Windows Analysis Report
https://app.hellosign.com/?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email

Overview

General Information

Sample URL:	https://app.hellosign.com/?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email
Analysis ID:	1529358
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden javascript code

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Signatures

HTML page contains hidden javascript code

Source: https://app.hellosign.com/account/logIn

HTTP Parser: Base64 decoded: '%perf_eng_2024_05_24_udcl_ssa_exporter

Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon
Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon
Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon
Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon
Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.69:443 -> 192.168.2.17:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.150:443 -> 192.168.2.17:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49953 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 24MB later: 37MB

HTTP GET or POST without a user agent

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69

Source: global traffic	HTTP traffic detected: GET /?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email HTTP/1.1Host: app.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/logIn HTTP/1.1Host: app.hellosign.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=jEFhmIIk6FFOY2gu2IG5JZB1XrnHVD387kEOmsJIawcwNVeWDOXCFApXT4bDL+70qOQ0ANpHbW8JWGIvkAdmecGGdCWiysoj9Zyqyg8fzL0EhC0+U1iefkUTGn6z; AWSALBCORS=jEFhmIIk6FFOY2gu2IG5JZB1XrnHVD387kEOmsJIawcwNVeWDOXCFApXT4bDL+70qOQ0ANpHbW8JWGIvkAdmecGGdCWiysoj9Zyqyg8fzL0EhC0+U1iefkUTGn6z; hf_user=9897faf81d45a8d06c23c4d829cb0ba67a43ee7bcc6a058670b86b4e34d1e945:33020a0152a6282054013e2c36d15d0d3fabd5306d7a09791fa40088299b5af5; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/jquery3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/common.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/hellospa.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/hellospa.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_client,ux_analytics,hellosign_marketing_utils,privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/jquery3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /shim.js?id=B0gYx8LpZM HTTP/1.1Host: cdn.userleap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/hellospa.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Aapp.hellosign.com/marketing_tracker_client%2Cux_analytics%2Chellosign_marketing_utils%2Cprivacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en
Source: global traffic	HTTP traffic detected: GET /shim.js?id=B0gYx8LpZM HTTP/1.1Host: cdn.userleap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Aapp.hellosign.com/marketing_tracker_client%2Cux_analytics%2Chellosign_marketing_utils%2Cprivacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wn7dSyD+dWTwNUC&MD=EMzMpBk2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/common.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/chunks/60df0b9d561d5f04918c.style.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/chunks/3453b8ece3999bf2c9fd.style.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/0.feab1f558c13bc830587.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/vendors~hellospa-jointeampage~hellospa-signinpage.6ae9d01cd8244e6160f3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/vendors~hellospa-signinpage.1261f4b9ffa02b66110d.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/6.9b0c9ddafe30cdfa6216.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/hellospa-signinpage.9b340df77dda5d06b1c9.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/vendors~hellospa-jointeampage~hellospa-signinpage.6ae9d01cd8244e6160f3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/0.feab1f558c13bc830587.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/vendors~hellospa-signinpage.1261f4b9ffa02b66110d.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /account/logIn HTTP/1.1Host: marketing.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hs_consent_banner_enabled=true; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fapp.hellosign.com&sandbox_redirect=false&uri_for_logging=app.hellosign.com&should_show_floating_button=undefined&should_auto_open_options=undefined&locale_override=en&csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&redesign_flag=true&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/6.9b0c9ddafe30cdfa6216.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fapp.hellosign.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=app.hellosign.com&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/ebee194a9b773f166dc16096f8614aaa.woff2 HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/892a2f2/build/hellospa.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/93b6f18ec99bcb7c3fa7ea570a75e240.woff2 HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/892a2f2/build/hellospa.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/dfc5e24cbc1b134e0c00c61e84ec999a.woff2 HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/892a2f2/build/hellospa.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.hellosign.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.hellosign.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=92376b544731460facfe6c0710fd5c9a&time=1728419497 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fapp.hellosign.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=app.hellosign.com&width=1280Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1728419499992 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://marketing.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=92376b544731460facfe6c0710fd5c9a&time=1728419497 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1728419499992 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=02554810231475605794528423177741457110
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: dropbox.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=02554810231475605794528423177741457110
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZwWWrgAAAMR-IwO- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=02554810231475605794528423177741457110
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZwWWrgAAAMR-IwO- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=02554810231475605794528423177741457110; dpm=02554810231475605794528423177741457110
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /892a2f2/images/dropbox-sign-favicon.ico HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-08T20:31:42.919Z","expireDate":"2025-04-08T20:31:42.919Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20005%7CMCMID%7C02353103420033588694472192912446809280%7CMCAAMLH-1729024300%7C6%7CMCAAMB-1729024300%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728426700s%7CNONE%7CMCSYNCSOP%7C411-20012%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/B0gYx8LpZM/config HTTP/1.1Host: api.sprig.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-ul-visitor-id: 4dc7fcc2-39cd-44e5-87ff-bf85ac277af5sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-ul-installation-method: web-snippetsprig-modules: replayx-ul-sdk-version: 2.31.4x-ul-environment-id: B0gYx8LpZMuserleap-platform: websec-ch-ua-platform: "Windows"Accept: /Origin: https://app.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /892a2f2/images/dropbox-sign-favicon.ico HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-08T20:31:42.919Z","expireDate":"2025-04-08T20:31:42.919Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20005%7CMCMID%7C02353103420033588694472192912446809280%7CMCAAMLH-1729024300%7C6%7CMCAAMB-1729024300%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728426700s%7CNONE%7CMCSYNCSOP%7C411-20012%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /uxa/4a39e5c4777d0.js HTTP/1.1Host: t.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/B0gYx8LpZM/config HTTP/1.1Host: api.sprig.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-5MZFBWHBBE&gacid=592317608.1728419507&gtm=45je4a20v9139038462za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=2&tag_exp=101671035~101747727&z=323622524 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: www.knotch-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /uxa/4a39e5c4777d0.js HTTP/1.1Host: t.contentsquare.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: www.knotch-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: configs.knotch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://marketing.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zi-tag.js HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /zi-tag.js HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: configs.knotch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"Content-Type: application/jsonsec-ch-ua-mobile: ?0Authorization: Bearer 3a903e78361680113288User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36visited_url: https://marketing.hellosign.com/account/logInAccept: /Origin: https://marketing.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/64d3cebeb218e589c3b63a6d/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/javascriptvisited-url: https://marketing.hellosign.com/account/logIn_vtok: OC40Ni4xMjMuMzM=_zitok: e0b044f89651035df8341728419512sec-ch-ua-platform: "Windows"Accept: /Origin: https://marketing.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.hellosign.com/account/logInAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/64d3cebeb218e589c3b63a6d/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=JZ95Y7ybiHz4yHSwm3P74W7SZS0OkZZ2LmxHwRBFQFs-1728419514-1.0.1.1-yZiSMfrTvF45MZsAmvr3mTcrw387SQUWJYCNfxIc9.izKLVma1K0Rj0y7mTT4c.LAPMxuvQsDw5t13usFZc5XA; _cfuvid=.qHzdAhh01jxyF.gjlhoDobZloooEoivhTbTmKDB544-1728419514861-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAe%2Bnoz%2BvTmK6WKy7GfWt1e6TcxV6KXKxKg71isxzbo3AbMLsfTvG3lDEJt/3ck7UVEVKhxvEdbQqv8VgbNvbH1ooslWNwsLWEM7d4vMVymgJV3Jro23Dl5nfCcmF41KLvVCcQLwM7tpOpy%2BYO4EIZLyvObN1NEJZFJfzZFpHfpQlhkCqiNAJjvepREOte6ktedrxUfGOKG9jGyMMlvn08S98jo%2BRjedwrx%2BO4JhADzr9UMGGvFNpt7Lcpz3OJQY3kMbj6FxqFLwriRcIvuAtMAg%2BZP6L5jQBlN8lrXbj6WslsRLXI74X3TsgGwMk3UvuudsmZ/JzOaT4A051%2BvtDQHkQZgAAEDO46WasCCNkn8esTXVjZICwAa8plsGIBAfHbRt3N80qISSiVuvh1f7LasL4A2i9eWgZ59OKbyzZ05lOeQIHBBycuKi0gaMclMdc57AmOO3ZRntYboTcNDV1JC8TyHKety/9LnOQgJVvHAEdf0kTFHLw5ETznxsT%2BRsR/FzdOoet/5QtR4cB2FEEZZzYCpb/DXH%2BynlfucGA2jJemGFK%2BzxnoqCpAGAj4Onvwh9dbjkbpG6wtfK7NT1EEc28LFnnS2K6B9JQfczvAiWGKpVih24JoT5sJDKpY2vhFONQBDqZyhho16Zsl6/olRJKn0C73j/SdsAEwDqNsYCyw36d3HnHLXUJ2Ox49jS0tvT%2B7dvxmdf6K8DW5qsW6wCW0wdxtv8R/2Op9f%2BDuEpvy42A0MXeOA2dfEMihIR0R8fE58IK%2BzFP3FfsWf/Bc0lVttGzyzuKQNDfYoKvDICSxdQPMrwPeDpWw7Gtgx3C35tD7xV32DYrr/v6BM3qMJ6Gmc/BmlGIrU0xQy5zT34czGKzLnWrBsOdS3QR%2Bj9XiUhGpjcoSq5FMyRGf1hlKNKn4WXLwPM4DMMBEmlK37YJq7sq0bdH/tcB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1728419518User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 951DA8822C74415EB2779B61DF277AFFX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wn7dSyD+dWTwNUC&MD=EMzMpBk2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs

Source: chromecache_279.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_268.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=yA(a,c,e);T(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return T(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},BA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_225.1.dr, chromecache_215.1.dr, chromecache_279.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_266.1.dr, chromecache_278.1.dr, chromecache_211.1.dr, chromecache_177.1.dr, chromecache_277.1.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_268.1.dr	String found in binary or memory: return b}QC.F="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)
Source: chromecache_279.1.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)
Source: chromecache_268.1.dr	String found in binary or memory: var eC=function(a,b,c,d,e){var f=Wz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Wz("fsl","nv.ids",[]):Wz("fsl","ids",[]);if(!g.length)return!0;var k=aA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);T(121);if(m==="https://www.facebook.com/tr/")return T(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Jy(k,Ly(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: app.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: cdn.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cdn.userleap.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: marketing.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: dropbox.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: api.sprig.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: t.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.knotch-cdn.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: frontdoor.knotch.it
Source: global traffic	DNS traffic detected: DNS query: configs.knotch.com
Source: global traffic	DNS traffic detected: DNS query: js.zi-scripts.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com

Source: unknown

HTTP traffic detected: POST /api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveContent-Length: 469sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://app.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:36 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 095b177886a74f7fa17cff8e1310a3f1Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:37 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 62b9ec0d32f240acb4c19d7a282072b8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:41 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f03c29f4482f4261be3f8bc957d65ce6Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:41 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 16df2c98c15d4e33b92cf637db3f3900Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:46 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 8edec3ca81e342e9a469bb71191f541aConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:46 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4ec2effb2c7044b4b42943c072bfa9ffConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:48 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 31226f9f7a094e12ba3ee728912ffc96Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:49 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 57906c8df6a146df870f7b3a0fb2b730Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:51 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 6292365a551e43a4a3471f28c4d2c7ecConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:32:05 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 47dd4efbea4f438da367de084d54df97Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:32:35 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d2b96c09192a465d9988736da1f4ad00Connection: close

Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: http://flesler.blogspot.com
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: http://flesler.blogspot.com/2007/10/jqueryscrollto.html
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_290.1.dr, chromecache_269.1.dr, chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_335.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_277.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_189.1.dr	String found in binary or memory: https://app.hellosign.com/
Source: chromecache_189.1.dr	String found in binary or memory: https://app.hellosign.com/home/manage
Source: chromecache_244.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC08f3807101814ef48bb6f95ad6702da
Source: chromecache_187.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC2d0031be7543428c80ef3ff1bf400f6
Source: chromecache_233.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC38e3748e11e44fe5908c1b3fb654828
Source: chromecache_298.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC528b57cee6474d20b34a73ab2ba482d
Source: chromecache_272.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC7803d2740f23433baf82de389992c0c
Source: chromecache_213.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC8f70d59289c2485499bbbc1b9310625
Source: chromecache_251.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCb982e5a308b64140afff6424f02e6a6
Source: chromecache_321.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCc3eabeac283e44618e4d03f3960056b
Source: chromecache_316.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCe4009e5293e74815aab317b742d5185
Source: chromecache_287.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCf6fb805ce11e4e83a686becbcaa1e0f
Source: chromecache_249.1.dr, chromecache_221.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/launch-89f34743f412.js
Source: chromecache_225.1.dr, chromecache_215.1.dr, chromecache_274.1.dr, chromecache_279.1.dr, chromecache_268.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_266.1.dr, chromecache_329.1.dr, chromecache_278.1.dr, chromecache_211.1.dr, chromecache_177.1.dr, chromecache_277.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/css/../build/hellospa.css
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/images/dropbox-sign-favicon.ico
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/images/icons/hs/apple-touch-icon.png
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/js/../build/common.js
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/js/../build/hellospa.js
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/js/../build/jquery3.js
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.userleap.com/shim.js
Source: chromecache_333.1.dr, chromecache_187.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/id-id/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/ja-jp/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/ko-kr/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/nb-no/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/ru-ru/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/th-th/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/zh-cn/
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_269.1.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_296.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Taviraj:regular
Source: chromecache_296.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahcZv8Cj3ylylTXzTOYrUtFw.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahcZv8Cj3ylylTXzTOcrUtFw.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahcZv8Cj3ylylTXzTOkrUg.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahcZv8Cj3ylylTXzTP0rUtFw.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahccv8Cj3ylylTXzRBoIR-5RgA.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahccv8Cj3ylylTXzRBoIR-BRgHS5.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahccv8Cj3ylylTXzRBoIR-FRgHS5.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahccv8Cj3ylylTXzRBoIR_pRgHS5.woff2)
Source: chromecache_227.1.dr, chromecache_251.1.dr	String found in binary or memory: https://ga.clearbit.com/v1/ga.js?authorization=pk_94abb29bd783b4657c3b3b489f932413
Source: chromecache_325.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_325.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.29.1/LICENSE
Source: chromecache_277.1.dr	String found in binary or memory: https://google.com
Source: chromecache_277.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://help.dropbox.com/es-es/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://help.dropbox.com/fr-fr/
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_277.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_225.1.dr, chromecache_215.1.dr, chromecache_274.1.dr, chromecache_279.1.dr, chromecache_268.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_266.1.dr, chromecache_329.1.dr, chromecache_278.1.dr, chromecache_211.1.dr, chromecache_177.1.dr, chromecache_277.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_284.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_215.1.dr, chromecache_266.1.dr, chromecache_177.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_247.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_260.1.dr, chromecache_272.1.dr	String found in binary or memory: https://t.contentsquare.net/uxa/4a39e5c4777d0.js
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_225.1.dr, chromecache_215.1.dr, chromecache_274.1.dr, chromecache_279.1.dr, chromecache_268.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_266.1.dr, chromecache_329.1.dr, chromecache_278.1.dr, chromecache_211.1.dr, chromecache_177.1.dr, chromecache_277.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_234.1.dr	String found in binary or memory: https://ws.zoominfo.com
Source: chromecache_296.1.dr	String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_client
Source: chromecache_241.1.dr	String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_service
Source: chromecache_189.1.dr	String found in binary or memory: https://www.dropbox.com/signatures?
Source: chromecache_225.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_278.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_277.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_277.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_277.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_279.1.dr, chromecache_268.1.dr, chromecache_211.1.dr, chromecache_277.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_279.1.dr, chromecache_268.1.dr, chromecache_211.1.dr, chromecache_277.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_231.1.dr, chromecache_244.1.dr	String found in binary or memory: https://www.knotch-cdn.com/ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2
Source: chromecache_215.1.dr, chromecache_266.1.dr, chromecache_177.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.69:443 -> 192.168.2.17:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.150:443 -> 192.168.2.17:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49953 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@19/260@90/29

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2000,i,17114361026728067811,1662563053655598962,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.hellosign.com/?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2000,i,17114361026728067811,1662563053655598962,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.198.52.31	unknown	United States	14618	AMAZON-AESUS	false
3.161.82.95	d3aqntjehoyiyc.cloudfront.net	United States	16509	AMAZON-02US	false
35.171.206.145	frontdoor.knotch.it	United States	14618	AMAZON-AESUS	false
3.161.82.101	d3d564pv0p4759.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.185.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.117.43	ws.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
34.249.181.141	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.37.212	js.zi-scripts.com	United States	13335	CLOUDFLARENETUS	false
74.125.206.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.222.236.63	configs.knotch.com	United States	16509	AMAZON-02US	false
52.222.214.107	unknown	United States	16509	AMAZON-02US	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
65.9.66.79	marketing.hellosign.com	United States	16509	AMAZON-02US	false
99.80.175.1	unknown	United States	16509	AMAZON-02US	false
162.125.66.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
18.244.18.53	t.contentsquare.net	United States	16509	AMAZON-02US	false
3.227.48.248	app.hellosign.com	United States	14618	AMAZON-AESUS	false
52.49.114.115	unknown	United States	16509	AMAZON-02US	false
3.161.82.114	unknown	United States	16509	AMAZON-02US	false
184.72.105.205	api.sprig.com	United States	14618	AMAZON-AESUS	false
104.16.118.43	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.174	analytics.google.com	United States	15169	GOOGLEUS	false
162.125.1.20	d-edge.v.dropbox.com	United States	19679	DROPBOXUS	false
108.156.60.35	unknown	United States	16509	AMAZON-02US	false
52.222.214.118	cdn.userleap.com	United States	16509	AMAZON-02US	false
18.244.18.60	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.17

