ec d7 Data Ascii: oa'P}5T58[VH:Bx[aKhg;pB^_a5TX"yT\|^y@l0_\|-lwtvqs.J;p!xKUhAC5_}d_v?. z.pCU0 %.;J
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: bf 4f 5f df fd 42 54 d7 d8 aa f3 dd 95 e6 2d 49 1a 57 28 b0 14 a7 fb f3 2e 70 00 c4 f8 36 8b 31 97 7b fd 9a 60 97 7b 80 95 17 30 6c 08 6f e1 a4 3d c2 e7 fe 88 92 e0 83 73 9f 3e 0d bf 44 23 e1 00 92 63 b0 12 70 0a 24 92 35 db 91 2a 91 3a e2 a0 23 96 2c 15 2f e2 e8 71 11 07 84 b9 23 a7 91 4a d5 3f 18 f5 79 50 f5 e3 c8 34 ff 0a b3 7c c3 1c 16 9a 1f 47 db 46 e2 e1 3d f7 69 a4 29 b9 16 9f 3d d1 3f e5 33 3c 0e f9 98 7a b4 5d 01 14 8e 1f 60 10 84 3d 19 99 b1 91 bd d0 41 c3 79 55 64 81 18 39 d2 06 31 ea ae f3 64 0f cc c0 90 25 1f e1 06 45 0c 1d 39 20 34 27 e3 6c 03 af 22 84 30 ca 42 4b cb 52 cd 1f d9 73 2f bd c9 53 56 c2 88 ef e0 f9 d3 8b 61 a4 e0 1f ea 89 8a 2a ae 44 e4 de 22 50 b2 55 51 1a 9d 10 12 34 a4 76 e3 33 75 92 a5 e0 1d 96 3d 27 d7 82 8e 08 a7 04 92 c7 Data Ascii: O_BT-IW(.p61{`{0lo=s>D#cp$5:#,/q#J?yP4\|GF=i)=?3<z]`=AyUd91d%E9 4'l"0BKRs/SVaD"PUQ4v3u='
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: fe a9 e8 19 e4 6f 3b ff 5f f4 a7 f4 bf a6 9c b5 7c c3 33 fe 69 fc b1 ee e7 f6 27 d8 67 f9 9f ff be c0 1f c0 bf 8b 7f 98 fe f9 fe 17 fe b7 f7 0e e5 fe 60 3f 94 ff 55 ff 45 fd b3 f7 8f e7 17 d1 8f fa cf 50 0f ec ff e7 ff ff ff eb f7 c3 ff e3 ff ff ff ff c0 df a0 07 f1 ef 4a bf fe 5f fc 7f dd fc 1f 7f 88 ff c3 fb 75 f0 15 fc e3 fb 8f fe 3f cf ff 90 0f fe bf ff fd eb 7f 80 7f d3 ff ff ff c3 dc 03 f7 ff ff ff b4 ff 95 7f a2 ff ab f7 ff fc 03 e5 ef d3 bd 40 3f 96 fb 53 fa bf be 7f f3 ff 9b bf e3 fe ba 3c e8 ff ef e2 73 e5 7c 10 fe c9 fc 33 ff bf f0 fd c2 fd 71 7f fc f2 2f f6 ef ee bf ff fe f6 7b 81 79 f3 f7 6f dc a7 f4 3f 2a 7b de 38 bf f7 fe 80 be 16 ff ff fb ff ed d1 fa be 64 7f 11 fe d7 ff ff fe 3f ff ff 20 1f ad 7f b8 be d1 7f d7 fd c0 f2 37 fc 47 fd 6f 60 Data Ascii: o;_\|3i'g`?UEPJ_u?@?S<s\|3q/{yo?*{8d? 7Go`
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: c4 bb 1d 32 3d 30 9e 11 40 0c cc 65 24 84 bf dc c8 4a 2b 56 8d e1 f5 37 09 64 3c eb ee e9 55 4c 28 7b da 30 7f ef 57 27 cd 22 d3 04 d8 f3 a8 b5 74 9e f0 73 7a 4a ec 1e 76 dd 87 70 9b 9e 28 a8 08 4d 65 53 70 6e f2 48 f6 37 a1 81 1e 13 d9 ca 7b 15 72 05 83 91 2f 83 c2 5a 86 52 03 e8 2f 6a 0c 2a 27 51 c7 40 e8 5d 75 e9 15 71 4a 7b 72 78 ed 65 16 57 74 9c 6c d0 22 c4 3f 7f 56 10 a7 f3 ad 00 e1 2c b7 13 1a a0 60 02 9b 21 73 d2 e6 7c ed 93 78 22 09 da e9 ff 00 5a ab 7c 19 a2 17 ac a5 ab a4 f4 4e 5e e8 37 de f3 49 89 66 f2 a6 69 f3 b4 f1 b5 9d 23 24 d7 2b b7 4f 83 12 9c 4c 6a 81 80 0a 6c 85 cf 4b 99 f3 b6 4d e0 88 27 6b a7 fc 01 6a ad f0 66 88 5e b2 96 ae 93 d1 39 7b a0 df 7b cd 26 25 9b ca 99 a7 ce d3 c6 d6 74 8c 93 5c ae dd 3e 0c 4a 71 31 aa 06 00 29 b2 17 3d Data Ascii: 2=0@e$J+V7d<UL({0W'"tszJvp(MeSpnH7{r/ZR/j*'Q@]uqJ{rxeWtl"?V,`!s\|x"Z\|N^7Ifi#$+OLjlKM'kjf^9{{&%t\>Jq1)=
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: 53 85 bd ab a7 5b 67 3e b6 48 ae f9 ac e2 a5 e4 0b 66 30 d2 45 a1 93 d4 c6 cd 4d 74 68 69 b0 dc 15 52 99 8f e6 2c 4f e2 11 2c c2 01 00 1d 7c 55 00 13 0d 3e da cf ba 8a 3c af e8 d8 ea 5b 79 bc 53 ac 76 ae 08 c4 05 98 fb 68 bd 29 bc af f5 ed 7e 37 46 0f f1 80 19 8e be 72 41 84 20 eb b6 55 72 e5 83 10 ff 36 a1 c8 c7 b8 8c b2 33 65 f4 4f f9 aa 98 67 97 c8 fa 8f b4 20 bd 67 dc 0d b6 d6 e8 81 b4 e1 00 42 07 b4 ae 36 d1 e3 41 fb fc 30 04 43 86 2e a5 bb ea c3 fd b1 af 88 57 37 29 2f 49 fc 00 b8 65 cf ed 39 5f f6 9c d7 e3 43 e1 d5 cd 8f 3a b9 2f ee d4 b7 19 5d 6c 68 07 07 ee ab f5 c3 7d bf 95 98 6b ce 91 05 24 23 f9 f5 97 76 8e d8 40 56 02 1f d0 af fc 31 ff ce 1d 6c c1 09 52 73 85 92 f8 d0 bf 65 7f 49 49 d3 f3 03 b1 53 03 cb 06 ec 45 c7 2b f7 f6 03 7f 71 b0 f3 b9 Data Ascii: S[g>Hf0EMthiR,O,\|U><[ySvh)~7FrA Ur63eOg gB6A0C.W7)/Ie9_C:/]lh}k$#v@V1lRseIISE+q
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: 67 f0 a5 e2 49 2c 92 3e 0e 74 68 3c 83 37 89 d5 06 de 62 c0 2f a6 cb 58 8e 73 7b 75 97 74 c5 b0 ff 7e c7 e7 cd 5b 27 f8 4e 7a 4f 66 7c b5 b7 e0 11 16 ac 12 9d 92 75 5c 2e 05 f5 15 55 02 e1 19 72 58 f2 8e 09 aa 71 4b 8b 8b 10 45 ca e8 98 bc 48 e5 90 40 cc 6f c6 c4 93 ad f1 be 68 ac 1f e6 9c c4 bf 67 c8 22 24 0e 62 1d 0e 85 0c 30 97 d5 9e 93 24 94 10 66 ef 3f 4a 56 83 3a 28 56 55 3e e6 84 16 7b 16 12 df a2 3a 23 1a d7 01 ac fb b4 16 8c 9f 08 6d 03 e2 b3 59 b5 e0 2d af fd 79 5c 4f 6e d4 f1 80 9a 62 7f 1b 23 d0 0e 30 62 d2 50 07 26 ad 52 f9 19 57 b1 28 3c a2 2c a5 01 fa 60 d2 ec 7c f7 0a 0d 4d 2b 33 04 36 c9 81 63 1d 7f 01 81 15 30 bf a5 97 91 7c ee 28 78 bf a4 33 c0 d9 6a c9 a2 70 59 e9 a2 e4 31 85 c0 23 38 01 eb 54 e7 56 93 b1 79 1f e4 db 29 cd 92 60 d0 80 Data Ascii: gI,>th<7b/Xs{ut~['NzOf\|u\.UrXqKEH@ohg"$b0$f?JV:(VU>{:#mY-y\Onb#0bP&RW(<,`\|M+36c0\|(x3jpY1#8TVy)`
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: f2 3a 64 48 d1 9a 4d 1e fd 90 2a 34 6c 1a 96 23 eb 9f 37 06 dc a6 37 cd 24 4e 4d 52 aa 16 df a1 3f 3d 58 e3 b5 43 19 ee 89 17 86 cf a5 aa e1 15 51 9e 4d e5 d1 9f 39 1c a9 f7 be bf bd 53 99 d9 0d a8 70 c6 b5 e9 af 0a f6 62 be 82 33 c4 f3 b7 1f 8c fe 9a 55 0d 0a af 12 9c 23 df 51 e2 09 9f 02 59 1f e2 cd 67 5f d9 2a c8 43 20 7a 48 cd 72 38 d5 0a 13 e5 ca cb 41 79 7a e5 fd 43 84 92 10 7f c7 40 31 dc 99 8a e8 f5 a4 f8 13 de f7 54 41 be 69 2b cd 93 56 b1 1e c6 f0 ab cb 0b b8 4d bb 99 35 32 37 09 c1 27 6a 64 1f 15 7a b5 89 c1 d7 6d 9a 84 04 14 34 54 26 bb 76 15 ef 34 21 03 a3 a7 ed 67 a1 70 e7 a1 59 27 da 24 28 b3 0a 87 d5 2d 92 74 7d 90 3f 7b 8b ee ac 9e 3c f3 77 4d de 62 18 4e 71 a5 12 2a 42 52 49 46 a3 d8 fb f1 4b 44 20 5a 6c 92 00 67 e4 55 62 91 35 5f 00 dd Data Ascii: :dHM4l#77$NMR?=XCQM9Spb3U#QYg_C zHr8AyzC@1TAi+VM527'jdzm4T&v4!gpY'$(-t}?{<wMbNq*BRIFKD ZlgUb5_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49811	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	401	OUT	GET /wp-content/uploads/2023/06/chile.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:14 GMT ETag: "198-5ff430d4faa84" Accept-Ranges: bytes Content-Length: 408 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:24 UTC	408	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 63 50 4c 54 45 ff ff ff f8 f8 f8 ff 4a 57 95 99 c8 f4 f4 f4 ff 4a 55 86 8a be f6 f6 f6 ff 4b 54 f4 f4 f4 ff 4b 55 71 75 b3 f5 f5 f5 ff 4b 55 58 5d a7 f5 f5 f5 ff 4b 55 41 47 9b 42 48 9b 47 4d 9e 49 4f 9f 58 5d a6 6d 72 b1 a5 a7 cd b1 b3 d3 b4 b6 d5 b5 b7 d5 be c0 d9 df e0 ea eb eb f0 f1 f2 f3 f5 f5 f5 ff 4b 55 22 7c 0c 4c 00 00 00 11 74 52 4e 53 00 26 26 46 5d 5d 98 a3 a3 d9 d9 de f6 f6 f9 fe fe 85 7c 7b 54 00 00 00 8a 49 44 41 54 28 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<cPLTEJWJUKTKUquKUX]KUAGBHGMIOX]mrKU"\|LtRNS&&F]]\|{TIDAT(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49813	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	589	OUT	GET /wp-content/themes/sesamehr/img/new-home/Casa.lottie HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	309	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:58:09 GMT ETag: "4958-6138e84822cde" Accept-Ranges: bytes Content-Length: 18776 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:24 UTC	7883	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 cc 23 45 d5 92 00 00 00 bd 00 00 00 0d 00 00 00 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 25 ce 41 0e 82 30 10 05 d0 bb cc 9a 9a 22 44 28 07 70 e5 0d 8c 8b c2 0c 5a 85 8e 99 56 8d 21 dc dd 56 96 33 79 ff e7 2f 60 bd 9b 6d 74 ec 03 74 e7 05 1c 42 07 ba d9 37 c6 0e a3 3a 60 85 aa d6 a6 55 ed 58 f5 4a b7 bd 31 58 37 a6 37 08 05 cc 8c 94 b4 67 99 ed 94 6e 74 42 43 ae 82 ae 5c 2f 05 d8 57 bc b1 24 71 e2 18 1d 1d dd 44 21 33 0a 83 b8 e7 06 21 3d ae e4 49 6c fc 53 e4 b8 69 75 cf f6 41 df 0f 0b a6 6d 19 be 49 c2 96 2a 77 1a d6 1f 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 ec 87 4e 80 26 04 00 00 4d 0c 00 00 34 00 00 00 61 6e 69 6d 61 74 69 6f 6e 73 2f 30 37 32 37 39 61 63 66 2d 36 64 33 64 2d 34 30 39 38 2d 38 66 33 62 2d 30 Data Ascii: PK#Emanifest.json%A0"D(pZV!V3y/`mttB7:`UXJ1X77gntBC\/W$qD!3!=IlSiuAmI*wPKN&M4animations/07279acf-6d3d-4098-8f3b-0
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: 91 44 cf 96 48 0d 21 ab 8e 8d 9e 88 f4 9e 90 9d 77 dc 11 92 88 a4 7a 22 81 e9 d5 90 48 55 47 ea e9 ce f9 aa 8e d4 d3 7a 47 1f bf d3 13 e3 e4 ab e8 90 42 56 cf a3 0b e0 44 81 b7 88 e4 ed fc 3d 14 44 24 d0 db 07 89 e0 f7 42 a4 ee 9c ef 90 89 5c e9 e1 f1 31 4f 8d 9e b6 f0 0c 0a a1 23 92 04 2e 07 48 4f 65 19 17 22 12 2a 52 6f da c6 23 33 ab e7 7c bd 67 cb fe e7 73 3e 89 8f 10 a9 fb 7e 21 81 a2 d3 13 e3 4b 3c 28 fc 4c 48 22 23 c4 e3 8c 08 40 42 60 27 61 74 4b 62 09 c1 20 d4 05 75 2b cf 13 ea 2b ef fa dc f1 28 7a a2 7f 0a 34 f4 ef 51 18 f5 74 c7 08 36 13 c9 0b a6 23 d2 40 c8 9a 30 17 56 13 9e 05 b9 79 36 db 10 89 6f 56 36 44 32 8f f3 8d 27 21 40 6c ef df 54 cf 10 7f 65 75 5d 30 59 c8 b8 80 cf 4c f4 8a 04 a8 67 38 1e 77 39 2f 1d 73 07 85 18 a6 57 ac b8 86 48 e6 Data Ascii: DH!wz"HUGzGBVD=D$B\1O#.HOe"*Ro#3\|gs>~!K<(LH"#@B`'atKb u++(z4Qt6#@0Vy6oV6D2'!@lTeu]0YLg8w9/sWH
2024-10-04 13:38:24 UTC	2893	IN	Data Raw: 21 0d bb bf 20 12 34 6c 89 74 fb 9c 0f 17 d2 44 a4 46 cf e5 5d 75 eb d9 1a 22 0d 84 6c 9f 11 bb 9e a5 3a 2c e3 12 e3 80 95 54 1d 8f f9 ba a7 38 f3 2e d6 f0 13 42 24 a3 c4 c5 4f a0 23 26 12 0a c8 00 e9 39 5f 12 09 02 0d 95 a6 e7 7c 78 b3 91 01 f4 95 c2 89 e7 44 60 20 b2 72 48 0f 24 98 5f f9 83 f9 9c 2f 1a 44 c1 d1 5d ec a5 87 35 88 87 10 89 f4 60 41 ac 5e 0f d4 cd f1 58 b9 b9 91 4d 44 d2 fc 80 17 6c 09 09 d3 b5 95 aa a6 f9 8a 87 25 6f ba d6 cb 5f ef e7 79 76 44 b2 36 61 33 21 11 c9 50 08 14 28 21 81 0d 37 2b 1d 91 bc fd ca 6b e6 b3 df 12 eb 5d a4 24 4e 0b 0b c8 ec af 7e 0b c7 ad 05 26 da 8c 8f d7 6e 2b 6d 89 44 7a 3c a3 7d 3c 8a d5 a0 78 58 8d 87 99 c4 63 d1 fc 6b 7e f2 aa e3 73 fc d9 8a 75 f1 c0 3a 90 6f d1 a0 09 c7 25 2b 44 2a 84 44 22 c9 dd a3 07 12 fb Data Ascii: ! 4ltDF]u"l:,T8.B$O#&9_\|xD` rH$_/D]5`A^XMDl%o_yvD6a3!P(!7+k]$N~&n+mDz<}<xXck~su:o%+D*D"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49823	104.16.138.209	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	351	OUT	GET /8564339.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	652	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 2896 Connection: close Cf-Bgj: minify Cf-Polished: origSize=3008 access-control-allow-credentials: true access-control-allow-origin: https://try.sesamehr.co access-control-max-age: 3600 vary: origin x-content-type-options: nosniff x-hubspot-correlation-id: b7829c04-e69b-4a31-822e-df5d4ade1c12 Last-Modified: Fri, 04 Oct 2024 13:37:07 GMT CF-Cache-Status: HIT Age: 34 Expires: Fri, 04 Oct 2024 13:39:54 GMT Cache-Control: public, max-age=90 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8cd592743cba434a-EWR
2024-10-04 13:38:24 UTC	717	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 6e 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 75 62 73 70 6f 74 66 65 65 64 62 61 63 6b 2e 63 6f 6d 2f 66 65 65 64 62 61 63 6b 77 65 62 2d 6e 65 77 2e 6a 73 22 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 Data Ascii: !function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hubspotfeedback.com/feedbackweb-new.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.get
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 68 75 62 73 70 6f 74 2d 77 65 62 2d 69 6e 74 65 72 61 63 74 69 76 65 73 2d 6c 6f 61 64 65 72 22 2c 30 2c 7b 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 3a 22 61 6e 6f 6e 79 6d 6f 75 73 22 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 Data Ascii: ,n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("hubspot-web-interactives-loader",0,{"crossorigin":"anonymous","data-loader":"hs-scriptloader"
2024-10-04 13:38:24 UTC	810	IN	Data Raw: 65 28 6e 2c 69 29 7d 7d 28 22 68 73 2d 61 64 73 2d 70 69 78 65 6c 2d 38 35 36 34 33 33 39 22 2c 30 2c 7b 22 64 61 74 61 2d 61 64 73 2d 70 6f 72 74 61 6c 2d 69 64 22 3a 38 35 36 34 33 33 39 2c 22 64 61 74 61 2d 61 64 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 38 35 36 34 33 33 39 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 6e 61 31 22 7d 29 3b 76 61 72 20 5f 68 73 70 3d 77 69 6e 64 6f 77 2e 5f 68 73 70 3d 77 69 6e 64 6f 77 2e 5f 68 73 70 7c 7c 5b 5d 3b 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 45 6e 61 62 6c 65 64 46 Data Ascii: e(n,i)}}("hs-ads-pixel-8564339",0,{"data-ads-portal-id":8564339,"data-ads-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":8564339,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});var _hsp=window._hsp=window._hsp\|\|[];_hsp.push(['addEnabledF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49822	104.17.245.203	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:23 UTC	391	OUT	GET /@dotlottie/player-component@1.0.0/dist/dotlottie-player.js HTTP/1.1 Host: unpkg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	578	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"52f95-a5ortVpVcaDVdN2fO+5oFj6JbNE" via: 1.1 fly.io fly-request-id: 01HRW74T83N1N4MKC9JQFQFXXH-lga CF-Cache-Status: HIT Age: 17705095 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8cd592743dab4273-EWR
2024-10-04 13:38:24 UTC	791	IN	Data Raw: 37 64 35 65 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 5b 22 64 6f 74 6c 6f 74 74 69 65 2d 70 6c 61 79 65 72 22 5d 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 Data Ascii: 7d5e!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self)["dotlottie-player"]={})}(this,(function(exports){"use
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 43 48 41 4e 54 41 42 49 4c 49 54 59 0a 20 20 41 4e 44 20 46 49 54 4e 45 53 53 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 20 41 55 54 48 4f 52 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 53 50 45 43 49 41 4c 2c 20 44 49 52 45 43 54 2c 0a 20 20 49 4e 44 49 52 45 43 54 2c 20 4f 52 20 43 4f 4e 53 45 51 55 45 4e 54 49 41 4c 20 44 41 4d 41 47 45 53 20 4f 52 20 41 4e 59 20 44 41 4d 41 47 45 53 20 57 48 41 54 53 4f 45 56 45 52 20 52 45 53 55 4c 54 49 4e 47 20 46 52 4f 4d 0a 20 20 4c 4f 53 53 20 4f 46 20 55 53 45 2c 20 44 41 54 41 20 4f 52 20 50 52 4f 46 49 54 53 2c 20 57 48 45 54 48 45 52 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 4e 45 47 4c 49 47 45 4e 43 45 20 4f 52 0a 20 20 4f 54 48 Data Ascii: CHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTH
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 6e 75 6c 6c 21 3d 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2e 70 6f 6c 79 66 69 6c 6c 57 72 61 70 46 6c 75 73 68 43 61 6c 6c 62 61 63 6b 2c 72 65 6d 6f 76 65 4e 6f 64 65 73 3d 28 74 2c 65 2c 72 3d 6e 75 6c 6c 29 3d 3e 7b 66 6f 72 28 3b 65 21 3d 3d 72 3b 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 2c 65 3d 72 7d 7d 2c 6d 61 72 6b 65 72 3d 60 7b 7b 6c 69 74 2d 24 7b 53 74 72 69 6e 67 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 73 6c 69 63 65 28 32 29 7d 7d 7d 60 2c 6e 6f 64 65 4d 61 72 6b 65 72 3d 60 5c 78 33 Data Ascii: "!=typeof window&&null!=window.customElements&&void 0!==window.customElements.polyfillWrapFlushCallback,removeNodes=(t,e,r=null)=>{for(;e!==r;){const r=e.nextSibling;t.removeChild(e),e=r}},marker=`{{lit-${String(Math.random()).slice(2)}}}`,nodeMarker=`\x3
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 74 65 53 75 66 66 69 78 2e 6c 65 6e 67 74 68 29 2b 74 5b 33 5d 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6e 29 7d 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 74 29 2c 74 68 69 73 2e 70 61 72 74 73 2e 70 75 73 68 28 7b 74 79 70 65 3a 22 6e 6f 64 65 22 2c 69 6e 64 65 78 3a 2b 2b 61 7d 29 7d 22 22 3d 3d 3d 73 5b 6e 5d 3f 28 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 72 65 61 74 65 4d 61 72 6b 65 72 28 29 2c 74 29 2c 72 2e 70 75 73 68 28 74 29 29 3a 74 2e 64 61 74 61 3d 73 5b 6e 5d 2c 6f 2b 3d 6e 7d 7d 65 6c 73 65 20 69 66 28 38 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 74 2e 64 61 74 61 3d 3d 3d 6d 61 72 6b 65 72 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 6e 75 6c 6c 21 Data Ascii: teSuffix.length)+t[3]),r=document.createTextNode(n)}i.insertBefore(r,t),this.parts.push({type:"node",index:++a})}""===s[n]?(i.insertBefore(createMarker(),t),r.push(t)):t.data=s[n],o+=n}}else if(8===t.nodeType)if(t.data===marker){const e=t.parentNode;null!
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 2c 61 3d 69 5b 6e 5d 7d 6c 2e 66 6f 72 45 61 63 68 28 74 3d 3e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 29 7d 63 6f 6e 73 74 20 63 6f 75 6e 74 4e 6f 64 65 73 3d 74 3d 3e 7b 6c 65 74 20 65 3d 31 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 30 3a 31 3b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 72 65 65 57 61 6c 6b 65 72 28 74 2c 77 61 6c 6b 65 72 4e 6f 64 65 46 69 6c 74 65 72 2c 6e 75 6c 6c 2c 21 31 29 3b 66 6f 72 28 3b 72 2e 6e 65 78 74 4e 6f 64 65 28 29 3b 29 65 2b 2b 3b 72 65 74 75 72 6e 20 65 7d 2c 6e 65 78 74 41 63 74 69 76 65 49 6e 64 65 78 49 6e 54 65 6d 70 6c 61 74 65 50 61 72 74 73 3d 28 74 2c 65 3d 2d 31 29 3d 3e 7b 66 6f 72 28 6c 65 74 20 72 3d 65 2b 31 3b 72 3c 74 2e 6c 65 6e Data Ascii: ,a=i[n]}l.forEach(t=>t.parentNode.removeChild(t))}const countNodes=t=>{let e=11===t.nodeType?0:1;const r=document.createTreeWalker(t,walkerNodeFilter,null,!1);for(;r.nextNode();)e++;return e},nextActiveIndexInTemplateParts=(t,e=-1)=>{for(let r=e+1;r<t.len
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 74 20 64 69 72 65 63 74 69 76 65 73 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 69 73 44 69 72 65 63 74 69 76 65 3d 74 3d 3e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 64 69 72 65 63 74 69 76 65 73 2e 68 61 73 28 74 29 2c 6e 6f 43 68 61 6e 67 65 3d 7b 7d 2c 6e 6f 74 68 69 6e 67 3d 7b 7d 3b 0a 2f 2a 2a 0a 20 20 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 20 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 Data Ascii: t directives=new WeakMap,isDirective=t=>"function"==typeof t&&directives.has(t),noChange={},nothing={};/** * @license * Copyright (c) 2017 The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 63 65 73 73 6f 72 2e 68 61 6e 64 6c 65 54 65 78 74 45 78 70 72 65 73 73 69 6f 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 3b 74 2e 69 6e 73 65 72 74 41 66 74 65 72 4e 6f 64 65 28 6f 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 2c 74 68 69 73 2e 5f 5f 70 61 72 74 73 2e 70 75 73 68 28 74 29 7d 65 6c 73 65 20 74 68 69 73 2e 5f 5f 70 61 72 74 73 2e 70 75 73 68 28 2e 2e 2e 74 68 69 73 2e 70 72 6f 63 65 73 73 6f 72 2e 68 61 6e 64 6c 65 41 74 74 72 69 62 75 74 65 45 78 70 72 65 73 73 69 6f 6e 73 28 6f 2c 73 2e 6e 61 6d 65 2c 73 2e 73 74 72 69 6e 67 73 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 29 29 3b 6e 2b 2b 7d 65 6c 73 65 20 74 68 69 73 2e 5f 5f 70 61 72 74 73 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 6e 2b 2b 3b 72 65 74 75 72 6e 20 69 73 43 45 50 6f 6c Data Ascii: cessor.handleTextExpression(this.options);t.insertAfterNode(o.previousSibling),this.__parts.push(t)}else this.__parts.push(...this.processor.handleAttributeExpressions(o,s.name,s.strings,this.options));n++}else this.__parts.push(void 0),n++;return isCEPol
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 6d 70 6c 61 74 65 22 29 3b 72 65 74 75 72 6e 20 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 68 69 73 2e 67 65 74 48 54 4d 4c 28 29 2c 74 7d 7d 0a 2f 2a 2a 0a 20 20 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 20 20 2a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 0a 20 20 Data Ascii: eElement(){const t=document.createElement("template");return t.innerHTML=this.getHTML(),t}}/** * @license * Copyright (c) 2017 The Polymer Project Authors. All rights reserved. * This code may only be used under the BSD style license found at
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 73 2e 5f 67 65 74 56 61 6c 75 65 28 29 29 29 7d 7d 63 6c 61 73 73 20 41 74 74 72 69 62 75 74 65 50 61 72 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 63 6f 6d 6d 69 74 74 65 72 3d 74 7d 73 65 74 56 61 6c 75 65 28 74 29 7b 74 3d 3d 3d 6e 6f 43 68 61 6e 67 65 7c 7c 69 73 50 72 69 6d 69 74 69 76 65 28 74 29 26 26 74 3d 3d 3d 74 68 69 73 2e 76 61 6c 75 65 7c 7c 28 74 68 69 73 2e 76 61 6c 75 65 3d 74 2c 69 73 44 69 72 65 63 74 69 76 65 28 74 29 7c 7c 28 74 68 69 73 2e 63 6f 6d 6d 69 74 74 65 72 2e 64 69 72 74 79 3d 21 30 29 29 7d 63 6f 6d 6d 69 74 28 29 7b 66 6f 72 28 3b 69 73 44 69 72 65 63 74 69 76 65 28 74 68 69 73 2e 76 61 6c 75 65 29 3b 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e Data Ascii: s._getValue()))}}class AttributePart{constructor(t){this.value=void 0,this.committer=t}setValue(t){t===noChange\|\|isPrimitive(t)&&t===this.value\|\|(this.value=t,isDirective(t)\|\|(this.committer.dirty=!0))}commit(){for(;isDirective(this.value);){const t=this.
2024-10-04 13:38:24 UTC	1369	IN	Data Raw: 28 74 29 7b 74 68 69 73 2e 76 61 6c 75 65 21 3d 3d 74 26 26 28 74 68 69 73 2e 63 6c 65 61 72 28 29 2c 74 68 69 73 2e 5f 5f 69 6e 73 65 72 74 28 74 29 2c 74 68 69 73 2e 76 61 6c 75 65 3d 74 29 7d 5f 5f 63 6f 6d 6d 69 74 54 65 78 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 73 74 61 72 74 4e 6f 64 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 72 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 74 3d 6e 75 6c 6c 3d 3d 74 3f 22 22 3a 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 3b 65 3d 3d 3d 74 68 69 73 2e 65 6e 64 4e 6f 64 65 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 33 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 61 74 61 3d 72 3a 74 68 69 73 2e 5f 5f 63 6f 6d 6d 69 74 4e 6f 64 65 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 Data Ascii: (t){this.value!==t&&(this.clear(),this.__insert(t),this.value=t)}__commitText(t){const e=this.startNode.nextSibling,r="string"==typeof(t=null==t?"":t)?t:String(t);e===this.endNode.previousSibling&&3===e.nodeType?e.data=r:this.__commitNode(document.createT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49824	150.171.27.10	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	342	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BC516F497A094D13BFD14936C2A39FB6 Ref B: EWR311000106017 Ref C: 2024-10-04T13:38:24Z Date: Fri, 04 Oct 2024 13:38:23 GMT Connection: close
2024-10-04 13:38:24 UTC	3123	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-04 13:38:24 UTC	8192	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 22 3a 7b 74 79 70 65 3a 22 69 6e 74 65 67 65 72 22 7d 2c 22 69 74 65 6d 73 2e 6c 6f 63 61 74 69 6f 6e 5f 69 64 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 6e 61 6d 65 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 70 72 69 63 65 22 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 22 69 74 65 6d 73 2e 71 75 61 6e 74 69 74 79 22 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 22 69 74 65 6d 73 2e 76 61 72 69 61 6e 74 22 3a 7b 7d 2c 70 72 6f 6d 6f 74 69 6f 6e 73 3a 7b 74 79 70 65 3a 22 61 72 72 61 79 22 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 63 72 65 61 74 69 76 65 5f 6e 61 6d 65 22 3a 7b 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 63 72 65 61 74 69 76 65 5f 73 6c 6f 74 22 3a 7b 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 69 64 22 3a 7b 7d 2c 22 70 Data Ascii: position":{type:"integer"},"items.location_id":{},"items.name":{},"items.price":{type:"number"},"items.quantity":{type:"number"},"items.variant":{},promotions:{type:"array"},"promotions.creative_name":{},"promotions.creative_slot":{},"promotions.id":{},"p
2024-10-04 13:38:24 UTC	4693	IN	Data Raw: 75 69 64 43 6f 6f 6b 69 65 3d 6f 2e 75 69 64 43 6f 6f 6b 69 65 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 67 74 6d 54 61 67 53 6f 75 72 63 65 3d 75 6e 64 65 66 69 6e 65 64 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 67 74 6d 54 61 67 53 6f 75 72 63 65 22 29 26 26 6f 2e 67 74 6d 54 61 67 53 6f 75 72 63 65 26 26 74 79 70 65 6f 66 20 6f 2e 67 74 6d 54 61 67 53 6f 75 72 63 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 67 74 6d 54 61 67 53 6f 75 72 63 65 3d 6f 2e 67 74 6d 54 61 67 53 6f 75 72 63 65 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 67 74 61 67 50 69 64 3d 21 31 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 50 69 64 22 29 26 26 6f 2e 70 61 67 65 50 69 64 26 26 Data Ascii: uidCookie=o.uidCookie);this.uetConfig.gtmTagSource=undefined;o.hasOwnProperty("gtmTagSource")&&o.gtmTagSource&&typeof o.gtmTagSource=="string"&&(this.uetConfig.gtmTagSource=o.gtmTagSource);this.uetConfig.gtagPid=!1;o.hasOwnProperty("pagePid")&&o.pagePid&&
2024-10-04 13:38:24 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-10-04 13:38:24 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-10-04 13:38:24 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-10-04 13:38:24 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-10-04 13:38:24 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49831	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	402	OUT	GET /wp-content/uploads/2023/06/espana.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:15 GMT ETag: "203-5ff430d5bb0af" Accept-Ranges: bytes Content-Length: 515 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:24 UTC	515	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 cc 50 4c 54 45 ff ff ff c9 43 4a c8 42 4a c8 42 4b c8 41 4b c8 41 4b c8 41 4b b8 76 6e b9 af c8 c3 ac 6f c8 41 4b c9 6e 59 d4 7e 52 da 6c 49 da 77 63 db 77 5f db 7b 63 de 94 93 df 89 63 df be 60 e2 80 52 e3 7e 48 e3 7f 48 e3 a7 a0 e3 a9 a6 e3 aa a7 e3 c0 5e e4 81 48 e4 a8 a0 e6 8d 54 e7 9d 75 e8 92 4b e8 95 5f e8 97 57 e8 c4 5c e9 c8 8a e9 c9 8e ea a3 61 ea ae 7f eb a8 71 eb ba 9c ec c6 5a ed bf 9d f1 b3 67 f1 bb 71 f1 d0 d9 f3 c6 5c Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTECJBJBKAKAKAKvnoAKnY~RlIwcw_{cc`R~HH^HTuK_W\aqZgq\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49832	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	402	OUT	GET /wp-content/uploads/2023/06/brazil.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:14 GMT ETag: "212-5ff430d4c0101" Accept-Ranges: bytes Content-Length: 530 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:24 UTC	530	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 9c 50 4c 54 45 ff ff ff 72 ae 00 73 af 00 74 af 00 73 af 00 73 af 00 73 af 00 41 47 9b 45 4a 9d 48 4c 99 49 4e 98 49 4f 9f 4c 51 99 4e 53 9b 50 55 9c 51 55 9e 51 56 a3 52 58 a4 55 5b a5 56 5b a5 58 5e a7 59 5f a7 5a 5f a7 5a 60 a8 68 6d ae 69 6d af 73 af 00 74 71 89 7c 80 b8 8b 88 9c 90 93 c3 91 95 c3 9e be 1c 9f bf 1c 9f bf 1d a0 bf 1d a1 bf 1d a1 bf 1e a4 a7 cc ab ad d0 ba bc d7 cf ce d5 d2 d3 e3 db dc e8 dd de e8 e0 c8 64 e0 c9 66 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTErstsssAGEJHLINIOLQNSPUQUQVRXU[V[X^Y_Z_Z`hmimstq\|df