Contacted Domains

Name	IP	Active
js.zi-scripts.com	104.18.37.212	true
ws.zoominfo.com	104.16.117.43	true
api.sprig.com	184.72.105.205	true
app.hellosign.com	3.227.48.248	true
stats.g.doubleclick.net	74.125.206.154	true
marketing.hellosign.com	65.9.66.79	true
d3aqntjehoyiyc.cloudfront.net	3.161.82.95	true
configs.knotch.com	52.222.236.63	true
scontent.xx.fbcdn.net	157.240.252.13	true
cdn.userleap.com	52.222.214.118	true
d3d564pv0p4759.cloudfront.net	3.161.82.101	true
frontdoor.knotch.it	35.171.206.145	true
www-env.dropbox-dns.com	162.125.66.18	true
d-edge.v.dropbox.com	162.125.1.20	true
www.google.com	216.58.206.68	true
analytics.google.com	142.250.185.174	true
td.doubleclick.net	142.250.185.226	true
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	34.249.181.141	true
t.contentsquare.net	18.244.18.53	true
cfl.dropboxstatic.com	unknown	unknown
cm.everesttech.net	unknown	unknown
dropbox.demdex.net	unknown	unknown
www.knotch-cdn.com	unknown	unknown
d.dropbox.com	unknown	unknown
www.dropbox.com	unknown	unknown
dpm.demdex.net	unknown	unknown
cdn.hellosign.com	unknown	unknown
assets.adobedtm.com	unknown	unknown
www.linkedin.com	unknown	unknown
px.ads.linkedin.com	unknown	unknown
connect.facebook.net	unknown	unknown
snap.licdn.com	unknown	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.knotch-cdn.com/ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2	false		unknown
https://cdn.hellosign.com/892a2f2/build/93b6f18ec99bcb7c3fa7ea570a75e240.woff2	false		unknown
https://www.dropbox.com/log/ux_analytics	false		unknown
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	false	URL Reputation: safe	unknown
https://www.dropbox.com/page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=92376b544731460facfe6c0710fd5c9a&time=1728419497	false		unknown
https://cdn.hellosign.com/892a2f2/build/vendors~hellospa-jointeampage~hellospa-signinpage.6ae9d01cd8244e6160f3.js	false		unknown
https://connect.facebook.net/en_US/fbevents.js	false	URL Reputation: safe	unknown
https://cdn.hellosign.com/892a2f2/build/hellospa.css	false		unknown
https://www.dropbox.com/ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fapp.hellosign.com&sandbox_redirect=false&uri_for_logging=app.hellosign.com&should_show_floating_button=undefined&should_auto_open_options=undefined&locale_override=en&csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&redesign_flag=true&width=1280	false		unknown
https://ws.zoominfo.com/pixel/64d3cebeb218e589c3b63a6d/?iszitag=true	false		unknown
https://dropbox.demdex.net/dest5.html?d_nsid=0	false		unknown
https://www.dropbox.com/pithos/host%3Amarketing.hellosign.com/marketing_tracker_service	false		unknown
https://cdn.hellosign.com/892a2f2/build/dfc5e24cbc1b134e0c00c61e84ec999a.woff2	false		unknown
https://www.dropbox.com/pithos/marketing_tracker_client,ux_analytics,hellosign_marketing_utils,privacy_consent	false		unknown
https://cdn.hellosign.com/892a2f2/build/6.9b0c9ddafe30cdfa6216.js	false		unknown
https://www.dropbox.com/pithos/host%3Aapp.hellosign.com/marketing_tracker_client%2Cux_analytics%2Chellosign_marketing_utils%2Cprivacy_consent	false		unknown
https://cdn.hellosign.com/892a2f2/build/0.feab1f558c13bc830587.js	false		unknown
https://dpm.demdex.net/ibs:dpid=411&dpuuid=ZwWWrgAAAMR-IwO-	false		unknown
https://api.sprig.com/sdk/1/environments/B0gYx8LpZM/config	false		unknown
https://js.zi-scripts.com/zi-tag.js	false	URL Reputation: safe	unknown
https://www.dropbox.com/en/ccpa_iframe?csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fapp.hellosign.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=app.hellosign.com&width=1280	false		unknown
https://www.dropbox.com/2/client_metrics/record	false		unknown
https://cdn.hellosign.com/892a2f2/build/jquery3.js	false		unknown
https://frontdoor.knotch.it/ingress	false		unknown
https://app.hellosign.com/account/logIn	false		unknown
https://t.contentsquare.net/uxa/4a39e5c4777d0.js	false		unknown
https://cdn.hellosign.com/892a2f2/build/hellospa-signinpage.9b340df77dda5d06b1c9.js	false		unknown
https://marketing.hellosign.com/account/logIn	false		unknown
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1728419499992	false		unknown
https://cdn.hellosign.com/892a2f2/build/vendors~hellospa-signinpage.1261f4b9ffa02b66110d.js	false		unknown
https://cdn.userleap.com/shim.js?id=B0gYx8LpZM	false		unknown
https://cdn.hellosign.com/892a2f2/build/ebee194a9b773f166dc16096f8614aaa.woff2	false		unknown
https://www.dropbox.com/pithos/marketing_tracker_service	false		unknown
https://www.dropbox.com/2/udcl/log_timing	false		unknown
https://cdn.hellosign.com/892a2f2/build/chunks/3453b8ece3999bf2c9fd.style.css	false		unknown
https://app.hellosign.com/?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email	false		unknown
https://cdn.hellosign.com/892a2f2/build/chunks/60df0b9d561d5f04918c.style.css	false		unknown
https://d.dropbox.com/api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0	false		unknown
https://configs.knotch.com/v2/4a897efb-0052-440f-82be-86256c8450d2	false	URL Reputation: safe	unknown
https://cdn.hellosign.com/892a2f2/build/hellospa.js	false		unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 19:31:21 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	BB58B72DC71FA35E88E38628CFE5FF1E	DD7A4DCF199E344D570808C901FED455DA252DDA	02F55BC8CD6AF8125D7484860F66C8AE7DACEC59F1728A04ADE2961ABAA2E0ED
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 19:31:21 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	04B9DC3D764D7AAD223DB808147660E5	3A8F5352EA42FC27FE14568A251C04AF8D259F1E	0E9D01AC8F04602EA9B62F35D77839EB446D0D7F99D1B2DB7E860E3CC66A93FE
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	7D20178B9E2190542EA343FE724FF4C6	0910B877F47C2B0F6D5515FB9C2441D90C593872	CB2D53FEE86E24EFB507CF8FCF66D2DA08426504B427E5441C53A446AFEB287E
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 19:31:21 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	67FD8FBE1DF8C50375EBB75E9BC5800D	E79FE890DE3D24D5E5780313DBB80921F6EF2B3C	B980BFEBFC2CB3CB5DC2F8A73DC1E27AF357441BB5529B56C7692CF52479EC5B
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 19:31:21 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	617CF448C349350E52F40BBAF8CCF043	170E5F3E01AE626CF6FAADEE455864B1E409E0DA	4BCAD76BEF19394D11D08BD65065724F75F804A42490235364996858CC5CC016
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 8 19:31:21 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide	A6FB4C334C325432334DE398A843F052	0C4CBD2054269E3A4A783ED3BEF3A46F153BA337	B424A2FC9F7A323E31655B9D38BF696D983FE38EC0AFA1C207FD5666A12D7038
Chrome Cache Entry: 176	ASCII text, with very long lines (11630)	CE660186A91952C9CB15F12C3515C88F	8756D5ED2183B46339D8C425B7A200CEF2D470C5	49B554A2B06684ACFA22CF2F24623EA428ABCD6F233C6578EE29C31EC8C0D2D5
Chrome Cache Entry: 177	ASCII text, with very long lines (25754)	2423A7AC5521F21F9FD8F7A6296281D8	641A992751F12387A11D12BE65FF49A6FA7CE1D2	21B167FD791AA0CB7A9CA01A29CD92BDD93E6FE1BE5EE2E2ACBEC1946E5B1252
Chrome Cache Entry: 178	ASCII text, with very long lines (2382), with no line terminators	721D0064567FEBA3403E69EEC5C918AF	EF675AF52AC3474831B0F5DDF057C76ECB04116C	970ABC1C0D6EBC7CE2EC5702645B9BB63914FF80B0F60C5D15A2FBA1A4885A4E
Chrome Cache Entry: 179	ASCII text, with very long lines (408)	B6F0689E19E01D047B47E2F620D81080	4F17CD9C2F1E213BC39E4D9A91C45614633D865A	02CCF3180BB2FA0BFBD4EDD9791470027EA07F339DAE1CCD0F6BC04B8B7EF6C2
Chrome Cache Entry: 180	JSON data	B46AA418306377B878EDDC3F9DB01069	3081EDD78C90374FC845059503B77B827D441F01	5B29ECC0AF00D576A1AFDC7FDEBEEB2B4ECB3D34123C87499447D01FD139CB7A
Chrome Cache Entry: 181	gzip compressed data, from Unix, original size modulo 2^32 468761	0C4D344359183A712FCAB77983494A75	191A3FDA6D5D38DEB0A9CC1E4944DAC81E19160D	B0F820B062F052DCE53868DEA0749EBDC16D6F1F1882EE5CCA79F85D2E23ACFD
Chrome Cache Entry: 182	ASCII text	20BE85ADC77A58EFDF30249BE1C5B8B7	19891049663EE87A80C7F8B5B2765FB2A138CE3F	901A6A112D8788D936C51BF42D3F7E7DEAAD346AB7FAFCC48504C5CD203D0DCC
Chrome Cache Entry: 183	ASCII text	46CAC945E491B87E2835B2D5E8EC8804	2D072C5E3A12ABD4733DD429709C8DBCB5D3D50B	5A2D87CA902230E9900DF89430987C8F17B22FF184820DD40C8C6FBE777A5FC1
Chrome Cache Entry: 184	ASCII text, with very long lines (35551)	BA26CA6F3DB50484674E99F29E1151DA	C5F235411A033DD589DBE8B6120442BFB739501C	94887BCB46946A08E5522BFBF0DB53D12DE5A17BEDEE074B815B49113F1A2F9B
Chrome Cache Entry: 185	ASCII text, with very long lines (11015)	598D3079FC6E656C395B90C6E91BFC37	46BC5E48B15DBA9AC94FCF697FF8DF7F56AE9CD0	048F9D09BA35E9D8BE8B6F2E88A5FC58A92763787C1CF7AC15ED26C68D078F18
Chrome Cache Entry: 186	ASCII text, with very long lines (21757)	46A80434AFA5B7229DAF5AE461390E0A	8F88A4989CB590F5B013865C4979F436E4C5AE76	E8BA27894D7454CEF9082C5EE38FD9FF94417B35061982A006CE599471EB388F
Chrome Cache Entry: 187	ASCII text, with very long lines (641)	11C90BFFF8EE0472A6C32286BD8F3AEA	E22197D5C1F7B924C689994BB72A330396952CD9	57826B214B2ACBA6E9B19659689843B83D00826A55AA2C84423D125F2DE6E1F3
Chrome Cache Entry: 188	ASCII text	FF67FC0E3D543E3AA1023BB02436F7E9	24AE85118FEC99B33086B3787D66A7F50F76FDB5	0BC14F3F2360C4E70CFDBC967C419B51E594F447A4603DBF6012136AB7F94A2D
Chrome Cache Entry: 189	JSON data	216AF4B469B65E9A05A1CBEBF2D3DA68	064F978A25C649217020183029DB18EC425578E8	62604381DFB3574E5F58719EB46C99AC2EE85E3EB968883F2148EFCDBF6A8C5E
Chrome Cache Entry: 190	Web Open Font Format (Version 2), TrueType, length 55214, version 1.0	237AAD684514B77165115300A45FA3AF	2D42D9FB68A83C98693A0D966D229F5DBC3D3A72	40D852F2A2082060963BF762EF7E69A938D0B8ACF3885DE575594C197E6F16D8
Chrome Cache Entry: 191	ASCII text, with very long lines (6968)	7B188762FA5D3A9A5852E4A909EB3D7B	C7385E3070739EAC8ABC1FBB8D3A251498E56AD3	E97D1F7A9F10B69A53593A5FD94B1D64C7E43969217A4D7662F38CE9B938AAAF
Chrome Cache Entry: 192	ASCII text, with very long lines (3340)	47C51D39227C4FCE4687A787347CF646	D621F30CD2D705E5623EEBA0EDAC6B5B06661FCB	5C31C2F4FCF38596440E20F6EFCD2166FC5C7C4509FF324F85B3B8B31010AB50
Chrome Cache Entry: 193	HTML document, ASCII text, with no line terminators	C83301425B2AD1D496473A5FF3D9ECCA	941EFB7368E46B27B937D34B07FC4D41DA01B002	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
Chrome Cache Entry: 194	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 195	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 196	Web Open Font Format (Version 2), TrueType, length 54666, version 1.0	EBEE194A9B773F166DC16096F8614AAA	9D6A893AF295C90E9E9792D7E54A80034192255B	00F90DB31F42975FCDC5FA1F70660568BE68792EC11BE2AAC36362F435A6E555
Chrome Cache Entry: 197	ASCII text, with very long lines (42398)	893B51DDCE274E0A2E12340E8568EFA5	B194DE67455096D2CFACA568958E50F9C7283115	BF8636D507175F9902A265C0A513004DEBBD3EADCD4DCBBC677835D8557A4575
Chrome Cache Entry: 198	ASCII text, with very long lines (65536), with no line terminators	1FF798E2E4632DAB313873BABF25C2E0	462C5D78B38B51529F0624482F34DA0C28F56062	B62E911E31843823FD113F0804962C1337039EB4E2E0B336B3B1CE9E72A7FD00
Chrome Cache Entry: 199	C source, ASCII text, with very long lines (1023)	A0E76E450EFF178066A1546E1FFB9527	6F9901275FA9A61D9683FAD3D1C1B246575A3B37	79D59829E3D5E1512D1CEF6DA6228BFABB42493664BF6CBD9675653A42B76598
Chrome Cache Entry: 200	ASCII text, with very long lines (9500), with no line terminators	B2877DA906A3216C4F3FC4030B205E54	F7A612259BB345C70A1CAC073527E39DD5D8A0B7	E779904E434D50E426E79DFAC680CDB8A04564E67121C257974278A02979E407
Chrome Cache Entry: 201	ASCII text, with very long lines (65271)	89742EAD60DADE41B6565C699B811DC5	3D48339CD2F7DD74AC466BD5A1FE996F3601F36F	9CBA74781520A9C34B1766416993DEB6EB0C8A3FBBFBB4350599D8EABFB44F8A
Chrome Cache Entry: 202	ASCII text, with very long lines (4269)	1D7CBCC98DE0DCBA4B24C5C923E75855	02189D3C68C60686A748EB4C4D42D6A552A3EE16	78A95EDF66D8B29359B21D1066D6BA14F4F6912CAF8769C7BF89CB75596578A5
Chrome Cache Entry: 203	ASCII text, with very long lines (51564)	39599C44F5B221CE9250483C98CE09A1	C84380100B37A684FA5DADC9B5B254CAFB2F2447	EA6C8063AD44CF1897C67903D79FF52A253DD11B74A4E252C360C2435761B64D
Chrome Cache Entry: 204	ASCII text, with very long lines (4269)	28EF9C2DD69443BA10ECE70F829D5E9B	41667AB9DAC3AD15431B0A6ED5B5650C8DBDB8CF	378FC48901F2629394F97EBE0B8F42D6DCB724BA3603F204EA5E6CEB22A728AD
Chrome Cache Entry: 205	ASCII text, with very long lines (3190)	FB20AEF5F7B8E824E09AC4860D132905	438FFE1096B7B13975FF2729F278BA9B6F6DF1FA	BF6B7E4DAAD6BCCC93E4D84D422A558681B63E9E7A91CEFBAE70061B3FDB3ADB
Chrome Cache Entry: 206	ASCII text, with very long lines (345)	A6BB6938F33DA73E36416F666EEAF4AF	31410C15155D92CF71A9ACE282B528B013402064	923E7C8A9F076FA33D4BC63072C30744BA4E0251E00C1D3F5B29735E82A0FBC5
Chrome Cache Entry: 207	JSON data	3F8A224D11FAA534AD9784F441234366	88F55ABA428D1E9F806F8D53A3215CA6D935340F	93357C1A7FA70CDE36B59F6AA27910B409AC97008CF602327F3A873785D093A3
Chrome Cache Entry: 208	ASCII text, with very long lines (48033)	47BD034AF9AFD0B406F197F252642E6B	64738A42F30E7AF96B690192606782037B95DEFA	834D7050BBE7042B6D571D9CB11D2D075AF07C490627DDB25915DEB81052E674
Chrome Cache Entry: 209	ASCII text, with very long lines (5082)	0E80CBB2EF9225FDC2B4DEFA7D321901	BD0862DEAD0CDAD41CC33D88856225717C6B173E	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
Chrome Cache Entry: 210	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66	93B6F18EC99BCB7C3FA7EA570A75E240	60B9E3062FE532CBC18B897FAC542C56A03544C7	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
Chrome Cache Entry: 211	ASCII text, with very long lines (4269)	7BC9E02A7C0103CF04B262C416BD1DFA	BD11333435AA33B5F3C6BA0E2D6D10BBA3DE9270	D01B507FE53264A5C9B7930829999622C3514590052CFD79603AB6CE1D613E84
Chrome Cache Entry: 212	Web Open Font Format (Version 2), TrueType, length 46188, version 1.66	DFC5E24CBC1B134E0C00C61E84EC999A	D3B1A8EF1D0F6F9162986479252570525719F203	B5DB3E633EC765FC01A19C06B0955D56C2503285E59D8D348D08EC34ABBFEAF3
Chrome Cache Entry: 213	ASCII text, with very long lines (727)	D0CD42CFF8B45F5E871C50035279DCA2	0834539EBD98A2B9606F7424E854FC10853057EC	07A10572F409EFDCC298E1735DA949E8374639C65C54490230661DB19CB53123
Chrome Cache Entry: 214	ASCII text, with very long lines (49242)	79333BC1B866C21B9B2CCBDB79BFADB3	28B821E0273626068686C40C2A3B52C7DF6955CB	6F10C9AE4B16143ADBB5EF54A9D54E2F9DACE6E3858D6F9FDF120B141B9031C0
Chrome Cache Entry: 215	ASCII text, with very long lines (23063)	E509FF7DA3244936DD1CC4FA5C8C8F3A	7E3FCD44B2C7515698452B2AB16778A0766378A0	1FD4C8285BC2C907B43AF5DADCE656ECCA18341E4D515FEE392B91AD9AA180AA
Chrome Cache Entry: 216	ASCII text, with very long lines (11015)	598D3079FC6E656C395B90C6E91BFC37	46BC5E48B15DBA9AC94FCF697FF8DF7F56AE9CD0	048F9D09BA35E9D8BE8B6F2E88A5FC58A92763787C1CF7AC15ED26C68D078F18
Chrome Cache Entry: 217	ASCII text, with very long lines (12716)	386D618E5CDC8A1015630891656F6F2A	863606E93AB08D5165B4EE87CB3A903333E0268E	E4D4E5F1753F3928A345C7891BE8DD6254DF1547602D18FEB5A3C69FCF26F1B2
Chrome Cache Entry: 218	ASCII text, with very long lines (48033)	47BD034AF9AFD0B406F197F252642E6B	64738A42F30E7AF96B690192606782037B95DEFA	834D7050BBE7042B6D571D9CB11D2D075AF07C490627DDB25915DEB81052E674
Chrome Cache Entry: 219	ASCII text, with very long lines (12716)	386D618E5CDC8A1015630891656F6F2A	863606E93AB08D5165B4EE87CB3A903333E0268E	E4D4E5F1753F3928A345C7891BE8DD6254DF1547602D18FEB5A3C69FCF26F1B2
Chrome Cache Entry: 220	ASCII text, with very long lines (968)	D7818AFA45CE04922572A3A19BBDE31F	FA9BA74D8E16409D868492E8478DDB511518CD36	FF7F081FC7AE565275F3F893EEA525CAA3D684A082174EC78FA7AA6697F6DCF4
Chrome Cache Entry: 221	ASCII text, with very long lines (32746)	6B68AF23A21C84BA256F9BD3E2BC859E	6B6C147EC02F6942E6995E65FE48D1C440D1BA93	DA9B36D1586F2FE610F08305688C4A4E2DFBD9BF07E13088BE97BC32A5810399
Chrome Cache Entry: 222	ASCII text, with very long lines (65505)	6BD17EDA67E68DF6EF1FFB4325129D5F	41AA8E4797C810390047A6752E2D1FC433347EAB	D2536E78BD65CEA662FE26014F2285E0ED213F3C56FEBF1A9E902557F9C64EDD
Chrome Cache Entry: 223	ASCII text, with very long lines (51564)	39599C44F5B221CE9250483C98CE09A1	C84380100B37A684FA5DADC9B5B254CAFB2F2447	EA6C8063AD44CF1897C67903D79FF52A253DD11B74A4E252C360C2435761B64D
Chrome Cache Entry: 224	ASCII text	9067859A55F8C3BA9411E359AEDAEE5A	D0B845A155676462C2D3FF60616E5057B3C6CE0C	998169C92E5A694A77E31ED1866BA8EFF894C2A604ED244C03973876AC1796B6
Chrome Cache Entry: 225	ASCII text, with very long lines (4269)	ACBD7DD4C69F8659750F788DF2F20A05	FF1430BB47C94395B3650592853CEC89C3B2F29A	F551470E4B78822418C87E4094E701DC58A9D10812A9647095C2E6B475722CC4
Chrome Cache Entry: 226	ASCII text, with very long lines (27484)	AFA16DFEE1C9F3FA5318B128D74C355C	9DA6380A699EDA1E4A9C6E047E287A6E115A2D1A	7C700AF2C3548ED6968079892B6780B5BA58AB277086CDCB86B5CE34E14F61CA
Chrome Cache Entry: 227	ASCII text, with very long lines (968)	797BE394F5BFDFF7993F0C16E9A8E365	4FB413FBF1E9A709B1C31F156CE8698C90E5A324	C3F1E61452E1E82CF1738C08286CAFAF08BE1AFF4A9C57829C6847801A9CD9A6
Chrome Cache Entry: 228	ASCII text, with very long lines (21757)	46A80434AFA5B7229DAF5AE461390E0A	8F88A4989CB590F5B013865C4979F436E4C5AE76	E8BA27894D7454CEF9082C5EE38FD9FF94417B35061982A006CE599471EB388F
Chrome Cache Entry: 229	ASCII text, with very long lines (687)	BF5743B4B76E057135D0FD2C0F090B60	54604E94E1D8B51D10275A394B8F39D254AF3A04	DA328D752A97C40C29AA6688F5E9753CE28C4ABBD4E474293A4275A1570D78A0
Chrome Cache Entry: 230	ASCII text, with very long lines (9500), with no line terminators	B2877DA906A3216C4F3FC4030B205E54	F7A612259BB345C70A1CAC073527E39DD5D8A0B7	E779904E434D50E426E79DFAC680CDB8A04564E67121C257974278A02979E407
Chrome Cache Entry: 231	ASCII text, with very long lines (406)	3EF97A2F57397F012D2B6CF9E1346AC4	557036BCE9A42F1F5714871D93446ED6E8942B5A	25FA1F686CCB9D48371014DFB2FFA8E7CD97FD0541AA6B61FF4F1B8DFB223CFE
Chrome Cache Entry: 232	Unicode text, UTF-8 text, with very long lines (41169)	0AA5002702487976D570A640C408EBA5	48930F22A2396DF313CCDFCB91CAC20E38F2B06B	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
Chrome Cache Entry: 233	ASCII text, with very long lines (504)	D52E51E1902731C527030F70990A7F40	424A1C22521E0A169EF6F7A6BBBC04228035640C	5FC5708E4FAABA9E52140FFCF985AAFAE7318FE690B625CF6F4753F646C11090
Chrome Cache Entry: 234	ASCII text, with very long lines (3033), with no line terminators	4D0331970273E2E5808B81B457873C42	A8385435DDEBE990D0DDF1D075565BB802220FEC	5A9DB7801021B2C9DED65C169E9896B58FB64A3B387FDF9BCE023484D6FB5664
Chrome Cache Entry: 235	ASCII text, with very long lines (27484)	AFA16DFEE1C9F3FA5318B128D74C355C	9DA6380A699EDA1E4A9C6E047E287A6E115A2D1A	7C700AF2C3548ED6968079892B6780B5BA58AB277086CDCB86B5CE34E14F61CA
Chrome Cache Entry: 236	Unicode text, UTF-8 text, with very long lines (65495)	C7BA26FFB15FCFDBA1EC21D1220248D3	2A414C9410C5DE5EEC3B29552CA8364D39B943E3	23394331C9095DFCA045DFB79DF7D54E03AD4FDF54212C0D892B5223BF6AF92E
Chrome Cache Entry: 237	ASCII text, with very long lines (46885)	B60A6AF7ABE9F0FC37684F0D2E6662F6	D36BAC0EAC5E17403EDA938E44795ED5410766AC	CB3DC53287C00A235808C88B168D80E325DB2E114A5CEE8FB288A187E546F661
Chrome Cache Entry: 238	ASCII text, with very long lines (65271)	F42C3F4F49131385AB0AAE7B0BA4DC73	261FF068B4F2D5AF601FC391AB7F7E2D7C4E0C5B	8051E416237724D4FC69141094FA6EF6631E663963E9953FF873CD0C1F92B26D
Chrome Cache Entry: 239	ASCII text, with very long lines (774)	66DDC44D22C996C3F22E10560C5DE598	431123752903391CD879D1EC26BED0D2C16CF1B0	724E5B9B700EC32A7497A8A850797555005BE7F240C73CB606566F67E938AA57