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49830	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	409	OUT	GET /wp-content/uploads/2024/01/sesamehr-logo.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 25 Jan 2024 11:43:16 GMT ETag: "e22-60fc3af71aadc" Accept-Ranges: bytes Content-Length: 3618 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:24 UTC	3618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 33 36 2e 38 33 39 22 20 68 65 69 67 68 74 3d 22 32 38 2e 37 37 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 2e 38 33 39 20 32 38 2e 37 37 34 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 35 35 2e 37 31 33 20 2d 35 36 30 2e 37 32 36 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 34 33 2e 35 35 32 20 35 37 37 2e 30 36 33 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 2d 34 33 2e 33 2d 33 2e 31 68 30 63 32 2e 32 2e 35 2c 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="136.839" height="28.774" viewBox="0 0 136.839 28.774"><g transform="translate(-355.713 -560.726)"><g transform="translate(443.552 577.063)"><path d="M-43.3-3.1h0c2.2.5,4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49834	151.101.194.109	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	546	OUT	GET /js_opt/modules/utils/vuid.min.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	458	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1862 Content-Type: application/javascript Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2471536 Date: Fri, 04 Oct 2024 13:38:24 GMT X-Served-By: cache-iad-kiad7000106-IAD, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT X-Cache-Hits: 5621, 0 X-Timer: S1728049104.150121,VS0,VE1 Vary: Accept-Encoding,x-http-method-override
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 61 6c 73 65 2c 6e 2c 6f 2c 69 2c 72 3d 74 79 70 65 6f 66 20 74 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 68 74 74 70 73 3a 2f 2f 76 69 6d 65 6f 2e 63 6f 6d 2f 61 62 6c 69 6e 63 6f 6c 6e 2f 76 75 69 64 22 2c 61 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 32 31 34 37 34 38 33 36 34 37 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 7b 65 3d 30 3b 74 3d 66 28 29 7d 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 74 2d 65 2b 31 29 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 76 Data Ascii: (function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()*(t-e+1))+e}function d(t){v
2024-10-04 13:38:24 UTC	491	IN	Data Raw: 2b 22 2e 22 2b 28 28 67 28 29 5e 6c 28 74 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 26 32 31 34 37 34 38 33 36 34 37 29 3b 65 3d 74 72 75 65 7d 6f 3d 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 3e 32 29 7b 6f 2e 73 68 69 66 74 28 29 7d 73 28 22 76 75 69 64 22 2c 6e 2e 63 6f 6f 6b 69 65 2c 33 36 35 2a 32 2c 22 2f 22 2c 22 2e 22 2b 6f 2e 6a 6f 69 6e 28 22 2e 22 29 2c 74 72 75 65 2c 22 4e 6f 6e 65 22 29 3b 69 66 28 65 26 26 73 28 22 76 75 69 64 22 29 29 7b 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 76 75 69 64 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 2e 5f 76 75 69 64 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c Data Ascii: +"."+((g()^l(t.navigator.userAgent)).toString()&2147483647);e=true}o=t.location.hostname.split(".");if(o.length>2){o.shift()}s("vuid",n.cookie,365*2,"/","."+o.join("."),true,"None");if(e&&s("vuid")){if(typeof t._vuid==="object"&&t._vuid.length){for(a=0;a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49829	151.101.2.109	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	366	OUT	GET /p/4.37.7/js/player.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	457	IN	HTTP/1.1 200 OK Connection: close Content-Length: 608152 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 04 Oct 2024 13:38:24 GMT Age: 150852 X-Served-By: cache-iad-kiad7000055-IAD, cache-ewr-kewr1740058-EWR X-Cache: HIT, HIT X-Cache-Hits: 19, 1 X-Timer: S1728049104.142745,VS0,VE2 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 33 37 2e 37 20 2d 20 32 30 32 34 2d 31 30 2d 30 32 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 69 6d 70 6f 72 74 7b 5f 20 61 73 20 65 2c 64 20 61 73 20 74 2c 61 20 61 73 20 6e 2c 69 2c 73 20 61 73 20 6f 2c 43 20 61 73 20 72 2c 63 20 61 73 20 61 2c 62 20 61 73 20 73 2c 65 20 61 73 20 6c 2c 4c 20 61 73 20 63 2c 67 20 61 73 20 64 2c 66 20 61 73 20 75 2c 78 20 61 73 20 70 2c 68 20 61 73 20 5f 2c 6a 20 61 73 20 76 2c 56 20 61 73 20 6d 2c 74 20 61 73 20 66 2c 6b 20 61 73 20 68 2c 6c 20 61 73 20 67 2c 6d 20 61 73 20 62 2c 72 20 61 73 20 45 2c 6e 20 61 73 20 79 2c 70 20 61 73 20 43 2c 50 20 61 73 20 54 2c 54 20 61 73 20 4c Data Ascii: /* VimeoPlayer - v4.37.7 - 2024-10-02 - https://player.vimeo.com/NOTICE.txt */import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,t as f,k as h,l as g,m as b,r as E,n as y,p as C,P as T,T as L
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 70 69 72 65 64 22 2c 74 69 74 6c 65 3a 22 50 6c 61 79 62 61 63 6b 20 65 72 72 6f 72 22 2c 6d 65 73 73 61 67 65 3a 27 57 65 e2 80 99 72 65 20 68 61 76 69 6e 67 20 74 72 6f 75 62 6c 65 20 70 6c 61 79 69 6e 67 20 74 68 69 73 20 76 69 64 65 6f 2e 20 50 6c 65 61 73 65 20 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 3e 72 65 6c 6f 61 64 20 74 68 65 20 70 6c 61 79 65 72 3c 2f 61 3e 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 27 2c 66 69 6e 61 6c 3a 21 31 7d 29 2c 53 63 61 6e 6e 65 72 45 72 72 6f 72 3a 28 29 3d 3e 28 7b 69 64 3a 22 73 63 61 6e 6e 65 72 2d 65 72 72 6f 72 22 2c 66 69 6e 61 6c 3a 21 31 7d 29 2c 50 6c 61 79 65 72 45 Data Ascii: pired",title:"Playback error",message:'Were having trouble playing this video. Please <a href="javascript:window.location.reload()" rel="noopener">reload the player</a> and try again.',final:!1}),ScannerError:()=>({id:"scanner-error",final:!1}),PlayerE
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 6f 2e 69 50 68 6f 6e 65 7c 7c 6f 2e 6d 6f 62 69 6c 65 41 6e 64 72 6f 69 64 7c 7c 6f 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 7c 7c 6f 2e 62 72 6f 77 73 65 72 2e 62 62 31 30 3b 66 75 6e 63 74 69 6f 6e 20 6c 6f 28 29 7b 6c 65 74 20 65 3d 22 64 65 73 6b 74 6f 70 22 3b 72 65 74 75 72 6e 20 6f 2e 69 50 61 64 3f 65 3d 22 74 61 62 6c 65 74 22 3a 73 6f 26 26 28 65 3d 22 6d 6f 62 69 6c 65 22 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 6f 28 29 7b 6c 65 74 20 65 3d 22 77 69 6e 64 6f 77 73 22 3b 72 65 74 75 72 6e 20 6f 2e 69 4f 53 3f 65 3d 22 69 4f 53 22 3a 6f 2e 61 6e 64 72 6f 69 64 3f 65 3d 22 61 6e 64 72 6f 69 64 22 3a 6f 2e 6d 61 63 3f 65 3d 22 6d 61 63 4f 53 22 3a 6f 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 26 26 28 65 3d 22 77 69 6e 64 6f 77 73 50 68 6f 6e 65 22 29 Data Ascii: o.iPhone\|\|o.mobileAndroid\|\|o.windowsPhone\|\|o.browser.bb10;function lo(){let e="desktop";return o.iPad?e="tablet":so&&(e="mobile"),e}function co(){let e="windows";return o.iOS?e="iOS":o.android?e="android":o.mac?e="macOS":o.windowsPhone&&(e="windowsPhone")
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 47 52 41 54 49 4f 4e 5d 29 2c 5b 76 72 2e 52 45 4d 4f 54 45 5f 43 4f 4d 50 4f 4e 45 4e 54 5f 54 49 4d 45 4f 55 54 5d 3a 5b 5d 2e 63 6f 6e 63 61 74 28 67 72 2c 5b 6d 72 2e 41 43 54 49 4f 4e 2c 6d 72 2e 50 52 4f 44 55 43 54 5f 41 4e 41 4c 59 54 49 43 53 2c 6d 72 2e 54 48 49 52 44 5f 50 41 52 54 59 5f 49 4e 54 45 47 52 41 54 49 4f 4e 5d 29 2c 5b 76 72 2e 52 45 41 43 48 5f 54 49 4d 45 5f 41 43 54 49 4f 4e 5d 3a 5b 5d 2e 63 6f 6e 63 61 74 28 62 72 2c 5b 6d 72 2e 56 49 45 57 5d 29 2c 5b 76 72 2e 56 49 45 57 5f 48 4f 54 53 50 4f 54 5d 3a 5b 5d 2e 63 6f 6e 63 61 74 28 62 72 2c 5b 6d 72 2e 56 49 45 57 5d 29 2c 5b 76 72 2e 43 4c 49 43 4b 5f 48 4f 54 53 50 4f 54 5d 3a 5b 5d 2e 63 6f 6e 63 61 74 28 62 72 2c 5b 6d 72 2e 41 43 54 49 4f 4e 5d 29 2c 5b 76 72 2e 56 49 45 Data Ascii: GRATION]),[vr.REMOTE_COMPONENT_TIMEOUT]:[].concat(gr,[mr.ACTION,mr.PRODUCT_ANALYTICS,mr.THIRD_PARTY_INTEGRATION]),[vr.REACH_TIME_ACTION]:[].concat(br,[mr.VIEW]),[vr.VIEW_HOTSPOT]:[].concat(br,[mr.VIEW]),[vr.CLICK_HOTSPOT]:[].concat(br,[mr.ACTION]),[vr.VIE
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 6c 61 79 65 72 5f 75 72 6c 29 3f 60 68 74 74 70 73 3a 2f 2f 24 7b 6e 75 6c 6c 3d 3d 28 73 3d 74 29 3f 76 6f 69 64 20 30 3a 73 2e 70 6c 61 79 65 72 5f 75 72 6c 7d 60 3a 22 22 29 2c 65 2c 69 29 3b 72 65 74 75 72 6e 20 45 28 75 2c 7b 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 30 2c 74 68 72 6f 77 48 74 74 70 45 72 72 6f 72 73 3a 21 31 7d 29 2e 6a 73 6f 6e 28 29 2e 74 68 65 6e 28 65 3d 3e 28 74 3d 65 2c 74 2e 76 69 65 77 21 3d 3d 24 74 2e 65 72 72 6f 72 26 26 28 6e 3d 6c 28 74 2e 72 65 71 75 65 73 74 2e 65 78 70 69 72 65 73 29 2c 61 2e 72 65 71 75 65 73 74 2e 73 65 73 73 69 6f 6e 26 26 74 2e 76 69 64 65 6f 2e 69 64 3d 3d 3d 61 2e 76 69 64 65 6f 2e 69 64 26 26 28 74 2e 72 65 71 75 65 73 74 2e 73 65 73 73 69 6f 6e 3d 61 2e 72 65 71 75 65 73 74 2e 73 65 Data Ascii: layer_url)?`https://${null==(s=t)?void 0:s.player_url}`:""),e,i);return E(u,{withCredentials:!0,throwHttpErrors:!1}).json().then(e=>(t=e,t.view!==$t.error&&(n=l(t.request.expires),a.request.session&&t.video.id===a.video.id&&(t.request.session=a.request.se
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 72 65 6d 6f 76 65 52 65 6d 6f 74 65 50 6c 61 79 65 72 4c 69 73 74 65 6e 65 72 73 4f 6e 49 64 6c 65 28 29 7d 2c 74 2e 72 65 6d 6f 76 65 41 6c 6c 52 65 6d 6f 74 65 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 52 65 6d 6f 74 65 50 6c 61 79 65 72 4c 69 73 74 65 6e 65 72 73 28 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 49 6e 69 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 2c 77 28 65 2c 5b 7b 6b 65 79 3a 22 63 75 72 72 65 6e 74 54 69 6d 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 61 73 74 43 75 72 72 65 6e 74 54 69 6d 65 7c 7c 30 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 72 2e 72 65 6d 6f 74 65 50 6c 61 79 65 72 26 26 24 72 2e 72 65 6d 6f 74 65 50 6c 61 79 Data Ascii: removeRemotePlayerListenersOnIdle()},t.removeAllRemoteListeners=function(){this.removeRemotePlayerListeners(),this.removeInitListeners()},w(e,[{key:"currentTime",get:function(){return this.lastCurrentTime\|\|0},set:function(e){$r.remotePlayer&&$r.remotePlay
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 6c 59 65 61 72 28 72 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2b 31 29 2c 72 3d 72 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 3b 76 61 72 20 61 3d 60 24 7b 65 7d 3d 24 7b 74 3d 4e 6f 28 74 29 7d 60 3b 61 2b 3d 60 3b 65 78 70 69 72 65 73 3d 24 7b 72 7d 60 2c 61 2b 3d 22 3b 70 61 74 68 3d 2f 22 2c 61 2b 3d 60 3b 64 6f 6d 61 69 6e 3d 24 7b 6e 7d 60 2c 6f 26 26 28 61 2b 3d 22 3b 73 65 63 75 72 65 22 29 2c 69 26 26 28 61 2b 3d 60 3b 73 61 6d 65 73 69 74 65 3d 24 7b 69 7d 60 29 3b 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 61 7d 63 61 74 63 68 28 41 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 22 70 6c 61 79 65 72 22 2c 60 22 24 7b 69 2e 6a 6f 69 6e 28 22 26 22 29 7d 22 60 2c 65 2e 63 6f 6e 66 69 67 2e 72 65 71 75 65 73 74 2e 63 6f 6f 6b 69 65 5f Data Ascii: lYear(r.getFullYear()+1),r=r.toGMTString();var a=`${e}=${t=No(t)}`;a+=`;expires=${r}`,a+=";path=/",a+=`;domain=${n}`,o&&(a+=";secure"),i&&(a+=`;samesite=${i}`);try{document.cookie=a}catch(Ae){return!1}}("player",`"${i.join("&")}"`,e.config.request.cookie_
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 74 3d 65 2e 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 74 65 6c 65 63 69 6e 65 2d 73 6e 61 70 73 68 6f 74 5d 22 29 3b 74 26 26 22 6e 6f 6e 65 22 21 3d 3d 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 7c 7c 28 65 2e 70 72 65 76 69 65 77 2e 73 68 6f 77 28 29 2c 73 2e 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 6e 76 69 73 69 62 6c 65 22 29 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 73 2e 75 6e 6c 6f 61 64 28 29 2c 61 2e 66 69 72 65 28 57 74 2e 5f 70 61 75 73 65 64 2c 73 2e 63 75 72 72 65 6e 74 54 69 6d 65 29 2c 5f 3d 21 31 2c 75 3d 21 31 2c 66 3d 6e 75 6c 6c 7d 2c 33 30 30 29 7d 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3b 61 2e 6f 6e 28 Data Ascii: ;else{const t=e.element.querySelector("[telecine-snapshot]");t&&"none"!==t.style.display\|\|(e.preview.show(),s.element.classList.add("invisible")),setTimeout(()=>{s.unload(),a.fire(Wt._paused,s.currentTime),_=!1,u=!1,f=null},300)}})),function(){let t;a.on(
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 7b 63 6f 6e 73 74 20 6e 3d 65 28 74 29 3b 72 65 74 75 72 6e 20 6e 3e 3d 63 73 2e 73 6d 26 26 6e 3c 63 73 2e 6d 64 7d 2c 64 3d 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 28 74 29 3b 72 65 74 75 72 6e 20 6e 3e 3d 63 73 2e 6d 64 26 26 6e 3c 63 73 2e 6c 67 7d 2c 75 3d 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 28 74 29 3b 72 65 74 75 72 6e 20 6e 3e 3d 63 73 2e 6c 67 26 26 6e 3c 63 73 2e 78 6c 7d 2c 70 3d 74 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 28 74 29 3b 72 65 74 75 72 6e 20 6e 3e 3d 63 73 2e 78 6c 26 26 6e 3c 63 73 2e 78 78 6c 7d 2c 5f 3d 74 3d 3e 65 28 74 29 3e 3d 63 73 2e 78 78 6c 3b 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 65 2c 68 65 69 67 68 74 3a 74 2c 62 72 65 61 6b 70 6f 69 6e 74 3a 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 7b 78 78 73 3a 61 2c 78 73 3a 73 2c 73 6d Data Ascii: {const n=e(t);return n>=cs.sm&&n<cs.md},d=t=>{const n=e(t);return n>=cs.md&&n<cs.lg},u=t=>{const n=e(t);return n>=cs.lg&&n<cs.xl},p=t=>{const n=e(t);return n>=cs.xl&&n<cs.xxl},_=t=>e(t)>=cs.xxl;return{width:e,height:t,breakpoint:e=>{const t={xxs:a,xs:s,sm
2024-10-04 13:38:24 UTC	16384	IN	Data Raw: 22 66 61 6c 73 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 74 77 69 74 74 65 72 2d 69 63 6f 6e 2d 74 69 74 6c 65 22 20 72 6f 6c 65 3d 22 69 6d 67 22 3e 3c 74 69 74 6c 65 20 69 64 3d 22 74 77 69 74 74 65 72 2d 69 63 6f 6e 2d 74 69 74 6c 65 22 3e 27 2b 65 2e 74 69 74 6c 65 2b 27 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 66 69 6c 6c 22 20 64 3d 22 4d 38 35 2e 39 38 2c 32 32 32 20 43 35 34 2e 33 30 35 2c 32 32 32 20 32 34 2e 38 32 32 2c 32 31 32 2e 37 31 35 20 30 2c 31 39 36 2e 38 30 31 20 43 34 2e 33 38 38 2c 31 39 37 2e 33 31 39 20 38 2e 38 35 33 2c 31 39 37 2e 35 38 34 20 31 33 2e 33 38 2c 31 39 37 2e 35 38 34 20 43 33 39 2e 36 35 38 2c 31 39 37 2e 35 38 34 20 36 33 2e 38 34 33 2c 31 38 38 2e 36 31 37 20 38 33 2e 30 33 Data Ascii: "false" aria-labelledby="twitter-icon-title" role="img"><title id="twitter-icon-title">'+e.title+'</title><path class="fill" d="M85.98,222 C54.305,222 24.822,212.715 0,196.801 C4.388,197.319 8.853,197.584 13.38,197.584 C39.658,197.584 63.843,188.617 83.03