Chrome Cache Entry: 240	ASCII text	8912435717962B83C760125A6137581C	BD974135B5D4FE2D736B82035AB9B838D104AB43	E0892D4B06986A5574118D7EAEF9CFB7A99CB63B1B47AA04E389242E4593FB36
Chrome Cache Entry: 241	HTML document, ASCII text	85C876EB10030058F29245148995CC2D	458679E2B02107F6448729AEC844D3BD8283C9ED	5DF5C5894B67857C31F6007CD4AC6DCB931EFF17B791A44929A743A43EEFA325
Chrome Cache Entry: 242	ASCII text, with very long lines (65505)	9548CF917ADC0D51F8E2321BEEA3938E	622BBEE3F5223332122FD1CE5CD1BCC10B10B163	9247300EAB0088721305E1ABC79BAE9B5CEE38B56D5A837599DB31163DA22F1A
Chrome Cache Entry: 243	C source, ASCII text, with very long lines (1023)	A0E76E450EFF178066A1546E1FFB9527	6F9901275FA9A61D9683FAD3D1C1B246575A3B37	79D59829E3D5E1512D1CEF6DA6228BFABB42493664BF6CBD9675653A42B76598
Chrome Cache Entry: 244	ASCII text, with very long lines (406)	3EF97A2F57397F012D2B6CF9E1346AC4	557036BCE9A42F1F5714871D93446ED6E8942B5A	25FA1F686CCB9D48371014DFB2FFA8E7CD97FD0541AA6B61FF4F1B8DFB223CFE
Chrome Cache Entry: 245	Unicode text, UTF-8 text, with very long lines (27826)	4D9677FB4D5C6D9E3DD50DF9CFE00020	A17600A03A10500642A947E881C9A8F3283EF193	5FB570771D7E6A4E3D24519B07F47788B8D1AA9BFE31150A5E846CE7B6DCCC7C
Chrome Cache Entry: 246	ASCII text, with very long lines (55096)	A9C53D99825469261E2396DF2260ECAD	509BA7C7C5931AFE36B940D167B33CC4446243D4	5BCCDCCE2471D5262931B52F89B9D952106C49C849BFDB4FCA5C68F6C29D6725
Chrome Cache Entry: 247	ASCII text, with very long lines (2343)	575B5480531DA4D14E7453E2016FE0BC	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
Chrome Cache Entry: 248	ASCII text, with no line terminators	825644F747BAAB2C00E420DBBC39E4B3	10588307553E766AB3C7D328D948DC6754893CEF	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
Chrome Cache Entry: 249	ASCII text, with very long lines (32746)	6B68AF23A21C84BA256F9BD3E2BC859E	6B6C147EC02F6942E6995E65FE48D1C440D1BA93	DA9B36D1586F2FE610F08305688C4A4E2DFBD9BF07E13088BE97BC32A5810399
Chrome Cache Entry: 250	ASCII text, with very long lines (3030)	7CD34B579C76D077847E1EB2C086CCAD	CD36C07AC7F488668A7EE34D8BEBEC596C192AF0	A63B0861254D3FFB38AA35BCE52017B3095E5FA5D8A03E085C47A895AB51BAB7
Chrome Cache Entry: 251	ASCII text, with very long lines (968)	797BE394F5BFDFF7993F0C16E9A8E365	4FB413FBF1E9A709B1C31F156CE8698C90E5A324	C3F1E61452E1E82CF1738C08286CAFAF08BE1AFF4A9C57829C6847801A9CD9A6
Chrome Cache Entry: 252	ASCII text, with very long lines (1626)	1A5892F9C186E1F7E8136049C46F9FCB	00A01F94D18E3E2C5B83BA7CC9092856B1385791	5C1580CBEE56A37313402D04A105EEFF672C1F6D17C8FF19E6E28504218AE7D2
Chrome Cache Entry: 253	ASCII text, with very long lines (2343)	575B5480531DA4D14E7453E2016FE0BC	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
Chrome Cache Entry: 254	ASCII text, with very long lines (814)	237BE5F4D31437577F9073793FD0488B	D368D5657260A49EC99724F9CDBCC7462AE1D77E	0D4C83C69C2A1F6273AD364E852AC2FE729FDBE0D2142DDA27B168921C056F03
Chrome Cache Entry: 255	ASCII text, with very long lines (65536), with no line terminators	1FF798E2E4632DAB313873BABF25C2E0	462C5D78B38B51529F0624482F34DA0C28F56062	B62E911E31843823FD113F0804962C1337039EB4E2E0B336B3B1CE9E72A7FD00
Chrome Cache Entry: 256	ASCII text, with very long lines (727)	D0CD42CFF8B45F5E871C50035279DCA2	0834539EBD98A2B9606F7424E854FC10853057EC	07A10572F409EFDCC298E1735DA949E8374639C65C54490230661DB19CB53123
Chrome Cache Entry: 257	ASCII text, with very long lines (42398)	893B51DDCE274E0A2E12340E8568EFA5	B194DE67455096D2CFACA568958E50F9C7283115	BF8636D507175F9902A265C0A513004DEBBD3EADCD4DCBBC677835D8557A4575
Chrome Cache Entry: 258	ASCII text, with very long lines (55096)	587BFE0AC4E78E99A00C3577CD83F429	9E9C34BD0FC72E128E96CA87288DF005D6B8802A	0F5EE3EC4B1560D2396BCA3B4837A6B4FB9F1179F82276C71FF1EC5DE98AD43C
Chrome Cache Entry: 259	ASCII text, with very long lines (49242)	79333BC1B866C21B9B2CCBDB79BFADB3	28B821E0273626068686C40C2A3B52C7DF6955CB	6F10C9AE4B16143ADBB5EF54A9D54E2F9DACE6E3858D6F9FDF120B141B9031C0
Chrome Cache Entry: 260	ASCII text, with very long lines (443)	3A5C82702477A3F56847A2A8403A7E12	0E0D727748B286BBC7A7309FACC36FDB27BD984F	1AC12ADD5897D2E9FF5A07244776B86899D66FC6E9317A2F4BF4226FDEDB5C11
Chrome Cache Entry: 261	ASCII text, with very long lines (2122)	473957090B8587F6A83146404E343537	9486295D4A1030337834231A0F9AD7148C087809	BEB865577945F7D968FDF6CD6EFAE13FFDD75DCDBE642A9836C031F3922A0E61
Chrome Cache Entry: 262	ASCII text	0A33BF2DD6B07A492A7B5C4B4236996B	E207F224E4CDA6B7AB0C5FAB5F6FBE3E22BAC618	686550D54EDE241E6CF784B5EB7736F68095A79827AF361D705C9362F91746D4
Chrome Cache Entry: 263	ASCII text, with very long lines (687)	BF5743B4B76E057135D0FD2C0F090B60	54604E94E1D8B51D10275A394B8F39D254AF3A04	DA328D752A97C40C29AA6688F5E9753CE28C4ABBD4E474293A4275A1570D78A0
Chrome Cache Entry: 264	ASCII text, with very long lines (1665)	DD78E189DC64387F633E79C180A5C70E	EE4153611E0F7DA92E22572947A72D087F4A7631	23C1E647ECDDB16F31D177F4BF0901FC22BE087C2663B3A2D073349B5E103AF2
Chrome Cache Entry: 265	ASCII text, with very long lines (29055)	7EB333F978A5B0BF7A103BE114D4037E	C6D67284793FE4CBB0391BF272E4CA95F4E730EA	FE0C08DBC1A1D1C95D34C3D83497CF1A1D57E75C00EBA17AD71562015CC80016
Chrome Cache Entry: 266	ASCII text, with very long lines (25754)	CEA441256B138BE686CDD9F8503958E8	C07FBBC343C9B902A478C0BBCE0DC1EDDCDAD8BC	D0566688E2E65C8C53369672AD18DBF7B385ACD454BCF3554A2F5589A3261264
Chrome Cache Entry: 267	ASCII text, with very long lines (65271)	EC68850BA3E67D6E9022D294AB97F21E	92F656173CC883856B92013FF17475905B16448E	FFF3CBD860B12663A660E59178E7B42A7003B75788004C0B39E31BFDCDC2C458
Chrome Cache Entry: 268	ASCII text, with very long lines (4279)	8DE1AE4DD0AB9A949A8051F90D54C4C1	522EDE7F431FEEB3990659D06A314FD2B72371D2	588D2BC33D44AEF06C850161B4FEA32D7522ADF811E06E327B8E3D8CF1AB8532
Chrome Cache Entry: 269	ASCII text, with very long lines (64836)	63A9963796ECF0EAA18D3095A45E3826	CAA5FF030A627FF22632B4F8496DE8DE5F86A5E0	AE6EBF515D921F64BA8D2B9640B919AC2513D1970840BF1704C358A778BAC440
Chrome Cache Entry: 270	ASCII text, with very long lines (11630)	CE660186A91952C9CB15F12C3515C88F	8756D5ED2183B46339D8C425B7A200CEF2D470C5	49B554A2B06684ACFA22CF2F24623EA428ABCD6F233C6578EE29C31EC8C0D2D5
Chrome Cache Entry: 271	ASCII text, with very long lines (27918), with no line terminators	466BC61B47C7409FFB478D33793C7415	194A1A77434DE64664C39F139440C054DA041093	C5AB90F55D7682949E10B5F9B6EA6FFEEC13F35B35243AD4CC43C9384DAF3B83
Chrome Cache Entry: 272	ASCII text, with very long lines (443)	3A5C82702477A3F56847A2A8403A7E12	0E0D727748B286BBC7A7309FACC36FDB27BD984F	1AC12ADD5897D2E9FF5A07244776B86899D66FC6E9317A2F4BF4226FDEDB5C11
Chrome Cache Entry: 273	ASCII text, with very long lines (968)	D7818AFA45CE04922572A3A19BBDE31F	FA9BA74D8E16409D868492E8478DDB511518CD36	FF7F081FC7AE565275F3F893EEA525CAA3D684A082174EC78FA7AA6697F6DCF4
Chrome Cache Entry: 274	ASCII text, with very long lines (1880)	5EDD61CFBAD4ACBC2B19847606F87A46	1FE372AD5FD59CAB994D8379A941FE3A42DF5473	DCAAC871AA665EAA5ED72CF39297137723576BFF0EDE5EDEE3A72E753C5EE5C8
Chrome Cache Entry: 275	ASCII text, with very long lines (37932)	5F36EA8E764FBE534FA695EF87A59118	712343099FA36FE79F33EE1D8C48343995CB9C88	48C9DCCB97DE1E1DE865420401CD0023A803B39882C42D3FD132F0BF7BBC7476
Chrome Cache Entry: 276	ASCII text, with very long lines (37932)	5F36EA8E764FBE534FA695EF87A59118	712343099FA36FE79F33EE1D8C48343995CB9C88	48C9DCCB97DE1E1DE865420401CD0023A803B39882C42D3FD132F0BF7BBC7476
Chrome Cache Entry: 277	ASCII text, with very long lines (4269)	7D621929BB292CF36100F9A6853BFF6C	F69D487B1A5C32AEC658C1D6DBD8986FDAD8E019	D58646A594CF2DF4A5765EA8EC8525BA1FC681184F6FE1A6C7ACEC80261FA522
Chrome Cache Entry: 278	ASCII text, with very long lines (4269)	94FE0727E7ED9E227D60AF686BAA0472	0997605A39227D43BE5738A91332163B25B90E24	03305DABC74473EB4D4AC22227F6B321BB38B5E9173F27170C300E2BE8C91640
Chrome Cache Entry: 279	ASCII text, with very long lines (4279)	5E545B6E1244AA60A6D9BC03F045E95E	CDA3A9ABC80CF58C29F225CAFC4259E558A6AF8B	239803D81BCDB04720489000CED6E668635F00E3D93F11B1E5690675B240B510
Chrome Cache Entry: 280	ASCII text, with very long lines (65505)	8E3FFD39A9171986DEA0BD08A438CD97	FED416C8C2FB369C82ABDFF5415DB2429BB7430D	F8A15D26C91457B8EBF7572AE365DD599474E6E091604335D85EA650ED214C2A
Chrome Cache Entry: 281	ASCII text, with very long lines (65271)	EC68850BA3E67D6E9022D294AB97F21E	92F656173CC883856B92013FF17475905B16448E	FFF3CBD860B12663A660E59178E7B42A7003B75788004C0B39E31BFDCDC2C458
Chrome Cache Entry: 282	ASCII text, with very long lines (3340)	47C51D39227C4FCE4687A787347CF646	D621F30CD2D705E5623EEBA0EDAC6B5B06661FCB	5C31C2F4FCF38596440E20F6EFCD2166FC5C7C4509FF324F85B3B8B31010AB50
Chrome Cache Entry: 283	ASCII text, with very long lines (6968)	7B188762FA5D3A9A5852E4A909EB3D7B	C7385E3070739EAC8ABC1FBB8D3A251498E56AD3	E97D1F7A9F10B69A53593A5FD94B1D64C7E43969217A4D7662F38CE9B938AAAF
Chrome Cache Entry: 284	ASCII text, with very long lines (4502)	8003AC26A10617E77DC0DDB494487545	6F8CC83685D6ADBDE4BA15762D2C856C43D9C439	F5584869C8EF7BA12687AE8ABED7D7D04B9470A431B8F89CBED841D3B96FC41C
Chrome Cache Entry: 285	ASCII text, with very long lines (65156)	5597CA99AC34740BA4045D15C20A82DD	DB2FE867F823BE602476345DB2FC15CE8F9CA780	5EFFF05B04EFFC2E94BD430F7D46CC859F6FC6DF4B6C209F0532E34903BC8013
Chrome Cache Entry: 286	ASCII text, with very long lines (46885)	B60A6AF7ABE9F0FC37684F0D2E6662F6	D36BAC0EAC5E17403EDA938E44795ED5410766AC	CB3DC53287C00A235808C88B168D80E325DB2E114A5CEE8FB288A187E546F661
Chrome Cache Entry: 287	ASCII text, with very long lines (774)	66DDC44D22C996C3F22E10560C5DE598	431123752903391CD879D1EC26BED0D2C16CF1B0	724E5B9B700EC32A7497A8A850797555005BE7F240C73CB606566F67E938AA57
Chrome Cache Entry: 288	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 289	ASCII text, with very long lines (4502)	8003AC26A10617E77DC0DDB494487545	6F8CC83685D6ADBDE4BA15762D2C856C43D9C439	F5584869C8EF7BA12687AE8ABED7D7D04B9470A431B8F89CBED841D3B96FC41C
Chrome Cache Entry: 290	ASCII text, with very long lines (64836)	63A9963796ECF0EAA18D3095A45E3826	CAA5FF030A627FF22632B4F8496DE8DE5F86A5E0	AE6EBF515D921F64BA8D2B9640B919AC2513D1970840BF1704C358A778BAC440
Chrome Cache Entry: 291	ASCII text, with very long lines (12670)	7AEF6F60870523CC877134EAF6833006	7E46C17C08B87364250062C4B855C8165418434A	764B6C642D88054E9A3BAA886391CE11F6EF642BCB0DF1835F1C2170AC9081BB
Chrome Cache Entry: 292	ASCII text, with very long lines (65107)	46C2030507EAB2D1821DC7D19A5DA69B	F13DF9C537CADCBFE5C170ADA4EB6D6D8DD0D964	10558E0E43B1EBF33CA93D571877B6A43A64F65502540DDB1F205B6B76260F19
Chrome Cache Entry: 293	MS Windows icon resource - 1 icon, -75x-56, 32 bits/pixel	069108453AB500E95DC37A9BAC5123D0	B610ED426B9788B73D1E63A1036EA20C2A8BE867	3633A3C764748C800B35612CD4573082AFABE1D7AAEA570E9013ED36DE7C29BA
Chrome Cache Entry: 294	MS Windows icon resource - 1 icon, -75x-56, 32 bits/pixel	069108453AB500E95DC37A9BAC5123D0	B610ED426B9788B73D1E63A1036EA20C2A8BE867	3633A3C764748C800B35612CD4573082AFABE1D7AAEA570E9013ED36DE7C29BA
Chrome Cache Entry: 295	ASCII text, with very long lines (4421)	6647521A5341229EBCD86CECBD4D49D8	EADC2DCEDB9081A31AEF0E7CC26912C6F3F288C1	E551EC8CD50C0A6C062082DA9AEEF9F9A8C05A45EC836D5FDE513C5CE9E78782
Chrome Cache Entry: 296	HTML document, ASCII text, with very long lines (744)	4D8080940A93660B2ED4F824C41AB9AA	B5EBE84A771EE3873625A8FFB9D1A9AF0A2FC9CB	241297DF2812AEB65B4B008A9C0AFE04F0C849FFFEBDD16D448B100CBE5CAB05
Chrome Cache Entry: 297	ASCII text, with very long lines (13424)	FC59EB10C3D6B1B4EFA7CE01C1D93AB0	6EF862B0C2C8BC9092F77780646A3B7EAE4003C8	048B823CA1F37106F1A1F4E99696045D0B59C60C07C963760C20A3015E792110
Chrome Cache Entry: 298	ASCII text, with very long lines (1626)	1A5892F9C186E1F7E8136049C46F9FCB	00A01F94D18E3E2C5B83BA7CC9092856B1385791	5C1580CBEE56A37313402D04A105EEFF672C1F6D17C8FF19E6E28504218AE7D2
Chrome Cache Entry: 299	ASCII text, with very long lines (1134)	36904F63C4E625F282974690629327DA	E581E43B599C49AD5C959FFB95C747D5AA1A2BA1	8393A859DDA0A709776378A6CD5084584F05868E2FA3BC39820276288F0754FC
Chrome Cache Entry: 300	gzip compressed data, from Unix, original size modulo 2^32 468761	0C4D344359183A712FCAB77983494A75	191A3FDA6D5D38DEB0A9CC1E4944DAC81E19160D	B0F820B062F052DCE53868DEA0749EBDC16D6F1F1882EE5CCA79F85D2E23ACFD
Chrome Cache Entry: 301	ASCII text, with very long lines (814)	237BE5F4D31437577F9073793FD0488B	D368D5657260A49EC99724F9CDBCC7462AE1D77E	0D4C83C69C2A1F6273AD364E852AC2FE729FDBE0D2142DDA27B168921C056F03
Chrome Cache Entry: 302	ASCII text, with very long lines (504)	D52E51E1902731C527030F70990A7F40	424A1C22521E0A169EF6F7A6BBBC04228035640C	5FC5708E4FAABA9E52140FFCF985AAFAE7318FE690B625CF6F4753F646C11090
Chrome Cache Entry: 303	ASCII text, with very long lines (12670)	7AEF6F60870523CC877134EAF6833006	7E46C17C08B87364250062C4B855C8165418434A	764B6C642D88054E9A3BAA886391CE11F6EF642BCB0DF1835F1C2170AC9081BB
Chrome Cache Entry: 304	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66	93B6F18EC99BCB7C3FA7EA570A75E240	60B9E3062FE532CBC18B897FAC542C56A03544C7	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
Chrome Cache Entry: 305	Unicode text, UTF-8 text, with very long lines (41169)	0AA5002702487976D570A640C408EBA5	48930F22A2396DF313CCDFCB91CAC20E38F2B06B	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
Chrome Cache Entry: 306	ASCII text, with very long lines (65536), with no line terminators	F1E5239BCA185FDE06231CF2A2A5DE83	9ED690BF137D191ED5E199358A4F8FB240A9B778	AC6E3C53D42530A02593BD49D2C0DADAFF40C33B3D074AE09BD61482ADC68676
Chrome Cache Entry: 307	ASCII text, with very long lines (13358)	B4C3CAF9BEBFEEA7579B70CBE8A2DB68	21680874D4BABB8AB85D6FEF47BC8BD2BD50D242	C524E2FE3BACA19AFA30F7EEDC030096F6B244B1F188D2F7B7F66EF1CF774E28
Chrome Cache Entry: 308	ASCII text, with very long lines (65107)	46C2030507EAB2D1821DC7D19A5DA69B	F13DF9C537CADCBFE5C170ADA4EB6D6D8DD0D964	10558E0E43B1EBF33CA93D571877B6A43A64F65502540DDB1F205B6B76260F19
Chrome Cache Entry: 309	ASCII text	D6C32610BC01D28D09392E8CAE4869E6	1A248754B2853D6FFA0381BBA3C4CA65C1AF19C5	107F84EDAF1294B3B3681D48FAFE9DE85165493D55EA9C361FA08ECBD7994148
Chrome Cache Entry: 310	JSON data	B46AA418306377B878EDDC3F9DB01069	3081EDD78C90374FC845059503B77B827D441F01	5B29ECC0AF00D576A1AFDC7FDEBEEB2B4ECB3D34123C87499447D01FD139CB7A
Chrome Cache Entry: 311	ASCII text, with very long lines (13358)	B4C3CAF9BEBFEEA7579B70CBE8A2DB68	21680874D4BABB8AB85D6FEF47BC8BD2BD50D242	C524E2FE3BACA19AFA30F7EEDC030096F6B244B1F188D2F7B7F66EF1CF774E28
Chrome Cache Entry: 312	ASCII text, with very long lines (35551)	BA26CA6F3DB50484674E99F29E1151DA	C5F235411A033DD589DBE8B6120442BFB739501C	94887BCB46946A08E5522BFBF0DB53D12DE5A17BEDEE074B815B49113F1A2F9B
Chrome Cache Entry: 313	ASCII text, with very long lines (4421)	6647521A5341229EBCD86CECBD4D49D8	EADC2DCEDB9081A31AEF0E7CC26912C6F3F288C1	E551EC8CD50C0A6C062082DA9AEEF9F9A8C05A45EC836D5FDE513C5CE9E78782
Chrome Cache Entry: 314	ASCII text, with very long lines (31934)	C55EC3707420EBB3AB1B4CB8D9B1930E	94DF0F26AFAB7B17F038D4A201638E73F0D956D5	A85573B9CC5FDC48578E8F618D22561E25827DA1E48B4A48A47A1E5F1904D981
Chrome Cache Entry: 315	ASCII text, with very long lines (31230)	930A3D23AFAB1A7E43F8FC7A3BEF3C6E	6C3A113F80F94537AEA9EA0C46E0AFD517A3B03B	6E63F8E834788775788E7AB4D72E719100FAAB16963BBEEDD725EC4572121E47
Chrome Cache Entry: 316	ASCII text, with very long lines (408)	B6F0689E19E01D047B47E2F620D81080	4F17CD9C2F1E213BC39E4D9A91C45614633D865A	02CCF3180BB2FA0BFBD4EDD9791470027EA07F339DAE1CCD0F6BC04B8B7EF6C2
Chrome Cache Entry: 317	ASCII text, with very long lines (15475)	112C83A5D408898FBB2F805582CD5ACC	6C6AD637C7929057AFE68A949F6BF7EFE71453A7	5B18E91A23AA2F9554DBEE6E967E54CC3A20A8B8494EE23DD7E6268A43445B68
Chrome Cache Entry: 318	ASCII text, with very long lines (65271)	89742EAD60DADE41B6565C699B811DC5	3D48339CD2F7DD74AC466BD5A1FE996F3601F36F	9CBA74781520A9C34B1766416993DEB6EB0C8A3FBBFBB4350599D8EABFB44F8A
Chrome Cache Entry: 319	JSON data	E14FDCEC0992A480EC965CE10C0E45E6	AD26C5CB7FAAEC70B9C38836410164FDD0CB143A	E2D4644E397E8A723F389E039DC8D0659F61B965963C59B90BED4A1D0FB9EB4F
Chrome Cache Entry: 320	ASCII text, with very long lines (3190)	FB20AEF5F7B8E824E09AC4860D132905	438FFE1096B7B13975FF2729F278BA9B6F6DF1FA	BF6B7E4DAAD6BCCC93E4D84D422A558681B63E9E7A91CEFBAE70061B3FDB3ADB
Chrome Cache Entry: 321	ASCII text	0A33BF2DD6B07A492A7B5C4B4236996B	E207F224E4CDA6B7AB0C5FAB5F6FBE3E22BAC618	686550D54EDE241E6CF784B5EB7736F68095A79827AF361D705C9362F91746D4
Chrome Cache Entry: 322	ASCII text, with very long lines (65505)	9577E20E708DAC6E83030E5F40D87AD0	EB3431018B7BAC46AA571EEF74A7891FE96BFBB0	2353C4CFB95E0773188C72C52072872B35D4F5985967834A74CB657078438D3F
Chrome Cache Entry: 323	ASCII text, with very long lines (2122)	473957090B8587F6A83146404E343537	9486295D4A1030337834231A0F9AD7148C087809	BEB865577945F7D968FDF6CD6EFAE13FFDD75DCDBE642A9836C031F3922A0E61
Chrome Cache Entry: 324	ASCII text, with very long lines (29055)	7EB333F978A5B0BF7A103BE114D4037E	C6D67284793FE4CBB0391BF272E4CA95F4E730EA	FE0C08DBC1A1D1C95D34C3D83497CF1A1D57E75C00EBA17AD71562015CC80016
Chrome Cache Entry: 325	ASCII text, with very long lines (38644)	F8D61CA1AF32E863DC2A1BE639818450	9CE04C6CDB7C4A84B3DDAC013B8AB1176C448E79	0DE80AF9A3ADA1F50B4272B65C1C23E10BADD90402C20659192A545634175F7A
Chrome Cache Entry: 326	ASCII text, with very long lines (31934)	C55EC3707420EBB3AB1B4CB8D9B1930E	94DF0F26AFAB7B17F038D4A201638E73F0D956D5	A85573B9CC5FDC48578E8F618D22561E25827DA1E48B4A48A47A1E5F1904D981
Chrome Cache Entry: 327	ASCII text, with very long lines (65271)	F42C3F4F49131385AB0AAE7B0BA4DC73	261FF068B4F2D5AF601FC391AB7F7E2D7C4E0C5B	8051E416237724D4FC69141094FA6EF6631E663963E9953FF873CD0C1F92B26D
Chrome Cache Entry: 328	ASCII text, with very long lines (1665)	DD78E189DC64387F633E79C180A5C70E	EE4153611E0F7DA92E22572947A72D087F4A7631	23C1E647ECDDB16F31D177F4BF0901FC22BE087C2663B3A2D073349B5E103AF2
Chrome Cache Entry: 329	ASCII text, with very long lines (1880)	291457974FC8D3397320A6ADB21275E2	AFF7E701A1071E5CC98136E7667C39E190449845	242F63EE973FC81A30144AAF1E24A3240CF3877BF17D000775CC63E149C9AD34
Chrome Cache Entry: 330	JSON data	99914B932BD37A50B983C5E7C90AE93B	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
Chrome Cache Entry: 331	ASCII text, with very long lines (13424)	FC59EB10C3D6B1B4EFA7CE01C1D93AB0	6EF862B0C2C8BC9092F77780646A3B7EAE4003C8	048B823CA1F37106F1A1F4E99696045D0B59C60C07C963760C20A3015E792110
Chrome Cache Entry: 332	Unicode text, UTF-8 text, with very long lines (27826)	4D9677FB4D5C6D9E3DD50DF9CFE00020	A17600A03A10500642A947E881C9A8F3283EF193	5FB570771D7E6A4E3D24519B07F47788B8D1AA9BFE31150A5E846CE7B6DCCC7C
Chrome Cache Entry: 333	ASCII text, with very long lines (641)	11C90BFFF8EE0472A6C32286BD8F3AEA	E22197D5C1F7B924C689994BB72A330396952CD9	57826B214B2ACBA6E9B19659689843B83D00826A55AA2C84423D125F2DE6E1F3
Chrome Cache Entry: 334	ASCII text, with very long lines (1134)	36904F63C4E625F282974690629327DA	E581E43B599C49AD5C959FFB95C747D5AA1A2BA1	8393A859DDA0A709776378A6CD5084584F05868E2FA3BC39820276288F0754FC
Chrome Cache Entry: 335	ASCII text, with very long lines (65536), with no line terminators	F1E5239BCA185FDE06231CF2A2A5DE83	9ED690BF137D191ED5E199358A4F8FB240A9B778	AC6E3C53D42530A02593BD49D2C0DADAFF40C33B3D074AE09BD61482ADC68676