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49828	151.101.2.109	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	366	OUT	GET /p/4.37.7/js/vendor.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	457	IN	HTTP/1.1 200 OK Connection: close Content-Length: 412014 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 04 Oct 2024 13:38:24 GMT Age: 150852 X-Served-By: cache-iad-kcgs7200089-IAD, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT X-Cache-Hits: 25, 2 X-Timer: S1728049104.151584,VS0,VE0 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 33 37 2e 37 20 2d 20 32 30 32 34 2d 31 30 2d 30 32 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 74 28 6e 29 29 7d 7d 76 61 72 20 72 3d 6e 28 4f 62 6a 65 63 74 2e Data Ascii: /* VimeoPlayer - v4.37.7 - 2024-10-02 - https://player.vimeo.com/NOTICE.txt */var e=Object.prototype;function t(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)}function n(e,t){return function(n){return e(t(n))}}var r=n(Object.
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 6f 6e 20 53 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 63 61 6c 6c 28 65 29 7d 63 61 74 63 68 28 46 6c 29 7b 7d 74 72 79 7b 72 65 74 75 72 6e 20 65 2b 22 22 7d 63 61 74 63 68 28 46 6c 29 7b 7d 7d 72 65 74 75 72 6e 22 22 7d 76 61 72 20 62 3d 2f 5e 5c 5b 6f 62 6a 65 63 74 20 2e 2b 3f 43 6f 6e 73 74 72 75 63 74 6f 72 5c 5d 24 2f 2c 41 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 77 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 49 3d 41 2e 74 6f 53 74 72 69 6e 67 2c 52 3d 77 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6b 3d 52 65 67 45 78 70 28 22 5e 22 2b 49 2e 63 61 6c 6c 28 52 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5c 5e 24 2e 2a 2b 3f 28 29 5b 5c 5d 7b 7d 7c 5d 2f 67 2c 22 5c 5c 24 26 Data Ascii: on S(e){if(null!=e){try{return T.call(e)}catch(Fl){}try{return e+""}catch(Fl){}}return""}var b=/^\[object .+?Constructor\]$/,A=Function.prototype,w=Object.prototype,I=A.toString,R=w.hasOwnProperty,k=RegExp("^"+I.call(R).replace(/[\\^$.*+?()[\]{}\|]/g,"\\$&
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3e 2d 31 26 26 65 25 31 3d 3d 30 26 26 65 3c 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 24 28 65 2e 6c 65 6e 67 74 68 29 26 26 21 67 28 65 29 7d 76 61 72 20 51 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 65 78 70 6f 72 74 73 26 26 21 65 78 70 6f 72 74 73 2e 6e 6f 64 65 54 79 70 65 26 26 65 78 70 6f 72 74 73 2c 4a 3d 51 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 26 26 21 6d 6f 64 75 6c 65 2e 6e 6f 64 65 54 79 70 65 26 26 6d 6f Data Ascii: Array;function $(e){return"number"==typeof e&&e>-1&&e%1==0&&e<=9007199254740991}function z(e){return null!=e&&$(e.length)&&!g(e)}var Q="object"==typeof exports&&exports&&!exports.nodeType&&exports,J=Q&&"object"==typeof module&&module&&!module.nodeType&&mo
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 7a 28 65 29 26 26 28 59 28 65 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 70 6c 69 63 65 7c 7c 65 65 28 65 29 7c 7c 75 65 28 65 29 7c 7c 57 28 65 29 29 29 72 65 74 75 72 6e 21 65 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6e 3d 42 28 65 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 6e 7c 7c 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 3d 3d 6e 29 72 65 74 75 72 6e 21 65 2e 73 69 7a 65 3b 69 66 28 74 28 65 29 29 72 65 74 75 72 6e 21 6f 28 65 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 72 20 69 Data Ascii: .hasOwnProperty;function le(e){if(null==e)return!0;if(z(e)&&(Y(e)\|\|"string"==typeof e\|\|"function"==typeof e.splice\|\|ee(e)\|\|ue(e)\|\|W(e)))return!e.length;var n=B(e);if("[object Map]"==n\|\|"[object Set]"==n)return!e.size;if(t(e))return!o(e).length;for(var r i
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 6d 65 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 65 2c 74 29 7b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 2c 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 Data Ascii: .getOwnPropertyDescriptors(n)):me(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function ge(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}function ye(e){re
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 45 65 28 6e 2c 65 29 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 69 3d 7b 7d 2c 6f 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 6f 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 6f 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 69 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 69 7d 28 65 2c 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 Data Ascii: e:!1,writable:!0,configurable:!0}}),Ee(n,e)})(e)}function Ae(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0\|\|(i[n]=e[n]);return i}(e,t);if(Object.getOwnPrope
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 6e 3d 52 65 28 65 29 29 7c 7c 74 26 26 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 6e 26 26 28 65 3d 6e 29 3b 76 61 72 20 72 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3e 3d 65 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 65 5b 72 2b 2b 5d 7d 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 Data Ascii: (Array.isArray(e)\|\|(n=Re(e))\|\|t&&e&&"number"==typeof e.length){n&&(e=n);var r=0;return function(){return r>=e.length?{done:!0}:{done:!1,value:e[r++]}}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-arr
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 65 64 53 6f 75 72 63 65 42 75 66 66 65 72 3b 66 75 6e 63 74 69 6f 6e 20 47 65 28 65 2c 2e 2e 2e 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 64 75 63 65 28 28 65 2c 74 29 3d 3e 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 65 5b 6e 5d 2c 69 3d 74 5b 6e 5d 3b 72 26 26 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3f 65 5b 6e 5d 3d 28 72 7c 7c 5b 5d 29 2e 63 6f 6e 63 61 74 28 69 29 3a 28 65 3d 3e 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 28 69 29 3f 65 5b 6e 5d 3d 47 65 28 7b 7d 2c 72 2c 69 29 3a 65 5b 6e 5d 3d 69 29 7d 29 2c 65 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 65 28 29 7b 6c 65 74 20 65 2c 74 2c 6e 3d 6e 65 77 Data Ascii: edSourceBuffer;function Ge(e,...t){return t.reduce((e,t)=>(Object.keys(t\|\|{}).forEach(n=>{const r=e[n],i=t[n];r&&void 0===i\|\|(Array.isArray(i)?e[n]=(r\|\|[]).concat(i):(e=>e&&"object"==typeof e)(i)?e[n]=Ge({},r,i):e[n]=i)}),e),e)}function Ke(){let e,t,n=new
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 2f 22 29 3b 69 66 28 32 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6e 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 72 65 74 75 72 6e 20 6e 5b 30 5d 3b 63 6f 6e 73 74 20 72 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 3f 22 29 3b 69 66 28 72 2e 6c 65 6e 67 74 68 3e 31 29 72 65 74 75 72 6e 20 72 5b 30 5d 3b 63 6f 6e 73 74 20 69 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 23 22 29 3b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 3e 31 3f 69 5b 30 5d 3a 74 5b 31 5d 7d 63 6f 6e 73 74 20 6e 74 3d 28 65 2c 74 29 3d 3e 28 2e 2e 2e 6e 29 3d 3e 7b 5b 60 25 63 24 7b 65 7d 60 2c 74 5d 2e 63 6f 6e 63 61 74 28 6e 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 74 29 7b 74 68 69 73 2e Data Ascii: /");if(2!==t.length)return null;const n=t[1].split("/");if(n.length>1)return n[0];const r=t[1].split("?");if(r.length>1)return r[0];const i=t[1].split("#");return i.length>1?i[0]:t[1]}const nt=(e,t)=>(...n)=>{[`%c${e}`,t].concat(n)};function rt(e,t){this.
2024-10-04 13:38:24 UTC	1371	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 3d 3d 3d 63 2e 73 74 61 74 75 73 26 26 28 21 63 2e 72 65 73 70 6f 6e 73 65 55 52 4c 7c 7c 30 21 3d 3d 63 2e 72 65 73 70 6f 6e 73 65 55 52 4c 2e 69 6e 64 65 78 4f 66 28 22 66 69 6c 65 3a 22 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 63 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 28 2e 2a 3f 29 3a 5b 5e 5c 53 5c 6e 5d 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 24 2f 67 6d 2c 28 74 2c 6e 2c 72 29 3d 3e 7b 65 5b 6e 5d 3d 65 5b 6e 5d 3f 60 24 7b 65 5b 6e 5d 7d 2c 24 7b 72 7d 60 3a 72 7d 29 3b 6c 65 74 20 74 3d 7b 7d 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 70 65 72 66 Data Ascii: function(){if(0===c.status&&(!c.responseURL\|\|0!==c.responseURL.indexOf("file:")))return;const e={};c.getAllResponseHeaders().replace(/^(.?):[^\S\n]([\s\S]*?)$/gm,(t,n,r)=>{e[n]=e[n]?`${e[n]},${r}`:r});let t={};if(window.performance&&void 0!==window.perf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49833	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	419	OUT	GET /wp-content/themes/sesamehr/img/resenas/capterra_01.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:24 UTC	334	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:24 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 24 Jan 2024 14:35:06 GMT ETag: "7253-60fb1f819253e" Accept-Ranges: bytes Content-Length: 29267 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:24 UTC	7858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 01 15 08 06 00 00 00 f0 c8 1c 35 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ed bd 6d 90 65 45 7a df 99 e7 de 6a 7a 2c 21 4f 53 55 28 14 1d 92 28 c2 eb 11 78 a4 a0 b1 11 03 5d 77 4d 33 31 c3 cb d0 2d 1a 5b 33 03 1e cb 14 0a 7b 0d 8e 8d a5 f9 a0 58 70 c4 aa 6f eb 83 0d bb de a0 09 45 40 dd d6 2e 34 1f 76 17 3e d1 2c 3d b3 cd 27 8a f0 cb 82 77 c3 f4 6c 84 63 61 ec 58 7a c2 a1 01 5b 21 d3 02 cb d2 50 55 37 f7 c9 7b ab 8a ea 7a bb e7 25 5f 9e 73 ce af 22 7a 7a e8 ca 93 2f bf 27 4f 9e cc 7f 3e f9 64 66 f8 81 00 04 5a 4d a0 6f 6d e7 e3 ff f3 93 6f 19 6b 17 86 9d ee 3f 3a 73 fb 81 7f d5 6a 20 34 1e 02 10 80 00 04 20 00 01 08 40 00 02 10 80 00 04 d4 11 c8 d4 d5 88 Data Ascii: PNGIHDR5sBIT\|d IDATx^meEzjz,!OSU((x]wM31-[3{XpoE@.4v>,='wlcaXz[!PU7{z%_s"zz/'O>dfZMomok?:sj 4 @
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: 74 3f e7 7d ec 1f 1d 89 1f 71 77 fc e3 fd c8 7b b7 32 65 ee f4 c9 dd 5b e5 37 84 5f f1 ba 8e cd c5 5b 23 76 cf 68 43 c0 9f b2 cf c5 e0 bf 2d 06 d6 7f 38 72 e4 ea 95 fd fb 1f 90 00 6a df 95 6a 7e 53 12 5c 15 a1 dd 14 51 90 c0 7f 1e 66 3f ba f1 4b b7 35 4c b8 29 08 41 92 37 4d c0 92 01 e0 f3 65 3b 9c 7d b1 77 ed 67 c5 69 d4 f3 09 2d b7 0f 8e 6e 1e 9c ca e6 62 0c bc f5 b4 54 43 6b bd 16 8f a1 b1 a2 d5 4e 66 5b 3f ee 10 62 97 38 42 37 09 22 60 6d aa b7 9b 88 b9 c5 e7 f0 fc c9 e7 2a 37 67 b4 d3 6a 9e d5 28 5c 6d 6d 5b 50 ef 81 ca 20 27 67 80 80 75 45 27 6e 8c 80 b5 e6 3d 73 22 b6 08 31 b9 c7 4d 4e b1 e1 19 12 69 51 37 b9 46 d5 53 84 10 52 d6 6b e5 4d 4c 4f 25 a0 6c c6 eb 59 4c 09 cc 7d ec c1 54 b5 9f 2a d8 a8 71 ef dc ea b2 b9 59 85 07 aa fb fe 2f 8b 27 7f 66 Data Ascii: t?}qw{2e[7_[#vhC-8rjj~S\Qf?K5L)A7Me;}wgi-nbTCkNf[?b8B7"`m7gj(\mm[P 'guE'n=s"1MNiQ7FSRkMLO%lYL}TqY/'f
2024-10-04 13:38:24 UTC	8000	IN	Data Raw: a8 66 cc 0d bc f8 51 21 b2 44 12 11 0a 75 80 aa 89 45 d4 9f 5a 35 9f 54 cd 86 e7 03 13 88 d4 f7 54 08 29 2d 9c bf a9 e0 1e 78 0c 0f fc 86 a4 cb de 8d a1 2b d9 e3 72 33 a0 bb 54 65 2e 5d 45 6a 58 32 02 56 0d 8d 16 ab ca 35 0e e6 ae 51 c0 b2 d6 7e 34 e8 cd 1e 8c 65 be ba 95 a3 e4 23 ec ae 74 0f 1a 8f a5 6e 76 69 6b 7d dd 6e 58 66 ed 09 bc ad 4a f7 00 04 ac d2 e8 e2 3c 98 2a a8 f4 0e ad 0b da 57 10 b0 c2 f4 27 2d 1e 8f 61 5a d7 a0 5c 11 b0 1a 64 cc ed 4d 51 32 77 0e 3a 86 37 ce 80 a3 9b a9 cd e3 b2 de 70 c2 15 de 56 65 0c 8c 80 55 86 5a 7b 9e a9 6b 30 77 8d 02 96 28 23 83 c5 de cc a3 ed e9 3d c5 5a aa e4 23 ec 2a cd 87 b8 98 e9 1a 95 da 2d ca e4 e6 c0 97 d8 0d ab 6c d6 e8 ef 91 96 05 75 6d 8e 10 1e ed f7 45 a0 3d 59 d9 d2 15 33 90 49 fc 25 09 e2 7e 7d c5 6c Data Ascii: fQ!DuEZ5TT)-x+r3Te.]EjX2V5Q~4e#tnvik}nXfJ<W'-aZ\dMQ2w:7pVeUZ{k0w(#=Z#-lumE=Y3I%~}l
2024-10-04 13:38:24 UTC	5409	IN	Data Raw: 14 43 bc 1a b5 8e 5d b2 0d 23 3b 61 21 55 0c b8 18 1e 77 eb 0d 45 c0 8a ff 5e 6f 2e 31 f6 82 b9 6a 6b 11 b9 c7 04 63 be a3 db 6c e6 2e de 98 32 e7 e4 f6 d0 9b aa da 93 e7 bf 20 90 42 94 54 21 a4 e0 81 95 ea 35 68 8f 07 d6 1a 61 8e 12 a6 ea 6a 57 96 bb 35 4c 05 02 96 0e bb 34 b6 16 a1 83 b9 fb 16 b0 6c 66 ee 1d 1c 9e b9 d0 58 83 b4 b0 61 6e 07 45 82 bb 9f 4d b5 b0 6f 13 f2 54 9e 19 ec 92 8d 17 a7 76 68 2e 76 3a e6 d9 14 7d 4e ca 8f 16 c8 1d 01 2b 85 85 37 44 90 a8 de 1e 5e 5a ca ad a5 23 8c 31 03 b8 ef 68 37 8e f7 7b e9 ce 5b c4 e4 07 c4 f3 f5 9c f7 8c f7 c8 10 01 2b 26 ed 2f ca 52 c1 bd 65 1e 58 23 fa 8c 5b b2 84 1a 7b 5d 27 0d 6c bf 25 4c 05 02 56 9a 71 a8 35 a5 86 5e 58 7a 16 b0 3e 1d ee 9f 9e 3d 73 4b b6 dc 1a 03 b5 a5 a1 1c 29 0c 6f 69 77 6c 70 c5 1c Data Ascii: C]#;a!UwE^o.1jkcl.2 BT!5hajW5L4lfXanEMoTvh.v:}N+7D^Z#1h7{[+&/ReX#[{]'l%LVq5^Xz>=sK)oiwlp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49827	3.160.150.36	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	400	OUT	GET /choice/srUtCbgF3R7rD/www.sesamehr.com/choice.js?tag_version=V2 HTTP/1.1 Host: cmp.inmobi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	668	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8567 Connection: close Cache-Control: max-age=900 Date: Fri, 04 Oct 2024 13:38:22 GMT Last-Modified: Tue, 25 Jun 2024 12:21:45 GMT ETag: "8422f52ce2f09ab49d5c8e3c3cd38ea8" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Cross-Origin-Resource-Policy: cross-origin Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 134eef7df83fe066fda8a86e722c33dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 X-Amz-Cf-Id: QyZ4hcHZUQikNofnv81GX87LuKBmf0YQOiqFFD7vzCtdwjpUgnWODQ== Age: 3
2024-10-04 13:38:24 UTC	8567	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6d 70 46 69 6c 65 3d 27 6e 6f 4d 6f 64 75 6c 65 27 69 6e 20 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3f 27 63 6d 70 32 2e 6a 73 27 3a 27 63 6d 70 32 2d 70 6f 6c 79 66 69 6c 6c 65 64 2e 6a 73 27 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 6d 70 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 76 61 72 20 66 69 72 73 74 53 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 63 6d 70 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 61 73 79 6e Data Ascii: 'use strict';(function(){var cmpFile='noModule'in HTMLScriptElement.prototype?'cmp2.js':'cmp2-polyfilled.js';(function(){var cmpScriptElement=document.createElement('script');var firstScript=document.getElementsByTagName('script')[0];cmpScriptElement.asyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49839	34.120.202.204	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=b9ef8a21753309fb6081d9e409cb42c45d757c6f1728049100 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1103 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	1103	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 74 72 75 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 74 72 75 65 2c 22 63 6c 69 70 5f 69 64 22 3a 38 38 39 30 30 31 38 36 34 2c 22 63 6f 6e 74 65 78 74 22 3a 22 65 6d 62 65 64 2e 6d 61 69 6e 22 2c 22 64 65 76 69 63 65 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 31 2c 22 64 72 6d 22 3a 66 61 6c 73 65 2c 22 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 69 73 5f 6d 6f 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 73 70 61 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 74 72 75 65 2c 22 6f 77 6e 65 72 5f 69 64 22 3a 32 30 32 32 31 30 34 37 33 2c 22 70 72 6f 64 75 63 74 22 3a 22 76 69 6d 65 6f 2d 76 6f 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 73 61 6d 65 68 72 2e 63 6f 6d Data Ascii: [{"autoplay":true,"background":true,"clip_id":889001864,"context":"embed.main","device_pixel_ratio":1,"drm":false,"embed":true,"is_mod":false,"is_spatial":false,"looping":true,"owner_id":202210473,"product":"vimeo-vod","referrer":"https://www.sesamehr.com
2024-10-04 13:38:24 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Fri, 04 Oct 2024 13:38:24 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49837	151.101.128.217	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	657	OUT	GET /video/1760416510-48ad8e7167934ac9ef9e2ffb0fc7a7ae0ce4d12b9a6108c2745f611d78a2d27d-d HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	550	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35902 cache-control: max-age=2592000 content-type: image/avif etag: "d9772f3f0995f78ba6273e6aa831c7f7" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 937518 Date: Fri, 04 Oct 2024 13:38:24 GMT X-Served-By: cache-dfw-kdal2120029-DFW, cache-ewr-kewr1740060-EWR X-Cache: HIT, HIT X-Cache-Hits: 156, 0 X-Timer: S1728049104.346352,VS0,VE2 Vary: Accept
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 8b 24 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 07 80 00 00 04 38 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 08 0d 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 01 00 0d 00 06 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD$(iinfinfeav01ColorjiprpKipcoispe8pixiav1Ccolrnclx
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: 1c a6 ae e5 c1 e9 ae d7 5b be 8e 51 7b 77 0e 66 f0 10 3f 7e de 8b db 68 6f 52 e6 14 61 ed d7 9b 4c 54 22 e9 96 5f 20 5f e1 b6 25 77 e5 b9 cb e7 79 a2 01 2a 00 16 24 2b 64 7b db 99 0c 2f ab b8 1e 70 2f de b7 a2 57 55 0a 63 0e 03 dc dd 42 9c ad b9 17 af 74 31 31 7c ff f9 a3 41 d2 8a a9 0a 43 18 e2 82 ad ab 28 f8 bc 3b b3 44 f5 86 9f 46 1f 5c c6 fe 31 5b ac 3d 8c d2 42 bd 49 1d 3f a6 6e 0f 32 e0 e3 59 3e ab 41 53 f6 c1 f0 e7 7b 94 df d8 e6 71 98 40 eb 9d 6d 0e f9 92 72 fc 4b b1 60 80 79 6b 7a 96 3e 56 ae df 9c 75 98 14 cf 7b 67 8f 22 7a 7b 96 6a 3e 65 28 76 9c 54 c1 2c df cf fc b9 90 6f be 42 d8 9d 42 fd c0 83 9d cc 4b 43 54 b4 8d 0f 05 5e 02 e0 88 97 38 e1 c1 06 17 1e 07 98 f0 6b 30 ed f8 0f dc e3 df cd 0d 7a a8 ac 71 3f f9 94 3d 55 75 78 a4 d6 e0 f3 05 9e Data Ascii: [Q{wf?~hoRaLT"_ _%wy*$+d{/p/WUcBt11\|AC(;DF\1[=BI?n2Y>AS{q@mrK`ykz>Vu{g"z{j>e(vT,oBBKCT^8k0zq?=Uux
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: a6 41 ef 27 2c 73 c5 eb 2a c0 95 24 5d 03 70 7c b7 20 fb cc 21 ee 5c 6e 3f c8 86 1a fe 55 8b 61 7e 30 0e b9 83 57 0f 28 51 76 95 23 85 8f 69 90 04 89 6e 46 73 b9 17 39 d3 02 d9 cc f5 70 95 19 9f 8d c7 d5 09 c0 e6 44 bb 24 5f ae 3d 3d ae 6a 4f 84 f0 91 ed 0b 49 82 90 fb 56 42 e0 3d 26 30 16 64 99 18 29 2d d0 ee 4d eb 5d ff a0 59 64 c9 c8 da 15 69 75 d0 ca e9 81 fb 15 cc 10 49 3c 38 ab b8 05 e3 f9 52 44 23 b3 e9 7f 68 8a 48 e4 c9 40 30 ee 1d f9 1a 7f d2 44 05 db 15 ed e8 94 9d e4 41 1d 74 b8 24 9b 9f 2d f9 4a ec c6 c8 62 db 33 2b ce 35 e7 11 12 c6 e1 d2 5e 2f 2a ac 36 f3 a2 87 88 ec 9d 7b 2a fe 4b 73 8c 03 e0 0c 73 fb 49 31 08 3c ca 70 63 ec 3b 4d cb 28 9a 9b d1 f9 8e 14 eb 23 b1 3a e9 bf c2 29 5b 47 0e 6f 03 ba f3 32 60 0b b1 88 55 f8 62 8e 35 8c 1e 88 73 Data Ascii: A',s$]p\| !\n?Ua~0W(Qv#inFs9pD$_==jOIVB=&0d)-M]YdiuI<8RD#hH@0DAt$-Jb3+5^/6{*KssI1<pc;M(#:)[Go2`Ub5s
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: 6e 05 e5 08 77 08 51 e8 b3 8f 95 41 db ad 06 78 12 7c e6 ce 9a 63 02 c8 5d 71 37 ec a4 de c2 6d 81 15 14 61 96 bf d2 f0 2a 1f 30 56 dd c0 e4 94 33 51 d3 dc 6c ab 3e 6d 99 b9 d8 fc c8 40 15 e7 3a 12 5a 95 b1 11 4a 5b 5a bc 00 f8 d3 c3 d2 01 6b 0e ee c4 92 9d f5 0d 28 43 e9 1a ca 18 a6 13 7a 12 2a 8b 01 ba 1f ea 9f 23 87 c3 d9 c9 df 9a 4e 31 9f 51 95 e2 dc d9 ef 2f d5 1c 8a 4a f1 eb 27 6c e2 aa 3f 22 35 70 d8 8d 82 bc a3 ad 67 f8 ce f3 99 de b3 6c dc 09 e1 4d 93 f2 eb b8 eb 2e 3a cc 46 1a f2 66 a4 53 03 48 db a6 e8 e1 43 29 e6 0f f8 38 b1 3c b0 9f 56 c6 ae fc e1 d6 e7 8d 88 9c 9b 9f b9 45 12 77 ed 80 1a f1 7c 84 d6 21 34 69 21 cb 90 5d 0f 7d 91 9a ef 7c 61 e0 59 0c 72 9d a6 a9 39 af f4 6b 37 7a dd c7 b5 36 52 d4 1e 92 5e ce 8e 44 9f 34 4e a5 d8 c7 96 5c 12 Data Ascii: nwQAx\|c]q7ma0V3Ql>m@:ZJ[Zk(Cz#N1Q/J'l?"5pglM.:FfSHC)8<VEw\|!4i!]}\|aYr9k7z6R^D4N\
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: c2 bb 26 69 bd f6 c3 65 60 24 a6 e4 55 85 97 f9 a5 40 40 7a d5 10 3a cd 28 e0 e8 a2 2a 09 bd a9 b9 bc 9d f6 4a 51 ae 58 e2 06 18 b5 b1 4d 1b a0 ba 64 e7 08 0b 2b 4d ca a7 96 8e 9f af fb 3d b6 f9 94 a0 30 ed 56 c8 05 88 cf e0 f3 2c 09 4e cc fd 46 b5 4b 93 3e 7c d8 f4 20 c5 db c2 39 44 f1 ba e9 e6 2f a0 3e b4 0f 84 46 16 8c af 88 c3 ff 88 c9 e5 39 27 9d 3a 8c 9b 25 c2 1f 12 ab 79 0a 6e 6f f9 f3 1b a1 71 f1 2b 69 51 c4 50 e6 02 95 c8 f6 37 63 1f fb 13 71 b7 76 d0 d7 ae 36 d7 64 ee 27 bb c3 74 6f bd 6d ba 7d 47 aa 61 75 a7 bc a0 62 b6 02 e8 e1 bf d6 9f b0 6a 2f 37 b2 06 f3 8e 13 e5 18 c9 57 4e 42 09 d8 2f 48 75 50 f1 88 ed 57 2b 3e c4 b6 fa 3c 0f b7 69 49 ff 0e 79 da e8 18 0b 11 12 01 e1 b9 ec bd 4f c4 68 0a 2b d8 d6 5c da 99 ad 58 a0 c5 18 e8 66 28 ac a8 2b Data Ascii: &ie`$U@@z:(*JQXMd+M=0V,NFK>\| 9D/>F9':%ynoq+iQP7cqv6d'tom}Gaubj/7WNB/HuPW+><iIyOh+\Xf(+
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: cf b3 e0 27 83 24 8c cc 90 02 05 fb ee 24 b0 c9 a2 80 6a 80 62 fa 20 14 e2 62 88 a5 20 48 e5 09 16 fd 6e 2e c7 02 12 74 0f e9 99 98 d3 6f e2 38 f4 14 11 5a 5a e0 2e c6 47 b4 fa 15 c2 30 1d 17 b6 6c ef b5 c3 00 f0 4c 71 6f c4 20 74 6b a2 f3 0a 55 62 3d 4e 31 15 ad c4 db 95 e5 d8 52 99 17 a7 d9 14 b2 7e 9b ef ee e0 82 28 a8 47 b1 fc 4c ef 46 86 89 71 03 72 5a 43 6c b8 cf 5b 37 b7 b8 96 28 df fe 47 87 10 f6 5c 71 f4 d2 82 0a a0 84 55 6a 36 19 ac ed db dd 31 03 c1 d7 2c d5 40 22 90 a9 0d 95 6b 08 c7 65 f2 0a bf 1c 51 d1 49 a2 6a 5c 95 1a 97 cf c3 9e 4a 80 b4 cc e3 08 8d 03 6a d5 18 a2 c3 bd 24 45 d9 c7 0f 13 69 42 36 f5 cf 17 87 29 e8 53 69 15 8f ed 2a 6c ff 60 02 b0 a1 2c fe 24 30 1e 30 df db b7 a8 0c 47 5b 54 e8 2e a4 c6 22 af 9c a9 0c fd 60 db 4e b2 24 b4 Data Ascii: '$$jb b Hn.to8ZZ.G0lLqo tkUb=N1R~(GLFqrZCl[7(G\qUj61,@"keQIj\Jj$EiB6)Si*l`,$00G[T."`N$
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: d9 4a 84 dc 35 03 03 03 f7 62 d9 07 6e 86 5c bd 40 68 75 7e f7 72 2c 24 53 ec 83 5c 9c 8d f5 1d 64 81 0d 1c e3 ef 3a 5d 8d a0 15 2e 5b a2 0c 25 83 2d b4 48 4f 11 1f d8 eb e6 fd b3 43 db bc 69 5b f1 4b 19 f3 28 21 18 ff 2c 22 b6 8c ad d7 d4 f5 61 be 40 f4 12 89 53 b7 08 c0 98 c3 82 3c 90 cf 8b d1 4e 52 07 02 3f 88 18 5a d9 2e d4 78 ef 40 83 6f d9 b3 c8 95 29 43 d3 70 47 d5 5f 11 3b 40 37 03 10 53 b8 91 69 43 6d 2e 9c 9e a1 7a 53 08 1d c5 af fb c6 9e ce ff 7b d2 7d c6 b8 e2 5e 1c be 9c 51 ff db d3 3f 6b 3e 53 25 fb 88 23 5a 1f d1 c0 17 c4 7b f2 81 ea 64 e4 f5 0d 5a a9 08 a3 f0 34 73 54 2c ae fc f1 86 93 6a 39 63 75 3b 7e db a8 0b d0 db 97 d8 08 ab 65 94 73 00 53 20 d1 f8 e2 a5 e3 3d 7b 9f 9e 5a 50 83 d0 e5 7f a1 9e 53 38 9f c8 71 36 b3 d1 c3 76 76 dc 90 ed Data Ascii: J5bn\@hu~r,$S\d:].[%-HOCi[K(!,"a@S<NR?Z.x@o)CpG_;@7SiCm.zS{}^Q?k>S%#Z{dZ4sT,j9cu;~esS ={ZPS8q6vv
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: 56 bb 58 b3 9a fa c0 f7 0a aa c3 06 ba be 7a 5a 86 12 d0 59 1a 91 fa 8c d4 f6 0f a3 9d 9e 94 dd ca 15 74 31 f8 39 80 9a e6 83 5a 8d 82 a2 70 6f b3 e4 d9 50 14 5b 98 c9 bd fb 07 9b 0c b7 41 43 f6 61 51 59 ab 45 4c 8f ba 27 5f 0d c7 3e 5c 13 63 4b d6 1c a3 c7 d8 92 cf be 02 0e 5c 47 64 21 4d 4e 16 82 34 9c 02 aa d0 e1 59 f4 94 49 c6 5a 7f 2e 63 47 71 60 da 04 70 90 30 35 4f a3 c3 03 66 99 75 f5 14 d6 49 75 d5 02 61 b4 f5 fa 99 4b 13 67 c3 9c 3d 31 92 6c c0 50 72 c3 e7 f9 b6 7d 03 a9 29 ab 28 98 e9 de 19 fb 04 34 3f 20 1b 13 3b 2b 95 48 7d 61 15 c1 dc 33 49 2a 8c 79 a8 c3 54 8e 8c e4 2f 81 73 07 37 8b 24 3c 71 b2 b3 ba 41 56 c8 b4 83 b5 f2 33 4b 3e 0f 20 26 61 ec 38 33 99 32 a9 9d da 39 bc ff c4 df 7b f7 66 19 8b 9f a4 9b 1f 62 16 ff 3d 61 3f ae 5a 32 9a 9a Data Ascii: VXzZYt19ZpoP[ACaQYEL'_>\cK\Gd!MN4YIZ.cGq`p05OfuIuaKg=1lPr})(4? ;+H}a3I*yT/s7$<qAV3K> &a8329{fb=a?Z2
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: 2f 58 77 b4 ee 9e de 2a 64 5c f4 c4 cb 00 15 30 d9 4e 34 a2 07 44 f2 52 3a 2f f4 cf 04 d6 08 65 10 a9 78 df f2 a3 48 70 9c be 77 4b a6 6d 8f dc 51 e8 61 f7 04 1c 72 d8 2d c9 dc a7 17 02 b6 d5 6e f6 8e 86 34 77 7a 3c 16 43 8a 7b 12 e3 34 48 ce ad ef ed 04 c9 dd 5d 97 78 39 d0 91 6a e3 ec 2a d8 35 94 34 ae 94 13 f8 50 5c e6 38 ff 30 65 79 fe 36 3e 43 52 4c fe f8 41 03 e5 32 47 45 a4 52 e2 31 50 6a 90 42 7d 59 ed ef d5 c0 36 af c5 8a 6d e1 14 49 e2 d1 73 64 62 b5 0f 56 50 41 4a 3b 2e fa 0c a5 10 fa d6 51 a7 13 39 00 e2 64 f8 4a 64 0c 19 24 71 fb 2a f2 b2 5b 55 2b 72 01 7c b7 08 c1 44 81 e8 77 ab fb 8e b7 bb 5c 60 16 96 ed 48 fb b8 dc 64 c2 db 77 91 09 a9 4d 92 ae f8 9b c6 e8 03 4d 2e 25 48 d8 f0 b3 99 9d e2 75 04 23 e3 da 5b 5f 2e ba 78 96 62 ba 16 fc 77 ab Data Ascii: /Xwd\0N4DR:/exHpwKmQar-n4wz<C{4H]x9j54P\80ey6>CRLA2GER1PjB}Y6mIsdbVPAJ;.Q9dJd$q*[U+r\|Dw\`HdwMM.%Hu#[_.xbw
2024-10-04 13:38:24 UTC	1379	IN	Data Raw: 9d 6c 84 15 8b cb b9 58 f1 53 bc 52 b9 fc e2 36 18 bf 24 c1 90 3c 81 13 9d 3f 9c bd bb ae c3 69 02 73 99 59 34 c1 8d b3 b4 cb 49 f0 0c 88 52 17 76 af ca ec 6d 88 5d 9b 54 3a a0 c5 b6 08 92 be b8 75 6b 2d 8c df 2c 56 dd 72 ad 0d 0c 94 c1 6f 1b 67 0c d0 63 44 ff 0e bf 91 46 ce 86 74 c4 05 a8 56 95 58 38 d1 47 73 42 df 04 aa 6b e3 82 1e 01 0f 3c 6d 8e 8f 17 b3 69 3b ce f7 2c c2 13 c7 dd 8e 29 3f 4a 4d d7 c8 6d 51 a2 a9 e5 64 e5 02 3a 8b 46 a7 1c 4d 74 96 2d ff f9 8d 37 69 62 6a a8 10 28 bf f4 9e 5e 46 88 11 36 c7 2b 6a e6 da fc d2 36 29 f5 08 50 86 44 5a 9d e9 60 91 0c 5d 29 5b f8 cd 4f 99 31 03 25 0a 80 12 a4 bf 80 08 a8 c8 88 c6 50 d5 63 6e 1c bc 1d 90 cb e9 16 3e b4 16 47 38 49 44 e8 68 97 01 fe 6f 90 d0 1f 4b 41 36 27 40 9c 80 0a b4 18 31 80 d1 06 21 de Data Ascii: lXSR6$<?isY4IRvm]T:uk-,VrogcDFtVX8GsBk<mi;,)?JMmQd:FMt-7ibj(^F6+j6)PDZ`])[O1%Pcn>G8IDhoKA6'@1!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49840	34.120.202.204	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=b9ef8a21753309fb6081d9e409cb42c45d757c6f1728049100 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1404 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	1404	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 74 72 75 65 2c 22 62 75 66 66 65 72 5f 63 6f 75 6e 74 22 3a 30 2c 22 74 6f 74 61 6c 5f 62 75 66 66 65 72 5f 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 62 75 66 66 65 72 5f 72 61 74 69 6f 22 3a 30 2c 22 63 6c 69 65 6e 74 5f 74 69 6d 65 22 3a 34 35 30 34 2e 37 39 39 39 39 39 39 39 39 39 38 38 2c 22 69 73 5f 62 75 66 66 65 72 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 74 72 75 65 2c 22 6d 69 6e 75 74 65 73 5f 77 61 74 63 68 65 64 22 3a 30 2c 22 6e 65 74 77 6f 72 6b 5f 73 74 61 74 65 22 3a 33 2c 22 70 6c 61 79 62 61 63 6b 5f 72 61 74 65 22 3a 31 2c 22 70 6c 61 79 65 72 5f 77 69 64 74 68 22 3a 30 2c 22 70 6c 61 79 65 72 5f 68 65 69 67 68 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 5f 70 6c 61 79 62 61 63 6b 5f Data Ascii: [{"autoplay":true,"buffer_count":0,"total_buffer_duration":0,"buffer_ratio":0,"client_time":4504.799999999988,"is_buffering":false,"looping":true,"minutes_watched":0,"network_state":3,"playback_rate":1,"player_width":0,"player_height":0,"session_playback_
2024-10-04 13:38:24 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Fri, 04 Oct 2024 13:38:24 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49841	34.120.202.204	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:24 UTC	637	OUT	POST /player-events/log/play HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 656 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:24 UTC	656	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 65 73 61 6d 65 68 72 2e 63 6f 6d 2f 22 2c 22 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 65 78 74 22 3a 22 65 6d 62 65 64 2e 6d 61 69 6e 22 2c 22 61 75 74 6f 70 6c 61 79 22 3a 31 2c 22 6c 6f 6f 70 22 3a 31 2c 22 69 64 22 3a 38 38 39 30 30 31 38 36 34 2c 22 76 6f 64 49 64 22 3a 6e 75 6c 6c 2c 22 76 6f 64 53 61 6c 65 49 64 22 3a 6e 75 6c 6c 2c 22 73 65 73 73 69 6f 6e 54 69 6d 65 22 3a 30 2c 22 76 69 64 65 6f 53 68 61 70 65 22 3a 30 2c 22 73 70 61 74 69 61 6c 50 6c 61 79 62 61 63 6b 22 3a 30 2c 22 75 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 63 63 6f 75 6e 74 54 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 75 73 65 72 49 73 4d 6f 64 22 3a 30 2c 22 74 65 61 6d 4f 72 69 67 69 6e Data Ascii: {"referrer":"https://www.sesamehr.com/","embed":true,"context":"embed.main","autoplay":1,"loop":1,"id":889001864,"vodId":null,"vodSaleId":null,"sessionTime":0,"videoShape":0,"spatialPlayback":0,"userId":0,"userAccountType":"none","userIsMod":0,"teamOrigin
2024-10-04 13:38:24 UTC	303	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Content-Type: text/html; charset=UTF-8 Date: Fri, 04 Oct 2024 13:38:24 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:25 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 90766f9b-701e-006f-578c-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133825Z-15767c5fc55ncqdn59ub6rndq00000000c9000000000c2mm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:25 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-04 13:38:25 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49843	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	417	OUT	GET /wp-content/themes/sesamehr/img/resenas/getapp_01.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	334	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 24 Jan 2024 14:35:07 GMT ETag: "9997-60fb1f82e91b2" Accept-Ranges: bytes Content-Length: 39319 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:25 UTC	7858	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 01 15 08 06 00 00 00 f0 c8 1c 35 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 5e ec 7d 09 7c 15 d5 d9 fe 99 b9 01 01 17 c0 a5 2e 08 82 7b eb 02 88 1b a2 70 93 60 48 c2 96 44 63 ab d6 8a 8a 7b 3f 45 ff b6 55 bb 69 5b 97 da f6 13 db aa 15 37 b4 6a b5 91 e4 02 92 85 25 f7 b2 89 b5 45 70 fd dc c1 8d 1d 12 20 24 40 ee 9d f3 7f 26 12 1b 62 92 7b 67 e6 cc 9c 33 33 ef fd fd fc 55 9b 73 de e5 39 67 66 ce 79 ce fb be 47 63 f4 23 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 14 46 40 53 d8 36 32 8d 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 20 04 08 01 42 80 10 60 44 60 d1 24 20 04 08 01 42 80 10 20 04 08 01 Data Ascii: PNGIHDR5sBIT\|d IDATx^}\|.{p`HDc{?EUi[7j%Ep $@&b{g33Us9gfyGc#B B B B F@S62 B B B B`D`$ B
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: e4 ec c9 ca 60 eb 43 43 cc db 41 51 b6 61 05 8a 86 d7 a0 ee 92 32 44 b7 97 50 aa 4c 12 a9 42 ae e1 59 ab e7 8d 7c 90 5f df 19 4e e7 13 e6 c8 95 78 d7 8c 07 0e 43 40 fe 0c 74 2a af b5 3f 9e bf 55 66 b4 12 e4 c6 40 10 3e 2b 4a ae 29 a7 25 da 57 eb 31 19 91 51 e3 61 73 54 a4 6c 3b b2 f0 ce 7e 57 63 bc 4a 63 c6 d3 41 5c 03 44 a3 d1 1e 5a cf 03 6f 05 36 23 f1 cf 69 58 23 1f 62 07 a7 8e fa 60 7e bc 83 f9 b7 02 fb c2 27 31 4f 16 8a 92 6b ca 19 59 38 f1 94 08 8f 5c 8d e8 aa 3c cc 93 13 44 ca b6 27 8b cf 03 e9 39 6b 57 37 e3 99 a5 b3 66 6d b7 27 c3 9d 5e ca 12 58 26 79 65 24 93 09 55 08 1c 77 e0 ef 58 aa 6a e4 d5 37 56 72 be 93 eb 7a a1 9b 24 96 8a e4 d5 37 1f 37 ce 9f 5f 9b 97 7f 19 08 55 7c e7 04 fd a6 4d bb 0e c4 e0 a3 82 a4 b9 23 86 53 24 96 3b c0 3a 97 0a 32 Data Ascii: `CCAQa2DPLBY\|_NxC@t*?Uf@>+J)%W1QasTl;~WcJcA\DZo6#iX#b`~'1OkY8\<D'9kW7fm'^X&ye$UwXj7Vrz$77_U\|M#S$;:2
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: b4 83 ed 9e f5 b2 19 bd ae db e9 2f ba 4f 32 99 1a b0 68 ee cc 2f 5a e5 7e 43 60 85 9d bc 9a df d0 d0 1d 60 f8 8d c4 71 3c 3f 7c 4a 5e b5 f8 8d 4d d7 3a be cf 3e 43 37 9e 74 d2 3a c7 40 b4 11 70 e8 bc ca b3 23 5c 57 3e 8d c0 60 fc 8a 75 79 05 d3 45 fa ce 9e 78 c2 bc 0d 63 92 50 99 e2 85 6d 86 c8 e3 91 4e 28 fd 26 31 f1 ae a5 97 a8 02 09 83 d3 24 22 b0 d2 0f 95 6f 5a 08 27 b0 0a 4a aa 41 20 8d 91 06 00 67 7f 42 cd 9b db a4 e9 b7 a9 78 f8 98 d2 03 7b 44 92 1f 20 ed ea 60 9b 22 84 74 33 0c 7e 71 a2 ba e2 45 21 c2 2c 08 91 4d 60 e1 39 88 82 c8 5d 68 c1 64 6a da 09 02 48 1f ac 53 a1 78 3b cc 53 a2 78 39 ea 81 ad 86 2d 47 c9 9e 30 b2 8a d9 3b f1 5b 5d 02 8b 17 81 10 9c e9 c4 37 59 7d 91 4e 58 86 82 dd 17 ca d2 df 4e af 90 34 42 55 09 2c 10 9d f7 21 7a e8 4e 45 Data Ascii: /O2h/Z~C``q<?\|J^M:>C7t:@p#\W>`uyExcPmN(&1$"oZ'JA gBx{D `"t3~qE!,M`9]hdjHSx;Sx9-G0;[]7Y}NXN4BU,!zNE
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 6e c6 cb 4e 64 50 5f b5 10 30 6f 19 c5 b3 9d 8d eb cc bf f4 ca 32 d9 04 16 22 b0 7e 8f 08 ac db bd f2 57 75 3d d8 cc 4e c7 66 f6 72 d5 ed 24 fb dc 47 00 9b f3 7a de c8 07 25 12 b1 7a f7 b5 ed ad 41 36 81 65 70 fe 8b 44 55 c5 3d 5e fb 2d 43 1f d6 25 75 58 97 f4 91 a1 db d4 69 de 2e 07 12 e8 10 3b fa a5 17 71 e7 2c 86 72 0c c5 76 6c f7 5b 1f 44 ea cd 03 81 34 5a 96 dd 20 d4 ef 95 42 60 11 89 15 20 12 8b f3 ad 18 cf 73 45 a7 0d 9a e4 95 c6 5b 18 56 69 73 34 83 07 93 c8 ab 8b 2e 4a 65 80 13 35 71 01 01 7c 40 2e c1 c3 f1 bc 0b a2 2d 89 34 43 79 b1 e0 18 67 a9 53 c8 1b 0f 1f 5e da b3 67 9f d4 46 bc dd f6 95 0d 85 dd 82 a9 6d ed 56 e1 e6 22 d9 38 06 45 3f 16 86 6b f1 d9 7d 94 37 45 1e 4c 24 ca 1a bc f4 4b 36 81 85 77 d9 1f f0 2e 93 76 aa ec 25 d6 e9 74 45 a3 45 Data Ascii: nNdP_0o2"~Wu=Nfr$Gz%zA6epDU=^-C%uXi.;q,rvl[D4Z B` sE[Vis4.Je5q\|@.-4CygS^gFmV"8E?k}7EL$K6w.v%tEE
2024-10-04 13:38:25 UTC	7461	IN	Data Raw: de 3c 6d da 77 aa 6c ea f9 ea d7 5c 73 b0 e3 79 b7 a8 dd 63 62 6b 33 89 86 c8 79 95 04 d5 ba 6d b3 b1 79 d9 62 d7 73 56 d6 2d 80 1c 77 5c 5f 36 7f ac 2f 9b 0b 72 dc 85 ed ae 07 d1 80 ae 53 b8 4d 7f ad f7 e8 9a 54 86 52 f3 46 3f e7 ac 52 6f e7 0f 52 31 18 93 91 96 96 96 71 db 9c f1 77 eb 19 3d 33 a6 26 f3 d8 4c 45 11 58 b5 26 68 e4 71 e0 d2 f6 59 f9 ce 14 61 ed ce 4d db ee 8b ec 19 73 55 7f 4f e7 05 d5 f8 81 80 55 0d bd 8c ea 1a b3 6d d8 f1 66 af eb 59 71 4f 5a 1e 20 60 a5 45 3a 3e 3b 5a 8b dc 31 d0 d3 71 8a 5a 54 ba ed 68 bf ba 17 b0 02 5c 39 14 b1 10 af 10 af a2 5d e9 94 86 c0 5e 08 04 91 58 8e eb 75 91 13 2b 3f 53 44 0a c4 b7 25 5e bd ad 92 87 be 8d bd 6c 6a 5e d6 e6 78 4e 87 8d be d5 9c 4f c6 7f 9f b6 0d e6 32 81 7e 53 cb d2 a3 8d eb 06 27 a9 1e 50 73 Data Ascii: <mwl\sycbk3ymybsV-w\_6/rSMTRF?RoR1qw=3&LEX&hqYaMsUOUmfYqOZ `E:>;Z1qZTh\9]^Xu+?SD%^lj^xNO2~S'Ps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49844	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	438	OUT	GET /wp-content/themes/sesamehr/img/new-home/v2/dashboard_sidebar_plegado.webp HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	311	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:40:14 GMT ETag: "2b9c6-61786fdf4e765" Accept-Ranges: bytes Content-Length: 178630 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:25 UTC	7881	IN	Data Raw: 52 49 46 46 be b9 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 b1 04 00 63 03 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0cICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 44 4f 3b 56 b3 3f 83 8b 9a e1 25 2c 14 01 14 e9 75 d0 f7 1b 08 06 bd 5c ff 06 1b c9 da da 0b 61 54 3f 31 74 36 a9 58 82 8d 84 a1 b4 5b b0 f7 0e ce 6f 91 ef c8 55 0c ae 0f 1d 31 78 6c 02 a2 7a ea 99 5f d0 4d 0b 51 fb b2 51 42 23 db a4 e4 83 24 d4 c3 72 71 fa 99 79 e3 0d 09 d5 02 0a ec 66 a1 4c ef f1 7b 19 1b d1 6c 03 1e 65 f1 4f 92 55 37 23 ba 73 a4 ad a2 a2 e2 75 fe b7 e3 64 d7 ac c5 d0 d0 e5 31 f7 36 95 8e d2 83 84 78 02 e8 19 c0 25 ea 80 b2 96 ab dc a6 7c 54 60 20 52 d2 1f 74 e8 b5 57 24 54 e5 d7 af 45 47 9f 2a 36 54 f7 8c 39 81 52 78 96 98 65 38 fd 50 f9 25 f2 21 91 c9 b6 5d e3 92 a9 08 9e 93 d0 14 bb 8d 8d 48 8d b5 19 58 d1 81 7d bc 66 8f f3 2a c7 62 22 1c d8 51 2e e3 97 11 50 68 4f 15 1b 32 81 e2 5c 7b 39 36 52 21 95 2f 9c 6a b4 c0 ab 95 a9 9d 2f 04 Data Ascii: DO;V?%,u\aT?1t6X[oU1xlz_MQQB#$rqyfL{leOU7#sud16x%\|T` RtW$TEG6T9Rxe8P%!]HX}fb"Q.PhO2\{96R!/j/
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 34 f3 f9 fb 19 20 3e 58 fa 05 39 1d 6d 7a 7c be 6c 54 5e b6 3e 78 45 74 01 fb 75 13 f9 f9 f2 e5 42 47 2a 6f eb e3 ca f2 40 d1 14 ec 3d 35 fb f8 99 cf 78 01 f6 72 11 33 23 b3 74 5a 63 29 34 0e bf ae 7f af fd b0 9b b3 27 cb 55 04 47 db ca 1e 9d 46 33 25 8d 67 75 e6 81 34 9f 91 51 50 79 b7 35 ae c5 d2 87 aa 4f 57 f6 d8 7d be 83 28 1d d3 ce f6 f7 f3 41 d8 c9 e7 c5 0c 58 66 a8 9d 3e 8d 16 52 9c 8c 4a 58 86 70 5d 77 aa cb 17 79 e1 7b ef 78 1a 0d b6 ff 9a 80 a4 7e 04 57 1e f2 e9 e5 f9 28 f2 e7 9f 23 28 51 b8 c4 d9 bc 35 a8 06 81 8d 9f f0 e4 95 5f ff 9e 3f 8f b9 b9 49 3a b5 1b 24 d2 f8 a2 0e dd 28 3a 59 f5 e7 39 f4 4a 1c 63 33 55 34 34 c3 68 e8 d5 dd 4b e1 e0 79 f1 34 ca 48 93 cc 33 4f 40 d0 d2 85 66 a4 97 fb 79 34 3b 68 7c bf 4c 51 77 c9 a4 49 6a 8f a6 d8 c9 ae Data Ascii: 4 >X9mz\|lT^>xEtuBG*o@=5xr3#tZc)4'UGF3%gu4QPy5OW}(AXf>RJXp]wy{x~W(#(Q5_?I:$(:Y9Jc3U44hKy4H3O@fy4;h\|LQwIj
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: b2 f8 54 35 98 30 5f 5a 64 aa a2 c4 ef 92 96 fa d3 25 55 16 27 7c 94 b7 d6 99 2a a8 b1 37 9b 90 49 e3 3e db 95 9e a3 22 ea f4 0c a8 8d 92 2a 92 e3 3a de bf b2 ec 0d f6 4d 62 51 52 c0 37 8d 6a fd 6b 31 da 12 30 ea 63 b5 70 26 89 76 25 f7 ba 3e 0e 5b 30 62 61 c3 84 be ac 5c 8c 1c 4a ea e3 18 5d e6 4e 7b bd 84 d8 12 46 a0 d1 b2 c6 3d 39 57 48 de ca ed f1 59 d2 4a c3 1b 87 dc 28 74 b4 e8 77 35 df da 7d 40 22 3d a6 ea 0d 20 06 0e 29 ee 47 df e5 0f 72 3e ff 28 7b 8e 3b 57 55 8a f8 eb c9 af 5a ad 3a 54 27 ce 97 2a 3c 48 4f df 06 b7 84 40 ec 88 2d 7d 8e 81 c0 ca e5 94 bc 73 a5 4c 83 ba 56 3e 47 0a 40 11 3d 65 11 be 93 7c 21 af be 28 cc 06 b0 98 c9 c6 55 51 62 77 c7 22 c7 a2 b9 f0 97 79 1a 77 df e4 76 df e3 f6 8e e9 92 82 16 58 5d d8 e1 3c 1a eb ae ba eb ae ba eb Data Ascii: T50_Zd%U'\|7I>":MbQR7jk10cp&v%>[0ba\J]N{F=9WHYJ(tw5}@"= )Gr>({;WUZ:T'*<HO@-}sLV>G@=e\|!(UQbw"ywvX]<
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 82 e2 06 5e e8 54 6c 52 2a 8f 86 4a fe 11 ad 66 da 88 05 fb 4d 3e a5 6a bb 42 ce ab eb fe 28 44 35 63 d4 a7 74 05 1a 62 2a 9e b6 79 6e 2a 00 5c a0 c6 0c 5a c4 7c 10 f1 38 45 4c 13 9e fd 3c 47 59 b5 cb 78 54 b6 01 fd 28 6e 34 e1 d7 cd 43 b6 65 73 05 9e 41 b9 92 92 31 a8 2d 53 fd b4 0a 5c 2a 2c 01 17 8d d5 4c 1d 20 cc e5 82 6b c6 37 54 3a d3 dd b8 31 dc 05 ee 5a a3 a4 9b 56 12 24 0c d9 71 ca ea 55 3d b6 46 75 22 dc 6e c2 75 0d c9 8c be 6c 58 cb 40 dc de 53 27 b7 98 e4 a7 9d d1 cf 7d 32 75 96 dc f4 2b 86 91 b8 48 d2 6b 66 9c cd a3 b1 43 8e cf 61 69 c4 e4 2a ed 33 29 12 b1 48 c2 e1 6f 8b 69 0f cb 4a 0a 50 18 9b eb c6 ac 7c 32 d4 ff 5d d7 8f 3b 66 d9 7d 3f e8 8b a1 18 fc 9d 6d 4f 03 cf dc 9a d6 39 87 52 2d c6 ec 27 50 dc 98 cb e6 c5 8c b4 0d cd e5 32 7b 79 8e Data Ascii: ^TlRJfM>jB(D5ctbyn\Z\|8EL<GYxT(n4CesA1-S\,L k7T:1ZV$qU=Fu"nulX@S'}2u+HkfCai*3)HoiJP\|2];f}?mO9R-'P2{y
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 98 a1 48 f7 1f 85 08 41 83 cc 34 8f f3 11 65 46 57 7b 79 21 1a d7 b0 3a 1b c5 f9 ef 6b e5 9a 2a 5c 9f 78 14 8c ed 9f 5a d9 62 77 2e 05 f7 e3 80 dd 96 82 ff 8d 12 a8 41 c6 34 2e 8b a6 7a 98 6b ca 1e 9c 9b 86 be af e1 a7 87 ae f4 92 10 1b ec 78 55 e1 fa 86 aa e5 7d dc 93 45 21 65 6a d2 f2 10 d3 b3 c8 8f f1 c1 26 57 f4 44 23 27 3d ba c3 88 b7 19 8d 8b 95 12 9b b6 d3 87 72 9c d1 ff 49 b2 10 64 49 b1 57 1b 27 68 67 42 f1 ec 55 92 e7 c5 7e ae 73 a8 e8 b3 12 9f 02 a7 22 59 79 5a dc 45 14 0b 8c 56 9a 7c a4 1a 7b 8e 44 94 3c 4d 9e 17 33 4e b1 63 5e 11 cb d5 a6 6f 1a 7c ac 15 2d f3 7c 2a a0 b7 6b 6e 1b 52 8a 54 93 44 46 67 3f 1e a9 8d 14 48 cd fe 20 f3 04 05 17 66 c4 6d 10 44 40 e3 c3 5b 5b 2f c8 35 85 65 f1 73 4c 05 9a 7a 2b 5b 7d cb b2 c3 a9 da 2f cd 44 64 c0 2c Data Ascii: HA4eFW{y!:k\xZbw.A4.zkxU}E!ej&WD#'=rIdIW'hgBU~s"YyZEV\|{D<M3Nc^o\|-\|knRTDFg?H fmD@[[/5esLz+[}/Dd,
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: e6 88 b0 a2 e5 bd 61 92 e6 15 11 84 7a 0d a5 24 f3 79 c2 e6 0f 39 3d 92 58 94 cd 74 11 74 1b 54 f6 50 4f 90 29 67 ab e8 3a 44 7b ad d6 45 b5 b9 db 74 4f c6 0d 24 7c 6b fc 57 48 87 d5 0e 8c ec 1e 82 61 c9 f1 a7 a5 06 b0 73 bf 96 e7 c7 e0 5c 0c 78 43 a6 6c a6 e7 23 39 36 07 bd c2 d2 c9 ed 25 ab 0a ca d9 db 85 d6 91 6b a1 0b ed 7f ed 6d 06 59 4c be d6 06 ff 38 9c 3e ef 01 bf e7 3c 05 a8 65 41 07 3e 24 60 80 b0 de d2 0e 30 03 c8 20 92 94 4b 3f bf ec 2d 33 a9 0f f4 07 6e 89 df ad f5 f4 27 ec 9f 2d cc 5d e8 c7 ed e0 84 56 07 5f d3 5c e6 66 4d 22 d7 a8 a1 13 97 8d 38 dc 91 dd ef 93 a6 1e 15 14 4d 83 6e 2c d1 2a 22 86 e8 2a 58 e2 bc 65 75 eb 5e 0a fd b7 02 53 46 c6 5e f1 cc d0 16 bd 09 85 16 4f ef cc de 0b 5b 6d aa f0 01 ae 20 df 04 0c bc a2 d0 73 cf 78 87 a4 cb Data Ascii: az$y9=XttTPO)g:D{EtO$\|kWHas\xCl#96%kmYL8><eA>$`0 K?-3n'-]V_\fM"8Mn,"Xeu^SF^O[m sx
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: cc 88 f9 87 9c ed e2 5d ee 82 0e 93 d5 83 a8 19 36 8d e3 02 53 48 fb d1 06 8a fe 9a ff d9 ef e1 d7 49 41 31 e0 2c ae 5d 72 f8 c4 f4 30 ce 81 eb ff 90 e9 f4 f2 b6 5e 2b a4 f1 94 3d 0a d3 b4 38 18 32 92 67 29 84 78 5a 72 14 e6 9f 92 e9 33 79 2b eb 0c 35 15 15 c3 6a c9 47 ce 95 3a 41 ee 6e 7e 3e 78 52 56 31 0d 03 69 8b 08 fd 04 90 00 c8 6d 22 cd 02 61 ef 8e 7a dc 63 8b 80 60 ef 46 e3 9c 92 63 ab 60 13 1a db 40 72 27 57 09 44 00 8d 96 88 0e dc fa ab ea 06 67 b3 d1 f6 9e c7 04 32 08 23 4c 0f 93 ff 57 7d ef ef d7 42 b8 0b 42 1d 9b d2 f8 ad c5 82 fb 83 5b 73 c7 a0 c7 59 93 cf 4c 80 02 2f 3b 95 a3 66 42 6a 4b 8f 6f f3 d1 d1 65 09 3b 14 b9 c0 e4 8a 10 00 00 00 00 96 2c 24 2a b4 ba 3a 95 91 fa 9f 21 e8 97 ca 85 74 0f d0 49 34 56 6b bf 0f b3 1b 2d c2 02 bf 28 78 57 Data Ascii: ]6SHIA1,]r0^+=82g)xZr3y+5jG:An~>xRV1im"azc`Fc`@r'WDg2#LW}BB[sYL/;fBjKoe;,$*:!tI4Vk-(xW
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 28 fa 9e 86 93 43 23 49 73 4b 2f 30 4f 12 e5 4d 1a 4d 94 4c 89 40 1d 78 09 70 79 f4 a5 ed 28 cf 5b bc ec 80 1c 32 e7 27 fa 74 b7 44 bd 36 ed f3 19 80 c3 b9 0a 62 e3 73 98 64 15 56 79 34 db 80 68 85 ad 1b 9c 29 41 5c 48 77 92 8c 33 55 2a 0f e0 c2 40 d5 84 bf c8 4b 53 21 62 13 df f2 ea 75 76 29 46 d7 97 12 3f 07 1b fe 8b d6 d6 5d 96 1f 8e f4 1e 35 fa 45 30 92 22 f1 60 ee 5d e1 68 67 e5 91 6d b7 85 d3 c8 8a af 59 06 d1 06 fd 3b b5 a0 dd aa f5 e4 27 f3 bf 33 21 d9 a7 1b 21 48 af e6 95 d0 07 63 29 f9 12 22 ad b2 ff 02 8f 1b f6 f8 d5 10 b5 a2 ba 0e 9b dc 2a c2 16 db 97 95 63 70 ae bc 5d 0f fd 9f a7 92 d3 6b 11 58 31 ad d9 2b d3 af c1 7b bc f5 b1 b2 03 c3 5d 5f 0b c6 31 da 21 dd d5 d8 94 bc 40 ed 2a 3c 87 fa ac 6b 65 97 f8 6e 88 f2 be 01 37 c1 d5 83 b1 6f 87 1e Data Ascii: (C#IsK/0OMML@xpy([2'tD6bsdVy4h)A\Hw3U@KS!buv)F?]5E0"`]hgmY;'3!!Hc)"cp]kX1+{]_1!@*<ken7o
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 2b f5 d0 fa d5 79 7f 00 44 15 8e e3 51 57 1e 25 fe 61 99 10 a4 80 06 2c 52 10 2b 1e 26 e9 a2 e3 01 52 b4 9d 93 9a b2 65 e5 50 6a 24 f0 a2 f6 80 86 18 78 a0 d6 6c f6 bd 41 a8 c9 3a 7f 35 74 7b 98 11 01 04 98 9e 23 c0 a4 39 d4 6a 7c 68 d6 c1 a2 87 66 4a fe 86 66 a0 c6 ea ed 76 b2 1e 6f 90 71 3c 6c 65 2c 2f 14 eb 14 19 e3 2a 96 e0 3b 37 59 e3 36 a3 c4 0e ba 19 c8 d2 86 ef 95 b9 48 2f b4 2d 9d 58 bb d6 ce 98 79 82 38 f8 44 10 15 2d 63 60 61 6b 35 d1 bf 83 26 39 1f 02 ff ff e2 8d 57 c7 a4 f9 af 52 f1 1b b2 3d 54 88 ff 88 5e 60 5a 33 1a 8a 2c a4 a6 05 d7 f7 17 92 8e 85 8f b0 2a 2a 72 82 54 36 ae dc fb ed 03 2e a9 f9 53 a4 60 a6 5d 21 e7 8a e8 d4 71 e8 de fe 91 94 87 30 85 f1 ff 40 83 85 b3 95 9d 2f b7 15 56 69 f6 cd 76 8a a3 60 b8 5d b3 1b 75 fb 1f 3d e2 fd 91 Data Ascii: +yDQW%a,R+&RePj$xlA:5t{#9j\|hfJfvoq<le,/;7Y6H/-Xy8D-c`ak5&9WR=T^`Z3,*rT6.S`]!q0@/Viv`]u=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49850	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	402	OUT	GET /wp-content/uploads/2023/06/mexico.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:16 GMT ETag: "1aa-5ff430d6a859c" Accept-Ranges: bytes Content-Length: 426 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:25 UTC	426	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 81 50 4c 54 45 ff ff ff 72 ae 00 ff 4a 57 73 af 00 ff 4a 55 74 af 00 ff 4b 54 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 97 cc c7 97 cc c9 99 96 89 99 a8 a5 9a 6e 75 9b 54 62 a3 64 71 a4 75 7e a7 c8 b3 ab e0 b8 b7 9f 9b c7 aa 8d ce b4 b9 ce e3 ab d6 e8 cd d7 e8 cc db df af dc e7 c1 e0 e8 b6 e1 dd d3 e3 eb cc e5 d8 db e6 eb c5 e7 ee d8 f0 f0 d6 f3 f1 ef f4 f5 f4 f5 f5 f5 ff 4b 55 b4 6c 8c 33 00 00 00 0d 74 52 4e 53 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTErJWsJUtKTsKUsKUsKUsnuTbdqu~KUl3tRNS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49847	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	599	OUT	GET /wp-content/themes/sesamehr/assets/js/amplitude.js?ver=1.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	368	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2024 14:37:26 GMT ETag: "71f-61130376a585d" Accept-Ranges: bytes Content-Length: 1823 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:25 UTC	1823	IN	Data Raw: 20 20 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 6d 70 6c 69 74 75 64 65 7c 7c 7b 5f 71 3a 5b 5d 2c 5f 69 71 3a 7b 7d 7d 3b 76 61 72 20 72 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 0a 20 20 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 0a 20 20 3b 72 2e 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 74 7a 63 61 61 43 48 35 2b 4b 58 44 34 73 47 61 44 6f 7a 65 76 36 6f 45 6c 51 68 73 56 66 62 4a 76 64 69 33 2f 2f 63 32 59 76 62 59 30 32 4c 72 4e 6c 62 70 47 64 74 33 57 71 34 72 57 6f 6e 53 22 0a 20 20 3b 72 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3b 72 2e 61 73 79 6e 63 3d 74 72 75 65 0a 20 20 3b 72 2e 73 72 63 3d 22 68 74 74 Data Ascii: (function(e,t){var n=e.amplitude\|\|{_q:[],_iq:{}};var r=t.createElement("script") ;r.type="text/javascript" ;r.integrity="sha384-tzcaaCH5+KXD4sGaDozev6oElQhsVfbJvdi3//c2YvbY02LrNlbpGdt3Wq4rWonS" ;r.crossOrigin="anonymous";r.async=true ;r.src="htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49849	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	599	OUT	GET /wp-content/themes/sesamehr/assets/js/metricool.js?ver=1.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	367	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2024 14:37:32 GMT ETag: "13a-6113037c51b17" Accept-Ranges: bytes Content-Length: 314 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:25 UTC	314	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 53 63 72 69 70 74 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 65 72 2e 6d 65 74 72 69 63 6f 6f 6c 2e 63 6f 6d 2f 72 65 73 6f 75 72 63 65 73 2f 62 65 2e 6a 73 22 2c 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 61 2c 63 2e 6f 6e 6c 6f 61 64 3d 61 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 6c 6f 61 64 53 63 72 69 70 74 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: function loadScript(a){var b=document.getElementsByTagName("head")[0],c=document.createElement("script");c.type="text/javascript",c.src="https://tracker.metricool.com/resources/be.js",c.onreadystatechange=a,c.onload=a,b.appendChild(c)}loadScript(function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49845	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	641	OUT	GET /wp-content/uploads/2023/06/portugal.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:17 GMT ETag: "246-5ff430d76ca48" Accept-Ranges: bytes Content-Length: 582 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:25 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 e1 50 4c 54 45 ff ff ff 72 ae 00 ff 4a 57 73 af 00 ff 4a 55 74 af 00 ff 4b 54 85 a3 0a 84 a2 0a a4 b2 1f 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 77 b0 02 78 b1 04 84 b5 0b 8e b9 12 98 bc 18 a1 9c a4 ae b0 d2 b1 aa a1 b2 b2 c6 b4 c6 2a b9 bb d7 d0 ab 86 d7 d3 40 e1 e0 e2 e5 da af e7 d9 4b f7 db 81 f8 89 59 f8 de 55 f9 c6 7f fd 8e 58 fd e0 59 fe b3 64 fe c3 6f ff 4b 55 ff 51 55 ff 53 55 ff 54 55 ff 5a 55 ff 5b 56 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTErJWsJUtKTsKUsKUsKUswx*@KYUXYdoKUQUSUTUZU[V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49846	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	644	OUT	GET /wp-content/uploads/2024/05/Grupo-63781.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	338	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 07:12:44 GMT ETag: "36d5-617877236a246" Accept-Ranges: bytes Content-Length: 14037 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:25 UTC	7854	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 38 39 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 39 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 36 33 2e 32 32 32 20 37 2e 32 37 36 30 35 43 36 33 2e 32 31 32 37 20 37 2e 34 33 30 34 38 20 36 33 2e 31 39 36 35 20 37 2e 35 38 34 39 20 36 33 2e 31 39 36 35 20 37 2e 37 33 33 39 32 43 36 33 2e 31 39 36 35 20 31 32 2e 33 39 33 36 20 36 33 2e 31 39 35 32 20 31 37 2e 30 35 32 32 20 36 33 2e 31 39 32 37 20 32 31 2e 37 30 39 38 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="189" height="24" viewBox="0 0 189 24" fill="none"><path d="M63.222 7.27605C63.2127 7.43048 63.1965 7.5849 63.1965 7.73392C63.1965 12.3936 63.1952 17.0522 63.1927 21.7098
2024-10-04 13:38:25 UTC	6183	IN	Data Raw: 32 31 38 20 34 31 2e 38 32 31 39 20 35 2e 32 34 34 35 5a 22 20 66 69 6c 6c 3d 22 23 31 46 32 44 35 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 36 2e 32 32 38 20 32 32 2e 37 39 38 35 43 31 33 34 2e 34 36 31 20 32 32 2e 37 39 38 35 20 31 33 32 2e 36 39 33 20 32 32 2e 37 39 38 35 20 31 33 30 2e 39 32 35 20 32 32 2e 37 39 38 35 43 31 33 30 2e 33 30 38 20 32 32 2e 37 39 38 35 20 31 33 30 2e 32 33 36 20 32 32 2e 37 32 31 33 20 31 33 30 2e 32 33 36 20 32 32 2e 30 39 34 33 43 31 33 30 2e 32 33 36 20 31 35 2e 33 39 37 32 20 31 33 30 2e 32 33 34 20 38 2e 36 39 39 38 36 20 31 33 30 2e 32 33 20 32 2e 30 30 32 32 34 43 31 33 30 2e 32 33 20 31 2e 32 39 37 32 36 20 31 33 30 2e 33 30 37 20 31 2e 32 31 34 36 35 20 31 33 31 2e 30 30 32 20 31 2e 32 31 Data Ascii: 218 41.8219 5.2445Z" fill="#1F2D52"></path><path d="M136.228 22.7985C134.461 22.7985 132.693 22.7985 130.925 22.7985C130.308 22.7985 130.236 22.7213 130.236 22.0943C130.236 15.3972 130.234 8.69986 130.23 2.00224C130.23 1.29726 130.307 1.21465 131.002 1.21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49851	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	418	OUT	GET /wp-content/themes/sesamehr/assets/js/index.js?ver=3.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2024 14:37:29 GMT ETag: "2989-61130379f7251" Accept-Ranges: bytes Content-Length: 10633 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:25 UTC	7822	IN	Data Raw: 76 61 72 20 73 65 73 61 6d 65 68 72 3d 73 65 73 61 6d 65 68 72 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 65 73 61 6d 65 68 72 44 6f 6d 52 65 61 64 79 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 22 69 6e 74 65 72 61 63 74 69 76 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 72 65 74 75 72 6e 20 65 28 29 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 21 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 73 61 6d 65 68 72 54 6f 67 67 6c 65 41 74 74 72 69 62 75 74 65 28 65 2c 74 2c 6f 2c Data Ascii: var sesamehr=sesamehr\|\|{};function sesamehrDomReady(e){if("function"==typeof e){if("interactive"===document.readyState\|\|"complete"===document.readyState)return e();document.addEventListener("DOMContentLoaded",e,!1)}}function sesamehrToggleAttribute(e,t,o,
2024-10-04 13:38:25 UTC	2811	IN	Data Raw: 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 66 6f 63 75 73 22 29 3f 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 22 20 66 6f 63 75 73 22 2c 22 22 29 3a 65 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 66 6f 63 75 73 22 29 2c 65 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 7d 7d 2c 73 65 73 61 6d 65 68 72 2e 74 6f 67 67 6c 65 73 3d 7b 63 6c 69 63 6b 65 64 45 6c 3a 21 31 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 6f 67 67 6c 65 28 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 43 68 65 63 6b 28 29 2c 74 68 69 73 2e 75 6e 74 6f 67 67 6c 65 4f 6e 45 73 63 61 70 65 4b 65 79 50 72 65 73 73 28 29 7d 2c 70 65 72 66 6f 72 6d 54 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: ame.indexOf("focus")?e.className=e.className.replace(" focus",""):e.className+=" focus"),e=e.parentElement}}},sesamehr.toggles={clickedEl:!1,init:function(){this.toggle(),this.resizeCheck(),this.untoggleOnEscapeKeyPress()},performToggle:function(e,t){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49852	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	425	OUT	GET /wp-content/themes/sesamehr/assets/js/splide.min.js?ver=4.1.3 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:56:30 GMT ETag: "746b-6138e7e9aec11" Accept-Ranges: bytes Content-Length: 29803 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:25 UTC	7822	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 72 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 69 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 72 2e 6b 65 79 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 6e 2c 74 2c 69 29 7b 74 26 26 72 28 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 69 26 26 72 28 6e 2c 69 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 Data Ascii: function r(n,t){for(var i=0;i<t.length;i++){var r=t[i];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(n,r.key,r)}}function Jt(n,t,i){t&&r(n.prototype,t),i&&r(n,i),Object.defineProperty(n,"prototype",{wri
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 65 72 76 61 6c 22 3b 76 61 72 20 6a 74 3d 7b 70 61 73 73 69 76 65 3a 21 31 2c 63 61 70 74 75 72 65 3a 21 30 7d 3b 76 61 72 20 4e 74 3d 7b 53 70 61 63 65 62 61 72 3a 22 20 22 2c 52 69 67 68 74 3a 48 6e 2c 4c 65 66 74 3a 42 6e 2c 55 70 3a 74 2c 44 6f 77 6e 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 43 28 6e 29 3f 6e 3a 6e 2e 6b 65 79 2c 4e 74 5b 6e 5d 7c 7c 6e 7d 76 61 72 20 47 74 3d 22 6b 65 79 64 6f 77 6e 22 3b 76 61 72 20 46 74 3d 66 2b 22 2d 6c 61 7a 79 22 2c 58 74 3d 46 74 2b 22 2d 73 72 63 73 65 74 22 2c 57 74 3d 22 5b 22 2b 46 74 2b 22 5d 2c 20 5b 22 2b 58 74 2b 22 5d 22 3b 76 61 72 20 59 74 3d 5b 22 20 22 2c 22 45 6e 74 65 72 22 5d 3b 76 61 72 20 55 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 Data Ascii: erval";var jt={passive:!1,capture:!0};var Nt={Spacebar:" ",Right:Hn,Left:Bn,Up:t,Down:n};function Tt(n){return n=C(n)?n:n.key,Nt[n]\|\|n}var Gt="keydown";var Ft=f+"-lazy",Xt=Ft+"-srcset",Wt="["+Ft+"], ["+Xt+"]";var Yt=[" ","Enter"];var Ut=Object.freeze({__p
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 29 7b 76 61 72 20 69 3d 61 7c 7c 28 50 28 29 3f 31 3a 73 29 2c 69 3d 4f 28 78 2b 69 2a 28 6e 3f 2d 31 3a 31 29 2c 78 2c 21 28 61 7c 7c 50 28 29 29 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 69 26 26 79 26 26 21 53 6e 28 64 28 29 2c 72 28 21 6e 29 2c 31 29 3f 6e 3f 30 3a 63 3a 74 3f 69 3a 41 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 68 28 29 7c 7c 50 28 29 3f 28 28 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 79 26 26 22 6d 6f 76 65 22 3d 3d 3d 65 2e 74 72 69 6d 53 70 61 63 65 26 26 6e 21 3d 3d 78 29 66 6f 72 28 76 61 72 20 74 3d 64 28 29 3b 74 3d 3d 3d 76 28 6e 2c 21 30 29 26 26 45 6e 28 6e 2c 30 2c 6f 2e 6c 65 6e 67 74 68 2d 31 2c 21 65 2e 72 65 77 69 6e 64 29 3b 29 6e 3c 78 3f 2d 2d 6e 3a Data Ascii: ){var i=a\|\|(P()?1:s),i=O(x+i*(n?-1:1),x,!(a\|\|P()));return-1===i&&y&&!Sn(d(),r(!n),1)?n?0:c:t?i:A(i)}function O(n,t,i){var r;return h()\|\|P()?((r=function(n){if(y&&"move"===e.trimSpace&&n!==x)for(var t=d();t===v(n,!0)&&En(n,0,o.length-1,!e.rewind);)n<x?--n:
2024-10-04 13:38:25 UTC	5981	IN	Data Raw: 69 6f 6e 7c 7c 64 2e 64 69 72 65 63 74 69 6f 6e 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 6e 29 7b 72 65 74 75 72 6e 20 53 5b 77 2e 74 6f 50 61 67 65 28 6e 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 76 61 72 20 6e 2c 74 3d 5f 28 72 28 21 30 29 29 2c 69 3d 5f 28 72 28 29 29 3b 74 26 26 28 58 28 6e 3d 74 2e 62 75 74 74 6f 6e 2c 74 6e 29 2c 50 28 6e 2c 51 6e 29 2c 49 28 6e 2c 24 2c 2d 31 29 29 2c 69 26 26 28 4d 28 6e 3d 69 2e 62 75 74 74 6f 6e 2c 74 6e 29 2c 49 28 6e 2c 51 6e 2c 21 30 29 2c 49 28 6e 2c 24 2c 22 22 29 29 2c 67 28 22 70 61 67 69 6e 61 74 69 6f 6e 3a 75 70 64 61 74 65 64 22 2c 7b 6c 69 73 74 3a 76 2c 69 74 65 6d 73 3a 53 7d 2c 74 2c 69 29 7d 72 65 74 75 72 6e 7b 69 74 65 6d 73 3a 53 2c 6d 6f 75 6e 74 3a 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 45 Data Ascii: ion\|\|d.direction}function _(n){return S[w.toPage(n)]}function z(){var n,t=_(r(!0)),i=_(r());t&&(X(n=t.button,tn),P(n,Qn),I(n,$,-1)),i&&(M(n=i.button,tn),I(n,Qn,!0),I(n,$,"")),g("pagination:updated",{list:v,items:S},t,i)}return{items:S,mount:function n(){E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49848	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	644	OUT	GET /wp-content/uploads/2024/06/BLACKDECKER.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	337	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 27 Jun 2024 09:35:00 GMT ETag: "1954-61bdbd841cc22" Accept-Ranges: bytes Content-Length: 6484 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:25 UTC	6484	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 70 61 20 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 39 35 2e 34 31 20 31 31 33 2e 30 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 20 2e 63 6c 73 2d 31 20 7b 20 66 69 6c 6c 3a 20 23 32 62 33 33 35 32 3b 20 7d 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 20 7d 20 2e 63 6c 73 2d 32 20 7b 20 66 69 6c 6c 3a 20 23 62 37 62 36 63 34 3b 20 7d Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 595.41 113.04"><defs><style> .cls-1 { fill: #2b3352; } .cls-1, .cls-2 { stroke-width: 0px; } .cls-2 { fill: #b7b6c4; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49853	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	644	OUT	GET /wp-content/uploads/2024/05/Grupo-63782.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us
2024-10-04 13:38:25 UTC	338	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 07:12:44 GMT ETag: "4f1c-61787723a5b6a" Accept-Ranges: bytes Content-Length: 20252 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:25 UTC	7854	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 37 39 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 39 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 39 34 5f 32 35 36 39 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 31 37 39 22 20 68 65 69 67 68 74 3d 22 34 38 22 3e 3c 70 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="179" height="48" viewBox="0 0 179 48" fill="none"><mask id="mask0_94_2569" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="179" height="48"><pa
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 2e 30 35 30 37 20 31 2e 36 39 34 37 36 43 35 33 2e 33 33 35 39 20 31 2e 37 33 33 39 37 20 35 33 2e 36 30 32 32 20 31 2e 38 35 39 35 35 20 35 33 2e 38 31 33 39 20 32 2e 30 35 34 36 32 43 35 34 2e 30 32 38 20 32 2e 32 35 37 35 38 20 35 34 2e 31 38 34 20 32 2e 35 31 34 32 31 20 35 34 2e 32 36 35 33 20 32 2e 37 39 37 38 33 43 35 34 2e 33 34 36 37 20 33 2e 30 38 31 34 34 20 35 34 2e 33 35 30 36 20 33 2e 33 38 31 36 38 20 35 34 2e 32 37 36 37 20 33 2e 36 36 37 33 32 43 35 33 2e 39 38 34 33 20 35 2e 32 30 36 31 38 20 35 33 2e 36 33 35 35 20 36 2e 37 33 37 37 32 20 35 33 2e 33 39 39 34 20 38 2e 32 38 33 31 36 43 35 33 2e 31 35 36 37 20 39 2e 38 39 31 34 37 20 35 33 2e 30 34 33 34 20 31 31 2e 35 32 35 34 20 35 32 2e 38 33 37 32 20 31 33 2e 31 34 33 32 43 35 32 2e Data Ascii: .0507 1.69476C53.3359 1.73397 53.6022 1.85955 53.8139 2.05462C54.028 2.25758 54.184 2.51421 54.2653 2.79783C54.3467 3.08144 54.3506 3.38168 54.2767 3.66732C53.9843 5.20618 53.6355 6.73772 53.3994 8.28316C53.1567 9.89147 53.0434 11.5254 52.8372 13.1432C52.
2024-10-04 13:38:25 UTC	4398	IN	Data Raw: 2e 34 31 38 37 20 33 32 2e 31 34 30 32 20 38 36 2e 31 39 31 34 20 33 34 2e 33 39 35 35 20 38 36 2e 30 36 37 38 20 33 36 2e 36 35 31 35 43 38 36 2e 30 34 37 39 20 33 38 2e 30 36 33 38 20 38 36 2e 31 30 35 34 20 33 39 2e 34 37 36 31 20 38 36 2e 32 34 30 33 20 34 30 2e 38 38 32 31 43 38 36 2e 32 34 37 31 20 34 30 2e 39 35 34 37 20 38 36 2e 32 37 31 31 20 34 31 2e 30 32 34 37 20 38 36 2e 33 31 30 32 20 34 31 2e 30 38 36 32 43 38 36 2e 33 34 39 34 20 34 31 2e 31 34 37 37 20 38 36 2e 34 30 32 36 20 34 31 2e 31 39 39 20 38 36 2e 34 36 35 35 20 34 31 2e 32 33 35 39 43 38 36 2e 35 36 32 20 34 31 2e 32 36 33 20 38 36 2e 37 34 39 39 20 34 31 2e 31 33 38 37 20 38 36 2e 38 32 36 36 20 34 31 2e 30 33 30 35 43 38 37 2e 30 32 32 32 20 34 30 2e 37 35 35 31 20 38 37 2e 31 Data Ascii: .4187 32.1402 86.1914 34.3955 86.0678 36.6515C86.0479 38.0638 86.1054 39.4761 86.2403 40.8821C86.2471 40.9547 86.2711 41.0247 86.3102 41.0862C86.3494 41.1477 86.4026 41.199 86.4655 41.2359C86.562 41.263 86.7499 41.1387 86.8266 41.0305C87.0222 40.7551 87.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49855	18.245.31.86	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	527	OUT	GET /fpr.js HTTP/1.1 Host: cdn.firstpromoter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:25 UTC	494	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4842 Connection: close Date: Fri, 04 Oct 2024 02:18:34 GMT Last-Modified: Mon, 07 Feb 2022 04:29:32 GMT ETag: "d53f26ce71a7333d477b01f52bdade3e" Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 af3799c72ed879abb7633a4c3e57502e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: fOdzgefljuSMAwT4qEWP05F-1AoT8ttmdnLxsBCvjnb-o6C0_JsAwA== Age: 40792
2024-10-04 13:38:25 UTC	4842	IN	Data Raw: 76 61 72 20 46 50 52 4f 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 7b 7d 2c 72 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 66 69 72 73 74 70 72 6f 6d 6f 74 65 72 2e 63 6f 6d 2f 74 72 22 2c 6e 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 66 69 72 73 74 70 72 6f 6d 6f 74 65 72 2e 63 6f 6d 2f 67 65 74 5f 64 65 74 61 69 6c 73 22 2c 66 3d 6e 75 6c 6c 2c 74 3d 22 5f 66 70 72 6f 6d 5f 64 65 74 61 69 6c 73 22 2c 69 3d 22 5f 66 70 72 6f 6d 5f 74 69 64 22 2c 6f 3d 22 5f 66 70 72 6f 6d 5f 72 65 66 22 2c 65 3d 38 36 34 30 30 2c 61 3d 31 34 34 30 2c 75 3d 5b 22 66 70 5f 72 65 66 22 2c 22 66 70 72 22 2c 22 76 69 61 22 2c 22 72 65 66 22 2c 22 61 22 2c 22 5f 66 72 6f 6d 22 2c 22 5f 62 79 22 2c 22 64 65 61 6c 22 2c 22 5f 67 6f 22 2c 22 Data Ascii: var FPROM=function(){"use strict";var c={},r="https://t.firstpromoter.com/tr",n="https://t.firstpromoter.com/get_details",f=null,t="_fprom_details",i="_fprom_tid",o="_fprom_ref",e=86400,a=1440,u=["fp_ref","fpr","via","ref","a","_from","_by","deal","_go","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49854	146.75.52.157	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	528	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:25 UTC	538	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Tue, 26 Mar 2024 20:58:07 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Fri, 04 Oct 2024 13:38:25 GMT X-Served-By: cache-iad-kcgs7200117-IAD, cache-lin1730062-LIN X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 74 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f Data Ascii: this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 Data Ascii: ion(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigByt
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 Data Ascii: r(var r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 Data Ascii: r i=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.lengt
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 76 6f 69 64 20 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e Data Ascii: void d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 Data Ascii: turn new u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 Data Ascii: hrow"===i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatch
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 29 7d 28 69 2c 6f 2c 72 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 Data Ascii: )}(i,o,r,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=ne
2024-10-04 13:38:25 UTC	1378	IN	Data Raw: 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 Data Ascii: atorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49856	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	728	OUT	GET /wp-content/uploads/2024/05/Grupo-63790.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:25 UTC	338	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 07:12:45 GMT ETag: "2e88-61787724bd03b" Accept-Ranges: bytes Content-Length: 11912 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:25 UTC	7854	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 34 32 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 32 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 39 34 5f 32 35 37 39 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 31 34 32 22 20 68 65 69 67 68 74 3d 22 34 38 22 3e 3c 70 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="142" height="48" viewBox="0 0 142 48" fill="none"><mask id="mask0_94_2579" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="142" height="48"><pa
2024-10-04 13:38:25 UTC	4058	IN	Data Raw: 39 43 36 30 2e 35 35 38 31 20 34 2e 36 31 37 39 36 20 36 32 2e 38 32 33 39 20 33 2e 37 31 39 32 37 20 36 35 2e 31 37 32 36 20 33 2e 37 35 30 38 32 43 36 37 2e 35 32 31 33 20 33 2e 37 38 32 33 36 20 36 39 2e 37 36 32 32 20 34 2e 37 34 31 35 39 20 37 31 2e 34 30 36 33 20 36 2e 34 31 39 31 38 43 37 33 2e 30 35 30 34 20 38 2e 30 39 36 37 37 20 37 33 2e 39 36 34 32 20 31 30 2e 33 35 36 35 20 37 33 2e 39 34 38 34 20 31 32 2e 37 30 35 34 5a 4d 36 39 2e 39 33 30 32 20 31 32 2e 37 35 31 35 43 36 39 2e 39 31 35 37 20 31 32 2e 34 36 37 35 20 36 39 2e 39 30 37 32 20 31 32 2e 31 38 33 20 36 39 2e 38 38 35 36 20 31 31 2e 38 39 39 39 43 36 39 2e 36 39 35 38 20 39 2e 33 33 39 33 34 20 36 37 2e 39 34 31 31 20 36 2e 37 39 30 37 36 20 36 34 2e 36 39 32 38 20 37 2e 30 36 33 Data Ascii: 9C60.5581 4.61796 62.8239 3.71927 65.1726 3.75082C67.5213 3.78236 69.7622 4.74159 71.4063 6.41918C73.0504 8.09677 73.9642 10.3565 73.9484 12.7054ZM69.9302 12.7515C69.9157 12.4675 69.9072 12.183 69.8856 11.8999C69.6958 9.33934 67.9411 6.79076 64.6928 7.063