HTML page contains hidden javascript code

Source: https://app.hellosign.com/account/logIn

HTTP Parser: Base64 decoded: '%perf_eng_2024_05_24_udcl_ssa_exporter

Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon
Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon
Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon
Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon
Source: https://app.hellosign.com/account/logIn	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.69:443 -> 192.168.2.17:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.150:443 -> 192.168.2.17:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49953 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 24MB later: 37MB

HTTP GET or POST without a user agent

Source: global traffic

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.69

Source: global traffic	HTTP traffic detected: GET /?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email HTTP/1.1Host: app.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/logIn HTTP/1.1Host: app.hellosign.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=jEFhmIIk6FFOY2gu2IG5JZB1XrnHVD387kEOmsJIawcwNVeWDOXCFApXT4bDL+70qOQ0ANpHbW8JWGIvkAdmecGGdCWiysoj9Zyqyg8fzL0EhC0+U1iefkUTGn6z; AWSALBCORS=jEFhmIIk6FFOY2gu2IG5JZB1XrnHVD387kEOmsJIawcwNVeWDOXCFApXT4bDL+70qOQ0ANpHbW8JWGIvkAdmecGGdCWiysoj9Zyqyg8fzL0EhC0+U1iefkUTGn6z; hf_user=9897faf81d45a8d06c23c4d829cb0ba67a43ee7bcc6a058670b86b4e34d1e945:33020a0152a6282054013e2c36d15d0d3fabd5306d7a09791fa40088299b5af5; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/jquery3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/common.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/hellospa.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/hellospa.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_client,ux_analytics,hellosign_marketing_utils,privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/jquery3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /shim.js?id=B0gYx8LpZM HTTP/1.1Host: cdn.userleap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/hellospa.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Aapp.hellosign.com/marketing_tracker_client%2Cux_analytics%2Chellosign_marketing_utils%2Cprivacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en
Source: global traffic	HTTP traffic detected: GET /shim.js?id=B0gYx8LpZM HTTP/1.1Host: cdn.userleap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Aapp.hellosign.com/marketing_tracker_client%2Cux_analytics%2Chellosign_marketing_utils%2Cprivacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wn7dSyD+dWTwNUC&MD=EMzMpBk2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/common.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/chunks/60df0b9d561d5f04918c.style.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/chunks/3453b8ece3999bf2c9fd.style.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/0.feab1f558c13bc830587.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/vendors~hellospa-jointeampage~hellospa-signinpage.6ae9d01cd8244e6160f3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/vendors~hellospa-signinpage.1261f4b9ffa02b66110d.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/6.9b0c9ddafe30cdfa6216.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/hellospa-signinpage.9b340df77dda5d06b1c9.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/vendors~hellospa-jointeampage~hellospa-signinpage.6ae9d01cd8244e6160f3.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/0.feab1f558c13bc830587.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/vendors~hellospa-signinpage.1261f4b9ffa02b66110d.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /account/logIn HTTP/1.1Host: marketing.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hs_consent_banner_enabled=true; hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /ccpa_iframe?hide_gdpr=false&should_disable_banner=false&gpc_signal=false&origin=https%253A%252F%252Fapp.hellosign.com&sandbox_redirect=false&uri_for_logging=app.hellosign.com&should_show_floating_button=undefined&should_auto_open_options=undefined&locale_override=en&csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&redesign_flag=true&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/6.9b0c9ddafe30cdfa6216.js HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==
Source: global traffic	HTTP traffic detected: GET /pithos/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /en/ccpa_iframe?csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fapp.hellosign.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=app.hellosign.com&width=1280 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/ebee194a9b773f166dc16096f8614aaa.woff2 HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/892a2f2/build/hellospa.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/93b6f18ec99bcb7c3fa7ea570a75e240.woff2 HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/892a2f2/build/hellospa.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /892a2f2/build/dfc5e24cbc1b134e0c00c61e84ec999a.woff2 HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.hellosign.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/892a2f2/build/hellospa.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.hellosign.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /api/4506197685370880/envelope/?sentry_key=f8e19270d07412b6be0c537098edb309&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.13.0 HTTP/1.1Host: d.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Amarketing.hellosign.com/marketing_tracker_service HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=92376b544731460facfe6c0710fd5c9a&time=1728419497 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/en/ccpa_iframe?csrf_origin=https%253A%252F%252Fapp.hellosign.com&default_non_ccpa=true&gpc_signal=false&hide_gdpr=false&locale_override=en&origin=https%253A%252F%252Fapp.hellosign.com&redesign_flag=true&sandbox_redirect=false&should_auto_open_options=undefined&should_disable_banner=false&should_show_floating_button=undefined&uri_for_logging=app.hellosign.com&width=1280Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1728419499992 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://marketing.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page_success/end?edison_page_name=ccpa_iframe&path=%2Fen%2Fccpa_iframe&request_id=92376b544731460facfe6c0710fd5c9a&time=1728419497 HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=B2AAF3C959275C660A495E7B%40AdobeOrg&d_nsid=0&ts=1728419499992 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=02554810231475605794528423177741457110
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: dropbox.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=02554810231475605794528423177741457110
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZwWWrgAAAMR-IwO- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=02554810231475605794528423177741457110
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZwWWrgAAAMR-IwO- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=02554810231475605794528423177741457110; dpm=02554810231475605794528423177741457110
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /892a2f2/images/dropbox-sign-favicon.ico HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-08T20:31:42.919Z","expireDate":"2025-04-08T20:31:42.919Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20005%7CMCMID%7C02353103420033588694472192912446809280%7CMCAAMLH-1729024300%7C6%7CMCAAMB-1729024300%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728426700s%7CNONE%7CMCSYNCSOP%7C411-20012%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/B0gYx8LpZM/config HTTP/1.1Host: api.sprig.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-ul-visitor-id: 4dc7fcc2-39cd-44e5-87ff-bf85ac277af5sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-ul-installation-method: web-snippetsprig-modules: replayx-ul-sdk-version: 2.31.4x-ul-environment-id: B0gYx8LpZMuserleap-platform: websec-ch-ua-platform: "Windows"Accept: /Origin: https://app.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /892a2f2/images/dropbox-sign-favicon.ico HTTP/1.1Host: cdn.hellosign.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: hf_ref=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vP3V0bV9jYW1wYWlnbj11bnNwZWNpZmllZCZ1dG1fc291cmNlPWRlZmF1bHQmdXRtX2NoYW5uZWw9cHJvZHVjdF9wcm9tbyZ1dG1fbWVkaXVtPWVtYWls; hs_puuid=b3258d043300ca07d94bf6cf30122b4068df7b2e; hf_ref_lt=KltdKmh0dHBzOi8vYXBwLmhlbGxvc2lnbi5jb20vYWNjb3VudC9sb2dJbg==; AMCVS_B2AAF3C959275C660A495E7B%40AdobeOrg=1; __Secure-dbx_consent={"consentType":1,"consentDate":"2024-10-08T20:31:42.919Z","expireDate":"2025-04-08T20:31:42.919Z","consentMonths":6,"categories":{"strictly necessary":true,"general marketing and advertising":true,"analytics":true,"performance and functionality":true,"social media advertising":true},"userInteracted":false,"numDots":1}; AMCV_B2AAF3C959275C660A495E7B%40AdobeOrg=179643557%7CMCIDTS%7C20005%7CMCMID%7C02353103420033588694472192912446809280%7CMCAAMLH-1729024300%7C6%7CMCAAMB-1729024300%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1728426700s%7CNONE%7CMCSYNCSOP%7C411-20012%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /uxa/4a39e5c4777d0.js HTTP/1.1Host: t.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/B0gYx8LpZM/config HTTP/1.1Host: api.sprig.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-5MZFBWHBBE&gacid=592317608.1728419507&gtm=45je4a20v9139038462za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=2&tag_exp=101671035~101747727&z=323622524 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlaHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: www.knotch-cdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /uxa/4a39e5c4777d0.js HTTP/1.1Host: t.contentsquare.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: www.knotch-cdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: configs.knotch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://marketing.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zi-tag.js HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /zi-tag.js HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/4a897efb-0052-440f-82be-86256c8450d2 HTTP/1.1Host: configs.knotch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"Content-Type: application/jsonsec-ch-ua-mobile: ?0Authorization: Bearer 3a903e78361680113288User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36visited_url: https://marketing.hellosign.com/account/logInAccept: /Origin: https://marketing.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.hellosign.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/64d3cebeb218e589c3b63a6d/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/javascriptvisited-url: https://marketing.hellosign.com/account/logIn_vtok: OC40Ni4xMjMuMzM=_zitok: e0b044f89651035df8341728419512sec-ch-ua-platform: "Windows"Accept: /Origin: https://marketing.hellosign.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://marketing.hellosign.com/account/logInAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/64d3cebeb218e589c3b63a6d/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=JZ95Y7ybiHz4yHSwm3P74W7SZS0OkZZ2LmxHwRBFQFs-1728419514-1.0.1.1-yZiSMfrTvF45MZsAmvr3mTcrw387SQUWJYCNfxIc9.izKLVma1K0Rj0y7mTT4c.LAPMxuvQsDw5t13usFZc5XA; _cfuvid=.qHzdAhh01jxyF.gjlhoDobZloooEoivhTbTmKDB544-1728419514861-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAe%2Bnoz%2BvTmK6WKy7GfWt1e6TcxV6KXKxKg71isxzbo3AbMLsfTvG3lDEJt/3ck7UVEVKhxvEdbQqv8VgbNvbH1ooslWNwsLWEM7d4vMVymgJV3Jro23Dl5nfCcmF41KLvVCcQLwM7tpOpy%2BYO4EIZLyvObN1NEJZFJfzZFpHfpQlhkCqiNAJjvepREOte6ktedrxUfGOKG9jGyMMlvn08S98jo%2BRjedwrx%2BO4JhADzr9UMGGvFNpt7Lcpz3OJQY3kMbj6FxqFLwriRcIvuAtMAg%2BZP6L5jQBlN8lrXbj6WslsRLXI74X3TsgGwMk3UvuudsmZ/JzOaT4A051%2BvtDQHkQZgAAEDO46WasCCNkn8esTXVjZICwAa8plsGIBAfHbRt3N80qISSiVuvh1f7LasL4A2i9eWgZ59OKbyzZ05lOeQIHBBycuKi0gaMclMdc57AmOO3ZRntYboTcNDV1JC8TyHKety/9LnOQgJVvHAEdf0kTFHLw5ETznxsT%2BRsR/FzdOoet/5QtR4cB2FEEZZzYCpb/DXH%2BynlfucGA2jJemGFK%2BzxnoqCpAGAj4Onvwh9dbjkbpG6wtfK7NT1EEc28LFnnS2K6B9JQfczvAiWGKpVih24JoT5sJDKpY2vhFONQBDqZyhho16Zsl6/olRJKn0C73j/SdsAEwDqNsYCyw36d3HnHLXUJ2Ox49jS0tvT%2B7dvxmdf6K8DW5qsW6wCW0wdxtv8R/2Op9f%2BDuEpvy42A0MXeOA2dfEMihIR0R8fE58IK%2BzFP3FfsWf/Bc0lVttGzyzuKQNDfYoKvDICSxdQPMrwPeDpWw7Gtgx3C35tD7xV32DYrr/v6BM3qMJ6Gmc/BmlGIrU0xQy5zT34czGKzLnWrBsOdS3QR%2Bj9XiUhGpjcoSq5FMyRGf1hlKNKn4WXLwPM4DMMBEmlK37YJq7sq0bdH/tcB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1728419518User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 951DA8822C74415EB2779B61DF277AFFX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wn7dSyD+dWTwNUC&MD=EMzMpBk2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /2/udcl/log_timing HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs
Source: global traffic	HTTP traffic detected: GET /log/ux_analytics HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MTQ4ODAyMjk2OTI1OTEyMzA5MTczNTQxNDQyMDUxNTY2MzUxMTI0; t=Fi-4z8nI4sVyQ_E3R_myF2ef; __Host-js_csrf=Fi-4z8nI4sVyQ_E3R_myF2ef; locale=en; __Host-logged-out-session=ChCSQbaK2okZi+yG2Khw36x0EKCtlrgGGi5BTEpmQXoyM0dYcnNBc0ZMZHhGUW9GWTNOSDZMdnhhQXhwRWFmUEhhOEswSFZR; __Host-ss=YfgTW2ZQAs