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49859	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	728	OUT	GET /wp-content/uploads/2024/05/Grupo-63875.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:25 UTC	338	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 07:12:46 GMT ETag: "58b9-61787724fa89e" Accept-Ranges: bytes Content-Length: 22713 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:25 UTC	7854	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 32 34 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 34 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 35 37 2e 39 36 34 38 20 31 35 2e 38 37 32 36 56 32 39 2e 39 35 31 31 48 35 33 2e 32 37 31 39 56 31 35 2e 38 37 32 36 48 34 39 2e 34 31 37 32 56 31 31 2e 38 39 38 34 48 36 31 2e 38 31 39 35 56 31 35 2e 38 37 32 36 48 35 37 2e 39 36 34 38 5a 22 20 66 69 6c 6c 3d 22 23 31 46 32 44 35 32 22 3e 3c 2f 70 61 74 68 3e 3c 6d 61 73 6b Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="224" height="40" viewBox="0 0 224 40" fill="none"><path d="M57.9648 15.8726V29.9511H53.2719V15.8726H49.4172V11.8984H61.8195V15.8726H57.9648Z" fill="#1F2D52"></path><mask
2024-10-04 13:38:25 UTC	8000	IN	Data Raw: 38 31 43 32 31 32 2e 30 38 39 20 32 36 2e 35 39 33 32 20 32 31 32 2e 33 30 38 20 32 36 2e 32 35 34 36 20 32 31 32 2e 34 35 32 20 32 35 2e 38 38 32 39 43 32 31 32 2e 35 39 37 20 32 35 2e 35 31 31 33 20 32 31 32 2e 36 36 35 20 32 35 2e 31 31 34 31 20 32 31 32 2e 36 35 32 20 32 34 2e 37 31 35 35 43 32 31 32 2e 36 35 35 20 32 34 2e 33 38 38 33 20 32 31 32 2e 36 30 36 20 32 34 2e 30 36 32 37 20 32 31 32 2e 35 30 36 20 32 33 2e 37 35 31 32 43 32 31 32 2e 34 30 36 20 32 33 2e 34 35 35 37 20 32 31 32 2e 32 35 31 20 32 33 2e 31 38 32 20 32 31 32 2e 30 34 39 20 32 32 2e 39 34 34 36 43 32 31 31 2e 38 31 37 20 32 32 2e 36 37 37 20 32 31 31 2e 35 34 38 20 32 32 2e 34 34 34 37 20 32 31 31 2e 32 34 39 20 32 32 2e 32 35 35 43 32 31 30 2e 38 37 37 20 32 32 2e 30 31 37 33 Data Ascii: 81C212.089 26.5932 212.308 26.2546 212.452 25.8829C212.597 25.5113 212.665 25.1141 212.652 24.7155C212.655 24.3883 212.606 24.0627 212.506 23.7512C212.406 23.4557 212.251 23.182 212.049 22.9446C211.817 22.677 211.548 22.4447 211.249 22.255C210.877 22.0173
2024-10-04 13:38:26 UTC	6859	IN	Data Raw: 32 33 2e 34 30 37 37 43 32 35 2e 37 39 34 34 20 32 33 2e 34 35 37 39 20 32 35 2e 37 33 39 39 20 32 33 2e 35 32 30 39 20 32 35 2e 36 39 39 39 20 32 33 2e 35 39 33 43 32 35 2e 36 35 39 38 20 32 33 2e 36 36 35 31 20 32 35 2e 36 33 35 31 20 32 33 2e 37 34 34 37 20 32 35 2e 36 32 37 31 20 32 33 2e 38 32 36 37 43 32 35 2e 36 33 30 33 20 32 34 2e 30 39 31 35 20 32 35 2e 37 33 31 34 20 32 34 2e 33 34 35 37 20 32 35 2e 39 31 30 39 20 32 34 2e 35 34 30 34 43 32 36 2e 31 37 37 33 20 32 34 2e 38 32 35 39 20 32 36 2e 34 38 30 32 20 32 34 2e 36 34 33 33 20 32 36 2e 37 39 37 32 20 32 34 2e 35 30 39 37 43 32 37 2e 33 33 33 33 20 32 34 2e 32 38 34 20 32 37 2e 34 31 36 33 20 32 33 2e 39 30 32 32 20 32 37 2e 33 39 33 20 32 33 2e 33 38 36 39 43 32 37 2e 33 35 38 32 20 32 32 Data Ascii: 23.4077C25.7944 23.4579 25.7399 23.5209 25.6999 23.593C25.6598 23.6651 25.6351 23.7447 25.6271 23.8267C25.6303 24.0915 25.7314 24.3457 25.9109 24.5404C26.1773 24.8259 26.4802 24.6433 26.7972 24.5097C27.3333 24.284 27.4163 23.9022 27.393 23.3869C27.3582 22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49860	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	731	OUT	GET /wp-content/uploads/2024/06/LATAM-AIRLINES.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:25 UTC	338	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 27 Jun 2024 09:35:00 GMT ETag: "2bb2-61bdbd83e229e" Accept-Ranges: bytes Content-Length: 11186 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:25 UTC	7854	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 70 61 20 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 32 2e 30 39 20 31 31 33 2e 30 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 20 2e 63 6c 73 2d 31 20 7b 20 66 69 6c 6c 3a 20 23 32 37 33 30 34 66 3b 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 20 7d 20 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 52 41 6d 38 69 59 2e 74 69 66 22 3e 3c 67 3e 3c 70 61 74 68 20 63 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 352.09 113.04"><defs><style> .cls-1 { fill: #27304f; stroke-width: 0px; } </style></defs><g id="RAm8iY.tif"><g><path c
2024-10-04 13:38:25 UTC	3332	IN	Data Raw: 30 39 2d 2e 37 35 2d 2e 33 32 2d 32 2e 36 31 2d 32 2e 38 33 2d 35 2e 32 33 2d 35 2e 36 37 2d 37 2e 38 35 2d 38 2e 34 39 2d 33 2e 32 38 2d 33 2e 35 34 2d 36 2e 35 38 2d 37 2e 30 38 2d 39 2e 38 36 2d 31 30 2e 36 32 2d 2e 30 39 2d 2e 31 2d 2e 31 37 2d 2e 32 31 2d 2e 32 36 2d 2e 33 32 2d 2e 30 34 2e 30 33 2d 2e 30 37 2e 30 36 2d 2e 31 31 2e 30 38 5a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 32 39 36 2e 35 36 2c 39 36 2e 38 32 63 30 2d 33 2e 38 35 2c 30 2d 37 2e 37 31 2d 2e 30 31 2d 31 31 2e 35 36 2c 30 2d 2e 34 35 2e 30 37 2d 2e 36 2e 35 37 2d 2e 36 2c 35 2e 38 36 2e 30 32 2c 31 31 2e 37 33 2e 30 32 2c 31 37 2e 35 39 2c 30 2c 2e 34 37 2c 30 2c 2e 36 32 2e 31 31 2e 35 38 2e 35 39 2d 2e 30 34 2e 35 36 2d Data Ascii: 09-.75-.32-2.61-2.83-5.23-5.67-7.85-8.49-3.28-3.54-6.58-7.08-9.86-10.62-.09-.1-.17-.21-.26-.32-.04.03-.07.06-.11.08Z"></path><path class="cls-1" d="M296.56,96.82c0-3.85,0-7.71-.01-11.56,0-.45.07-.6.57-.6,5.86.02,11.73.02,17.59,0,.47,0,.62.11.58.59-.04.56-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49857	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	728	OUT	GET /wp-content/uploads/2024/06/Vector_Logo.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:25 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 27 Jun 2024 09:35:20 GMT ETag: "bde-61bdbd97962ec" Accept-Ranges: bytes Content-Length: 3038 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:25 UTC	3038	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 31 34 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 34 20 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 32 32 36 5f 34 35 34 29 22 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 2e 33 37 30 38 20 32 30 2e 31 39 33 31 43 32 30 2e 31 33 36 20 32 31 2e 37 37 30 32 20 32 32 2e Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="214" height="41" viewBox="0 0 214 41" fill="none"><g clip-path="url(#clip0_226_454)"><path fill-rule="evenodd" clip-rule="evenodd" d="M16.3708 20.1931C20.136 21.7702 22.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49858	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	738	OUT	GET /wp-content/uploads/2024/06/MEDICOS-SIN-FRONTERAS.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:25 UTC	338	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 27 Jun 2024 09:35:39 GMT ETag: "32e6-61bdbda9beb02" Accept-Ranges: bytes Content-Length: 13030 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:25 UTC	7854	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 61 70 61 20 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 32 2e 30 39 20 31 38 36 2e 31 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 20 2e 63 6c 73 2d 31 20 7b 20 66 69 6c 6c 3a 20 23 32 37 33 30 34 66 3b 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 20 7d 20 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 62 63 67 69 74 67 22 3e 3c 67 3e 3c 70 61 74 68 20 63 6c 61 73 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" id="Capa_1" data-name="Capa 1" version="1.1" viewBox="0 0 352.09 186.19"><defs><style> .cls-1 { fill: #27304f; stroke-width: 0px; } </style></defs><g id="bcgitg"><g><path class
2024-10-04 13:38:25 UTC	5176	IN	Data Raw: 68 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 37 36 2e 36 33 2c 31 34 33 2e 39 33 63 2d 32 2e 32 36 2c 30 2d 34 2e 35 33 2d 2e 30 32 2d 36 2e 38 31 2c 30 2d 2e 37 32 2c 30 2d 2e 39 36 2d 2e 31 34 2d 2e 38 2d 2e 39 33 2c 31 2e 33 31 2d 36 2e 37 33 2c 32 2e 36 2d 31 33 2e 34 36 2c 33 2e 38 34 2d 32 30 2e 32 2e 31 33 2d 2e 37 32 2e 34 37 2d 2e 38 35 2c 31 2e 31 32 2d 2e 38 35 2c 34 2e 33 37 2e 30 32 2c 38 2e 37 35 2e 30 33 2c 31 33 2e 31 32 2c 30 2c 2e 38 38 2c 30 2c 2e 38 35 2e 33 38 2e 37 32 2e 39 38 2d 2e 31 31 2e 35 33 2d 2e 33 2c 31 2e 30 37 2d 2e 33 2c 31 2e 36 2d 2e 30 32 2c 31 2e 30 31 2d 2e 34 39 2c 31 2e 32 37 2d 31 2e 34 36 2c 31 2e 32 36 2d 32 2e 37 37 2d 2e 30 36 2d 35 2e 35 34 2e 30 32 2d 38 2e 33 2d 2e 30 35 Data Ascii: h><path class="cls-1" d="M176.63,143.93c-2.26,0-4.53-.02-6.81,0-.72,0-.96-.14-.8-.93,1.31-6.73,2.6-13.46,3.84-20.2.13-.72.47-.85,1.12-.85,4.37.02,8.75.03,13.12,0,.88,0,.85.38.72.98-.11.53-.3,1.07-.3,1.6-.02,1.01-.49,1.27-1.46,1.26-2.77-.06-5.54.02-8.3-.05

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49861	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:25 UTC	726	OUT	GET /wp-content/uploads/2024/05/IconoCaja.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:26 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:55 GMT ETag: "3e4-6178704084922" Accept-Ranges: bytes Content-Length: 996 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:26 UTC	996	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 32 22 20 66 69 6c 6c 3d 22 23 46 30 45 46 46 46 22 3e 3c 2f 72 65 63 74 3e 3c 70 61 74 68 20 64 3d 22 4d 32 31 20 32 30 4c 31 38 20 31 38 56 31 33 4d 39 20 31 38 43 39 20 31 39 2e 31 38 31 39 20 39 2e 32 33 32 37 39 20 32 30 2e 33 35 32 32 20 39 2e 36 38 35 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M21 20L18 18V13M9 18C9 19.1819 9.23279 20.3522 9.6850

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49862	34.120.202.204	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:26 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=b9ef8a21753309fb6081d9e409cb42c45d757c6f1728049100 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1423 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:26 UTC	1423	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 74 72 75 65 2c 22 62 75 66 66 65 72 5f 63 6f 75 6e 74 22 3a 30 2c 22 74 6f 74 61 6c 5f 62 75 66 66 65 72 5f 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 62 75 66 66 65 72 5f 72 61 74 69 6f 22 3a 30 2c 22 63 6c 69 65 6e 74 5f 74 69 6d 65 22 3a 36 32 30 37 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 2c 22 69 73 5f 62 75 66 66 65 72 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 74 72 75 65 2c 22 6d 69 6e 75 74 65 73 5f 77 61 74 63 68 65 64 22 3a 30 2c 22 6e 65 74 77 6f 72 6b 5f 73 74 61 74 65 22 3a 30 2c 22 70 6c 61 79 62 61 63 6b 5f 72 61 74 65 22 3a 31 2c 22 70 6c 61 79 65 72 5f 77 69 64 74 68 22 3a 30 2c 22 70 6c 61 79 65 72 5f 68 65 69 67 68 74 22 3a 30 2c 22 73 65 73 73 69 6f 6e 5f 70 6c 61 79 62 61 63 6b Data Ascii: [{"autoplay":true,"buffer_count":0,"total_buffer_duration":0,"buffer_ratio":0,"client_time":6207.1999999999825,"is_buffering":false,"looping":true,"minutes_watched":0,"network_state":0,"playback_rate":1,"player_width":0,"player_height":0,"session_playback
2024-10-04 13:38:26 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Fri, 04 Oct 2024 13:38:26 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49864	150.171.27.10	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:26 UTC	532	OUT	GET /p/action/25055882.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:26 UTC	571	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=60 Content-Length: 4112 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 043D444ACCB04D968ECCFAD4A9357361 Ref B: EWR311000103051 Ref C: 2024-10-04T13:38:26Z Date: Fri, 04 Oct 2024 13:38:26 GMT Connection: close
2024-10-04 13:38:26 UTC	146	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo
2024-10-04 13:38:26 UTC	3667	IN	Data Raw: 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a 20 61 2c 20 27 62 69 27 3a 20 62 2c 20 27 64 74 27 3a 20 74 2c 20 27 65 63 27 3a 20 65 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 7d 29 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 27 75 73 27 2c 20 66 61 6c 73 65 2c 20 66 61 6c 73 65 2c 20 66 61 6c 73 65 2c 20 66 61 6c 73 65 2c 20 66 61 6c 73 65 29 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 69 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 Data Ascii: ] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e}); } }})(window, document, 'us', false, false, false, false, false);(function(w,d,s,i) { var
2024-10-04 13:38:26 UTC	299	IN	Data Raw: 7d 2c 20 65 2e 6f 72 69 67 69 6e 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 73 74 2c 66 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 70 2c 66 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 65 73 73 61 67 65 27 2c 20 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 6c 61 75 6e 63 68 45 76 65 6e 74 53 65 74 75 70 28 29 3b 0d 0a 7d Data Ascii: }, e.origin); } f.parentNode.insertBefore(est,f); }; f.parentNode.insertBefore(cp,f); w.removeEventListener('message', eventListener); }); } launchEventSetup();}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49869	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	729	OUT	GET /wp-content/uploads/2024/05/IconoCaja-13.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:27 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:54 GMT ETag: "4a8-6178703f80cd3" Accept-Ranges: bytes Content-Length: 1192 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:27 UTC	1192	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 32 22 20 66 69 6c 6c 3d 22 23 46 30 45 46 46 46 22 3e 3c 2f 72 65 63 74 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 20 31 36 48 31 35 2e 30 31 4d 32 31 20 31 36 48 32 31 2e 30 31 4d 31 35 2e 35 20 32 31 43 31 35 2e 38 32 35 39 20 32 31 2e 33 33 32 36 20 31 36 2e 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M15 16H15.01M21 16H21.01M15.5 21C15.8259 21.3326 16.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49872	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	729	OUT	GET /wp-content/uploads/2024/05/IconoCaja-14.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:27 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:55 GMT ETag: "36c-6178703fbb656" Accept-Ranges: bytes Content-Length: 876 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:27 UTC	876	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 32 22 20 66 69 6c 6c 3d 22 23 46 30 45 46 46 46 22 3e 3c 2f 72 65 63 74 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 32 33 56 32 35 43 32 33 20 32 35 2e 35 33 30 34 20 32 32 2e 37 38 39 33 20 32 36 2e 30 33 39 31 20 32 32 2e 34 31 34 32 20 32 36 2e 34 31 34 32 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M23 23V25C23 25.5304 22.7893 26.0391 22.4142 26.4142C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49873	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	729	OUT	GET /wp-content/uploads/2024/05/IconoCaja-15.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:27 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:55 GMT ETag: "605-617870404ce7f" Accept-Ranges: bytes Content-Length: 1541 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:27 UTC	1541	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 32 22 20 66 69 6c 6c 3d 22 23 46 30 45 46 46 46 22 3e 3c 2f 72 65 63 74 3e 3c 70 61 74 68 20 64 3d 22 4d 32 37 20 32 36 56 31 38 2e 35 43 32 37 20 31 37 2e 36 37 31 36 20 32 36 2e 33 32 38 34 20 31 37 20 32 35 2e 35 20 31 37 48 32 34 2e 35 43 32 33 2e 36 37 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><rect width="36" height="36" rx="12" fill="#F0EFFF"></rect><path d="M27 26V18.5C27 17.6716 26.3284 17 25.5 17H24.5C23.671

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49871	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	736	OUT	GET /wp-content/uploads/2024/05/gesti_n_del_tiempo.webp HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:27 UTC	310	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:42:19 GMT ETag: "12974-61787056aa939" Accept-Ranges: bytes Content-Length: 76148 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:27 UTC	7882	IN	Data Raw: 52 49 46 46 6c 29 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 82 02 00 51 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFl)WEBPVP8X0QICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-10-04 13:38:27 UTC	8000	IN	Data Raw: 2f 79 8a 83 fe 9b 5f ff d2 67 75 6d 08 a6 60 08 82 28 e4 99 44 7e 58 ed 5b e7 ab e0 de 45 73 d9 2d 42 96 2e a7 82 90 27 d0 19 6f dc 3d 15 42 e7 4b 5f ca 61 7f e1 eb 9e 7a 5f 13 40 8a 81 dc 53 10 c9 b3 91 48 69 ce eb ab e0 dc f3 f3 b9 67 84 d0 ce 58 2b d5 26 91 7b 00 09 dd 34 81 85 26 e3 d6 6b 5e ca 81 7f e1 eb 7e d7 3f 59 ab 35 21 65 02 9e 41 f3 4b 97 58 9e d9 dd be 08 7e ab 7b 5e 37 ad d1 b4 a1 6d 88 9c 8a e2 bd 90 9b 6e 20 46 ae 61 5b af fc 6c 0e fd 8f 79 cd cb 76 75 09 0e aa 01 9e 90 24 11 22 91 e7 4b 5f 04 ef 9f 5f f7 1c 5b 42 88 f6 ba ed 98 2c 4c 21 ee 19 67 bd 49 81 80 d2 4c d7 3f e1 95 1c fc 9f ff d9 7f e2 ea 5a bb 5a 19 90 20 88 48 9a 48 b3 ac f5 a8 f6 f2 45 f8 fa ad 6b 14 da 28 3b eb 5a 37 34 25 10 41 e5 3e 69 93 d9 b0 36 be 8c c3 ff ef fd 98 7f Data Ascii: /y_gum`(D~X[Es-B.'o=BK_az_@SHigX+&{4&k^~?Y5!eAKX~{^7mn Fa[lyvu$"K__[B,L!gIL?ZZ HHEk(;Z74%A>i6
2024-10-04 13:38:27 UTC	8000	IN	Data Raw: 04 0c 88 28 45 aa 78 ae 09 49 b3 c3 b2 e3 f1 2c d2 44 44 88 e4 35 b4 08 3a 87 a0 82 10 62 af f4 a5 e2 84 20 21 22 b2 83 35 16 4d 6a 5a 79 0f 03 53 04 01 41 e2 ac 88 7b a9 cf cf dc 03 92 73 a5 25 89 08 a1 c4 ce 96 65 59 d1 2b 20 98 41 10 12 94 50 91 90 ea 52 52 89 03 c2 c2 6a 7e 1c 42 49 cc 91 45 90 77 d0 30 51 c4 00 39 0d 41 0a a1 5a fb ea 01 59 34 59 21 6a 89 e4 6b ac d2 8e 17 d1 22 82 44 08 65 40 40 2c 49 d9 0f 6a 40 12 92 c8 62 ee 20 ad 24 0d 21 bd 04 88 02 48 a1 10 21 40 8a be 22 5d f2 97 01 79 67 d5 58 11 21 28 ac c4 5a ce 2e 79 07 a3 93 20 46 1a d1 25 02 92 6a e5 a2 eb ef 13 42 ac 3c 8b 25 11 84 44 18 92 97 50 b4 10 08 70 2d 86 0d 62 05 cc 22 c6 e5 fd db af cd c7 b2 20 1f 9b d0 24 f2 3d 8a d4 3b 40 9c 15 29 9a cd 64 02 89 95 b5 97 a6 9e 8f c7 af be Data Ascii: (ExI,DD5:b !"5MjZySA{s%eY+ APRRj~BIEw0Q9AZY4Y!jk"De@@,Ij@b $!H!@"]ygX!(Z.y F%jB<%DPp-b" $=;@)d
2024-10-04 13:38:27 UTC	8000	IN	Data Raw: 8c 14 d0 ec 65 c7 63 4c be 83 1b 8c 0e b6 03 88 d0 07 b8 b2 eb cd a1 cd b6 e5 95 96 44 b0 b4 7f e9 9d 1a da 41 13 89 cd f7 25 45 13 9f 16 f5 49 e7 20 bf 87 ba a6 2f 41 39 db 03 19 74 b3 75 b2 26 0e 6b b5 81 a4 c6 dc 91 f4 1e 5c 56 66 dd f2 6b 97 47 17 5e eb 5f ac 1a a9 06 4a 61 6f 93 9f 64 ac e3 9b 71 0b c8 37 ff 33 e4 f8 e0 6c 2f 67 a9 ce f6 31 11 d5 a3 71 eb 09 ed b5 6c 3e a1 19 d9 67 3f e3 87 c4 7b e8 20 37 da d8 34 d1 56 c4 61 9f a7 6d 59 bc da 5f 87 0e a5 e9 6e bb 2a 87 04 2b c3 57 1e 62 5e a2 88 4f 3a 3c 1d 48 83 e6 00 0d 49 db e7 42 e3 cc 9c d9 3e 11 76 9e 7d aa 25 d6 cc c9 01 61 19 6d 11 7b 3b f2 96 20 e7 32 c2 ec ba 79 ea 41 ef cb a6 e8 fd c7 db b1 0a 7d 6f 74 84 4d 30 40 fa 5c 01 eb bd 45 61 34 60 ca 6a 42 a0 48 3c e5 58 6b 78 53 e3 d3 b5 8c 94 Data Ascii: ecLDA%EI /A9tu&k\VfkG^_Jaodq73l/g1ql>g?{ 74VamY_n*+Wb^O:<HIB>v}%am{; 2yA}otM0@\Ea4`jBH<XkxS
2024-10-04 13:38:27 UTC	8000	IN	Data Raw: 77 00 09 16 96 3f 0c 0b 87 38 98 21 4c 88 ee 0e 5c 33 1e 7e 49 2d cc 2a d8 4c c4 d8 b2 37 c3 23 66 3f 16 e2 98 e1 7b 6a 26 0f 52 e9 50 55 c1 7b d0 40 14 4d 1b 0f ff b8 9e 39 71 d2 0b c6 e6 09 0e a4 25 3b a2 60 66 ef fc 07 15 27 76 78 e3 b5 71 dc 8d 56 aa d3 a9 59 3d 3e db 92 75 cc 8c ba a0 7b 6a ad 8e ef ad 89 9a 89 c5 d0 97 79 23 ab f8 36 f8 eb e9 8a c4 fb 9e f5 c2 11 3b 0e 2a 04 d3 d4 e6 fa 79 bf af 27 48 bb 60 1e a9 51 ec 1e db 69 1b 36 dd c5 0f c8 b8 bb a5 3f 63 37 c1 ab 17 30 80 79 28 7b 8b 74 28 a1 9a 70 3f b9 85 65 4a f4 99 54 15 ce ba c4 43 1b 01 82 1a 52 7d e4 6d f0 ca 67 d3 2b 39 96 7e ce d3 3c 2c d0 96 ec 26 29 f0 06 03 8f cc fb 6e 75 84 89 72 43 7b 1c d9 2c bd 54 cf 1c 24 f9 b1 d1 29 2b 3f 24 c7 82 29 81 9b f1 20 ea 3d 3f 74 96 0d 87 f0 4f da Data Ascii: w?8!L\3~I-L7#f?{j&RPU{@M9q%;`f'vxqVY=>u{jy#6;y'H`Qi6?c70y({t(p?eJTCR}mg+9~<,&)nurC{,T$)+?$) =?tO
2024-10-04 13:38:27 UTC	8000	IN	Data Raw: b8 22 71 cd e5 cc 46 ac 51 bd aa ea 04 34 67 e5 b0 0e a3 17 62 c0 1f 23 e0 0e 4e bb 1f 3f 69 61 82 fd a9 0c e7 b6 a4 41 b5 2e 1e f4 c2 41 33 99 21 8b ba e6 f2 9d b3 12 68 0e 5a d5 ce 8a 5e 34 1a 09 6d 5d 8f c6 23 45 1f c2 d0 e2 fd 36 50 d1 f5 8c 7e 41 74 86 cb 1f 4d 81 f6 7b 2a 7f c3 d8 7a 32 01 eb 99 4f fe 94 ae 40 5f 37 ea c5 d0 9e 1f f2 0c 2a 55 0b e2 df 6a 06 51 d5 cb ad 21 d8 cf 8a 74 36 6c 6c 9c 6e 54 47 9b f2 45 b5 16 e8 5b 08 19 85 c2 1c b2 99 6c 3e 3b 09 31 8e 27 3c 27 bf 31 69 f5 2a ad 1a 59 cf 64 7f 04 98 6c e7 6d a6 62 f4 d8 c9 f2 d6 df 79 ce c2 50 9d f2 ed 70 12 95 6a 76 6b 1d b7 a0 f4 ab bb 9a 74 9b 43 64 b4 df 4a aa 38 a9 12 98 d5 dd 93 ec 6c 1f 2b 38 0d 03 3f af c0 5e e9 f6 cd b3 b8 a7 9d 1c c9 70 b8 68 8e b9 93 12 ba 98 5c 0c a3 21 da 3b Data Ascii: "qFQ4gb#N?iaA.A3!hZ^4m]#E6P~AtM{z2O@_7UjQ!t6llnTGE[l>;1'<'1i*YdlmbyPpjvktCdJ8l+8?^ph\!;
2024-10-04 13:38:27 UTC	8000	IN	Data Raw: 56 ea 7e 40 00 00 00 02 de 10 5d c8 b4 8a 76 fc 76 4e 0c 07 a0 43 80 a1 bf 33 cf d3 f5 f6 bf c0 7f 86 27 33 a9 70 e0 2f 69 bc aa fb 4a 79 03 b7 a1 98 e5 c1 11 2e 15 33 c7 d3 8a 16 2a df 97 c4 0c de d2 f8 ba 18 88 9f b4 2b f5 dc 80 04 45 68 00 0e 00 a4 01 a4 45 e0 60 19 fd c1 d2 5b 58 d9 23 68 b2 60 e4 ae 59 f2 30 fa f7 07 2e 41 52 4a 68 ee d7 c5 e8 56 90 9b 00 2e b9 cb 08 6a 7b 4e ee 95 cd 10 8a 92 a2 fd c7 40 81 43 c8 35 a7 7a f5 de b1 f6 48 97 08 ed 8a 5c f6 d0 59 a9 5e 71 aa 4d 6e e2 b8 11 f3 79 45 53 c3 29 70 eb eb 23 7c 85 3d d0 68 5a f0 1d 1e 51 dd 85 a2 ea 64 56 03 71 fc 2f 2f 02 0a a6 d2 ce 6d 1e d9 05 49 9d 28 5c 55 2f e8 a8 20 92 55 c3 b7 a8 04 77 50 d8 5a 7c 1a 4b 38 94 96 2d 64 27 35 83 49 67 8f 7d 18 4a 87 76 f2 5b 3a 26 d4 85 4a 9f ca 21 2c Data Ascii: V~@]vvNC3'3p/iJy.3*+EhE`[X#h`Y0.ARJhV.j{N@C5zH\Y^qMnyES)p#\|=hZQdVq//mI(\U/ UwPZ\|K8-d'5Ig}Jv[:&J!,
2024-10-04 13:38:27 UTC	8000	IN	Data Raw: 6a dc ec 79 20 51 26 63 7c 7b 26 c1 2a 1b af d9 fe 07 b5 61 7a 7e cf 54 1b e9 be 71 f1 34 61 b0 41 9e 58 48 c9 41 72 6a 62 a8 97 e8 5f 5e 0c fe 4c 1c 0b aa 40 37 ea 48 f5 e0 34 e2 70 5d 08 4c b9 cc 90 a9 69 6e 9f 9d 80 46 94 06 5c 78 ab fa ab 47 05 4d e0 27 e5 1c c1 66 7a ae 0d da 1a cb b5 1c 3e 90 3e 9e bc 84 15 0a 90 23 ea 0d 4e e5 66 3a a6 b6 0d 9d 57 76 12 fb 70 6c 55 99 b7 f8 b8 81 6c f0 8c 79 0a 87 20 61 36 10 4a 6a 13 70 d8 0e 6d a1 5b e0 a3 03 6c af de 7a 07 25 65 2c a4 aa fb a9 55 71 6f 83 cd 7b bb 24 e9 6c 82 77 b4 f7 41 64 ea 3f ad b5 90 6f 4f 03 07 dc a7 c2 37 fa c5 cb d4 3a 01 ce 55 b5 bf 11 e6 e4 ef e6 09 9c 2a 04 50 79 c0 95 6f 8a 11 43 12 f4 18 c2 27 dd 0e bd de 3b 1f 3a 12 cc 41 1b 1e 2f de 0b 44 19 45 4b c1 2a ac af 1a 6c 09 ce 1c d0 dd Data Ascii: jy Q&c\|{&az~Tq4aAXHArjb_^L@7H4p]LinF\xGM'fz>>#Nf:WvplUly a6Jjpm[lz%e,Uqo{$lwAd?oO7:UPyoC';:A/DEK*l
2024-10-04 13:38:27 UTC	8000	IN	Data Raw: 93 d0 4b 44 c5 a0 4f 24 bf 53 d4 72 dd 8f d7 b4 62 63 32 f0 e9 7d d2 98 e3 56 3c 6c 2d ce 73 98 e4 e3 2c cd 13 ac 9c c7 39 16 8c 46 83 6a c4 a7 b6 b7 93 c1 64 0a 89 e8 99 37 33 78 dd 81 d2 e5 50 aa 60 84 74 51 92 c0 e6 01 f5 6a d0 6a 71 ee b3 fc f1 a1 90 5c e5 d8 8f 4d ba 5d 6b 3c 6e 77 22 f2 02 06 70 63 16 e0 1d 00 cb 3b db 88 af fe 19 27 f8 c9 01 2f 62 f4 07 03 ef 16 9f bf dd c9 36 c7 3c 84 5f 3a fd f3 13 6c 66 11 92 ee 0d 33 e0 8b 80 76 fa 12 81 c7 40 3a 79 46 c3 7e 94 76 28 99 65 be 97 ac 6f 8a af f8 42 3c a8 6e ba c1 a0 ad 15 40 b3 ff 92 79 ea a6 00 a4 13 8d 41 ba 20 c9 b6 a6 b1 e2 8c a7 d1 ce e4 44 2c ac f7 b9 65 0d 39 e9 8a 51 1f 23 e5 a1 35 2f d3 2a 38 62 46 1f fe 0b 6d b1 d8 75 4f 17 de a7 7c 4e 12 24 7a cf 26 42 48 11 ef 6f e9 76 8a 5a d7 f3 ea Data Ascii: KDO$Srbc2}V<l-s,9Fjd73xP`tQjjq\M]k<nw"pc;'/b6<_:lf3v@:yF~v(eoB<n@yA D,e9Q#5/*8bFmuO\|N$z&BHovZ
2024-10-04 13:38:27 UTC	4266	IN	Data Raw: 20 32 2f e2 22 52 84 02 98 ac 24 83 8c 27 bc 64 c2 9f cb 19 b7 0b e2 6b e0 e4 3f 5b 57 ee 07 ee 47 25 44 6e b2 8b ca c6 e9 5d 60 43 86 ae 1a 14 5c 92 7e 08 a8 09 6c 33 91 81 42 f4 49 cc e4 1a 2b bf c5 ba 00 66 a7 a1 7a 58 ca 0a f8 0f 66 d1 e5 b5 15 89 17 94 3d 9e 4f ea 25 83 c3 5d 57 b2 f2 79 6a f2 2d f6 3b f2 33 01 b9 ee 7c 43 71 64 9b f4 43 c5 4a 2b 30 35 ae 24 3f e7 5a 72 9e 69 fd 54 73 54 4c d6 f2 34 a9 50 87 cc f5 86 f3 ca 48 02 cc e9 a8 1e 8b 5d 50 b6 6a 8d 74 1f 81 40 98 59 37 94 e5 12 e4 87 f8 e7 66 00 a4 3b 33 33 a8 19 8d 11 2b c0 9c 2a d8 cf d9 8a 36 7b d1 fd 0a f1 25 3a 8f fb ed 4b 02 7d 3f a9 22 d8 4c 96 3c 7c 76 f9 c0 41 41 be 12 5c 96 72 93 20 23 2c 1f e3 df f1 d4 e1 a2 e9 a1 a7 0f 2e 9f 56 27 c5 bc 26 f2 77 6c fc e0 d3 99 0b a2 eb e0 6e 20 Data Ascii: 2/"R$'dk?[WG%Dn]`C\~l3BI+fzXf=O%]Wyj-;3\|CqdCJ+05$?ZriTsTL4PH]Pjt@Y7f;33+*6{%:K}?"L<\|vAA\r #,.V'&wln

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49874	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	728	OUT	GET /wp-content/uploads/2024/05/IconoCaja-1.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:27 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:52 GMT ETag: "3a9-6178703cdef6a" Accept-Ranges: bytes Content-Length: 937 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:27 UTC	937	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 31 20 32 30 4c 31 38 20 31 38 56 31 33 4d 39 20 31 38 43 39 20 31 39 2e 31 38 31 39 20 39 2e 32 33 32 37 39 20 32 30 2e 33 35 32 32 20 39 2e 36 38 35 30 38 20 32 31 2e 34 34 34 32 43 31 30 2e 31 33 37 34 20 32 32 2e 35 33 36 31 20 31 30 2e 38 30 30 33 20 32 33 2e 35 32 38 32 20 31 31 2e 36 33 36 20 32 34 2e 33 36 34 43 31 32 2e Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M21 20L18 18V13M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C12.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49868	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	728	OUT	GET /wp-content/uploads/2024/05/IconoCaja-4.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:27 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:52 GMT ETag: "215-6178703d8dc55" Accept-Ranges: bytes Content-Length: 533 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:27 UTC	533	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 2e 35 20 32 37 48 31 32 43 31 31 2e 34 36 39 36 20 32 37 20 31 30 2e 39 36 30 39 20 32 36 2e 37 38 39 33 20 31 30 2e 35 38 35 38 20 32 36 2e 34 31 34 32 43 31 30 2e 32 31 30 37 20 32 36 2e 30 33 39 31 20 31 30 20 32 35 2e 35 33 30 34 20 31 30 20 32 35 56 31 33 43 31 30 20 31 32 2e 34 36 39 36 20 31 30 2e 32 31 30 37 20 31 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M18.5 27H12C11.4696 27 10.9609 26.7893 10.5858 26.4142C10.2107 26.0391 10 25.5304 10 25V13C10 12.4696 10.2107 11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49876	104.18.64.124	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	571	OUT	GET /feedbackweb-new.js HTTP/1.1 Host: js.hubspotfeedback.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.sesamehr.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:27 UTC	1327	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Fri, 04 Oct 2024 10:12:17 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: BcD.6mt4Ytpm5WRRlgaokgWJ9VHVN5ZC etag: W/"71020e406ae1476fd34c864fddf987d3" vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method x-cache: Hit from cloudfront via: 1.1 76e55a2361219fb19722e949475d1844.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: u10IR3UGoAf9vpNZp1xYr5iJksi6aCqbz5k8rGnXcIsiegVwkouh5w== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=feedback-web-renderer-ui/static-1.21796/bundles/popupInjector.js&cfRay=8cd4ed117ea343b7-IAD Cache-Control: max-age=600 x-hs-target-asset: feedback-web-renderer-ui/static-1.21796/bundles/popupInjector.js x-content-type-options: nosniff x-hs-cache-status: MISS x-envoy-upstream-service-time: 6 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 0e61a0db-0345-47ee-9ebd-d604aafc06b4
2024-10-04 13:38:27 UTC	369	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 73 65 72 76 65 64 2d 62 79 2d 70 6f 64 3a 20 69 61 64 30 32 2f 61 70 70 2d 74 64 2f 65 6e 76 6f 79 2d 70 72 6f 78 79 2d 36 63 36 64 64 36 38 36 34 2d 67 63 74 32 6c 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 30 65 36 31 61 30 64 62 2d 30 33 34 35 2d 34 37 65 65 2d 39 65 62 64 2d 64 36 30 34 61 61 66 63 30 36 62 34 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 65 65 64 62 61 63 6b 2d 77 65 62 2d 72 65 6e 64 65 72 65 Data Ascii: x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-6c6dd6864-gct2lx-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-request-id: 0e61a0db-0345-47ee-9ebd-d604aafc06b4cache-tag: staticjsapp-feedback-web-rendere
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 35 34 31 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 28 74 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 2e 65 78 70 6f 72 74 73 29 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 4d 61 74 68 3d 3d 4d 61 74 68 26 26 65 7d 2c 72 3d 6e 28 22 6f 62 6a 65 63 74 Data Ascii: 5416!function(){"use strict";var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e,t){return e(t={exports:{}},t.exports),t.exports}var n=function(e){return e&&e.Math==Math&&e},r=n("object
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 28 65 29 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 2c 79 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 76 3d 72 2e 64 6f 63 75 6d 65 6e 74 2c 24 3d 6d 28 76 29 26 26 6d 28 76 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 24 3f 76 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 3a 7b 7d 7d 2c 45 3d 21 69 26 26 21 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 Data Ascii: (e)))return r;throw TypeError("Can't convert object to primitive value")},y={}.hasOwnProperty,w=function(e,t){return y.call(e,t)},v=r.document,$=m(v)&&m(v.createElement),k=function(e){return $?v.createElement(e):{}},E=!i&&!o((function(){return 7!=Object.d
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 74 72 69 6e 67 28 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 29 2b 22 29 5f 22 2b 28 2b 2b 41 2b 55 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 2c 42 3d 7a 28 22 6b 65 79 73 22 29 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 42 5b 65 5d 7c 7c 28 42 5b 65 5d 3d 44 28 65 29 29 7d 2c 51 3d 7b 7d 2c 47 3d 72 2e 57 65 61 6b 4d 61 70 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 43 28 65 29 3f 50 28 65 29 3a 71 28 65 2c 7b 7d 29 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 69 66 28 21 6d 28 74 29 7c 7c 28 6e 3d 50 28 74 29 29 2e 74 79 70 65 21 3d 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 Data Ascii: tring(void 0===e?"":e)+")_"+(++A+U).toString(36)},B=z("keys"),V=function(e){return B[e]\|\|(B[e]=D(e))},Q={},G=r.WeakMap,J=function(e){return C(e)?P(e):q(e,{})},K=function(e){return function(t){var n;if(!m(t)\|\|(n=P(t)).type!==e)throw TypeError("Incompatible
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 3f 30 3a 28 65 3e 30 3f 63 65 3a 61 65 29 28 65 29 7d 2c 64 65 3d 4d 61 74 68 2e 6d 69 6e 2c 68 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 3f 64 65 28 75 65 28 65 29 2c 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 3a 30 7d 2c 6c 65 3d 4d 61 74 68 2e 6d 61 78 2c 66 65 3d 4d 61 74 68 2e 6d 69 6e 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 75 65 28 65 29 3b 72 65 74 75 72 6e 20 6e 3c 30 3f 6c 65 28 6e 2b 74 2c 30 29 3a 66 65 28 6e 2c 74 29 7d 2c 62 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 2c 69 3d 62 28 74 29 2c 73 3d 68 65 28 69 2e 6c 65 6e 67 74 68 29 2c 61 3d 70 65 28 72 2c 73 29 3b 69 66 28 65 26 26 6e 21 3d Data Ascii: ?0:(e>0?ce:ae)(e)},de=Math.min,he=function(e){return e>0?de(ue(e),9007199254740991):0},le=Math.max,fe=Math.min,pe=function(e,t){var n=ue(e);return n<0?le(n+t,0):fe(n,t)},be=function(e){return function(t,n,r){var o,i=b(t),s=he(i.length),a=pe(r,s);if(e&&n!=
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 29 66 6f 72 28 6f 20 69 6e 20 74 29 7b 73 3d 74 5b 6f 5d 3b 69 3d 65 2e 6e 6f 54 61 72 67 65 74 47 65 74 3f 28 61 3d 6a 65 28 6e 2c 6f 29 29 26 26 61 2e 76 61 6c 75 65 3a 6e 5b 6f 5d 3b 69 66 28 21 4d 65 28 75 3f 6f 3a 63 2b 28 64 3f 22 2e 22 3a 22 23 22 29 2b 6f 2c 65 2e 66 6f 72 63 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 29 7b 69 66 28 74 79 70 65 6f 66 20 73 3d 3d 74 79 70 65 6f 66 20 69 29 63 6f 6e 74 69 6e 75 65 3b 78 65 28 73 2c 69 29 7d 28 65 2e 73 68 61 6d 7c 7c 69 26 26 69 2e 73 68 61 6d 29 26 26 54 28 73 2c 22 73 68 61 6d 22 2c 21 30 29 3b 72 65 28 6e 2c 6f 2c 73 2c 65 29 7d 7d 2c 71 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 79 65 28 65 2c 77 65 29 7d 2c 50 65 Data Ascii: ototype)for(o in t){s=t[o];i=e.noTargetGet?(a=je(n,o))&&a.value:n[o];if(!Me(u?o:c+(d?".":"#")+o,e.forced)&&void 0!==i){if(typeof s==typeof i)continue;xe(s,i)}(e.sham\|\|i&&i.sham)&&T(s,"sham",!0);re(n,o,s,e)}},qe=Object.keys\|\|function(e){return ye(e,we)},Pe
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 72 3d 28 2e 2e 2e 65 29 3d 3e 7b 6e 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 74 28 2e 2e 2e 65 29 7d 29 29 7d 3b 72 65 74 75 72 6e 20 6f 3d 3e 7b 74 26 26 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 26 26 28 74 3d 65 28 72 29 29 3b 6e 2e 70 75 73 68 28 6f 29 3b 72 65 74 75 72 6e 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 3d 6e 2e 66 69 6c 74 65 72 28 28 65 3d 3e 65 21 3d 3d 6f 29 29 3b 74 26 26 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 26 26 65 3e 30 26 26 74 28 29 7d 7d 7d 2c 78 3d 28 65 2c 74 2c 6e 3d 7b 7d 29 3d 3e 45 28 28 72 3d 3e 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 72 2c 6e 29 3b 72 65 74 75 72 6e 28 29 3d 3e 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 72 2c 6e Data Ascii: onst r=(...e)=>{n.forEach((t=>{t(...e)}))};return o=>{t&&0===n.length&&(t=e(r));n.push(o);return()=>{const e=n.length;n=n.filter((e=>e!==o));t&&0===n.length&&e>0&&t()}}},x=(e,t,n={})=>E((r=>{e.addEventListener(t,r,n);return()=>{e.removeEventListener(t,r,n
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 2c 74 29 2c 44 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 28 65 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 7b 7d 29 5b 30 5d 3b 69 66 28 6e 29 7b 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 6e 29 3b 72 65 74 75 72 6e 20 65 7d 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 72 65 74 75 72 6e 20 65 7d 2c 42 3d 65 3d 3e 65 2e 72 65 70 6c 61 63 65 28 2f 28 5e 20 2a 7c 20 2a 24 29 2f 67 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 20 2b 2f 67 2c 22 20 22 29 2c 56 3d 28 65 2c 74 29 3d 3e 7b 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 42 28 60 24 7b 65 2e 63 6c 61 73 73 4e 61 6d 65 7d 20 24 7b 74 7d 60 29 7d 2c 51 3d 28 65 2c 74 29 3d 3e 7b 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 42 28 65 Data Ascii: document.createElement(e),t),D=(e,t)=>{const n=(e.childNodes\|\|{})[0];if(n){e.insertBefore(t,n);return e}e.appendChild(t);return e},B=e=>e.replace(/(^ \| $)/g,"").replace(/ +/g," "),V=(e,t)=>{e.className=B(`${e.className} ${t}`)},Q=(e,t)=>{e.className=B(e
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 23 24 7b 61 65 7d 20 7b 5c 6e 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 5c 6e 20 20 7d 5c 6e 5c 6e 20 20 24 7b 6c 65 28 22 68 73 2d 66 65 65 64 62 61 63 6b 2d 6c 65 66 74 22 2c 31 29 7d 5c 6e 20 20 24 7b 6c 65 28 22 68 73 2d 66 65 65 64 62 61 63 6b 2d 72 69 67 68 74 22 2c 31 29 7d 5c 6e 20 20 24 7b 6c 65 28 22 68 73 2d 66 65 65 64 62 61 63 6b 2d 74 6f 70 22 2c 2d 31 29 7d 5c 6e 5c 6e 20 20 23 24 7b 73 65 7d 20 3e 20 69 66 72 61 6d 65 20 7b 5c 6e 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 5c 6e 20 20 7d 5c 6e 5c 6e 20 20 23 24 7b 73 65 7d 3a 6e 6f 74 28 2e 68 73 2d 66 65 65 64 62 61 63 6b 2d 74 6f 70 29 20 7b 5c 6e 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 5c 6e 20 20 7d 5c 6e 5c 6e 20 Data Ascii: #${ae} {\n display: none\n }\n\n ${le("hs-feedback-left",1)}\n ${le("hs-feedback-right",1)}\n ${le("hs-feedback-top",-1)}\n\n #${se} > iframe {\n width: 100%;\n height: 100%;\n }\n\n #${se}:not(.hs-feedback-top) {\n bottom: 0;\n }\n\n
2024-10-04 13:38:27 UTC	1369	IN	Data Raw: 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 7d 5c 6e 20 20 7d 5c 6e 5c 6e 20 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 24 7b 69 65 7d 70 78 29 20 7b 5c 6e 20 20 20 20 23 24 7b 73 65 7d 2e 70 72 65 76 69 65 77 3a 6e 6f 74 28 2e 68 73 2d 66 65 65 64 62 61 63 6b 2d 74 6f 70 29 2c 5c 6e 20 20 20 20 23 24 7b 73 65 7d 2e 24 7b 68 65 7d 2e 70 72 65 76 69 65 77 3a 6e 6f 74 28 2e 68 73 2d 66 65 65 64 62 61 63 6b 2d 74 6f 70 29 20 7b 5c 6e 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 7d 5c 6e 20 20 7d 5c 6e 5c 6e 20 20 23 24 7b 73 65 7d 2e 24 7b 75 65 7d 20 7e 20 23 74 61 6c 6c 79 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e Data Ascii: 0% !important;\n }\n }\n\n @media only screen and (max-width: ${ie}px) {\n #${se}.preview:not(.hs-feedback-top),\n #${se}.${he}.preview:not(.hs-feedback-top) {\n width: 100% !important;\n }\n }\n\n #${se}.${ue} ~ #tally-widget-contain

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 39d43082-801e-00ac-658c-15fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133827Z-15767c5fc55xsgnlxyxy40f4m00000000ck0000000006h5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:27 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:27 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: b9a18d69-401e-0078-698c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133827Z-15767c5fc55qdcd62bsn50hd6s0000000cb000000000gs9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:27 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133827Z-15767c5fc55tsfp92w7yna557w0000000cgg00000000n6te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:27 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:27 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1cc2ff82-e01e-0071-478c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133827Z-15767c5fc55xsgnlxyxy40f4m00000000cm00000000032cm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:27 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:27 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:28 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:27 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b9d87bc4-001e-008d-138c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133827Z-15767c5fc55d6fcl6x6bw8cpdc0000000chg000000008961 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:28 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	60066	104.16.118.116	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:28 UTC	570	OUT	GET /web-interactives-embed.js HTTP/1.1 Host: js.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.sesamehr.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:28 UTC	1309	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:28 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Fri, 04 Oct 2024 11:58:06 UTC etag: W/"6b513baaf4c77cddc702f596c3dd62d9" x-amz-server-side-encryption: AES256 x-amz-version-id: ntxqQzn.1wWRtdFp_E4nJAhKHFNI4WSr vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method x-cache: Hit from cloudfront via: 1.1 3203c4b5504fa019a752072f0419ef6a.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: ZKQGZ38a2v0CAAD5anCXC3Lc4x0UH3HC71sgYMVOXtny0prRbOMqUw== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=web-interactives-embed/static-2.1554/bundles/project.js&cfRay=8cd522608ce74207-IAD Cache-Control: max-age=600 x-hs-target-asset: web-interactives-embed/static-2.1554/bundles/project.js x-content-type-options: nosniff x-hs-cache-status: MISS x-envoy-upstream-service-time: 9 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: e062d3e5-12ad-44b9-bc47-8b8fbed825fe
2024-10-04 13:38:28 UTC	1195	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 73 65 72 76 65 64 2d 62 79 2d 70 6f 64 3a 20 69 61 64 30 32 2f 61 70 70 2d 74 64 2f 65 6e 76 6f 79 2d 70 72 6f 78 79 2d 36 63 36 64 64 36 38 36 34 2d 73 71 78 6e 34 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 65 30 36 32 64 33 65 35 2d 31 32 61 64 2d 34 34 62 39 2d 62 63 34 37 2d 38 62 38 66 62 65 64 38 32 35 66 65 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 77 65 62 2d 69 6e 74 65 72 61 63 74 69 76 65 73 2d 65 6d 62 Data Ascii: x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-6c6dd6864-sqxn4x-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-request-id: e062d3e5-12ad-44b9-bc47-8b8fbed825fecache-tag: staticjsapp-web-interactives-emb
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 7b 52 45 43 45 49 56 45 44 5f 41 4e 41 4c 59 54 49 43 53 3a 22 48 53 5f 43 54 41 5f 50 41 52 45 4e 54 5f 52 45 43 45 49 56 45 44 5f 41 4e 41 4c 59 54 49 43 53 22 2c 44 45 56 49 43 45 5f 54 59 50 45 3a 22 48 53 5f 43 54 41 5f 50 41 52 45 4e 54 5f 44 45 56 49 43 45 5f 54 59 50 45 22 2c 50 52 4f 58 59 5f 41 4e 41 4c 59 54 49 43 53 5f 46 4e 5f 43 41 4c 4c 42 41 43 4b 3a 22 48 53 5f 43 54 41 5f 50 41 52 45 4e 54 5f 50 52 4f 58 59 5f 41 4e 41 4c 59 54 49 43 53 5f 46 4e 22 2c 49 4e 49 54 3a 22 48 53 5f 43 54 41 5f 50 41 52 45 4e 54 5f 49 4e 49 54 22 2c 53 48 4f 57 49 4e 47 5f 43 54 41 3a 22 48 53 5f 43 54 41 5f 53 48 4f 57 49 4e 47 5f 43 54 41 22 Data Ascii: 7ff9!function(){"use strict";const e={RECEIVED_ANALYTICS:"HS_CTA_PARENT_RECEIVED_ANALYTICS",DEVICE_TYPE:"HS_CTA_PARENT_DEVICE_TYPE",PROXY_ANALYTICS_FN_CALLBACK:"HS_CTA_PARENT_PROXY_ANALYTICS_FN",INIT:"HS_CTA_PARENT_INIT",SHOWING_CTA:"HS_CTA_SHOWING_CTA"
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 65 72 61 63 74 69 76 65 73 2d 65 6d 62 65 64 5d 22 2c 2e 2e 2e 65 29 3b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 22 68 73 5f 69 73 5f 73 65 6c 65 6e 69 75 6d 22 29 3e 2d 31 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 2e 2e 2e 5b 2e 2e 2e 65 5d 2e 6d 61 70 28 28 65 3d 3e 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 29 29 7d 7d 63 6c 61 73 73 20 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 6e 65 77 20 4d 61 70 7d 6f 6e 28 65 2c 74 29 7b 69 66 28 21 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 68 61 73 28 65 29 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 2e 73 65 74 28 65 2c 5b 74 5d 29 3b 72 65 74 75 72 6e 7d 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e Data Ascii: eractives-embed]",...e);window.location.search.indexOf("hs_is_selenium")>-1&&console.log(...[...e].map((e=>JSON.stringify(e))))}}class s{constructor(){this.listeners=new Map}on(e,t){if(!this.listeners.has(e)){this.listeners.set(e,[t]);return}const i=this.
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 2c 65 2c 74 29 7d 62 72 6f 61 64 63 61 73 74 41 6c 6c 28 65 29 7b 6f 28 22 42 72 6f 61 64 63 61 73 74 69 6e 67 22 2c 65 2c 22 74 6f 20 61 6c 6c 22 2c 74 68 69 73 2e 69 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 6f 72 73 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 74 2c 69 5d 6f 66 20 74 68 69 73 2e 69 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 6f 72 73 29 74 68 69 73 2e 62 72 6f 61 64 63 61 73 74 28 74 2c 65 29 7d 7d 76 61 72 20 61 3d 6e 65 77 20 72 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 7d 63 6f 6e 73 74 20 6c 3d 28 2e 2e 2e 65 29 3d 3e 7b 69 28 22 5b 69 66 72 61 6d 65 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 5d 22 2c 2e 2e 2e 65 29 7d 3b 63 6c 61 73 73 20 68 7b 63 6f 6e 73 74 72 75 Data Ascii: ,e,t)}broadcastAll(e){o("Broadcasting",e,"to all",this.iframeCommunicators);for(const[t,i]of this.iframeCommunicators)this.broadcast(t,e)}}var a=new r;function c(){return new MessageChannel}const l=(...e)=>{i("[iframeCommunication]",...e)};class h{constru
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 61 63 68 28 28 74 3d 3e 7b 63 6f 6e 73 74 20 69 3d 74 2c 73 3d 65 5b 69 5d 3b 73 26 26 74 68 69 73 2e 72 65 67 69 73 74 65 72 48 61 6e 64 6c 65 72 28 69 2c 73 29 7d 29 29 7d 72 65 6d 6f 76 65 48 61 6e 64 6c 65 72 28 65 29 7b 6c 28 22 52 65 6d 6f 76 69 6e 67 20 68 61 6e 64 6c 65 72 22 2c 65 29 3b 74 68 69 73 2e 65 76 65 6e 74 45 6d 69 74 74 65 72 2e 6f 66 66 28 65 29 7d 72 65 6d 6f 76 65 28 29 7b 6c 28 22 52 65 6d 6f 76 69 6e 67 20 66 72 61 6d 65 20 63 6f 6d 6d 75 6e 69 63 61 74 6f 72 3a 22 2c 74 68 69 73 2e 69 64 29 3b 74 68 69 73 2e 63 68 61 6e 6e 65 6c 2e 70 6f 72 74 31 2e 63 6c 6f 73 65 28 29 3b 61 2e 72 65 6d 6f 76 65 43 6f 6d 6d 75 6e 69 63 61 74 6f 72 28 74 68 69 73 2e 69 64 29 7d 66 6c 75 73 68 51 75 65 75 65 28 29 7b 69 66 28 74 68 69 73 2e 69 6e Data Ascii: ach((t=>{const i=t,s=e[i];s&&this.registerHandler(i,s)}))}removeHandler(e){l("Removing handler",e);this.eventEmitter.off(e)}remove(){l("Removing frame communicator:",this.id);this.channel.port1.close();a.removeCommunicator(this.id)}flushQueue(){if(this.in
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 73 2c 6f 6e 46 72 61 6d 65 52 65 61 64 79 3a 6e 2c 75 73 65 52 65 73 70 6f 6e 73 69 76 65 53 74 79 6c 69 6e 67 3a 6f 2c 65 78 74 72 61 41 74 74 72 69 62 75 74 65 73 3a 72 3d 7b 7d 7d 29 7b 74 68 69 73 2e 6f 6e 46 72 61 6d 65 52 65 61 64 79 3d 54 3b 74 68 69 73 2e 72 65 73 69 7a 65 48 65 69 67 68 74 3d 21 30 3b 74 68 69 73 2e 68 61 6e 64 6c 65 48 65 69 67 68 74 43 68 61 6e 67 65 3d 28 7b 68 65 69 67 68 74 3a 65 7d 29 3d 3e 7b 69 66 28 21 74 68 69 73 2e 72 65 73 69 7a 65 48 65 69 67 68 74 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 65 2b 32 2a 70 61 72 73 65 49 6e 74 28 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 68 69 73 2e 69 66 72 61 6d 65 29 2e 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 2c 31 30 29 3b 43 28 22 48 61 6e 64 Data Ascii: eight:s,onFrameReady:n,useResponsiveStyling:o,extraAttributes:r={}}){this.onFrameReady=T;this.resizeHeight=!0;this.handleHeightChange=({height:e})=>{if(!this.resizeHeight)return;const t=e+2*parseInt(getComputedStyle(this.iframe).borderTopWidth,10);C("Hand
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 2e 73 74 61 74 65 2c 74 29 29 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 55 70 64 61 74 65 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 55 70 64 61 74 65 28 74 68 69 73 2e 73 74 61 74 65 2c 74 29 7d 29 29 3b 74 68 69 73 2e 5f 66 6c 75 73 68 28 29 7d 7d 3b 74 68 69 73 2e 5f 66 6c 75 73 68 3d 28 29 3d 3e 7b 69 66 28 21 74 68 69 73 2e 62 61 74 63 68 69 6e 67 29 7b 74 68 69 73 2e 71 75 65 75 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 65 28 29 29 29 3b 74 68 69 73 2e 71 75 65 75 65 3d 5b 5d 7d 7d 3b 74 68 69 73 2e 62 61 74 63 68 3d 65 3d 3e 7b 74 68 69 73 2e 62 61 74 63 68 69 6e 67 3d 21 30 3b 65 28 29 3b 74 68 69 73 2e 62 61 74 63 68 69 6e 67 3d 21 31 3b 74 68 69 73 2e 5f 66 6c 75 73 68 28 29 7d 3b 74 68 Data Ascii: .state,t)));this.options&&this.options.onUpdate&&this.options.onUpdate(this.state,t)}));this._flush()}};this._flush=()=>{if(!this.batching){this.queue.forEach((e=>e()));this.queue=[]}};this.batch=e=>{this.batching=!0;e();this.batching=!1;this._flush()};th
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 2c 75 73 65 72 41 67 65 6e 74 3a 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 68 75 74 6b 3a 50 28 29 2c 68 73 73 63 3a 52 28 29 2c 68 73 74 63 3a 4c 28 29 2c 70 61 67 65 49 64 3a 4e 2e 67 65 74 50 61 67 65 49 64 28 29 7d 3b 74 68 69 73 2e 73 74 6f 72 65 3d 6e 65 77 20 45 28 65 29 3b 74 68 69 73 2e 66 65 74 63 68 41 6e 61 6c 79 74 69 63 73 28 29 7d 66 65 74 63 68 41 6e 61 6c 79 74 69 63 73 28 29 7b 74 68 69 73 2e 5f 61 6e 61 6c 79 74 69 63 73 51 75 65 75 65 2e 70 75 73 68 28 74 68 69 73 2e 5f 68 61 6e 64 6c 65 46 65 74 63 68 53 75 63 63 65 64 65 64 29 7d 73 75 62 73 63 72 69 62 65 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 6f 72 65 2e 73 75 62 73 Data Ascii: dow.document.referrer,userAgent:window.navigator.userAgent,hutk:P(),hssc:R(),hstc:L(),pageId:N.getPageId()};this.store=new E(e);this.fetchAnalytics()}fetchAnalytics(){this._analyticsQueue.push(this._handleFetchSucceded)}subscribe(e){return this.store.subs
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 5d 3b 48 28 22 41 64 64 69 6e 67 20 66 6f 72 6d 20 76 69 65 77 20 74 6f 20 61 6e 61 6c 79 74 69 63 73 20 71 75 65 75 65 22 2c 7b 69 64 3a 65 2c 61 6e 61 6c 79 74 69 63 73 3a 74 7d 29 3b 74 68 69 73 2e 76 69 65 77 51 75 65 75 65 2e 73 65 74 28 65 2c 5b 2e 2e 2e 73 2c 74 5d 29 7d 6c 69 73 74 65 6e 46 6f 72 50 72 6f 78 79 4d 65 73 73 61 67 65 28 29 7b 61 2e 72 65 67 69 73 74 65 72 48 61 6e 64 6c 65 72 73 28 7b 5b 65 2e 50 52 4f 58 59 5f 41 4e 41 4c 59 54 49 43 53 5d 3a 28 7b 61 6e 61 6c 79 74 69 63 73 3a 65 2c 69 64 3a 74 7d 29 3d 3e 7b 78 2e 69 73 46 6f 72 6d 56 69 65 77 28 65 29 3f 74 68 69 73 2e 68 61 6e 64 6c 65 46 6f 72 6d 56 69 65 77 28 74 2c 65 29 3a 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 53 74 6f 72 65 2e 74 72 61 63 6b 28 65 29 7d 7d 29 7d 73 74 Data Ascii: ];H("Adding form view to analytics queue",{id:e,analytics:t});this.viewQueue.set(e,[...s,t])}listenForProxyMessage(){a.registerHandlers({[e.PROXY_ANALYTICS]:({analytics:e,id:t})=>{x.isFormView(e)?this.handleFormView(t,e):this.analyticsStore.track(e)}})}st
2024-10-04 13:38:28 UTC	1369	IN	Data Raw: 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 65 78 74 72 61 63 74 50 72 6f 70 65 72 74 69 65 73 28 69 2e 73 74 79 6c 65 29 3b 74 2e 70 75 73 68 28 7b 6b 65 79 54 65 78 74 3a 69 2e 6b 65 79 54 65 78 74 2c 73 74 79 6c 65 3a 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 7d 63 6c 61 73 73 20 24 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 53 74 6f 72 65 3d 6b 3b 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 50 72 6f 78 79 43 6f 6e 74 72 6f 6c 6c 65 72 3d 6e 65 77 20 78 28 7b 61 6e 61 6c 79 74 69 63 73 53 74 6f 72 65 3a 74 68 69 73 2e 61 6e 61 6c 79 74 69 63 73 53 74 6f 72 65 2c 61 70 70 6c 69 63 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 6c 65 72 3a 74 68 69 73 7d 29 3b 74 68 69 73 2e 6e 61 76 69 67 61 74 69 6f 6e 50 72 6f 78 79 43 6f 6e 74 Data Ascii: const e=this.extractProperties(i.style);t.push({keyText:i.keyText,style:e})}return t}}class ${constructor(){this.analyticsStore=k;this.analyticsProxyController=new x({analyticsStore:this.analyticsStore,applicationController:this});this.navigationProxyCont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	60064	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:28 UTC	503	OUT	GET /wp-content/themes/sesamehr/img/new-home/Corazon.lottie HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:28 UTC	309	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:28 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:58:10 GMT ETag: "435d-6138e84914fed" Accept-Ranges: bytes Content-Length: 17245 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:28 UTC	7883	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 c8 16 02 4b 91 00 00 00 bd 00 00 00 0d 00 00 00 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 25 ce 41 0e c2 20 10 05 d0 bb cc 5a 4c 41 ab b5 07 70 e5 0d 8c 8b 01 26 8a b6 8c 19 50 63 9a de 5d b0 cb 99 bc ff f3 27 c0 18 46 cc 81 63 82 fe 3c 41 f0 d0 83 f1 0e 11 f7 ad da 10 59 b5 b5 46 2b eb da 46 75 da ec 6c 67 dc a1 d3 2d ac 60 64 4f 45 47 96 11 87 72 fb 20 e4 6a 15 f4 7a be ac 00 5f f9 c6 52 c4 89 73 0e 74 0c 03 a5 ca 28 39 09 cf 05 42 79 5c 29 92 60 fe 53 cf 79 d1 ea 5e ed 83 be 1f 16 5f b6 55 f8 26 49 4b 4a af 1b 98 7f 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 7f 97 60 44 d7 03 00 00 6e 0c 00 00 34 00 00 00 61 6e 69 6d 61 74 69 6f 6e 73 2f 32 64 63 61 61 61 37 35 2d 33 65 65 62 2d 34 62 32 31 2d 62 63 35 30 2d 38 31 Data Ascii: PKKmanifest.json%A ZLAp&Pc]'Fc<AYF+Fulg-`dOEGr jz_Rst(9By\)`Sy^_U&IKJPK`Dn4animations/2dcaaa75-3eeb-4b21-bc50-81
2024-10-04 13:38:28 UTC	8000	IN	Data Raw: 9e 6c 44 ab f1 35 5f 3b e2 dd f4 b8 90 a5 c7 93 86 8a 05 80 1e 6f 32 f1 e0 bf 3c 99 85 a0 8e 15 61 b7 14 18 be 82 74 3e ee 88 47 82 2d 01 84 c4 db 78 3c dd b2 0c 27 8a 85 8f 46 80 c2 52 fc ec b0 73 8f 97 7a 96 c4 6b 46 b3 2a b7 7a 3c 25 0e 12 b7 12 2f 17 d2 09 f1 0c 1a a2 d1 93 65 14 d2 81 9e 9d c7 a3 fa dd ea 94 63 43 3c b3 7a 36 aa 2b 68 c0 a8 2e ca e8 ea 9c 78 5c a8 ec 0c ad 1f ea 61 8f e7 05 82 b1 23 1e e8 51 8f 57 88 07 8d 74 c5 e3 31 f1 0c e2 9f 11 cf 20 0f ac 63 4f 3c 1c 31 6c ea 40 c2 a8 8e 95 c7 cb 44 75 a4 4b 3d 2b 8f 87 37 9c 9d 8e c6 e3 1d b1 40 31 33 37 21 b4 62 94 74 d4 58 fe da 7b 3c f4 30 85 78 34 1a 10 67 1a 16 ea f5 79 bc aa a3 7a 3c 25 5e 92 77 49 bc 69 b6 27 1e 22 a2 23 5e 1d 33 3e e4 3f c6 9c f1 29 f1 1a 8f 17 a8 8a f8 57 3c 1e 4d 28 Data Ascii: lD5_;o2<at>G-x<'FRszkF*z<%/ecC<z6+h.x\a#QWt1 cO<1l@DuK=+7@137!btX{<0x4gyz<%^wIi'"#^3>?)W<M(
2024-10-04 13:38:28 UTC	1362	IN	Data Raw: d3 ec 77 fa 4f 91 9c 70 5c 31 e3 96 a1 4a bc 8a 6e 9f 30 92 2f 50 6c 58 cf 4c 1c 7b 2a 8c cf 0d c1 f1 25 3f 45 cf 2c f1 0b 61 b0 ce 4b 3d be 30 59 4f bf a0 54 cf ad 21 4e 88 77 e6 f1 f8 43 d7 9e 70 85 78 fe 8a 7c ec 9f 9b 15 e2 c5 c8 7a f0 81 f3 2d de ef bc fd bb 2f 7f dc ec d6 6c df fb 89 af ff dc b0 f1 31 f4 08 fc 00 14 13 9c 81 54 00 0a ec 3d 9e 9b 45 59 d1 38 6f 25 9d 27 a8 f1 78 6c f6 7d 0b 14 20 37 1e 8f e3 eb 35 e7 31 f4 50 7c 98 37 ea c1 f8 a8 27 da a9 36 38 c7 f7 9f 63 c1 94 78 79 43 da aa 16 84 49 3d b7 86 f2 f0 fe 7a 65 8f 57 f5 20 a8 86 d9 c7 be e7 93 ef fb d5 68 36 33 b3 77 bc 78 fb 47 87 d9 17 3c 21 8e e4 f5 73 33 be 31 22 81 1a 5e 3b 5d 27 14 09 cf 91 be f7 e6 63 6c 59 4c 18 8e cf 2b 9c 75 58 14 ce 48 8f 2e d5 4c fc ca e3 d9 4a 8f 14 1e b7 Data Ascii: wOp\1Jn0/PlXL{*%?E,aK=0YOT!NwCpx\|z-/l1T=EY8o%'xl} 751P\|7'68cxyCI=zeW h63wxG<!s31"^;]'clYL+uXH.LJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	60065	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:28 UTC	502	OUT	GET /wp-content/themes/sesamehr/img/new-home/Rocket.lottie HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:28 UTC	309	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:28 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:58:21 GMT ETag: "4162-6138e853c26f5" Accept-Ranges: bytes Content-Length: 16738 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:28 UTC	7883	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 91 bc ec 27 91 00 00 00 bd 00 00 00 0d 00 00 00 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 25 ce 41 0e c2 20 10 05 d0 bb cc 5a 4c 5b 2c 89 3d 80 2b 6f 60 5c 0c cc a8 68 0b 66 40 8d 69 7a 77 c1 2e 67 f2 fe cf 9f 01 83 9f 30 fb 18 12 0c a7 19 3c c1 00 46 ef b5 eb 0d aa be d1 46 ed 2e b6 53 d6 22 29 dd b1 b6 d4 3a 32 c8 b0 81 29 12 17 1d a2 4c 38 96 9b bc b0 ab 55 30 b4 cb 79 03 f8 ca b7 28 45 1c 63 ce 9e 0f 7e e4 54 19 27 27 fe b9 42 28 8f 2b 07 16 cc 7f 4a 31 af 5a dd ab 7d f0 f7 13 85 ca b6 0a df 2c 69 4d b5 db 06 96 1f 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 e7 e0 4d 2c e8 05 00 00 5c 21 00 00 34 00 00 00 61 6e 69 6d 61 74 69 6f 6e 73 2f 36 33 39 33 63 35 36 61 2d 35 30 33 36 2d 34 66 62 32 2d 62 62 61 64 2d 33 32 Data Ascii: PK'manifest.json%A ZL[,=+o`\hf@izw.g0<FF.S"):2)L8U0y(Ec~T''B(+J1Z},iMPKM,\!4animations/6393c56a-5036-4fb2-bbad-32
2024-10-04 13:38:28 UTC	8000	IN	Data Raw: ec 28 93 85 46 77 19 72 70 8e f1 23 43 52 7f 5d 4f 63 d8 d1 da 7f 63 62 36 ee 20 93 99 96 33 12 ec 06 05 86 74 66 94 0a 09 c7 37 6a a7 83 ca 9c 77 ca 90 5a d1 eb 06 27 a3 e9 7a f6 fe bb 61 27 eb 6a 8c 01 1a df 18 87 79 6d 81 b7 fe 23 d3 a9 21 61 ae 43 79 db f5 db 0c e9 f9 10 f1 92 21 fb 38 66 7d 06 6f 6b cd ff 6d 97 9b a7 ca 01 89 32 e4 e3 0d 89 1a 1d 58 ce 10 76 63 0e 33 99 1c 4c 4c 8d 13 54 74 9f 4f 32 59 94 99 fa 7c de 38 cb bc 6d 3d c5 68 61 ff 2c 93 bd a8 0c 09 e2 8d d6 63 95 17 ee a7 68 82 5b 17 78 a1 6c 86 98 1a 12 d4 5f 8d 93 18 b2 57 14 57 36 57 98 ab 48 cb 09 58 be 6e 9c e5 0c 69 79 7d 05 27 bc 66 be 03 de be 2e d5 f3 9a 82 3d e0 25 e3 4c 33 64 5f 47 e5 45 6a c8 b6 ff 86 77 ff c2 53 fc 7c 29 fd 2e 9a e0 a0 f0 41 9a 1d 38 36 8e c9 3a c9 c1 ce 0c Data Ascii: (Fwrp#CR]Occb6 3tf7jwZ'za'jym#!aCy!8f}okm2Xvc3LLTtO2Y\|8m=ha,ch[xl_WW6WHXniy}'f.=%L3d_GEjwS\|).A86:
2024-10-04 13:38:28 UTC	855	IN	Data Raw: 32 24 fa 42 fa 4c 66 4b 2d cb 64 26 43 d2 41 3a cc 90 6d 27 f6 71 a7 bc 26 93 b5 f9 94 97 fb e5 bc 36 43 0e a0 f8 7b c3 c5 f1 36 ce 2c 93 c7 19 12 58 fa ce 07 e2 cf f5 2c df ec 73 c8 6b 19 72 e7 fd 0f ef 7d e3 0f 7c 12 f2 70 87 b0 bc f6 da 43 7d fb e1 c3 00 fe 97 31 10 1d c0 d5 ef 7c 8c 8a 9c 18 27 34 24 8c 19 2f 7f 0e d9 0d c4 9c 81 71 8c 19 07 ef e9 4c 26 bc 6a bc 30 93 19 de 88 93 8d b3 f3 86 19 32 59 57 e6 24 5e fd 5c 4f af 57 3f d7 53 43 fa 0c 69 0d 19 7c 0e f9 bf bf f5 bb cf fe 62 79 ed b5 07 39 72 5c e7 f6 51 5f 7b ed a5 af bf fb 37 3e 53 50 3e 6a 4e 48 34 42 95 36 7d d0 0b af 66 9d 70 3e fd 8b 45 de c3 07 f3 9e e4 0c 79 a9 22 8e 78 2f 73 d2 ba 5e 79 98 7e 11 a7 f0 2e ec 7f 05 3e ff 3d 6f bc f1 13 e5 b5 7f f5 ad c3 29 a3 c7 ef fc bd 8f 7d 74 2b db Data Ascii: 2$BLfK-d&CA:m'q&6C{6,X,skr}\|pC}1\|'4$/qL&j02YW$^\OW?SCi\|by9r\Q_{7>SP>jNH4B6}fp>Ey"x/s^y~.>=o)}t+