Source: chromecache_279.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_268.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=yA(a,c,e);T(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return T(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},BA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_225.1.dr, chromecache_215.1.dr, chromecache_279.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_266.1.dr, chromecache_278.1.dr, chromecache_211.1.dr, chromecache_177.1.dr, chromecache_277.1.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_268.1.dr	String found in binary or memory: return b}QC.F="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)
Source: chromecache_279.1.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)
Source: chromecache_268.1.dr	String found in binary or memory: var eC=function(a,b,c,d,e){var f=Wz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Wz("fsl","nv.ids",[]):Wz("fsl","ids",[]);if(!g.length)return!0;var k=aA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);T(121);if(m==="https://www.facebook.com/tr/")return T(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Jy(k,Ly(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: app.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: cdn.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cdn.userleap.com
Source: global traffic	DNS traffic detected: DNS query: d.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: cfl.dropboxstatic.com
Source: global traffic	DNS traffic detected: DNS query: marketing.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: dropbox.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: api.sprig.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: t.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.knotch-cdn.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: frontdoor.knotch.it
Source: global traffic	DNS traffic detected: DNS query: configs.knotch.com
Source: global traffic	DNS traffic detected: DNS query: js.zi-scripts.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com

Source: unknown

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:36 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 095b177886a74f7fa17cff8e1310a3f1Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:37 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 62b9ec0d32f240acb4c19d7a282072b8Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:41 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f03c29f4482f4261be3f8bc957d65ce6Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:41 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 16df2c98c15d4e33b92cf637db3f3900Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:46 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 8edec3ca81e342e9a469bb71191f541aConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:46 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4ec2effb2c7044b4b42943c072bfa9ffConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:48 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 31226f9f7a094e12ba3ee728912ffc96Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:49 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 57906c8df6a146df870f7b3a0fb2b730Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:31:51 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 6292365a551e43a4a3471f28c4d2c7ecConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:32:05 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 47dd4efbea4f438da367de084d54df97Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 1233Content-Type: text/htmlDate: Tue, 08 Oct 2024 20:32:35 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d2b96c09192a465d9988736da1f4ad00Connection: close

Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: http://flesler.blogspot.com
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: http://flesler.blogspot.com/2007/10/jqueryscrollto.html
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_290.1.dr, chromecache_269.1.dr, chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_335.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_277.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_189.1.dr	String found in binary or memory: https://app.hellosign.com/
Source: chromecache_189.1.dr	String found in binary or memory: https://app.hellosign.com/home/manage
Source: chromecache_244.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC08f3807101814ef48bb6f95ad6702da
Source: chromecache_187.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC2d0031be7543428c80ef3ff1bf400f6
Source: chromecache_233.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC38e3748e11e44fe5908c1b3fb654828
Source: chromecache_298.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC528b57cee6474d20b34a73ab2ba482d
Source: chromecache_272.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC7803d2740f23433baf82de389992c0c
Source: chromecache_213.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RC8f70d59289c2485499bbbc1b9310625
Source: chromecache_251.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCb982e5a308b64140afff6424f02e6a6
Source: chromecache_321.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCc3eabeac283e44618e4d03f3960056b
Source: chromecache_316.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCe4009e5293e74815aab317b742d5185
Source: chromecache_287.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/89d6914728b4/RCf6fb805ce11e4e83a686becbcaa1e0f
Source: chromecache_249.1.dr, chromecache_221.1.dr	String found in binary or memory: https://assets.adobedtm.com/7c31e7b46b8e/412c495bb7fd/launch-89f34743f412.js
Source: chromecache_225.1.dr, chromecache_215.1.dr, chromecache_274.1.dr, chromecache_279.1.dr, chromecache_268.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_266.1.dr, chromecache_329.1.dr, chromecache_278.1.dr, chromecache_211.1.dr, chromecache_177.1.dr, chromecache_277.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/css/../build/hellospa.css
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/images/dropbox-sign-favicon.ico
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/images/icons/hs/apple-touch-icon.png
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/js/../build/common.js
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/js/../build/hellospa.js
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.hellosign.com/892a2f2/js/../build/jquery3.js
Source: chromecache_296.1.dr	String found in binary or memory: https://cdn.userleap.com/shim.js
Source: chromecache_333.1.dr, chromecache_187.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/id-id/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/ja-jp/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/ko-kr/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/nb-no/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/ru-ru/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/th-th/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://experience.dropbox.com/zh-cn/
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_269.1.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_296.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Taviraj:regular
Source: chromecache_296.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahcZv8Cj3ylylTXzTOYrUtFw.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahcZv8Cj3ylylTXzTOcrUtFw.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahcZv8Cj3ylylTXzTOkrUg.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahcZv8Cj3ylylTXzTP0rUtFw.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahccv8Cj3ylylTXzRBoIR-5RgA.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahccv8Cj3ylylTXzRBoIR-BRgHS5.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahccv8Cj3ylylTXzRBoIR-FRgHS5.woff2)
Source: chromecache_182.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/taviraj/v13/ahccv8Cj3ylylTXzRBoIR_pRgHS5.woff2)
Source: chromecache_227.1.dr, chromecache_251.1.dr	String found in binary or memory: https://ga.clearbit.com/v1/ga.js?authorization=pk_94abb29bd783b4657c3b3b489f932413
Source: chromecache_325.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_290.1.dr, chromecache_269.1.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_325.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.29.1/LICENSE
Source: chromecache_277.1.dr	String found in binary or memory: https://google.com
Source: chromecache_277.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://help.dropbox.com/es-es/
Source: chromecache_180.1.dr, chromecache_310.1.dr	String found in binary or memory: https://help.dropbox.com/fr-fr/
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_277.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_225.1.dr, chromecache_215.1.dr, chromecache_274.1.dr, chromecache_279.1.dr, chromecache_268.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_266.1.dr, chromecache_329.1.dr, chromecache_278.1.dr, chromecache_211.1.dr, chromecache_177.1.dr, chromecache_277.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_284.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_306.1.dr, chromecache_335.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_215.1.dr, chromecache_266.1.dr, chromecache_177.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_247.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_260.1.dr, chromecache_272.1.dr	String found in binary or memory: https://t.contentsquare.net/uxa/4a39e5c4777d0.js
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_225.1.dr, chromecache_215.1.dr, chromecache_274.1.dr, chromecache_279.1.dr, chromecache_268.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_266.1.dr, chromecache_329.1.dr, chromecache_278.1.dr, chromecache_211.1.dr, chromecache_177.1.dr, chromecache_277.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_234.1.dr	String found in binary or memory: https://ws.zoominfo.com
Source: chromecache_296.1.dr	String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_client
Source: chromecache_241.1.dr	String found in binary or memory: https://www.dropbox.com/pithos/marketing_tracker_service
Source: chromecache_189.1.dr	String found in binary or memory: https://www.dropbox.com/signatures?
Source: chromecache_225.1.dr, chromecache_202.1.dr, chromecache_204.1.dr, chromecache_278.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_277.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_277.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_277.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_279.1.dr, chromecache_268.1.dr, chromecache_211.1.dr, chromecache_277.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_253.1.dr, chromecache_247.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_279.1.dr, chromecache_268.1.dr, chromecache_211.1.dr, chromecache_277.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_231.1.dr, chromecache_244.1.dr	String found in binary or memory: https://www.knotch-cdn.com/ktag/latest/ktag.min.js?accountId=4a897efb-0052-440f-82be-86256c8450d2
Source: chromecache_215.1.dr, chromecache_266.1.dr, chromecache_177.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.69:443 -> 192.168.2.17:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.150:443 -> 192.168.2.17:49952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49953 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@19/260@90/29

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2000,i,17114361026728067811,1662563053655598962,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.hellosign.com/?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2000,i,17114361026728067811,1662563053655598962,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

ID:	1529358
Product:	CloudBasic
Start time:	22:30:40
Start date:	08.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://app.hellosign.com/?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://app.hellosign.com/?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://app.hellosign.com/?utm_campaign=unspecified&utm_source=default&utm_channel=product_promo&utm_medium=email