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	60067	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:28 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133828Z-15767c5fc55rg5b7sh1vuv8t7n0000000d0g0000000037u1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	60068	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:28 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133829Z-15767c5fc55dtdv4d4saq7t47n0000000ccg00000000cuhb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	60074	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	728	OUT	GET /wp-content/uploads/2024/05/IconoCaja-6.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:29 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:53 GMT ETag: "47b-6178703dfe13b" Accept-Ranges: bytes Content-Length: 1147 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:29 UTC	1147	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 20 32 36 43 38 2e 32 32 37 31 37 20 32 36 2e 33 31 36 35 20 38 2e 35 32 37 39 37 20 32 36 2e 35 37 32 39 20 38 2e 38 37 36 34 32 20 32 36 2e 37 34 37 31 43 39 2e 32 32 34 38 38 20 32 36 2e 39 32 31 34 20 39 2e 36 31 30 35 20 32 37 2e 30 30 38 31 20 31 30 20 32 37 43 31 30 2e 33 38 39 35 20 32 37 2e 30 30 38 31 20 31 30 2e 37 37 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M8 26C8.22717 26.3165 8.52797 26.5729 8.87642 26.7471C9.22488 26.9214 9.6105 27.0081 10 27C10.3895 27.0081 10.77

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	60075	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	729	OUT	GET /wp-content/uploads/2024/05/IconoCaja-10.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:29 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:54 GMT ETag: "44e-6178703ed5e68" Accept-Ranges: bytes Content-Length: 1102 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:29 UTC	1102	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 37 20 31 37 56 31 34 43 32 37 20 31 33 2e 34 36 39 36 20 32 36 2e 37 38 39 33 20 31 32 2e 39 36 30 39 20 32 36 2e 34 31 34 32 20 31 32 2e 35 38 35 38 43 32 36 2e 30 33 39 31 20 31 32 2e 32 31 30 37 20 32 35 2e 35 33 30 34 20 31 32 20 32 35 20 31 32 48 31 39 4d 31 39 20 31 32 4c 32 32 20 31 35 4d 31 39 20 31 32 4c 32 32 20 39 4d Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M27 17V14C27 13.4696 26.7893 12.9609 26.4142 12.5858C26.0391 12.2107 25.5304 12 25 12H19M19 12L22 15M19 12L22 9M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	60077	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	735	OUT	GET /wp-content/uploads/2024/05/talento_y_cultura.webp HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:29 UTC	311	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:42:19 GMT ETag: "1aa22-617870571bdbf" Accept-Ranges: bytes Content-Length: 109090 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:29 UTC	7881	IN	Data Raw: 52 49 46 46 1a aa 01 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 92 02 00 c6 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: 4e ab 57 70 c5 cc 1e 05 18 63 07 f6 b8 ca 33 ba bd 16 5d 71 05 e2 59 56 2c 95 5c 6c ef 5e 3e 22 fc f8 69 5e 41 02 a4 47 61 e9 d4 0e bb 03 23 8f e8 fc 7a ce fd 58 02 83 90 df b5 7e 63 22 a0 21 20 60 62 e2 0f 02 9a 24 88 f5 ee fd fa 27 a8 62 84 ac 5c 9f cb de d7 23 b2 e7 3a ef 63 21 20 fd ae b1 26 c9 dc c9 45 33 03 30 30 12 21 21 80 0b 32 7d 9e fb 7c fd f9 f5 4f 4c a9 fc b0 b3 3f 6e bc d7 23 e2 7d 6d da 2c 10 e6 ef 12 57 33 c4 9d b5 99 84 99 24 84 38 03 03 30 03 9c 48 c7 e7 8f fb f7 fe fc 27 05 89 c0 a4 1d fa ba 2f 9e d1 79 7f b8 bb 0e 3b 10 bf 2b 0d 33 20 31 00 03 30 33 00 a3 67 60 08 10 92 5d 84 01 cf 3f 73 ff ce fb 4f 88 c5 30 c1 ce e6 fa e5 a7 7b 9e 91 d7 be 95 f3 9e 9d 15 ec 77 96 90 40 48 12 20 19 42 60 92 84 4c 0c 77 81 81 91 60 20 f1 f9 e7 ff fc 77 Data Ascii: NWpc3]qYV,\l^>"i^AGa#zX~c"! `b$'b\#:c! &E300!!2}\|OL?n#}m,W3$80H'/y;+3 103g`]?sO0{w@H B`Lw` w
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: 4e a7 f7 f5 3c 3b c6 69 a6 73 4f a7 e7 d6 9e a5 87 30 99 68 e6 79 80 53 5b c0 d1 e3 7b e1 7a f8 39 93 04 32 33 33 90 24 84 40 02 4c 16 3d b1 db 6e bb b1 a6 c9 5a 43 b6 db 47 ac dd a6 df 9e 35 da 56 f6 c7 9b f9 7c 1d 93 3e ee 8f 7b e7 be d2 93 4c 2f 9e 43 a9 d6 21 e4 18 cb f5 17 df 96 f1 f9 51 dc 6b 5d 2c a7 99 ba a2 d1 09 46 ef b1 13 1e 77 8e 7b 16 65 39 39 cf 6b a7 79 84 4e cc 40 4d 19 cf 8b 48 7f 41 97 04 98 81 bb 90 69 48 80 81 74 c5 7c de 43 af 86 a6 65 2d d3 a2 ad 5e 16 73 af 77 f6 fb a3 da 3a ad 6c f3 91 39 27 39 c9 c1 09 c8 0a 43 38 9d 75 cd 55 b0 f4 7a 9e ca 7d ae cf ca f5 3c 61 8c c1 31 75 82 84 5a 27 13 86 cc f3 11 66 a7 43 72 08 5c 25 c2 dc 23 50 ac 91 26 50 82 61 02 01 06 26 64 18 12 06 e0 34 20 9b 2c 16 16 ab 4d d6 da 6d a8 e7 6b 73 f3 ce 68 Data Ascii: N<;isO0hyS[{z9233$@L=nZCG5V\|>{L/C!Qk],Fw{e99kyN@MHAiHt\|Ce-^sw:l9'9C8uUz}<a1uZ'fCr\%#P&Pa&d4 ,Mmksh
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: ab 87 f7 c3 1e 76 79 a1 84 01 8a 75 e1 37 e5 bc 0f bc 5f c9 2c 74 ca 59 51 48 9b f7 01 ef 01 ca 01 f9 bd 7f f7 3f e8 4f fa f3 ff e8 df ef bd 2f b8 0c 6b 87 3d 57 83 c4 0c 6c d6 98 f7 c0 4e c7 7d ff 12 cf fc ba 33 3d 34 a7 b4 0c 95 f2 35 5d cd 35 1b 16 a4 59 77 ce 83 9d 3d 12 d8 63 6b 9d f0 9c 59 f7 90 e6 fb 69 02 f4 f9 cd b3 d7 87 f7 79 9f 82 67 f7 f2 7c b9 c7 f7 de 53 ba f7 57 0c f0 e5 f8 fa e8 fc 7d 1c 51 72 bf 7f d5 e7 f7 13 9f af 3d 2e ef be dc 79 7b 9f dd 7b c0 d7 49 9f 3f 7f 2d a1 67 9f 2d 3f 5f ce 3e 43 da af b7 e3 eb 81 78 c6 b2 83 63 f2 fa eb 4b eb d9 b1 7e 0e ee 2f 9f cc 45 79 7d da dc 57 ad a6 b1 1f 9f 67 79 bd 4f 4d ee b4 a1 c1 ce 2c 7b cc 86 75 ae a5 10 18 12 49 32 91 5e ef 21 1f 9a eb b9 e9 80 51 02 62 b0 5f 00 17 57 cc b5 39 07 72 d5 9d e0 Data Ascii: vyu7_,tYQH?O/k=WlN}3=45]5Yw=ckYiyg\|SW}Qr=.y{{I?-g-?_>CxcK~/Ey}WgyOM,{uI2^!Qb_W9r
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: bd 30 59 98 2c 73 5b 3e d7 a4 59 8c 58 be ae 77 6d 2d c6 3d ee b5 58 93 af 6b ea 65 32 f2 4a 2f 16 6b 49 02 64 42 e4 17 83 09 f6 04 4d db b9 af f6 e3 cd 53 6f 27 c7 b2 32 b5 b5 96 77 b9 5e d0 42 7b c9 88 85 a6 97 e5 73 31 84 c9 c8 6e 6b b1 a0 ed c6 e4 73 79 a7 99 2c ac b5 4c d6 62 ad 9e 06 31 bb c9 5a 0b 6b 2d 3d f2 cb 57 de 2d 93 b6 d6 1a 8d 26 a6 91 f9 da 68 f7 c2 c0 c0 40 20 30 83 d4 b5 0e e1 be 3e 87 4d 9f 99 9d fb db e7 ac d2 48 2d 80 f4 2d 58 8b 69 50 6b b0 96 41 ef 8c 26 16 0c b1 1a 83 58 3d 19 ad c9 8b 76 d3 bc 64 b2 60 cd ed d5 62 f7 90 85 21 bd 58 7a ad f9 cc 67 5b f6 91 5f 0f 2d 23 34 5f d7 82 45 33 b1 06 76 32 70 95 c0 2f 24 4d 2b 09 75 3a ef d9 d3 f0 d0 3b f7 b7 a7 79 04 73 6e 14 62 29 af 7f 7d f4 da bd 34 ac 91 dd 6b f9 dc 3d b5 35 62 f2 f5 Data Ascii: 0Y,s[>YXwm-=Xke2J/kIdBMSo'2w^B{s1nksy,Lb1Zk-=W-&h@ 0>MH--XiPkA&X=vd`b!Xzg[_-#4_E3v2p/$M+u:;ysnb)}4k=5b
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: 34 32 ad a5 17 df 4a 40 f2 d5 00 09 a4 29 04 ef eb e7 47 3c 75 cd 89 f7 95 9c 9d 30 b1 54 de e2 3f ff bf fd 57 4d 6b 4d a3 b5 4c 16 2c 96 85 65 1a 32 99 dd f2 6a 5a 5e b1 60 b1 86 30 f2 75 31 b1 58 7e 3d 19 64 8d 96 65 82 65 b5 89 c5 04 73 33 61 ad 9e ef 59 da 68 9a 98 68 d6 02 13 42 c8 98 32 90 90 c0 55 76 ea 14 de 79 68 3d 29 66 0a 68 2b d5 4a df 80 ff e3 7f e9 5f cc ee b5 ec 6c 6e 76 b3 98 db 68 b1 96 65 f9 6c 93 5e 93 dd d6 62 b1 8f a6 c9 ac 56 9b 98 4c c6 3d 1a 8d fc 72 59 0b bb 97 65 5a 0b 23 6b f9 e5 62 5a 46 7a bb 65 61 ad 69 41 63 61 62 91 30 00 13 08 33 43 56 5c 71 87 00 7c 9f b3 0f 8d a0 cc 7d 19 22 16 23 e5 2d fe f3 ff eb 7f 6d 4d d3 1a 19 b4 58 26 9f d3 10 bd d6 93 98 60 bd 62 31 f9 5c 16 64 cb 84 35 62 b1 58 3d b5 91 89 35 ad 69 6a 96 a1 c9 Data Ascii: 42J@)G<u0T?WMkML,e2jZ^`0u1X~=dees3aYhhB2Uvyh=)fh+J_lnvhel^bVL=rYeZ#kbZFzeaiAcab03CV\q\|}"#-mMX&`b1\d5bX=5ij
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: 7f e1 fb 65 fd 9a ff 7f f9 ad f4 3f fa 7d f7 83 fb ff ff 78 89 4b ee 4b 23 b5 0d 88 f2 b4 d6 f7 10 83 26 69 f3 16 35 ed 55 a3 f6 a5 4c da 22 0c 93 2a 17 68 d7 7a df f3 a9 46 08 d5 cb 8e ee 29 e8 a7 b8 d0 5e 85 c0 aa f7 e5 33 a2 7a f2 a3 03 08 cc f3 b6 6b 81 73 f5 f1 88 e8 03 8f 31 57 f1 72 c2 1c cb ae ff 9d 33 05 e3 1d 72 68 45 88 b0 61 7a 05 77 6e fd f2 6c 2d a1 a5 c6 20 5b 05 8f c9 0e 38 7d e5 27 d1 9f 9c 5b eb 1c 11 35 a3 c9 ff bf 31 4c 9b b1 cd fa 41 87 d8 20 2e 57 34 7a e8 56 b2 d9 f7 7a 02 4f e5 42 e4 38 5a 7c 9a ed 2b 00 09 16 4a cf 44 3c 75 5a 49 4a d7 1e 00 d7 fa 45 83 d9 97 fa bf 98 e2 4b 2e ea b2 2f 13 6d 71 a1 18 95 60 9a b0 26 35 72 b2 56 07 05 fe 3c 6c 41 1d f3 c7 bb 3e 09 2b f9 61 34 00 c1 02 de 5f 35 83 1c e6 c4 89 b6 23 85 58 c6 7c 21 9a Data Ascii: e?}xKK#&i5UL"*hzF)^3zks1Wr3rhEazwnl- [8}'[51LA .W4zVzOB8Z\|+JD<uZIJEK./mq`&5rV<lA>+a4_5#X\|!
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: 6d 3a 37 18 59 3b fe 7e 7d cf 34 83 c7 6f 3a 1c 83 0d 2e cd 7d fe 01 c6 a2 fd e4 fa af 0c 56 49 cd 26 c6 40 08 02 fb 86 d8 a0 71 cf 88 89 3f 0a 9d 68 7c f2 62 52 c5 20 c8 9a 49 86 a3 9c d3 f2 06 2d 87 ab 77 71 f7 03 45 bb 41 1e 62 83 aa 16 50 6c 1c 71 36 0f 36 76 18 80 22 e1 c5 46 43 2f 11 30 bf 25 c0 55 f1 b1 5e 02 38 ab 5c b7 43 04 da 95 20 ce 33 39 4e 71 26 a7 ee 53 b0 ac bd a7 f3 9d a4 87 79 85 c6 67 71 e8 1b a0 11 f9 28 a5 b8 ce 8d 2e ae aa 29 df 80 54 d4 cc 3a f9 8d 19 50 98 8f 4e d4 2d c8 53 f5 61 d9 a1 e9 98 99 84 35 69 6d 81 c7 13 03 68 94 79 db 25 85 bc 89 89 6b 18 bd b6 6a 9a 57 ad a2 7c 55 92 2b 54 76 52 db 7a 10 ba 52 d2 17 94 7e 4a b1 12 14 10 12 cd ac 52 81 99 e0 70 06 b2 39 14 c9 d6 19 66 a7 40 73 75 54 92 27 0c ae 08 d1 22 58 b9 4b 07 a7 Data Ascii: m:7Y;~}4o:.}VI&@q?h\|bR I-wqEAbPlq66v"FC/0%U^8\C 39Nq&Sygq(.)T:PN-Sa5imhy%kjW\|U+TvRzR~JRp9f@suT'"XK
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: 9f 08 c3 9e df 3f fe a4 db 65 60 e7 67 3f 76 cc 9e 3c 02 cd 0d c7 cb af 07 ad 59 fb 53 1d df d2 16 bf 68 bf 6c d3 4f 2e 47 3f 91 72 db fe 85 c3 aa 97 19 da 7a 4c 38 3c a6 6d 84 25 10 f7 2a 27 5b 6c e5 08 a3 4f cd e5 30 ec 38 a8 62 5e b5 69 50 8e 47 56 71 34 bc 73 6c 4a 86 a1 e8 fe 55 58 0d ea ef f7 aa 81 71 cf 17 94 31 79 6a d8 94 f7 3e 92 05 ec a3 e0 17 c7 87 3e e4 7f 2b bb e6 48 0e 8c 3f 7f 29 db f7 a4 2a 4d fb 1c f9 79 ee 4a 6a 72 fa e0 22 e1 45 9d 42 db 73 37 41 e2 b1 ac b1 4f 9b 8a 4e 30 c9 b4 34 b2 99 69 77 82 11 f7 f3 1a b2 ed 44 86 70 34 18 1e 93 51 97 82 ac 5e 11 93 ea 50 36 fc fb 56 bc f0 30 00 f3 f4 3d 86 0b 47 8b f5 34 98 7d e0 d7 c5 3b e9 4f 0f d0 32 e1 7a f4 fd f2 b0 f3 fa 4d 06 e9 12 f6 c2 1c f2 a1 4c d3 49 29 56 40 30 0e 12 0e af f2 95 10 Data Ascii: ?e`g?v<YShlO.G?rzL8<m%'[lO08b^iPGVq4slJUXq1yj>>+H?)MyJjr"EBs7AON04iwDp4Q^P6V0=G4};O2zMLI)V@0
2024-10-04 13:38:29 UTC	8000	IN	Data Raw: 1a 4e 2c 28 35 e0 f5 c4 ad 5f e2 35 0e 77 6f 4b 59 d1 f9 dc 0f 17 30 d9 8f 48 88 83 90 30 d7 7b 71 ec 97 ca 69 3b ac df 69 13 4e 0e 63 25 3b f9 a6 75 20 aa 53 db 9a d7 69 3a d9 b6 ce 75 ba df a0 04 19 68 dd 01 80 38 f1 0a 63 f3 a5 15 ff bb 0f 99 86 4a d4 44 8e a2 7c 6e 05 e2 b0 fc 43 19 af b3 40 d8 56 6d b4 3e 1f 36 86 ed 5b 5b cc 61 1c 15 9d 7e dc 97 a3 0d 36 4c 30 c6 b9 20 39 8e e5 be 33 00 67 70 0d e4 87 7f d5 ef 17 68 db ea d5 42 24 fd 21 cd d1 1e fc 0e 78 f1 97 ed 37 34 68 d9 4e 0f 9e 9f ba b9 87 96 9a 7b e7 1c e8 1f c0 97 44 92 63 75 85 84 ea 4a 66 9c fe 17 7c 66 d1 7b 20 d2 cd c5 45 af 11 2f 5d 3f 80 f0 a5 1b cf e6 63 d4 1f 8c 36 ea 2d 67 62 e0 d2 42 6b 1a 4d e4 55 4a 66 69 27 3e 7d aa 98 64 df b0 ca 12 9e ca f9 9a f2 4b 3a 8c 2d b2 ba b2 36 51 8a Data Ascii: N,(5_5woKY0H0{qi;iNc%;u Si:uh8cJD\|nC@Vm>6[[a~6L0 93gphB$!x74hN{DcuJf\|f{ E/]?c6-gbBkMUJfi'>}dK:-6Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	60073	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	728	OUT	GET /wp-content/uploads/2024/05/IconoCaja-2.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:29 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:52 GMT ETag: "14d-6178703d1c7ce" Accept-Ranges: bytes Content-Length: 333 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:29 UTC	333	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 32 37 56 32 33 4d 31 38 20 31 39 56 31 35 4d 31 38 20 31 31 56 39 4d 31 36 20 32 37 48 32 30 4d 31 34 20 31 31 56 31 35 48 32 35 4c 32 37 20 31 33 4c 32 35 20 31 31 48 31 34 5a 4d 32 30 20 31 39 56 32 33 48 31 32 4c 31 30 20 32 31 4c 31 32 20 31 39 48 32 30 5a 22 20 73 74 72 6f 6b 65 3d 22 23 41 45 41 39 46 46 22 20 73 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M18 27V23M18 19V15M18 11V9M16 27H20M14 11V15H25L27 13L25 11H14ZM20 19V23H12L10 21L12 19H20Z" stroke="#AEA9FF" st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	60072	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	728	OUT	GET /wp-content/uploads/2024/05/IconoCaja-7.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:29 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:53 GMT ETag: "468-6178703e33c9f" Accept-Ranges: bytes Content-Length: 1128 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:29 UTC	1128	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 34 20 31 34 43 32 34 2e 37 39 35 36 20 31 34 20 32 35 2e 35 35 38 37 20 31 34 2e 33 31 36 31 20 32 36 2e 31 32 31 33 20 31 34 2e 38 37 38 37 43 32 36 2e 36 38 33 39 20 31 35 2e 34 34 31 33 20 32 37 20 31 36 2e 32 30 34 34 20 32 37 20 31 37 43 32 37 20 31 37 2e 37 39 35 36 20 32 36 2e 36 38 33 39 20 31 38 2e 35 35 38 37 20 32 36 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M24 14C24.7956 14 25.5587 14.3161 26.1213 14.8787C26.6839 15.4413 27 16.2044 27 17C27 17.7956 26.6839 18.5587 26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	60076	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	728	OUT	GET /wp-content/uploads/2024/05/IconoCaja-8.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:29 UTC	335	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:53 GMT ETag: "3ac-6178703e6a7a2" Accept-Ranges: bytes Content-Length: 940 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:29 UTC	940	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 20 31 38 4c 31 37 20 32 30 4c 32 31 20 31 36 4d 39 20 31 38 43 39 20 31 39 2e 31 38 31 39 20 39 2e 32 33 32 37 39 20 32 30 2e 33 35 32 32 20 39 2e 36 38 35 30 38 20 32 31 2e 34 34 34 32 43 31 30 2e 31 33 37 34 20 32 32 2e 35 33 36 31 20 31 30 2e 38 30 30 33 20 32 33 2e 35 32 38 32 20 31 31 2e 36 33 36 20 32 34 2e 33 36 34 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M15 18L17 20L21 16M9 18C9 19.1819 9.23279 20.3522 9.68508 21.4442C10.1374 22.5361 10.8003 23.5282 11.636 24.364C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	60078	104.16.160.168	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	553	OUT	GET /analytics/1728048900000/8564339.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:29 UTC	1066	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: YvRO+CSmZWiSIGdn2lvrk2siYDtvWlVo4Qb2zNs7jq2e0P1YqQbT5bUlOjjeU44rRGy9+VE7DR7SsEHjBu2H3Pueitf4EIBxwwPoBD3Zmgw= x-amz-request-id: KG1SPBZH44R4Z78P last-modified: Tue, 01 Oct 2024 15:44:00 GMT etag: W/"a7cf845fb8faf8cb40c0c164987e630a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null access-control-allow-credentials: false vary: origin expires: Fri, 04 Oct 2024 13:40:26 GMT x-envoy-upstream-service-time: 86 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 8b976fd8-1b63-4242-9ce3-7e77bd2760ec x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-75d7846cb8-zqff5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 8b976fd8-1b63-4242-9ce3-7e77bd2760ec CF-Cache-Status: HIT Age: 38 Server: cloudflare CF-RAY: 8cd592952b58c346-EWR
2024-10-04 13:38:29 UTC	303	IN	Data Raw: 37 62 37 36 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 39 39 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 74 61 6c 49 64 27 2c 20 38 35 36 34 33 33 39 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 22 74 72 61 63 6b 43 6c 69 63 6b 22 2c 20 22 62 75 74 74 6f 6e 23 68 73 2d 63 74 61 2d Data Ascii: 7b76/** * HubSpot Analytics Tracking Code Build Number 1.993 * Copyright 2024 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];_hsq.push(['setPortalId', 8564339]);_hsq.push(['trackPageView']);_hsq.push(["trackClick", "button#hs-cta-
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 63 74 61 2d 77 72 61 70 70 65 72 2e 73 65 6c 66 2d 63 65 6e 74 65 72 2e 6e 6f 72 6d 61 6c 2d 63 61 73 65 2e 66 6c 65 78 2e 6d 78 2d 61 75 74 6f 2e 74 65 78 74 2d 63 65 6e 74 65 72 2e 74 65 78 74 2d 62 61 73 65 2e 74 65 78 74 2d 77 68 69 74 65 2e 72 6f 75 6e 64 65 64 2d 32 78 6c 2e 70 79 2d 33 2e 70 78 2d 36 2e 66 6f 6e 74 2d 62 6f 6c 64 2e 62 74 6e 2d 63 74 61 22 2c 20 22 70 65 38 35 36 34 33 33 39 5f 62 6c 6f 67 5f 72 65 67 69 73 74 65 72 5f 62 75 74 74 6f 6e 22 2c 20 7b 22 75 72 6c 22 3a 6e 75 6c 6c 2c 22 74 72 61 63 6b 69 6e 67 43 6f 6e 66 69 67 49 64 22 3a 31 35 35 34 38 34 37 30 7d 5d 29 3b 0a 74 72 79 20 7b 0a 0a 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 5f 68 73 71 2e 70 75 73 68 28 5b 27 6c 6f 67 27 2c 20 27 63 75 73 74 6f 6d 4a 73 45 72 72 6f 72 Data Ascii: cta-wrapper.self-center.normal-case.flex.mx-auto.text-center.text-base.text-white.rounded-2xl.py-3.px-6.font-bold.btn-cta", "pe8564339_blog_register_button", {"url":null,"trackingConfigId":15548470}]);try {} catch (e) { _hsq.push(['log', 'customJsError
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 0a 69 66 20 28 66 61 6c 73 65 29 20 7b 0a 20 20 5f 68 73 71 2e 70 75 73 68 28 5b 0a 20 20 20 20 27 74 72 61 63 6b 43 75 73 74 6f 6d 42 65 68 61 76 69 6f 72 61 6c 45 76 65 6e 74 27 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 6e 61 6d 65 3a 20 22 70 65 38 35 36 34 33 33 39 5f 75 70 67 72 61 64 65 5f 72 65 71 75 65 73 74 22 2c 0a 20 20 20 20 20 20 70 72 6f 70 65 72 74 69 65 73 3a 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 67 69 76 65 20 65 61 63 68 20 70 72 6f 70 65 72 74 79 20 61 20 76 61 6c 75 65 20 73 6f 20 77 65 20 6b 6e 6f 77 20 77 68 61 74 20 74 68 65 79 20 6d 65 61 6e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 7d 2c 0a 20 20 5d 29 3b 0a 7d 0a 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 5f 68 73 71 2e 70 75 73 68 28 5b 27 6c 6f 67 Data Ascii: if (false) { _hsq.push([ 'trackCustomBehavioralEvent', { name: "pe8564339_upgrade_request", properties: { // give each property a value so we know what they mean }, }, ]);}} catch (e) { _hsq.push(['log
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 6f 6e 5f 69 6e 73 74 61 6c 6c 65 64 22 2c 0a 20 20 20 20 20 20 70 72 6f 70 65 72 74 69 65 73 3a 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 67 69 76 65 20 65 61 63 68 20 70 72 6f 70 65 72 74 79 20 61 20 76 61 6c 75 65 20 73 6f 20 77 65 20 6b 6e 6f 77 20 77 68 61 74 20 74 68 65 79 20 6d 65 61 6e 0a 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 65 72 5f 75 75 69 64 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 73 65 73 61 6d 65 5f 61 63 63 6f 75 6e 74 5f 75 75 69 64 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 75 73 65 72 5f 72 6f 6c 65 3a 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 69 74 65 6d 5f 6e 61 6d 65 3a 20 6e 75 6c 6c 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 7d 2c 0a 20 20 5d 29 3b 0a 7d 0a 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 5f 68 73 71 2e Data Ascii: on_installed", properties: { // give each property a value so we know what they mean customer_uuid: null, sesame_account_uuid: null, user_role: null, item_name: null }, }, ]);}} catch (e) { _hsq.
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 27 2c 20 74 72 75 65 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 65 6d 62 65 64 48 75 62 53 70 6f 74 53 63 72 69 70 74 27 2c 20 27 68 74 74 70 73 3a 2f 2f 6a 73 2d 6e 61 31 2e 68 73 2d 73 63 72 69 70 74 73 2e 63 6f 6d 2f 38 35 36 34 33 33 39 2e 6a 73 27 2c 20 27 68 73 2d 73 63 72 69 70 74 2d 6c 6f 61 64 65 72 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 69 6e 69 74 45 76 65 6e 74 56 69 73 75 61 6c 69 7a 65 72 53 63 72 69 70 74 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 54 72 61 63 6b 69 6e 67 44 6f 6d 61 69 6e 27 2c 20 27 74 72 61 63 6b 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 27 5d 29 3b 0a 2f 2a 2a 20 5f 61 6e 6f 6e 5f 77 72 61 70 70 65 72 5f 20 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 Data Ascii: ', true]);_hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/8564339.js', 'hs-script-loader']);_hsq.push(['initEventVisualizerScript']);_hsq.push(['setTrackingDomain', 'track.hubspot.com']);/ _anon_wrapper_ / (function() {/*! For lic
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 22 23 68 73 64 62 67 22 29 3e 2d 31 3b 69 66 28 68 73 74 63 2e 64 65 62 75 67 7c 7c 69 7c 7c 22 31 22 3d 3d 3d 74 2e 67 65 74 28 65 29 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 3b 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 6c 6f 67 26 26 6e 2e 6c 6f 67 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 22 23 68 73 64 62 67 22 29 3e 2d 31 29 7b 68 73 74 63 2e 5f 5f 6c 6f 67 73 3d 68 73 74 63 2e 5f 5f 6c 6f 67 73 7c 7c 5b 5d 3b 68 73 74 63 2e 5f 5f 6c 6f 67 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 73 74 63 2e 5f 5f 6c 6f 67 73 2c 61 72 67 75 6d 65 6e 74 Data Ascii: .hash.indexOf("#hsdbg")>-1;if(hstc.debug\|\|i\|\|"1"===t.get(e)){var n=window.console;n&&"function"==typeof n.log&&n.log.apply(n,arguments);if(document.location.hash.indexOf("#hsdbg")>-1){hstc.__logs=hstc.__logs\|\|[];hstc.__logs.push.apply(hstc.__logs,argument
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 72 72 65 72 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 68 61 72 61 63 74 65 72 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 63 2e 63 68 61 72 61 63 74 65 72 53 65 74 3f 74 68 69 73 2e 64 6f 63 2e 63 68 61 72 61 63 74 65 72 53 65 74 3a 74 68 69 73 2e 64 6f 63 2e 63 68 61 72 73 65 74 3f 74 68 69 73 2e 64 6f 63 2e 63 68 61 72 73 65 74 3a 22 22 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4c 61 6e 67 75 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 61 76 2e 6c 61 6e 67 75 61 67 65 3f 74 68 69 73 2e 6e 61 76 2e 6c 61 6e 67 75 61 Data Ascii: rrer);return t};hstc.global.Context.prototype.getCharacterSet=function(){return this.doc.characterSet?this.doc.characterSet:this.doc.charset?this.doc.charset:""};hstc.global.Context.prototype.getLanguage=function(){return this.nav.language?this.nav.langua
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 7d 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 53 69 6e 67 6c 65 43 61 6c 6c 56 61 6c 75 65 46 72 6f 6d 48 73 71 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 69 5d 3b 69 66 28 6e 26 26 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 6e 29 26 26 6e 5b 30 5d 3d 3d 3d 65 29 7b 74 2e 73 70 6c 69 63 65 28 69 2d 2d 2c 31 29 3b 72 65 74 75 72 6e 20 32 3d 3d 6e 2e 6c 65 6e 67 74 68 3f 6e 5b 31 5d 3a 6e 75 6c 6c 7d 7d 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 44 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 2f 22 2b 74 2e 73 70 6c 69 74 28 22 2f 2f 22 29 5b 31 5d 2e 73 70 6c 69 74 28 22 2f 22 Data Ascii: }};hstc.utils.removeSingleCallValueFromHsq=function(t,e){for(var i=0;i<t.length;i++){var n=t[i];if(n&&hstc.utils.isArray(n)&&n[0]===e){t.splice(i--,1);return 2==n.length?n[1]:null}}};hstc.utils.removeDomain=function(t){return"/"+t.split("//")[1].split("/"
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 2b 65 2c 69 29 3b 74 5b 22 6f 6e 22 2b 65 5d 3d 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 69 66 28 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 69 2c 6e 29 3b 72 65 74 75 72 6e 21 30 7d 69 66 28 74 2e 64 65 74 61 63 68 45 76 65 6e 74 29 72 65 74 75 72 6e 20 74 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 69 29 3b 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 6f 6e 22 2b 65 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 Data Ascii: +e,i);t["on"+e]=i};hstc.utils.removeEventListener=function(t,e,i,n){if(t.removeEventListener){t.removeEventListener(e,i,n);return!0}if(t.detachEvent)return t.detachEvent("on"+e,i);t.removeAttribute("on"+e)};hstc.utils.preventDefault=function(t){t.preventD
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 65 2e 6c 65 6e 67 74 68 3e 32 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 29 29 3b 72 65 74 75 72 6e 22 2e 22 2b 65 2e 6a 6f 69 6e 28 22 2e 22 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 3b 66 6f 72 28 3b 69 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 72 65 74 75 72 6e 20 Data Ascii: ction(t){var e=t.split(".");e.length>2&&(e=e.slice(1));return"."+e.join(".")};hstc.utils.createElement=function(t){var e=document.createDocumentFragment(),i=document.createElement("div");i.innerHTML=t;for(;i.firstChild;)e.appendChild(i.firstChild);return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	60079	104.16.76.142	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	540	OUT	GET /conversations-embed.js HTTP/1.1 Host: js.usemessages.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:29 UTC	1351	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Tue, 01 Oct 2024 19:53:43 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: JWdsgkLPA6ZPx8O3AKEWCHJFpp9DhJBz etag: W/"f4a7c3be38aebfc93bbabac26a17711d" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 6b29c936420d116b13807604a0e67044.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: dxLg_eZhKfM0euEVUCJiXRO3kgrDcn80Vpbrki8LqRVIG-3GmkDy2Q== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=conversations-embed/static-1.18177/bundles/project.js&cfRay=8cbf0f0ccdb72016-IAD Cache-Control: max-age=600 x-hs-target-asset: conversations-embed/static-1.18177/bundles/project.js x-content-type-options: nosniff x-hs-cache-status: HIT x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 09265446-0480-4387-b4cf-16e5aadf8a60 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-6c6dd6864-q6mq6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 09265446-0480-4387-b4cf-16e5aadf8a60
2024-10-04 13:38:29 UTC	152	IN	Data Raw: 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2d 65 6d 62 65 64 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 37 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 64 35 39 32 39 35 33 65 31 30 38 63 62 37 2d 45 57 52 0d 0a 0d 0a Data Ascii: cache-tag: staticjsapp-conversations-embed-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 7Server: cloudflareCF-RAY: 8cd592953e108cb7-EWR
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 73 29 7b 69 66 28 74 5b 73 5d 29 72 65 74 75 72 6e 20 74 5b 73 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 74 5b 73 5d 3d 7b 69 3a 73 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 73 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 69 29 3b 6e 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 65 3b 69 2e 63 3d 74 3b 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 69 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 73 7d 29 7d 3b 69 Data Ascii: 7ff9!function(e){var t={};function i(s){if(t[s])return t[s].exports;var n=t[s]={i:s,l:!1,exports:{}};e[s].call(n.exports,n,n.exports,i);n.l=!0;return n.exports}i.m=e;i.c=t;i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})};i
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 69 28 39 34 29 2c 61 3d 69 28 31 31 36 29 2c 6c 3d 69 28 34 30 29 2c 64 3d 69 28 33 33 29 2c 63 3d 69 28 33 34 29 2c 75 3d 73 28 69 28 34 33 29 29 2c 68 3d 69 28 34 31 29 2c 67 3d 73 28 69 28 34 32 29 29 2c 70 3d 69 28 31 31 37 29 2c 66 3d 69 28 31 30 33 29 3b 63 6f 6e 73 74 20 6d 3d 28 29 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 60 6c 6f 61 64 49 6d 6d 65 64 69 61 74 65 6c 79 20 69 73 20 73 65 74 20 74 6f 20 66 61 6c 73 65 20 61 6e 64 20 77 69 64 67 65 74 2e 6c 6f 61 64 28 29 20 68 61 73 20 6e 6f 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 20 6f 6e 20 77 69 6e 64 6f 77 2e 24 7b 63 2e 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 7d 20 79 65 74 2e 20 50 6c 65 61 73 65 20 63 61 6c 6c 20 77 69 64 67 65 74 2e 6c 6f 61 64 28 29 20 66 69 72 73 74 20 6f 72 20 Data Ascii: i(94),a=i(116),l=i(40),d=i(33),c=i(34),u=s(i(43)),h=i(41),g=s(i(42)),p=i(117),f=i(103);const m=()=>{console.warn(`loadImmediately is set to false and widget.load() has not been called on window.${c.GLOBAL_VARIABLE} yet. Please call widget.load() first or
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 68 65 6c 6c 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 69 28 34 29 2c 6f 3d 69 28 37 29 2c 72 3d 69 28 38 29 2c 61 3d 69 28 39 29 2c 6c 3d 73 28 69 28 31 33 29 29 2c 64 3d 69 28 31 35 29 2c 63 3d 69 28 31 36 29 2c 75 3d 69 28 31 38 29 2c 68 3d 73 28 69 28 31 37 29 29 2c 67 3d 69 28 31 39 29 2c 70 3d 69 28 32 32 29 2c 66 3d 69 28 32 33 29 2c 6d 3d 69 28 32 34 29 2c 45 3d 69 28 32 35 29 2c 5f 3d 69 28 32 36 29 2c 76 3d 69 28 33 30 29 2c 49 3d 69 28 33 39 29 2c 62 3d 69 28 34 30 29 2c 54 3d 69 28 34 31 29 2c 4f 3d 73 28 69 28 34 32 29 29 2c 53 3d 73 28 69 28 34 33 29 29 2c 79 3d 69 28 34 39 29 2c 41 3d 69 28 35 30 29 2c 43 3d 69 28 35 32 29 2c 50 3d 69 28 35 33 29 2c 52 3d 69 28 35 34 29 2c 77 3d 69 28 33 32 29 2c 4d 3d 73 28 69 28 35 37 29 29 2c 44 3d 73 28 Data Ascii: hell=void 0;var n=i(4),o=i(7),r=i(8),a=i(9),l=s(i(13)),d=i(15),c=i(16),u=i(18),h=s(i(17)),g=i(19),p=i(22),f=i(23),m=i(24),E=i(25),_=i(26),v=i(30),I=i(39),b=i(40),T=i(41),O=s(i(42)),S=s(i(43)),y=i(49),A=i(50),C=i(52),P=i(53),R=i(54),w=i(32),M=s(i(57)),D=s(
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 2e 69 73 44 72 61 67 67 69 6e 67 3d 21 31 3b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 77 69 64 67 65 74 44 61 74 61 3f 22 52 49 47 48 54 5f 41 4c 49 47 4e 45 44 22 3d 3d 3d 74 68 69 73 2e 77 69 64 67 65 74 44 61 74 61 5b 6b 2e 57 49 44 47 45 54 5f 4c 4f 43 41 54 49 4f 4e 5d 3a 22 52 49 47 48 54 5f 41 4c 49 47 4e 45 44 22 2c 74 3d 65 3f 22 72 69 67 68 74 22 3a 22 6c 65 66 74 22 2c 69 3d 60 24 7b 75 2e 63 6f 6f 6b 69 65 73 2e 57 49 44 47 45 54 5f 50 4f 53 49 54 49 4f 4e 7d 5f 24 7b 74 7d 60 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 49 2e 50 41 52 45 4e 54 5f 49 44 29 2c 6e 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 73 29 2c 6f 3d 70 61 72 73 65 49 6e 74 28 6e 2e 62 6f 74 74 6f 6d 2c 31 30 Data Ascii: .isDragging=!1;const e=this.widgetData?"RIGHT_ALIGNED"===this.widgetData[k.WIDGET_LOCATION]:"RIGHT_ALIGNED",t=e?"right":"left",i=`${u.cookies.WIDGET_POSITION}_${t}`,s=document.getElementById(I.PARENT_ID),n=window.getComputedStyle(s),o=parseInt(n.bottom,10
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 74 68 69 73 2e 69 6e 69 74 61 6c 69 7a 65 44 72 61 67 3d 28 29 3d 3e 7b 63 6f 6e 73 74 7b 61 63 63 65 6e 74 43 6f 6c 6f 72 3a 65 2c 67 61 74 65 73 3a 74 7d 3d 74 68 69 73 2e 77 69 64 67 65 74 44 61 74 61 3b 69 66 28 21 74 7c 7c 21 74 5b 22 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 3a 44 72 61 67 67 61 62 6c 65 43 68 61 74 22 5d 7c 7c 28 30 2c 6e 2e 69 73 41 6e 79 4d 6f 62 69 6c 65 29 28 29 7c 7c 28 30 2c 5a 2e 67 65 74 45 78 74 65 72 6e 61 6c 41 70 69 53 65 74 74 69 6e 67 73 29 28 29 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 22 52 49 47 48 54 5f 41 4c 49 47 4e 45 44 22 3d 3d 3d 74 68 69 73 2e 77 69 64 67 65 74 44 61 74 61 5b 6b 2e 57 49 44 47 45 54 5f 4c 4f 43 41 54 49 4f 4e 5d 3f 22 72 69 67 68 74 22 3a 22 6c 65 Data Ascii: this.initalizeDrag=()=>{const{accentColor:e,gates:t}=this.widgetData;if(!t\|\|!t["Conversations:DraggableChat"]\|\|(0,n.isAnyMobile)()\|\|(0,Z.getExternalApiSettings)().isFullscreen)return;const i="RIGHT_ALIGNED"===this.widgetData[k.WIDGET_LOCATION]?"right":"le
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 34 33 33 33 20 32 35 2e 31 35 48 31 31 2e 31 34 31 37 43 31 30 2e 35 31 30 38 20 32 35 2e 31 35 20 31 30 20 32 34 2e 36 33 39 32 20 31 30 20 32 34 2e 30 30 38 33 56 32 31 2e 37 31 36 37 43 31 30 20 32 31 2e 30 38 35 38 20 31 30 2e 35 31 30 38 20 32 30 2e 35 37 35 20 31 31 2e 31 34 31 37 20 32 30 2e 35 37 35 5a 4d 31 38 20 30 48 32 30 2e 32 39 31 37 43 32 30 2e 39 32 32 35 20 30 20 32 31 2e 34 33 33 33 20 30 2e 35 31 30 38 33 33 20 32 31 2e 34 33 33 33 20 31 2e 31 34 31 36 37 56 33 2e 34 33 33 33 33 43 32 31 2e 34 33 33 33 20 34 2e 30 36 34 31 37 20 32 30 2e 39 32 32 35 20 34 2e 35 37 35 20 32 30 2e 32 39 31 37 20 34 2e 35 37 35 48 31 38 43 31 37 2e 33 36 39 32 20 34 2e 35 37 35 20 31 36 2e 38 35 38 33 20 34 2e 30 36 34 31 37 20 31 36 2e 38 35 38 33 20 33 Data Ascii: 4333 25.15H11.1417C10.5108 25.15 10 24.6392 10 24.0083V21.7167C10 21.0858 10.5108 20.575 11.1417 20.575ZM18 0H20.2917C20.9225 0 21.4333 0.510833 21.4333 1.14167V3.43333C21.4333 4.06417 20.9225 4.575 20.2917 4.575H18C17.3692 4.575 16.8583 4.06417 16.8583 3
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 3e 3c 2f 70 61 74 68 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 6c 69 70 30 5f 32 32 30 32 5f 31 31 32 32 31 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 3c 2f 72 65 63 74 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 2f 73 76 67 3e 5c 6e 20 20 20 20 27 3b 74 68 69 73 2e 64 72 61 67 4f 76 65 72 6c 61 79 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 68 69 73 2e 64 72 61 67 4f 76 65 72 6c 61 79 45 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 68 73 2d 64 72 61 67 2d 6f 76 65 72 6c 61 79 22 29 3b 63 6f 6e 73 74 20 Data Ascii: ll="currentColor"></path></g><defs><clipPath id="clip0_2202_11221"><rect width="32" height="32" fill="white"></rect></clipPath></defs></svg>\n ';this.dragOverlayEl=document.createElement("div");this.dragOverlayEl.classList.add("hs-drag-overlay");const
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 74 68 69 73 2e 69 66 72 61 6d 65 53 72 63 3d 74 68 69 73 2e 65 6d 62 65 64 53 63 72 69 70 74 43 6f 6e 74 65 78 74 2e 67 65 74 49 46 72 61 6d 65 53 72 63 28 29 3b 65 2e 73 72 63 3d 74 68 69 73 2e 69 66 72 61 6d 65 53 72 63 3b 65 2e 69 64 3d 49 2e 49 46 52 41 4d 45 5f 49 44 3b 65 2e 74 69 74 6c 65 3d 22 43 68 61 74 20 57 69 64 67 65 74 22 3b 65 2e 61 6c 6c 6f 77 46 75 6c 6c 73 63 72 65 65 6e 3d 21 30 3b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 65 73 74 2d 69 64 22 2c 22 63 68 61 74 2d 77 69 64 67 65 74 2d 69 66 72 61 6d 65 22 29 3b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 49 66 72 61 6d 65 4c 6f 61 64 29 3b Data Ascii: eElement("iframe");this.iframeSrc=this.embedScriptContext.getIFrameSrc();e.src=this.iframeSrc;e.id=I.IFRAME_ID;e.title="Chat Widget";e.allowFullscreen=!0;e.setAttribute("data-test-id","chat-widget-iframe");e.addEventListener("load",this.handleIframeLoad);
2024-10-04 13:38:29 UTC	1369	IN	Data Raw: 2e 69 66 72 61 6d 65 3d 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 74 68 69 73 2e 69 6e 69 74 61 6c 69 7a 65 44 72 61 67 28 29 3b 74 68 69 73 2e 73 65 74 46 72 61 6d 65 43 6c 61 73 73 28 29 7d 3b 74 68 69 73 2e 68 61 6e 64 6c 65 49 31 38 6e 4c 61 62 65 6c 73 3d 28 7b 64 61 74 61 3a 65 7d 29 3d 3e 7b 69 66 28 21 74 68 69 73 2e 69 66 72 61 6d 65 7c 7c 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 65 5b 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2d 76 69 73 69 74 6f 72 2d 75 69 2e 76 69 73 69 74 6f 72 45 78 70 65 72 69 65 6e 63 65 41 72 69 61 4c 61 62 65 6c 73 2e 63 68 61 74 57 69 64 67 65 74 22 5d 2c 69 3d 65 5b 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2d Data Ascii: .iframe=t.appendChild(e);document.body.appendChild(t);this.initalizeDrag();this.setFrameClass()};this.handleI18nLabels=({data:e})=>{if(!this.iframe\|\|!e)return;const t=e["conversations-visitor-ui.visitorExperienceAriaLabels.chatWidget"],i=e["conversations-

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	60069	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133829Z-15767c5fc55rv8zjq9dg0musxg0000000ch000000000he9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	60070	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133829Z-15767c5fc55gs96cphvgp5f5vc0000000cf000000000hagt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	60071	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:29 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:38:29 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:29 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3a0dc1eb-601e-0032-608c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133829Z-15767c5fc55ncqdn59ub6rndq00000000c7g00000000fq47 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:38:29 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	60085	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	500	OUT	GET /wp-content/themes/sesamehr/img/new-home/Casa.lottie HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	309	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Wed, 13 Mar 2024 17:58:09 GMT ETag: "4958-6138e84822cde" Accept-Ranges: bytes Content-Length: 18776 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:30 UTC	7883	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 cc 23 45 d5 92 00 00 00 bd 00 00 00 0d 00 00 00 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 25 ce 41 0e 82 30 10 05 d0 bb cc 9a 9a 22 44 28 07 70 e5 0d 8c 8b c2 0c 5a 85 8e 99 56 8d 21 dc dd 56 96 33 79 ff e7 2f 60 bd 9b 6d 74 ec 03 74 e7 05 1c 42 07 ba d9 37 c6 0e a3 3a 60 85 aa d6 a6 55 ed 58 f5 4a b7 bd 31 58 37 a6 37 08 05 cc 8c 94 b4 67 99 ed 94 6e 74 42 43 ae 82 ae 5c 2f 05 d8 57 bc b1 24 71 e2 18 1d 1d dd 44 21 33 0a 83 b8 e7 06 21 3d ae e4 49 6c fc 53 e4 b8 69 75 cf f6 41 df 0f 0b a6 6d 19 be 49 c2 96 2a 77 1a d6 1f 50 4b 03 04 14 00 00 00 08 00 00 00 00 00 ec 87 4e 80 26 04 00 00 4d 0c 00 00 34 00 00 00 61 6e 69 6d 61 74 69 6f 6e 73 2f 30 37 32 37 39 61 63 66 2d 36 64 33 64 2d 34 30 39 38 2d 38 66 33 62 2d 30 Data Ascii: PK#Emanifest.json%A0"D(pZV!V3y/`mttB7:`UXJ1X77gntBC\/W$qD!3!=IlSiuAmI*wPKN&M4animations/07279acf-6d3d-4098-8f3b-0
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: 91 44 cf 96 48 0d 21 ab 8e 8d 9e 88 f4 9e 90 9d 77 dc 11 92 88 a4 7a 22 81 e9 d5 90 48 55 47 ea e9 ce f9 aa 8e d4 d3 7a 47 1f bf d3 13 e3 e4 ab e8 90 42 56 cf a3 0b e0 44 81 b7 88 e4 ed fc 3d 14 44 24 d0 db 07 89 e0 f7 42 a4 ee 9c ef 90 89 5c e9 e1 f1 31 4f 8d 9e b6 f0 0c 0a a1 23 92 04 2e 07 48 4f 65 19 17 22 12 2a 52 6f da c6 23 33 ab e7 7c bd 67 cb fe e7 73 3e 89 8f 10 a9 fb 7e 21 81 a2 d3 13 e3 4b 3c 28 fc 4c 48 22 23 c4 e3 8c 08 40 42 60 27 61 74 4b 62 09 c1 20 d4 05 75 2b cf 13 ea 2b ef fa dc f1 28 7a a2 7f 0a 34 f4 ef 51 18 f5 74 c7 08 36 13 c9 0b a6 23 d2 40 c8 9a 30 17 56 13 9e 05 b9 79 36 db 10 89 6f 56 36 44 32 8f f3 8d 27 21 40 6c ef df 54 cf 10 7f 65 75 5d 30 59 c8 b8 80 cf 4c f4 8a 04 a8 67 38 1e 77 39 2f 1d 73 07 85 18 a6 57 ac b8 86 48 e6 Data Ascii: DH!wz"HUGzGBVD=D$B\1O#.HOe"*Ro#3\|gs>~!K<(LH"#@B`'atKb u++(z4Qt6#@0Vy6oV6D2'!@lTeu]0YLg8w9/sWH
2024-10-04 13:38:30 UTC	2893	IN	Data Raw: 21 0d bb bf 20 12 34 6c 89 74 fb 9c 0f 17 d2 44 a4 46 cf e5 5d 75 eb d9 1a 22 0d 84 6c 9f 11 bb 9e a5 3a 2c e3 12 e3 80 95 54 1d 8f f9 ba a7 38 f3 2e d6 f0 13 42 24 a3 c4 c5 4f a0 23 26 12 0a c8 00 e9 39 5f 12 09 02 0d 95 a6 e7 7c 78 b3 91 01 f4 95 c2 89 e7 44 60 20 b2 72 48 0f 24 98 5f f9 83 f9 9c 2f 1a 44 c1 d1 5d ec a5 87 35 88 87 10 89 f4 60 41 ac 5e 0f d4 cd f1 58 b9 b9 91 4d 44 d2 fc 80 17 6c 09 09 d3 b5 95 aa a6 f9 8a 87 25 6f ba d6 cb 5f ef e7 79 76 44 b2 36 61 33 21 11 c9 50 08 14 28 21 81 0d 37 2b 1d 91 bc fd ca 6b e6 b3 df 12 eb 5d a4 24 4e 0b 0b c8 ec af 7e 0b c7 ad 05 26 da 8c 8f d7 6e 2b 6d 89 44 7a 3c a3 7d 3c 8a d5 a0 78 58 8d 87 99 c4 63 d1 fc 6b 7e f2 aa e3 73 fc d9 8a 75 f1 c0 3a 90 6f d1 a0 09 c7 25 2b 44 2a 84 44 22 c9 dd a3 07 12 fb Data Ascii: ! 4ltDF]u"l:,T8.B$O#&9_\|xD` rH$_/D]5`A^XMDl%o_yvD6a3!P(!7+k]$N~&n+mDz<}<xXck~su:o%+D*D"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	60083	151.101.128.217	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	668	OUT	GET /video/1760416510-48ad8e7167934ac9ef9e2ffb0fc7a7ae0ce4d12b9a6108c2745f611d78a2d27d-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:30 UTC	550	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1103 cache-control: max-age=2592000 content-type: image/avif etag: "2f52a516f8b48f37ceea4bc56a2dabec" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 2002989 Date: Fri, 04 Oct 2024 13:38:30 GMT X-Served-By: cache-dfw-kdal2120075-DFW, cache-ewr-kewr1740063-EWR X-Cache: HIT, HIT X-Cache-Hits: 262, 0 X-Timer: S1728049110.268848,VS0,VE1 Vary: Accept
2024-10-04 13:38:30 UTC	1103	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 03 35 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 00 50 00 00 00 2d 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 00 0d 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 01 00 0d 00 06 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD5(iinfinfeav01ColorjiprpKipcoispeP-pixiav1Ccolrnclx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	60082	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	508	OUT	GET /wp-content/themes/sesamehr/img/new-home/v2/elipse_4853.webp HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	311	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:40:17 GMT ETag: "209ae-61786fe257d14" Accept-Ranges: bytes Content-Length: 133550 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:30 UTC	7881	IN	Data Raw: 52 49 46 46 a6 09 02 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 bd 07 00 2e 06 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0.ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: e8 d9 56 72 65 c8 e3 2b ef 4e ba f9 76 69 c5 77 de 42 89 fa bf 4b f9 27 82 de ab 9c df 19 8b 42 6d 42 e9 79 5e 10 ec 51 82 91 47 21 2e 2b 64 8b 73 b3 72 4f 2f ed 26 72 85 a5 3a fc 0b fc 9a fb ca 70 95 d8 04 c3 53 d0 65 6f f0 3c d6 e9 a0 f7 e9 00 55 df 2d 72 92 c4 6b c2 51 05 c9 36 4c 46 1c 05 cf 63 2c fe d4 04 ef b8 28 86 6c 52 90 2a 44 2e 97 50 46 d3 a1 f2 75 4a 88 46 5c 5c f9 c7 07 42 e9 49 40 3b 1a a6 18 f3 ba a1 d4 1b 00 4a e1 f8 c2 97 19 ba 27 d2 c9 a0 f7 f0 0d ae 5a d1 23 90 7e d4 8d dd 0e dc ec 4d 5b a2 d6 a2 07 c3 37 40 e9 b6 68 bd 0c 84 67 11 f0 ba e5 08 1c 04 b2 6c 05 ce eb 24 06 c9 a0 06 08 f0 08 82 f6 30 46 82 aa 74 ea 2f a6 9c 09 41 0d 5f 58 03 f1 64 d0 fb b2 b7 45 b1 4f eb 0a 9b d3 e7 08 ce 36 4a 40 e0 53 b2 59 0a 08 5d af 49 b1 ca dc 46 b8 Data Ascii: Vre+NviwBK'BmBy^QG!.+dsrO/&r:pSeo<U-rkQ6LFc,(lR*D.PFuJF\\BI@;J'Z#~M[7@hgl$0Ft/A_XdEO6J@SY]IF
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: a5 c6 6b 61 23 85 06 42 66 b3 15 51 a3 f7 1b 14 48 c6 b9 dc 4b 36 85 0f 74 5c d7 f3 ee fe e9 ea 25 db fb 26 03 cb 83 cb e2 37 3b 65 af c8 3d e3 4a 1c 46 01 26 9c 60 ac 05 5b 8c 51 6a 50 11 12 88 af 90 81 87 37 68 4f 4d 4f 4b ca 33 40 06 08 b6 33 c1 15 2b 04 cd 85 3e 67 82 87 5a 48 34 40 e0 82 04 0d 92 60 fd de d1 81 8f ec 15 db fb 25 02 1b d8 2c 7e b4 21 67 28 81 13 68 8d 24 b4 c2 39 04 23 36 a8 10 a4 30 69 b4 88 74 ed ae 8b 94 91 2e a2 63 20 89 a8 16 b5 62 20 54 24 5a 97 91 68 4f 43 21 e9 d0 a5 22 0f 01 0d 24 6f d0 8f ab 46 cc 2f d8 de 6f 55 75 bc da c3 c1 46 97 92 d3 33 c6 d9 9a e4 28 f7 7b 27 0d aa 90 cc a2 ab e1 f9 d1 57 45 7a 16 69 eb 70 08 79 49 bf 18 cc 4c 6b 41 17 d0 1f fd 2c ea a6 08 49 f9 7a ed bd 76 c4 f2 ea b6 75 a8 d5 2f 12 35 10 f6 b7 0a 2f Data Ascii: ka#BfQHK6t\%&7;e=JF&`[QjP7hOMOK3@3+>gZH4@`%,~!g(h$9#60it.c b T$ZhOC!"$oF/oUuF3({'WEzipyILkA,Izvu/5/
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: 6f 61 11 d1 be ca 27 dc 89 50 90 11 85 f3 9a e9 7d 35 54 35 38 8a bb 5b e8 1f 0a 81 1e 86 56 e0 48 ec a6 2a 01 3a af 42 e0 01 78 5b 61 4b a7 fc 89 e5 d4 e1 19 ac f0 15 68 67 3b 70 8e 42 5e a8 5f 61 a4 1b 35 54 0f d3 99 b9 58 22 bd e3 79 c9 f4 1e a4 c0 54 7c f8 b5 9e d7 9a 1a a0 9b 5e b9 ab 2a 0a cb 12 79 40 92 2a e6 98 01 e9 6c 30 e1 5f 7c 2d c5 f6 6c 9e 77 74 76 dd e8 bf 07 71 73 cd b8 e0 e5 cb 2e 97 bc 4a b5 18 e3 f8 db a2 3b fa 0b a6 f7 cb 70 0b 16 d8 a9 c4 9f af 21 78 df 4b bb 1b 55 1c 68 41 ad e1 04 ba 43 35 87 5f 7d 19 64 a0 b6 de cb f6 5f 95 85 ba 76 d4 ce cb d5 c3 ec 3f 0d f0 99 c0 d7 e1 2e 20 17 80 09 7a 2e 70 af 97 de b7 43 55 83 b3 b8 bf 85 f4 30 1f f5 b0 8e a8 20 d0 9f 25 f0 2a e6 c2 2e 86 3b d3 d4 02 97 4a f9 00 cc f3 1a b1 1a 1a 19 ee ec d7 Data Ascii: oa'P}5T58[VH:Bx[aKhg;pB^_a5TX"yT\|^y@l0_\|-lwtvqs.J;p!xKUhAC5_}d_v?. z.pCU0 %.;J
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: bf 4f 5f df fd 42 54 d7 d8 aa f3 dd 95 e6 2d 49 1a 57 28 b0 14 a7 fb f3 2e 70 00 c4 f8 36 8b 31 97 7b fd 9a 60 97 7b 80 95 17 30 6c 08 6f e1 a4 3d c2 e7 fe 88 92 e0 83 73 9f 3e 0d bf 44 23 e1 00 92 63 b0 12 70 0a 24 92 35 db 91 2a 91 3a e2 a0 23 96 2c 15 2f e2 e8 71 11 07 84 b9 23 a7 91 4a d5 3f 18 f5 79 50 f5 e3 c8 34 ff 0a b3 7c c3 1c 16 9a 1f 47 db 46 e2 e1 3d f7 69 a4 29 b9 16 9f 3d d1 3f e5 33 3c 0e f9 98 7a b4 5d 01 14 8e 1f 60 10 84 3d 19 99 b1 91 bd d0 41 c3 79 55 64 81 18 39 d2 06 31 ea ae f3 64 0f cc c0 90 25 1f e1 06 45 0c 1d 39 20 34 27 e3 6c 03 af 22 84 30 ca 42 4b cb 52 cd 1f d9 73 2f bd c9 53 56 c2 88 ef e0 f9 d3 8b 61 a4 e0 1f ea 89 8a 2a ae 44 e4 de 22 50 b2 55 51 1a 9d 10 12 34 a4 76 e3 33 75 92 a5 e0 1d 96 3d 27 d7 82 8e 08 a7 04 92 c7 Data Ascii: O_BT-IW(.p61{`{0lo=s>D#cp$5:#,/q#J?yP4\|GF=i)=?3<z]`=AyUd91d%E9 4'l"0BKRs/SVaD"PUQ4v3u='
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: fe a9 e8 19 e4 6f 3b ff 5f f4 a7 f4 bf a6 9c b5 7c c3 33 fe 69 fc b1 ee e7 f6 27 d8 67 f9 9f ff be c0 1f c0 bf 8b 7f 98 fe f9 fe 17 fe b7 f7 0e e5 fe 60 3f 94 ff 55 ff 45 fd b3 f7 8f e7 17 d1 8f fa cf 50 0f ec ff e7 ff ff ff eb f7 c3 ff e3 ff ff ff ff c0 df a0 07 f1 ef 4a bf fe 5f fc 7f dd fc 1f 7f 88 ff c3 fb 75 f0 15 fc e3 fb 8f fe 3f cf ff 90 0f fe bf ff fd eb 7f 80 7f d3 ff ff ff c3 dc 03 f7 ff ff ff b4 ff 95 7f a2 ff ab f7 ff fc 03 e5 ef d3 bd 40 3f 96 fb 53 fa bf be 7f f3 ff 9b bf e3 fe ba 3c e8 ff ef e2 73 e5 7c 10 fe c9 fc 33 ff bf f0 fd c2 fd 71 7f fc f2 2f f6 ef ee bf ff fe f6 7b 81 79 f3 f7 6f dc a7 f4 3f 2a 7b de 38 bf f7 fe 80 be 16 ff ff fb ff ed d1 fa be 64 7f 11 fe d7 ff ff fe 3f ff ff 20 1f ad 7f b8 be d1 7f d7 fd c0 f2 37 fc 47 fd 6f 60 Data Ascii: o;_\|3i'g`?UEPJ_u?@?S<s\|3q/{yo?*{8d? 7Go`
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: c4 bb 1d 32 3d 30 9e 11 40 0c cc 65 24 84 bf dc c8 4a 2b 56 8d e1 f5 37 09 64 3c eb ee e9 55 4c 28 7b da 30 7f ef 57 27 cd 22 d3 04 d8 f3 a8 b5 74 9e f0 73 7a 4a ec 1e 76 dd 87 70 9b 9e 28 a8 08 4d 65 53 70 6e f2 48 f6 37 a1 81 1e 13 d9 ca 7b 15 72 05 83 91 2f 83 c2 5a 86 52 03 e8 2f 6a 0c 2a 27 51 c7 40 e8 5d 75 e9 15 71 4a 7b 72 78 ed 65 16 57 74 9c 6c d0 22 c4 3f 7f 56 10 a7 f3 ad 00 e1 2c b7 13 1a a0 60 02 9b 21 73 d2 e6 7c ed 93 78 22 09 da e9 ff 00 5a ab 7c 19 a2 17 ac a5 ab a4 f4 4e 5e e8 37 de f3 49 89 66 f2 a6 69 f3 b4 f1 b5 9d 23 24 d7 2b b7 4f 83 12 9c 4c 6a 81 80 0a 6c 85 cf 4b 99 f3 b6 4d e0 88 27 6b a7 fc 01 6a ad f0 66 88 5e b2 96 ae 93 d1 39 7b a0 df 7b cd 26 25 9b ca 99 a7 ce d3 c6 d6 74 8c 93 5c ae dd 3e 0c 4a 71 31 aa 06 00 29 b2 17 3d Data Ascii: 2=0@e$J+V7d<UL({0W'"tszJvp(MeSpnH7{r/ZR/j*'Q@]uqJ{rxeWtl"?V,`!s\|x"Z\|N^7Ifi#$+OLjlKM'kjf^9{{&%t\>Jq1)=
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: 53 85 bd ab a7 5b 67 3e b6 48 ae f9 ac e2 a5 e4 0b 66 30 d2 45 a1 93 d4 c6 cd 4d 74 68 69 b0 dc 15 52 99 8f e6 2c 4f e2 11 2c c2 01 00 1d 7c 55 00 13 0d 3e da cf ba 8a 3c af e8 d8 ea 5b 79 bc 53 ac 76 ae 08 c4 05 98 fb 68 bd 29 bc af f5 ed 7e 37 46 0f f1 80 19 8e be 72 41 84 20 eb b6 55 72 e5 83 10 ff 36 a1 c8 c7 b8 8c b2 33 65 f4 4f f9 aa 98 67 97 c8 fa 8f b4 20 bd 67 dc 0d b6 d6 e8 81 b4 e1 00 42 07 b4 ae 36 d1 e3 41 fb fc 30 04 43 86 2e a5 bb ea c3 fd b1 af 88 57 37 29 2f 49 fc 00 b8 65 cf ed 39 5f f6 9c d7 e3 43 e1 d5 cd 8f 3a b9 2f ee d4 b7 19 5d 6c 68 07 07 ee ab f5 c3 7d bf 95 98 6b ce 91 05 24 23 f9 f5 97 76 8e d8 40 56 02 1f d0 af fc 31 ff ce 1d 6c c1 09 52 73 85 92 f8 d0 bf 65 7f 49 49 d3 f3 03 b1 53 03 cb 06 ec 45 c7 2b f7 f6 03 7f 71 b0 f3 b9 Data Ascii: S[g>Hf0EMthiR,O,\|U><[ySvh)~7FrA Ur63eOg gB6A0C.W7)/Ie9_C:/]lh}k$#v@V1lRseIISE+q
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: 67 f0 a5 e2 49 2c 92 3e 0e 74 68 3c 83 37 89 d5 06 de 62 c0 2f a6 cb 58 8e 73 7b 75 97 74 c5 b0 ff 7e c7 e7 cd 5b 27 f8 4e 7a 4f 66 7c b5 b7 e0 11 16 ac 12 9d 92 75 5c 2e 05 f5 15 55 02 e1 19 72 58 f2 8e 09 aa 71 4b 8b 8b 10 45 ca e8 98 bc 48 e5 90 40 cc 6f c6 c4 93 ad f1 be 68 ac 1f e6 9c c4 bf 67 c8 22 24 0e 62 1d 0e 85 0c 30 97 d5 9e 93 24 94 10 66 ef 3f 4a 56 83 3a 28 56 55 3e e6 84 16 7b 16 12 df a2 3a 23 1a d7 01 ac fb b4 16 8c 9f 08 6d 03 e2 b3 59 b5 e0 2d af fd 79 5c 4f 6e d4 f1 80 9a 62 7f 1b 23 d0 0e 30 62 d2 50 07 26 ad 52 f9 19 57 b1 28 3c a2 2c a5 01 fa 60 d2 ec 7c f7 0a 0d 4d 2b 33 04 36 c9 81 63 1d 7f 01 81 15 30 bf a5 97 91 7c ee 28 78 bf a4 33 c0 d9 6a c9 a2 70 59 e9 a2 e4 31 85 c0 23 38 01 eb 54 e7 56 93 b1 79 1f e4 db 29 cd 92 60 d0 80 Data Ascii: gI,>th<7b/Xs{ut~['NzOf\|u\.UrXqKEH@ohg"$b0$f?JV:(VU>{:#mY-y\Onb#0bP&RW(<,`\|M+36c0\|(x3jpY1#8TVy)`
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: f2 3a 64 48 d1 9a 4d 1e fd 90 2a 34 6c 1a 96 23 eb 9f 37 06 dc a6 37 cd 24 4e 4d 52 aa 16 df a1 3f 3d 58 e3 b5 43 19 ee 89 17 86 cf a5 aa e1 15 51 9e 4d e5 d1 9f 39 1c a9 f7 be bf bd 53 99 d9 0d a8 70 c6 b5 e9 af 0a f6 62 be 82 33 c4 f3 b7 1f 8c fe 9a 55 0d 0a af 12 9c 23 df 51 e2 09 9f 02 59 1f e2 cd 67 5f d9 2a c8 43 20 7a 48 cd 72 38 d5 0a 13 e5 ca cb 41 79 7a e5 fd 43 84 92 10 7f c7 40 31 dc 99 8a e8 f5 a4 f8 13 de f7 54 41 be 69 2b cd 93 56 b1 1e c6 f0 ab cb 0b b8 4d bb 99 35 32 37 09 c1 27 6a 64 1f 15 7a b5 89 c1 d7 6d 9a 84 04 14 34 54 26 bb 76 15 ef 34 21 03 a3 a7 ed 67 a1 70 e7 a1 59 27 da 24 28 b3 0a 87 d5 2d 92 74 7d 90 3f 7b 8b ee ac 9e 3c f3 77 4d de 62 18 4e 71 a5 12 2a 42 52 49 46 a3 d8 fb f1 4b 44 20 5a 6c 92 00 67 e4 55 62 91 35 5f 00 dd Data Ascii: :dHM4l#77$NMR?=XCQM9Spb3U#QYg_C zHr8AyzC@1TAi+VM527'jdzm4T&v4!gpY'$(-t}?{<wMbNq*BRIFKD ZlgUb5_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	60086	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	488	OUT	GET /wp-content/uploads/2023/06/portugal.png HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 29 Jun 2023 11:32:17 GMT ETag: "246-5ff430d76ca48" Accept-Ranges: bytes Content-Length: 582 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/png
2024-10-04 13:38:30 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 03 00 00 00 d7 a9 cd ca 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 00 a6 00 00 00 a6 01 dd 7d ff 38 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 00 e1 50 4c 54 45 ff ff ff 72 ae 00 ff 4a 57 73 af 00 ff 4a 55 74 af 00 ff 4b 54 85 a3 0a 84 a2 0a a4 b2 1f 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 ff 4b 55 73 af 00 77 b0 02 78 b1 04 84 b5 0b 8e b9 12 98 bc 18 a1 9c a4 ae b0 d2 b1 aa a1 b2 b2 c6 b4 c6 2a b9 bb d7 d0 ab 86 d7 d3 40 e1 e0 e2 e5 da af e7 d9 4b f7 db 81 f8 89 59 f8 de 55 f9 c6 7f fd 8e 58 fd e0 59 fe b3 64 fe c3 6f ff 4b 55 ff 51 55 ff 53 55 ff 54 55 ff 5a 55 ff 5b 56 Data Ascii: PNGIHDRsBITOpHYs}8tEXtSoftwarewww.inkscape.org<PLTErJWsJUtKTsKUsKUsKUswx*@KYUXYdoKUQUSUTUZU[V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	60087	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	506	OUT	GET /wp-content/themes/sesamehr/assets/js/metricool.js?ver=1.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	367	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2024 14:37:32 GMT ETag: "13a-6113037c51b17" Accept-Ranges: bytes Content-Length: 314 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:30 UTC	314	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 53 63 72 69 70 74 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 65 72 2e 6d 65 74 72 69 63 6f 6f 6c 2e 63 6f 6d 2f 72 65 73 6f 75 72 63 65 73 2f 62 65 2e 6a 73 22 2c 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 61 2c 63 2e 6f 6e 6c 6f 61 64 3d 61 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 6c 6f 61 64 53 63 72 69 70 74 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: function loadScript(a){var b=document.getElementsByTagName("head")[0],c=document.createElement("script");c.type="text/javascript",c.src="https://tracker.metricool.com/resources/be.js",c.onreadystatechange=a,c.onload=a,b.appendChild(c)}loadScript(function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	60088	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	506	OUT	GET /wp-content/themes/sesamehr/assets/js/amplitude.js?ver=1.0 HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	368	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Mon, 12 Feb 2024 14:37:26 GMT ETag: "71f-61130376a585d" Accept-Ranges: bytes Content-Length: 1823 Vary: Accept-Encoding X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: application/javascript
2024-10-04 13:38:30 UTC	1823	IN	Data Raw: 20 20 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 61 6d 70 6c 69 74 75 64 65 7c 7c 7b 5f 71 3a 5b 5d 2c 5f 69 71 3a 7b 7d 7d 3b 76 61 72 20 72 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 0a 20 20 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 0a 20 20 3b 72 2e 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 74 7a 63 61 61 43 48 35 2b 4b 58 44 34 73 47 61 44 6f 7a 65 76 36 6f 45 6c 51 68 73 56 66 62 4a 76 64 69 33 2f 2f 63 32 59 76 62 59 30 32 4c 72 4e 6c 62 70 47 64 74 33 57 71 34 72 57 6f 6e 53 22 0a 20 20 3b 72 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3b 72 2e 61 73 79 6e 63 3d 74 72 75 65 0a 20 20 3b 72 2e 73 72 63 3d 22 68 74 74 Data Ascii: (function(e,t){var n=e.amplitude\|\|{_q:[],_iq:{}};var r=t.createElement("script") ;r.type="text/javascript" ;r.integrity="sha384-tzcaaCH5+KXD4sGaDozev6oElQhsVfbJvdi3//c2YvbY02LrNlbpGdt3Wq4rWonS" ;r.crossOrigin="anonymous";r.async=true ;r.src="htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	60089	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	491	OUT	GET /wp-content/uploads/2024/05/Grupo-63781.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	338	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 07:12:44 GMT ETag: "36d5-617877236a246" Accept-Ranges: bytes Content-Length: 14037 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:30 UTC	7854	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 38 39 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 39 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 36 33 2e 32 32 32 20 37 2e 32 37 36 30 35 43 36 33 2e 32 31 32 37 20 37 2e 34 33 30 34 38 20 36 33 2e 31 39 36 35 20 37 2e 35 38 34 39 20 36 33 2e 31 39 36 35 20 37 2e 37 33 33 39 32 43 36 33 2e 31 39 36 35 20 31 32 2e 33 39 33 36 20 36 33 2e 31 39 35 32 20 31 37 2e 30 35 32 32 20 36 33 2e 31 39 32 37 20 32 31 2e 37 30 39 38 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="189" height="24" viewBox="0 0 189 24" fill="none"><path d="M63.222 7.27605C63.2127 7.43048 63.1965 7.5849 63.1965 7.73392C63.1965 12.3936 63.1952 17.0522 63.1927 21.7098
2024-10-04 13:38:30 UTC	6183	IN	Data Raw: 32 31 38 20 34 31 2e 38 32 31 39 20 35 2e 32 34 34 35 5a 22 20 66 69 6c 6c 3d 22 23 31 46 32 44 35 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 36 2e 32 32 38 20 32 32 2e 37 39 38 35 43 31 33 34 2e 34 36 31 20 32 32 2e 37 39 38 35 20 31 33 32 2e 36 39 33 20 32 32 2e 37 39 38 35 20 31 33 30 2e 39 32 35 20 32 32 2e 37 39 38 35 43 31 33 30 2e 33 30 38 20 32 32 2e 37 39 38 35 20 31 33 30 2e 32 33 36 20 32 32 2e 37 32 31 33 20 31 33 30 2e 32 33 36 20 32 32 2e 30 39 34 33 43 31 33 30 2e 32 33 36 20 31 35 2e 33 39 37 32 20 31 33 30 2e 32 33 34 20 38 2e 36 39 39 38 36 20 31 33 30 2e 32 33 20 32 2e 30 30 32 32 34 43 31 33 30 2e 32 33 20 31 2e 32 39 37 32 36 20 31 33 30 2e 33 30 37 20 31 2e 32 31 34 36 35 20 31 33 31 2e 30 30 32 20 31 2e 32 31 Data Ascii: 218 41.8219 5.2445Z" fill="#1F2D52"></path><path d="M136.228 22.7985C134.461 22.7985 132.693 22.7985 130.925 22.7985C130.308 22.7985 130.236 22.7213 130.236 22.0943C130.236 15.3972 130.234 8.69986 130.23 2.00224C130.23 1.29726 130.307 1.21465 131.002 1.21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	60105	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	729	OUT	GET /wp-content/uploads/2024/05/IconoCaja-11.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:54 GMT ETag: "46d-6178703f1178c" Accept-Ranges: bytes Content-Length: 1133 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:30 UTC	1133	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 20 31 36 48 31 35 2e 30 31 4d 32 31 20 31 36 48 32 31 2e 30 31 4d 31 35 2e 35 20 32 31 43 31 35 2e 38 32 35 39 20 32 31 2e 33 33 32 36 20 31 36 2e 32 31 34 38 20 32 31 2e 35 39 36 38 20 31 36 2e 36 34 34 31 20 32 31 2e 37 37 37 32 43 31 37 2e 30 37 33 34 20 32 31 2e 39 35 37 36 20 31 37 2e 35 33 34 34 20 32 32 2e 30 35 30 35 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M15 16H15.01M21 16H21.01M15.5 21C15.8259 21.3326 16.2148 21.5968 16.6441 21.7772C17.0734 21.9576 17.5344 22.0505

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	60104	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	732	OUT	GET /wp-content/uploads/2024/05/administraci_n.webp HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	309	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:42:18 GMT ETag: "c230-61787056394b2" Accept-Ranges: bytes Content-Length: 49712 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com
2024-10-04 13:38:30 UTC	7883	IN	Data Raw: 52 49 46 46 28 c2 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 1e 02 00 46 02 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF(WEBPVP8X0FICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: 2e b8 da 1b c3 12 43 11 ee 60 1f 4f 98 2b 6f 7f 9a 59 e9 9a 61 9f c7 32 7b 5b 96 3c ad b7 c3 b5 9c e7 59 09 e3 6d 8b 29 bd b5 08 f7 ec 9e 6a 20 7b 5b 46 48 6f 29 5c de 83 70 35 de b8 b0 ae b6 09 f7 fd ec d9 32 82 bd 31 b0 4b a7 14 ae c7 a5 b3 44 f2 e6 25 d3 9f 0a d7 f5 e1 f3 3c cf ba da db b2 ec 7e 5b e1 92 cb 64 93 c5 db 16 62 da 84 3b 3b 77 dc 4c de b8 01 66 76 b8 3e 7b 8f f3 c4 24 7b 5b fa c7 9b 70 7f f8 bc cb 59 5d 5c de b4 65 86 e7 ad 70 9d 0f 3e 96 97 f1 c6 65 4d f5 90 ee 3d e7 03 cc 82 d9 9b 32 14 ef b2 c2 e5 87 7d 37 ac 18 f1 a6 85 71 8d 2b 5c fb ad 67 3e 07 23 de b6 e5 b2 5c 84 db 7b da 21 e3 cd 5b b7 47 4a 17 9c a7 60 60 6f 4b 96 98 bb d3 35 bb 27 4a 89 b7 3f 8b ab 70 b9 4c 48 f1 f6 85 ee 1e c2 fd fc fc ee 21 13 7a 6b b6 78 b7 c2 e5 9e 0b 66 f2 Data Ascii: .C`O+oYa2{[<Ym)j {[FHo)\p521KD%<~[db;;wLfv>{${[pY]\ep>eM=2}7q+\g>#\{![GJ``oK5'J?pLH!zkxf
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: 84 d8 19 de 3f 5c a7 7d 2c 9b 67 cd ed dc a1 f3 fe 31 01 b1 13 1d 9e 8f cb e4 3d 19 d2 dc 93 31 5c 63 0a a6 ce 5a e2 02 52 cc 0a a8 b7 c1 66 a7 fc 30 3c 9e aa 1b 31 ad 67 67 87 6d 96 39 4f 5d 63 f6 b0 e2 3e 3e f0 68 9b 59 56 ef 69 3d 14 c2 8e db 30 3b 91 19 92 0d 41 1f 17 06 24 cd da ec 14 d8 3c cf 5c 0a 75 9b 6c 8f f7 c0 3d 77 9a 32 01 03 61 11 7d ff 6e 99 65 9e 93 42 3b 9c 0f c7 9d fb 58 b0 c9 0b 4d c3 0a 79 a7 73 61 e8 ac f7 18 ed d8 79 76 82 3c 3d 8f 97 61 75 87 9a 7b 96 c3 5e 86 b3 61 e1 b8 90 0d e1 c6 e3 ea 75 ae ec b9 a7 1e f7 b1 91 e4 d9 c5 66 c5 85 c7 c5 d6 ce 9d c0 b9 e7 4e 72 07 3a cf e3 42 28 db 64 7b bc 07 ee b9 d3 94 09 18 08 8b e8 fb 77 cb 2c f3 9c 14 da e1 7c 38 ee dc c7 82 4d 5e 68 9a 56 c0 95 b9 6a 48 08 10 f2 91 99 00 46 b3 e6 1d 63 67 Data Ascii: ?\},g1=1\cZRf0<1ggm9O]c>>hYVi=0;A$<\ul=w2a}neB;XMysayv<=au{^aufNr:B(d{w,\|8M^hVjHFcg
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: 4c 00 8b 0a 3b 98 80 69 4a da 3f ec 83 9f 9c 4a 5e 95 9f b9 dd a8 96 06 4a 71 29 70 bc 34 5e 14 f5 27 02 06 35 b8 17 7f b1 9b 75 2f 8b ec 3b a4 58 40 e9 7d f1 e0 68 22 8d 91 bc 99 3c ee f6 b3 99 8d 4b aa 95 8d ab 4b dc d7 f7 26 d6 3f 0f 08 e3 af f4 7e dc b5 7a 21 2d 2e 38 02 53 c2 22 a5 af a8 9b 87 87 f0 bd 25 96 45 fc 6b c3 4d 77 25 70 67 8b f9 1e c1 85 c1 45 a4 4d 5b f2 65 58 9b 8a 2b b4 1b c5 ba bf e2 dc 4f 0f b8 85 ac a2 e7 36 39 92 e3 50 9b a1 e4 6a fa 96 8d e8 9a c7 af 90 f1 9a 58 6e b3 41 d9 81 d8 c2 93 18 b2 fd 53 e9 75 4f 3c 18 32 71 9b 8a ea 83 6c 9b d5 f7 8a 46 d0 c6 14 06 6c 85 ac ac d7 c9 fa be 03 8b 47 9f e9 a2 03 4d 4e 24 7e e9 7c 80 9b 63 43 44 16 c1 b6 43 ba 48 25 1b b1 db 40 70 70 04 3b f3 85 84 da 54 4c 9c 48 82 58 bf df 0e 88 20 51 47 Data Ascii: L;iJ?J^Jq)p4^'5u/;X@}h"<KK&?~z!-.8S"%EkMw%pgEM[eX+O69PjXnASuO<2qlFlGMN$~\|cCDCH%@pp;TLHX QG
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: 7c 47 c9 2a 89 47 81 22 eb e0 a9 56 b1 60 1b 60 59 e3 03 32 89 99 3f f8 0e cf d6 7d 24 76 0e c0 90 91 82 94 ed c0 65 ec 4c f9 79 d1 39 4b 08 a3 28 d8 09 04 14 0d b5 49 fb 94 33 a3 6b b9 60 24 08 72 06 f5 f1 77 58 7b 96 bd 2c 1d 20 c4 60 0e cf 8c 83 97 c3 92 bc 1d a2 50 a8 53 12 18 a3 a8 4d 26 11 9d 29 62 0b 47 b2 20 83 a3 0d 7f d4 2d 03 2b 73 2c cf a6 c8 76 b5 19 f0 68 32 df 8d 7c f8 35 3c 30 2b 10 9c c4 8c b7 da 02 bf ed 20 41 99 7d 35 ed 4e 97 62 14 c1 de 64 2f 94 62 28 96 52 77 d2 dd 8c 14 8e dd 17 02 af f1 64 d0 42 e1 6e d8 da f2 fa c3 5e ca 6b 75 32 8f c7 0a 23 d1 31 4b 17 9d 55 86 ac 62 ac 24 d9 28 11 ed 91 99 3f 69 80 ba 0a c7 7d 6a d8 88 65 bc 6b d3 b2 90 72 41 1d 40 8e 72 1c 95 c8 ce a0 b2 d1 ca 44 f3 60 08 9e fd 3c 3a 71 cf 60 b0 b4 32 cb bf a3 Data Ascii: \|G*G"V``Y2?}$veLy9K(I3k`$rwX{, `PSM&)bG -+s,vh2\|5<0+ A}5Nbd/b(RwdBn^ku2#1KUb$(?i}jekrA@rD`<:q`2
2024-10-04 13:38:30 UTC	8000	IN	Data Raw: d4 bf cf 6a fe b6 ee 93 e0 84 fd 02 90 3a 75 83 3f 9a 35 1a b0 2d 4b 38 ad 98 f9 8d b9 ba 43 50 62 48 e0 c2 40 4e 48 aa 09 80 2c 61 38 95 4d 13 19 9b 34 d6 81 b9 b6 3f 59 bd 02 1b 6b 57 aa d2 36 73 bf 29 8a 44 6f f5 96 e1 08 79 85 a7 fb 12 4c 38 a7 f8 ff e2 22 15 18 88 bd b2 ed 50 69 43 85 5d eb e3 f6 92 d8 97 e6 33 d4 84 bf aa 4d 0f 02 a2 11 7e 09 3a cd e1 95 3c 03 95 50 f0 96 f2 4e ee 34 ed de ab c0 d4 c1 dd c5 5e 7a c4 be 28 c0 33 73 09 17 5d ab eb 02 29 aa 18 36 b3 9c 5c 63 c6 e7 0f 2b b0 fa 42 7c c0 74 e0 f5 c6 a2 89 c8 0a 6c 59 84 b8 a1 65 e0 78 42 fa 55 ed 7d a5 29 41 10 8a bb 90 5a f1 1d 59 16 9b 89 ce 41 08 ec b7 0d 9d 10 9c 48 a3 00 67 89 0f b1 66 6b cb 70 7a 07 86 82 28 3a 56 29 fd bc 3a c5 0f c4 22 6b ec 71 74 ed 62 f9 c8 ee 8c 18 0f f0 dd d7 Data Ascii: j:u?5-K8CPbH@NH,a8M4?YkW6s)DoyL8"PiC]3M~:<PN4^z(3s])6\c+B\|tlYexBU})AZYAHgfkpz(:V):"kqtb
2024-10-04 13:38:30 UTC	1829	IN	Data Raw: 73 ab b5 6e 2a a4 0e 60 66 3b 08 f9 5a 05 d6 ec 22 10 b3 c8 54 25 0b 83 a6 c7 0c ff be ba f6 0e 60 ce da 41 ad c5 be ff 29 9d 92 0a 54 bb d4 da ac 59 39 6e c7 d0 82 aa c9 02 1c 99 16 3d 1b f8 30 6b bc 55 cc 36 64 da 6e 84 f2 4c 7b 03 fb 30 e3 a7 74 bb 45 22 94 fa c9 77 69 5b 6c 77 60 9b 57 e0 c3 72 ce 53 7a 44 ed 1a 17 86 7b 70 00 4f 81 21 76 4d 25 8c 68 e4 ad cd d2 ec 6e 40 0b 95 38 15 94 13 e9 07 f8 a9 e5 c8 88 4a 7b 04 f9 6e ce fc 7f 99 f0 fe 04 cb 4e ce 4a 07 a1 24 68 9b d8 ee 84 80 7a 9e 50 ab 57 3e 99 8f c7 7d 73 f3 e4 fa 6d a3 13 f8 6e 4b e8 8e 51 25 b5 21 0e c4 85 3b fe 22 3e 5d d8 0f b5 9d c0 b9 8e e1 5f 91 4c 2d 55 37 31 3a 2f 47 2b 7c d9 b1 46 b4 b3 50 3b 37 35 29 27 79 3a 9e 4b d5 f5 f7 2e 94 6d fa 28 59 e9 2f 37 0c 22 ca c1 16 8d 21 b4 7a 6a Data Ascii: sn*`f;Z"T%`A)TY9n=0kU6dnL{0tE"wi[lw`WrSzD{pO!vM%hn@8J{nNJ$hzPW>}smnKQ%!;">]_L-U71:/G+\|FP;75)'y:K.m(Y/7"!zj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	60096	151.101.192.217	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	421	OUT	GET /video/1760416510-48ad8e7167934ac9ef9e2ffb0fc7a7ae0ce4d12b9a6108c2745f611d78a2d27d-d HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:38:30 UTC	547	IN	HTTP/1.1 200 OK Connection: close Content-Length: 76027 cache-control: max-age=2592000 content-type: image/jpeg etag: "d34c3811ba02c7b5a587cbf204c181c8" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 0 Date: Fri, 04 Oct 2024 13:38:30 GMT X-Served-By: cache-dfw-kdal2120029-DFW, cache-ewr-kewr1740068-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1728049110.473555,VS0,VE461 Vary: Accept
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 fe 98 00 01 65 56 00 00 01 61 e4 7f 37 7c 82 f3 25 31 9b 93 2e 8f 63 e8 fe 9f e8 7b 7a b4 89 02 01 71 31 0f 03 f1 bf 9c 40 84 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}8"eVa7\|%1.c{zq1@
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: 06 a9 2c 01 60 2a 2c fa df da 7d 00 03 97 f2 4f cf a8 a8 84 82 00 02 92 00 0a 8b 2a 0a 80 2b 20 05 40 05 55 58 54 41 10 94 aa 02 a2 a0 80 55 fd d8 00 00 02 c0 00 0b 03 cf fe 7c f8 5b 5e d6 44 73 78 3d 7d 45 c0 58 01 51 2f 53 f7 4f 7c 00 a7 c0 7e 3d 92 b0 42 41 00 02 a0 00 2a 2c a8 2a 2c aa a4 80 54 00 54 40 95 12 81 50 00 54 54 10 0a bf bb 00 00 00 58 00 01 60 79 df cf bf 0b a4 da c8 8e 6f 03 b7 aa 17 01 60 05 44 b4 fd 9f ee e4 00 f9 9f c4 3c c5 04 24 10 00 2a 00 02 a2 ca 82 a2 ca aa 48 05 40 05 44 09 51 28 22 00 01 51 50 40 2a fe ec 00 00 05 80 00 16 01 e7 7f 3e fc 36 96 99 4c 72 f8 5d 5d 45 80 58 00 05 bf 44 fd 67 a1 12 40 79 bf 8a 7c a2 88 12 08 00 15 04 24 05 45 85 45 45 95 09 aa 12 0a 82 ca 8a 88 4a a8 40 20 99 54 05 55 04 00 fe ea 00 00 05 80 00 16 Data Ascii: ,`,}O+ @UXTAU\|[^Dsx=}EXQ/SO\|~=BA,,TT@PTTX`yo`D<$H@DQ("QP@>6Lr]]EXDg@y\|$EEEJ@ TU
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: 4e ad f5 d7 6d 75 be 9a 69 6b c8 b2 c2 c9 42 50 09 48 20 42 27 c1 f9 3f 13 92 dd d5 f1 3b 3d 4f 53 c7 e1 f2 a9 a7 9d e6 75 7d 4f eb 5e a4 08 54 40 2a 2b 30 44 2a 2a 45 15 44 42 a2 10 29 11 11 50 a2 aa 8a c4 0a aa 85 51 14 45 6a a4 14 8f ea 10 01 60 00 16 00 05 81 c5 f8 4f e7 f7 9d 2e bd ef 3b 69 33 bf 4e db ed ae ba e9 a5 b4 d6 f2 2d 32 90 09 01 24 a1 00 78 df 01 c1 9e 1e 86 5e 35 3d 3d f6 db e7 79 7c f6 de 57 8d ea 7d f7 ed 50 2a 82 25 00 aa 05 50 2a 9a 95 56 21 31 02 a0 aa 20 85 62 10 84 21 54 2a 2b 05 10 ad 6b 11 05 63 fa 38 00 58 00 05 80 01 60 71 7e 13 f9 fd ed 7b 4d f4 b5 f5 bc df 6e 9d b6 db 5d b5 d3 5b 69 a5 ee 92 6c b0 02 50 2c 00 81 c7 f1 1f 13 97 57 9d ed d3 e6 67 ed b9 ba 67 c0 f2 23 d1 e6 f8 cf 0f d6 ee fe 85 fa b4 02 20 20 42 04 41 08 20 ac Data Ascii: NmuikBPH B'?;=OSu}O^T@+0DEDB)PQEj`O.;i3N-2$x^5==y\|W}P%PV!1 b!T+kc8X`q~{Mn][ilP,Wgg# BA
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: eb 6d 37 df 7d b5 d7 6d 34 d7 5b db 4b 4c 2c b2 c9 5d 02 c0 b0 2c 0e 9f 1f e7 fb fc 2f 47 d9 fa 9f 65 5f 1f c5 f3 b5 f3 7c 8f 0f c4 e0 8f 37 2c ab b7 f4 27 a6 54 00 04 00 a8 0a aa a8 09 10 21 51 08 15 15 10 85 44 20 52 11 9a 10 fd 78 16 00 16 00 00 01 60 9e 5f c2 3e 0e f7 bd ed 36 da fb 5e 74 df a3 7d 75 d7 6d 74 d7 5b 5e f6 9b 25 64 8b 0b 0b 00 b0 13 ef f9 9f 20 c7 d7 f6 7e 87 af 0c fc af 2b c9 9f 1f ce f9 df 1f 2a 70 65 8d 7a 7f a4 84 09 54 01 01 01 00 aa 22 12 84 82 10 2a 21 08 42 10 81 0a a0 82 15 55 55 20 fd 74 16 00 16 00 00 01 60 9e 5f c2 3e 0e f7 d2 d6 9b 6d 7d af 3a 6f d1 be ba eb b6 9a eb ad ed 7b 4d 92 b2 45 c4 8b 00 b0 1d 1f 9a 7d 1f d2 df e5 fe 8b ea 3b a3 0c 78 bc df 27 2f 33 87 c2 f9 7a 5f 9b cf a5 7a 7f a2 a0 02 a0 02 00 54 0a 95 00 05 44 Data Ascii: m7}m4[KL,],/Ge_\|7,'T!QD Rx`_>6^t}umt[^%d ~+pezT"!BUU t`_>m}:o{ME};x'/3z_zTD
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: 7e fe 0f e5 7e 67 db f4 d7 e2 7b 3c 0f 94 5f b7 f4 7f d5 40 a8 00 0a 80 a8 08 15 05 85 45 40 54 15 88 05 55 05 45 15 54 55 fa a9 19 5f 50 01 60 00 01 60 16 71 7e 19 f0 ba 5e d6 b4 eb 6d 36 d2 f7 db a3 6d b6 db 4d 34 db 4b db 42 cb 24 59 64 a4 16 4a 57 f9 ef cc 7f 3b e3 9e bf 7f fa e7 d3 db 8b 8f e5 7a 27 87 8f b7 e6 ff 00 2d fb 2a f0 79 1f 3f f1 79 63 df d3 e8 ff 00 42 7d 20 15 00 00 54 10 84 a1 02 a0 b0 a8 84 02 a0 aa a0 ac 40 2a 21 45 05 5f aa 95 f2 ad ea cc 80 2c 00 00 2c 02 ce 2f c3 3e 17 4d 26 d6 b6 96 d3 6d 2f 7d ba 36 db 6d 75 d3 4d b4 bd b4 2c b2 45 d2 2c 91 32 9e 1f 89 f8 6f 92 cb c2 ea cf 7e 8f ec 2f b0 d7 8f 8b c3 f9 ed f3 e4 ee f8 5f 8c ea e7 af 99 e5 f9 9c 76 76 77 7f 49 fa b0 20 42 60 00 2a 02 ab 2a 81 50 58 54 15 05 41 55 41 51 51 51 0a aa Data Ascii: ~~g{<_@E@TUETU_P``q~^m6mM4KB$YdJW;z'-y?ycB} T@!E_,,/>M&m/}6muM,E,2o~/_vvwI B`**PXTAUAQQQ
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: f1 be 57 e5 32 f4 7d bd 7d 0e ef 3a 9f 43 ea 3c fc 7a fa 38 ba 9c fe 85 b8 ba b7 5a c0 b3 8b f1 1f 80 d3 4b af 7b df 4d 35 bd f5 e9 df 5d 76 d7 4d 74 d2 d7 bc d8 b2 cb 25 36 f9 6f c9 fc af 37 ce af 8d ea 79 7c 9e 7f 7f 5f 83 ad 36 f5 fe 7e 7d 1f 5b c2 db 65 e4 ec ea c7 4e c9 f9 ff 00 9b e2 89 b6 5d 8c a2 9d 74 ad ba b2 c7 a7 6c bd 2f a5 fe bb ea 2a 95 40 54 01 0a 80 00 a8 54 0a 8a 82 10 a8 a8 a9 15 15 7f 39 61 db e5 44 fe fd fa df 3e b7 f9 4f 86 f0 b8 7d 7f b5 e5 ec f6 3c ed 7d df 6e fe 16 3e af 47 9f db 87 5f 6f 1e 1e 9e 96 d2 c0 b3 8b f1 1f 81 be 97 5b 4b df 4d 35 bd f5 e9 df 5d 76 d7 4d 74 d2 d7 bc d8 b2 cb 25 3c bf 89 f8 5c 1c 79 f9 59 62 f2 30 d3 d8 f0 a2 f6 f4 fc ca 75 7a 58 79 7d 7d dc 9d 14 ae 38 e5 cf 4c 72 aa ba c6 7d 75 c9 5e 89 8b 6d 96 7d 1a Data Ascii: W2}}:C<z8ZK{M5]vMt%6o7y\|_6~}[eN]tl/*@TT9aD>O}<}n>G_o[KM5]vMt%<\yYb0uzXy}}8Lr}u^m}
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: a2 a1 54 55 51 fc b5 6f 0f cf f3 bd 7f a0 9b 7d 17 bf e8 45 ba 36 c3 e6 3c 1f 4a 9e 4e bd df 31 c3 d3 d9 e9 fe cf e1 f9 5e 97 95 f1 1e 8f f4 7f db e7 d7 d5 6b 03 97 f1 3f cf b4 bd ad 6b cd f5 d7 5b 69 af 46 fb 69 ae da 69 ae 9a 5b 45 8b 2d 2e 4f c9 7e 57 93 e7 6e d7 e1 bd 0e 5f 3b 7d 7c 6f 7b ca c3 d0 9e 09 ea ec f3 ad af 47 7d f8 fc 9f 4b b6 f1 9d 54 ca b3 87 9b fb 17 f4 df f3 5f 1d 67 1f 3f 39 ec e9 89 26 49 11 21 12 80 84 56 8a 13 7e 8f e9 af 42 a2 c0 a8 84 02 a0 a8 2a 2a 0a 95 45 55 1f 84 5f e6 3c 5e 6f 53 b7 1a fb 3f 4f d9 e3 75 fa 14 e0 f9 8f 37 b7 4c bd 2e 3f 8e e6 e9 eb f7 3f 67 f9 ae 7e 07 cb 7b 1f d2 1f 41 7f 5b a2 d6 07 2f e2 7f 9f 5e f7 b5 af 37 d7 5d 66 fb 74 ed be 9a ed ad f5 d2 f7 bc ac b2 c8 fc 3f 0f 9f c3 9b e7 2d d5 cb f2 9d de 7e 5d 5e Data Ascii: TUQo}E6<JN1^k?k[iFii[E-.O~Wn_;}\|o{G}KT_g?9&I!V~B**EU_<^oS?Ou7L.??g~{A[/^7]ft?-~]^
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: ef fd 3b f0 df 9e 7b 3f a0 6b cb cd d9 83 ab f1 4f 7f dc 50 a4 92 84 a5 09 05 95 42 8b 74 7f 46 7d 35 01 28 01 50 54 54 15 05 41 50 56 2b 50 fe 6b e3 e4 e3 e5 e5 c3 0c b3 c6 94 8a 88 40 58 b4 67 db 5e 2d fd 2e 9e af d2 3f ac be 82 6c 0e 4f c3 fe 02 f7 b5 ad 6b df 5d 75 bd f5 e8 df 6d 75 db 4d 75 be 97 bd 89 9f be f4 b9 b9 69 cf c7 e6 f9 7f 9c 7e 29 f1 dc b9 67 94 57 8b aa f1 b7 5d 39 e3 6e 9d 62 b4 74 f4 57 cc d1 e7 df a7 bb b3 0f 9e f5 ff 00 a4 7e 0b e7 7e 73 7d 2b 8e 7c f4 ea ea fa 1b 95 42 16 54 58 01 64 44 45 17 f6 ff 00 a6 37 a8 25 00 2a 0a 8a 82 a0 a8 2a 2a 45 62 07 f3 5f 1f 27 1f 2f 3f 2e 19 65 9e 74 54 88 54 59 65 ab 4e da f0 ef e9 f4 76 7e 91 fd 67 ef 4d 81 c9 f8 7f c0 5e f6 b5 ad 7b eb ae b7 be bd 1b ed ae da e9 ae b7 d2 f7 b2 5e ef d9 e5 cf cf Data Ascii: ;{?kOPBtF}5(PTTAPV+Pk@Xg^-.?lOk]umuMui~)gW]9nbtW~~s}+\|BTXdDE7%***Eb_'/?.etTTYeNv~gM^{^
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: 5a 5e d6 d2 fa 6b ae b7 d3 6d fa 35 d7 6d f4 d3 5d 74 be bf 45 f6 58 e5 11 11 9e 5b 67 94 65 11 4a e4 a4 65 1e 5f 9d e5 f2 5f 96 9e 67 35 1c 1b eb 97 a3 f4 9c 7e c7 b5 ef 5b b2 fb 6f f0 7f cd 91 4a b2 ce 94 65 9c 44 40 8a 95 96 b3 40 48 84 af 55 63 ef ff 00 a1 62 04 44 44 21 22 89 55 0a 0a 11 15 80 67 10 aa 16 66 cd 48 a2 af e7 ee 5e 5e 4e 7e 6c 39 f1 cf 3a 67 11 52 10 26 6d 2a 6f d1 c5 cd dd e9 74 77 7e bb fd 43 eb 49 23 8f f0 9f cf 2d 37 d2 6d 6d 75 df 5b e9 be fb 6d b6 ba eb ae bb 5e fa fe 8d eb 72 e3 11 5a 44 33 ae 99 65 39 2b 33 35 ac b8 b5 5a 74 86 d6 db 9b c8 cf 4e 9e 9d dc ba ef be 9f 8d fe 21 15 86 78 d2 91 95 2b 05 45 61 31 2b 00 02 c5 62 7f 6c fd 42 0a c4 45 62 55 15 43 38 a0 cc 8a a1 55 50 2a 89 85 04 44 2b 10 87 e0 fc bc 9c 9c fc fc b8 65 9e Data Ascii: Z^km5m]tEX[geJe__g5~[oJeD@@HUcbDD!"UgfH^^N~l9:gR&motw~CI#-7mmu[m^rZD3e9+35ZtN!x+Ea1+blBEbUC8UPD+e
2024-10-04 13:38:30 UTC	1379	IN	Data Raw: 6a 09 4c 67 d1 af 2e 5d fd db fa bf a4 7e d3 eb 74 4c b9 79 7c 2e 1f 37 ea 2d 4a 42 16 59 64 a6 f3 6b a6 f6 27 e9 b1 f9 4f aa f6 bb 77 9c ad 4c a9 0c f1 e6 e1 e2 f3 78 bc cf 2f cd f3 bc df 33 87 8f 9b 28 b6 fd 1a 5b d5 fa 8d 95 c2 be 7f 8f c9 5f a4 f0 79 29 8e 14 ac 5b 3e 7c a1 11 2a 44 c5 29 5c ea 27 6d 14 52 95 52 09 bf 6f ea bf 45 e8 f7 f7 76 f4 a2 b5 ce 11 48 a5 6a aa 2a 50 15 55 08 05 52 21 08 51 58 85 5f 8b 73 73 72 f3 f3 e1 8e 59 e5 4a 22 22 08 09 4c 67 d1 af 2e 7d fd db 7a 7f a4 fe d7 eb 69 1b b3 e4 f3 fc 2e 0e cf a6 e7 ad 20 22 b6 93 5d 66 66 29 37 8e 7d 36 f3 78 3d 1e ed 6d 4c e5 34 d2 dc f9 f1 f9 de 67 07 3f 1f 27 37 27 8f d7 d1 df 6d a9 85 7d 17 27 0f 07 67 d9 7d 6f 9b e9 f6 79 dc 0c 3f 2e e6 c7 9f 0a 42 d3 c9 9d 01 0c e2 94 ae 69 44 eb 74 56 Data Ascii: jLg.]~tLy\|.7-JBYdk'OwLx/3([_y)[>\|D)\'mRRoEvHjPUR!QX_ssrYJ""Lg.}zi. "]ff)7}6x=mL4g?'7'm}'g}oy?.BiDtV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	60102	15.235.45.220	443	3748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:38:30 UTC	728	OUT	GET /wp-content/uploads/2024/05/IconoCaja-3.svg HTTP/1.1 Host: www.sesamehr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sesamehr.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: country_code=us; _uetsid=edbe8ac0825511efb48d8b83552cd042; _uetvid=edbfc7b0825511efb3229f4dc3a2e258
2024-10-04 13:38:30 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:38:30 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 06:41:52 GMT ETag: "41e-6178703d57151" Accept-Ranges: bytes Content-Length: 1054 X-Frame-Options: Sameorigin X-Artvisual-Server: webserver02.sesametime.com Content-Type: image/svg+xml
2024-10-04 13:38:30 UTC	1054	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 32 32 4c 31 36 20 31 36 4c 32 32 20 31 34 4c 32 30 20 32 30 4c 31 34 20 32 32 5a 22 20 73 74 72 6f 6b 65 3d 22 23 41 45 41 39 46 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 Data Ascii: <?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36" fill="none"><path d="M14 22L16 16L22 14L20 20L14 22Z" stroke="#AEA9FF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="rou

Target ID:	0
Start time:	09:38:06
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:38:10
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=2208,i,7160991135955468368,2434131914208012291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:38:12
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://getsesametime.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	09:38:33
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5212 --field-trial-handle=2208,i,7160991135955468368,2434131914208012291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.sesamehr.com/signup/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WWBXHVT
Source: https://www.sesamehr.com/signup/	HTTP Parser: Iframe src: https://app.hubspot.com/feedback-web-fetcher
Source: https://www.sesamehr.com/signup/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WWBXHVT
Source: https://www.sesamehr.com/signup/	HTTP Parser: Iframe src: https://app.hubspot.com/feedback-web-fetcher
Source: https://www.sesamehr.com/signup/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WWBXHVT

Source: https://www.sesamehr.com/	HTTP Parser: No favicon
Source: https://www.sesamehr.com/	HTTP Parser: No favicon
Source: https://www.sesamehr.com/	HTTP Parser: No favicon
Source: https://www.sesamehr.com/	HTTP Parser: No favicon
Source: https://www.sesamehr.com/	HTTP Parser: No favicon

Source: https://www.sesamehr.com/signup/	HTTP Parser: No <meta name="author".. found
Source: https://www.sesamehr.com/signup/	HTTP Parser: No <meta name="author".. found
Source: https://www.sesamehr.com/signup/	HTTP Parser: No <meta name="author".. found

Source: https://www.sesamehr.com/signup/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.sesamehr.com/signup/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.sesamehr.com/signup/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.5:60179 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:60063 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: <a href="https://www.facebook.com/sesamehr" target="_blank" rel="nofollow"> equals www.facebook.com (Facebook)
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UCDkKd1M7DOqcwHDzmpsKCCw" target="_blank" rel="nofollow"> equals www.youtube.com (Youtube)
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: <li id="menu-item-24" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-24"><a href="https://www.facebook.com/wordpress"><span class="screen-reader-text">Facebook</span><svg class="svg-icon" aria-hidden="true" role="img" focusable="false" width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path d="M12 2C6.5 2 2 6.5 2 12c0 5 3.7 9.1 8.4 9.9v-7H7.9V12h2.5V9.8c0-2.5 1.5-3.9 3.8-3.9 1.1 0 2.2.2 2.2.2v2.5h-1.3c-1.2 0-1.6.8-1.6 1.6V12h2.8l-.4 2.9h-2.3v7C18.3 21.1 22 17 22 12c0-5.5-4.5-10-10-10z"></path></svg></a></li> equals www.facebook.com (Facebook)
Source: chromecache_468.2.dr, chromecache_449.2.dr	String found in binary or memory: <li id="menu-item-25" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-25"><a href="https://twitter.com/wordpress"><span class="screen-reader-text">Twitter</span><svg class="svg-icon" aria-hidden="true" role="img" focusable="false" width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path d="M22.23,5.924c-0.736,0.326-1.527,0.547-2.357,0.646c0.847-0.508,1.498-1.312,1.804-2.27 c-0.793,0.47-1.671,0.812-2.606,0.996C18.324,4.498,17.257,4,16.077,4c-2.266,0-4.103,1.837-4.103,4.103 c0,0.322,0.036,0.635,0.106,0.935C8.67,8.867,5.647,7.234,3.623,4.751C3.27,5.357,3.067,6.062,3.067,6.814 c0,1.424,0.724,2.679,1.825,3.415c-0.673-0.021-1.305-0.206-1.859-0.513c0,0.017,0,0.034,0,0.052c0,1.988,1.414,3.647,3.292,4.023 c-0.344,0.094-0.707,0.144-1.081,0.144c-0.264,0-0.521-0.026-0.772-0.074c0.522,1.63,2.038,2.816,3.833,2.85 c-1.404,1.1-3.174,1.756-5.096,1.756c-0.331,0-0.658-0.019-0.979-0.057c1.816,1.164,3.973,1.843,6.29,1.843 c7.547,0,11.675-6.252,11.675-11.675c0-0.178-0.004-0.355-0.012-0.531C20.985,7.47,21.68,6.747,22.23,5.924z"></path></svg></a></li> equals www.twitter.com (Twitter)
Source: chromecache_427.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),ka=P.length,na=0;na<ka;na++)if(!v&&c(P[na],H.He)){oJ("https://www.youtube.com/iframe_api");v=!0;break}})}}else F(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_353.2.dr, chromecache_334.2.dr, chromecache_505.2.dr, chromecache_382.2.dr, chromecache_370.2.dr, chromecache_291.2.dr, chromecache_530.2.dr, chromecache_427.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr, chromecache_269.2.dr, chromecache_505.2.dr, chromecache_321.2.dr, chromecache_296.2.dr, chromecache_255.2.dr, chromecache_291.2.dr, chromecache_530.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_353.2.dr, chromecache_334.2.dr, chromecache_505.2.dr, chromecache_382.2.dr, chromecache_291.2.dr, chromecache_530.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_504.2.dr, chromecache_400.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr, chromecache_413.2.dr, chromecache_300.2.dr, chromecache_321.2.dr, chromecache_296.2.dr, chromecache_255.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_360.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_360.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_360.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_334.2.dr, chromecache_269.2.dr, chromecache_505.2.dr, chromecache_321.2.dr, chromecache_370.2.dr, chromecache_296.2.dr, chromecache_255.2.dr, chromecache_291.2.dr, chromecache_530.2.dr, chromecache_427.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: getsesametime.com
Source: global traffic	DNS traffic detected: DNS query: sesamehr.com
Source: global traffic	DNS traffic detected: DNS query: www.sesamehr.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: player.vimeo.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: cmp.inmobi.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: fresnel.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: i.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: f.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: vod-adaptive-ak.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: cdn.firstpromoter.com
Source: global traffic	DNS traffic detected: DNS query: js.hubspotfeedback.com
Source: global traffic	DNS traffic detected: DNS query: js.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.usemessages.com
Source: global traffic	DNS traffic detected: DNS query: cta-service-cms2.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: api.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: vimeo.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: js.hsadspixel.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: tracker.metricool.com
Source: global traffic	DNS traffic detected: DNS query: cdn.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: perf-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: api.hubapi.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: fresnel-events.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: api.cmp.inmobi.com
Source: global traffic	DNS traffic detected: DNS query: www.sesamehr.es
Source: global traffic	DNS traffic detected: DNS query: app.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: static.hsappstatic.net
Source: global traffic	DNS traffic detected: DNS query: feedback.hubapi.com
Source: global traffic	DNS traffic detected: DNS query: capig.stape.cloud
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: cdn.neverbounce.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: assets.sesamehr.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: api.neverbounce.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://getsesametime.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Windows Analysis Report
https://getsesametime.com/